AbuseIPDB » 154.94.15.46
154.94.15.46
This IP was reported 6 times. Confidence of
Abuse
is 0% : ?
ISP
Cloud Innovation Ltd
Usage Type
Data Center/Web Hosting/Transit
ASN
AS17561
Domain Name
cloudinnovation.org
Country
🇪🇸
Spain
City
Madrid, Madrid
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 154.94.15.46 :
This IP address has been reported a total of
6
times from
6 distinct
sources.
154.94.15.46 was first reported on
January 4th 2025 , and the most recent report was
1 year ago
Old Reports:
The most recent abuse report for this IP address is from
1 year ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
2025-05-02 14:58:23
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
2025-03-11 16:52:00
(1 year ago)
The IP address 154.94.15.46 has been making repeated GET requests to sensitive pages on the website ...
show more
The IP address 154.94.15.46 has been making repeated GET requests to sensitive pages on the website www.amruta.org, such as /wp-login.php and /administrator. These requests indicate an attempt to access the WordPress login page and a potential administrator panel. The repeated access to wp-login.php with a redirect to /administrator suggests that the requester may be trying to exploit weaknesses in the login system or gain unauthorized access to the site. The presence of “Google.com” as the referring site could indicate automated scanning or probing behavior, which is typical of bot-driven attacks. It is recommended to investigate this further and block the IP address if the suspicious activity continues.
show less
Web App Attack
🇧🇷
leolemos
2025-03-08 17:23:27
(1 year ago)
154.94.15.46 - - [08/Mar/2025:14:23:15 -0300] "POST /wp-login.php HTTP/2.0" 200 3364 "https://www.ro ...
show more
154.94.15.46 - - [08/Mar/2025:14:23:15 -0300] "POST /wp-login.php HTTP/2.0" 200 3364 "https://www.rosenwalferreira.com.br/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
154.94.15.46 - - [08/Mar/2025:14:23:19 -0300] "POST /wp-login.php HTTP/2.0" 200 3364 "https://www.rosenwalferreira.com.br/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
154.94.15.46 - - [08/Mar/2025:14:23:23 -0300] "POST /wp-login.php HTTP/2.0" 200 3366 "https://www.rosenwalferreira.com.br/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
154.94.15.46 - - [08/Mar/2025:14:23:26 -0300] "POST /wp-login.php HTTP/2.0" 200 3366 "https://www.rosenwalferreira.com.br/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-03-03 01:47:13
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 154.94.15.46 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 154.94.15.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 02 20:47:08.951862 2025] [security2:error] [pid 1399:tid 1399] [client 154.94.15.46:28181] [client 154.94.15.46] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||baker15.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "baker15.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z8UKHHVkDt7kKDW2qrahTwAAAAI"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
Countryman
2025-02-25 08:54:39
(1 year ago)
IPS detection: WordPress.REST.API.Username.Enumeration.Information.Disclosure
Hacking
🇬🇧
Steve
2025-01-04 07:28:55
(1 year ago)
Excessive crawling - not obeying robots.txt
Bad Web Bot
Showing 1 to
6
of 6 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: