JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.54.190.102

159.54.190.102 was found in our database!

This IP was reported 44 times. Confidence of Abuse is 100%: ?

100%

ISP	Oracle Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS31898
Domain Name	oracle.com
Country	🇺🇸 United States of America
City	San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 159.54.190.102

Whois 159.54.190.102

IP Abuse Reports for 159.54.190.102:

This IP address has been reported a total of 44 times from 39 distinct sources. 159.54.190.102 was first reported on September 25th 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 Peregrine	2026-09-30 03:09:15 (2 weeks ago)	Fail2Ban Jail: tomcat-honeypot \| Evidence: 159.54.190.102 104.22.20.99 - - [26/Sep/2026:09:19:22 -03 ... show more Fail2Ban Jail: tomcat-honeypot \| Evidence: 159.54.190.102 104.22.20.99 - - [26/Sep/2026:09:19:22 -0300] "GET /wp-admin/css/ HTTP/1.1" 404 414 show less	Bad Web Bot
🇧🇷 Peregrine	2026-09-28 03:09:11 (2 weeks ago)	Fail2Ban Jail: tomcat-honeypot \| Evidence: 159.54.190.102 104.22.20.99 - - [26/Sep/2026:09:19:22 -03 ... show more Fail2Ban Jail: tomcat-honeypot \| Evidence: 159.54.190.102 104.22.20.99 - - [26/Sep/2026:09:19:22 -0300] "GET /wp-admin/css/ HTTP/1.1" 404 414 show less	Bad Web Bot
🇺🇸 mw	2026-09-27 00:01:11 (2 weeks ago)	GET /wp-admin/css/ HTTP/1.1	Web App Attack
🇧🇷 Peregrine	2026-09-26 12:19:33 (3 weeks ago)	Fail2Ban Jail: tomcat-honeypot \| Evidence: 159.54.190.102 104.22.20.99 - - [26/Sep/2026:09:19:22 -03 ... show more Fail2Ban Jail: tomcat-honeypot \| Evidence: 159.54.190.102 104.22.20.99 - - [26/Sep/2026:09:19:22 -0300] "GET /wp-admin/css/ HTTP/1.1" 404 414 show less	Bad Web Bot
Anonymous	2026-09-26 12:18:06 (3 weeks ago)	[Drupal AbuseIPDB module] Request path is blacklisted. /wp-admin/css/	Web App Attack
🇩🇪 LRob	2026-09-26 10:17:44 (3 weeks ago)	This address is fingerprinting our sites by asking for the tell-tale paths of frameworks and applica ... show more This address is fingerprinting our sites by asking for the tell-tale paths of frameworks and applications they do not run (administration consoles, version files, vendor directories). This is reconnaissance for an exploit, not a visit; blocked. Please check the machine behind it for a scanner or malware. \| method: GET \| path: /wp-admin/css/ \| ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 \| 2026-09-26 10:17 UTC show less	Port Scan Web App Attack
🇩🇪 BlueWire Hosting	2026-09-26 10:13:18 (3 weeks ago)	Aggressive scanning resulting into 404	Bad Web Bot
Anonymous	2026-09-26 10:13:01 (3 weeks ago)	Bot / scanning and/or hacking attempts: GET /uploads/ HTTP/1.1, GET /admin/controller/extension/exte ... show more Bot / scanning and/or hacking attempts: GET /uploads/ HTTP/1.1, GET /admin/controller/extension/extension HTTP/1.1 show less	Hacking Web App Attack
🇳🇱 MyGlobalFlowers	2026-09-26 09:59:27 (3 weeks ago)	Multiple WAF Violations	Web App Attack
🇩🇪 spam.must.die	2026-09-26 09:32:11 (3 weeks ago)	Fail2Ban jail [apache-auth]: Web App Attack - [Sat Sep 26 09:32:04.617300 2026] [access_compat:error ... show more Fail2Ban jail [apache-auth]: Web App Attack - [Sat Sep 26 09:32:04.617300 2026] [access_compat:error] [pid 57821:tid 57821] [client 159.54.190.102:0] AH01797: client denied by server configuration: /var/www/html/wordpress/wp-content/uploads/2026/09/index.php, referer: binance.com[Sat Sep 26 09:32:10.926301 2026] [access_compat:error] [pid 56750:tid 56750] [client 159.54.190.102:0] AH01797: client denied by server configuration: /var/www/html/wordpress/wp-content/uploads/2026/08/index.php, referer: binance.com show less	Web App Attack
🇺🇦 URAN Publishing Service	2026-09-26 09:14:31 (3 weeks ago)	[26/Sep/2026:12:14:31 +0300] -- 159.54.190.102 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp- ... show more [26/Sep/2026:12:14:31 +0300] -- 159.54.190.102 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp-admin/css/ HTTP/1.1 show less	Bad Web Bot Web App Attack
🇮🇩 Burayot	2026-09-26 09:14:26 (3 weeks ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 159.54.190.102 (US/United States/-) ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 159.54.190.102 (US/United States/-): 2 in the last 3600 secs show less	Web App Attack
🇵🇱 sefinek.net	2026-09-26 06:13:49 (3 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoi ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoint: /wp-admin/css/ \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 conseilgouz	2026-09-26 06:05:09 (3 weeks ago)	sle-7 : Trying access unauthorized files/dir=>/wp-admin/css/	Hacking
Anonymous	2026-09-26 06:01:21 (3 weeks ago)	GET wp-admin/css \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gec ... show more GET wp-admin/css \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 \| Time: 2026-09-26 06:01:21 UTC show less	Web App Attack

Showing 1 to 15 of 44 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 153.37.177.219

🇺🇸 147.185.132.16

🇵🇰 119.152.219.73

🇹🇼 111.235.192.157

🇳🇱 91.92.242.37

🇫🇷 85.217.140.28

🇪🇸 45.67.99.11

🇺🇸 40.77.167.50

🇺🇸 18.221.179.104

🇺🇸 205.169.39.15

🇺🇸 139.84.113.135

🇺🇸 134.33.65.67

🇳🇱 109.160.32.47

🇮🇩 103.148.45.88

🇩🇪 94.130.226.243

🇺🇸 74.7.241.142

🇬🇧 35.203.210.173

🇷🇴 2.57.122.150

🇹🇷 176.236.127.114

🇨🇳 121.46.244.19