JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 163.172.157.54

163.172.157.54 was found in our database!

This IP was reported 89 times. Confidence of Abuse is 100%: ?

100%

ISP	Scaleway Dedibox - Paris, France
Usage Type	Data Center/Web Hosting/Transit
ASN	AS12876
Hostname(s)	54-157-172-163.instances.scw.cloud
Domain Name	scaleway.com
Country	🇫🇷 France
City	Paris, Ile-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 163.172.157.54

Whois 163.172.157.54

IP Abuse Reports for 163.172.157.54:

This IP address has been reported a total of 89 times from 82 distinct sources. 163.172.157.54 was first reported on July 16th 2026, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Catalin Negru	2026-07-29 22:04:44 (9 hours ago)	2026-07-20 01:29:29,188 fail2ban.actions [890352]: NOTICE [apache-scan] Ban 163.172.157.54 2 ... show more 2026-07-20 01:29:29,188 fail2ban.actions [890352]: NOTICE [apache-scan] Ban 163.172.157.54 2026-07-20 01:29:29,200 fail2ban.actions [890352]: NOTICE [apache-security] Ban 163.172.157.54 2026-07-20 01:29:29,288 fail2ban.actions [890352]: NOTICE [apache-404] Ban 163.172.157.54 2026-07-20 01:29:29,323 fail2ban.actions [890352]: NOTICE [apache-dirscan] Ban 163.172.157.54 2026-07-20 01:29:29,324 fail2ban.actions [890352]: NOTICE [laravel-auth] Ban 163.172.157.54 ... show less	Brute-Force Web App Attack
🇧🇪 boxed-it	2026-07-21 11:09:14 (1 week ago)	GET /.git/refs/heads/master (Tarpitted for 1d15h8m29s, wasted 8.06MB)	Web App Attack
🇮🇳 evicky2002	2026-07-20 06:00:00 (1 week ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇫🇷 service Informatique	2026-07-20 04:00:37 (1 week ago)	GET /wp-config	Web App Attack
🇬🇧 blik2108	2026-07-20 02:59:00 (1 week ago)	sandalwood.blacknell.co.uk:80 163.172.157.54 - - [20/Jul/2026:03:58:54 +0100] "GET /.git/HEAD HTTP/1 ... show more sandalwood.blacknell.co.uk:80 163.172.157.54 - - [20/Jul/2026:03:58:54 +0100] "GET /.git/HEAD HTTP/1.1" 404 474 "-" "websiphon/0.1" sandalwood.blacknell.co.uk:80 163.172.157.54 - - [20/Jul/2026:03:58:56 +0100] "GET /phpmyadmin/ HTTP/1.1" 404 474 "-" "websiphon/0.1" sandalwood.blacknell.co.uk:80 163.172.157.54 - - [20/Jul/2026:03:58:57 +0100] "GET /config.json HTTP/1.1" 404 474 "-" "websiphon/0.1" sandalwood.blacknell.co.uk:80 163.172.157.54 - - [20/Jul/2026:03:58:59 +0100] "GET /config.yaml HTTP/1.1" 404 474 "-" "websiphon/0.1" sandalwood.blacknell.co.uk:80 163.172.157.54 - - [20/Jul/2026:03:58:59 +0100] "GET /config.yml HTTP/1.1" 404 474 "-" "websiphon/0.1" ... show less	Brute-Force
🇺🇸 chrisoej	2026-07-20 02:55:25 (1 week ago)	163.172.157.54 - - [20/Jul/2026:02:55:25 +0000] "GET /.env.bak HTTP/2.0" 404 19 "-" "-" 6409554 "-" ... show more 163.172.157.54 - - [20/Jul/2026:02:55:25 +0000] "GET /.env.bak HTTP/2.0" 404 19 "-" "-" 6409554 "-" "-" 0ms 163.172.157.54 - - [20/Jul/2026:02:55:25 +0000] "GET /.env.local HTTP/2.0" 404 19 "-" "-" 6409556 "-" "-" 0ms 163.172.157.54 - - [20/Jul/2026:02:55:25 +0000] "GET /.env.development HTTP/2.0" 404 19 "-" "-" 6409557 "-" "-" 0ms 163.172.157.54 - - [20/Jul/2026:02:55:25 +0000] "GET /.env.dev HTTP/2.0" 404 19 "-" "-" 6409558 "-" "-" 0ms 163.172.157.54 - - [20/Jul/2026:02:55:25 +0000] "GET /.env.production HTTP/2.0" 404 19 "-" "-" 6409559 "-" "-" 0ms ... show less	Web App Attack
Anonymous	2026-07-20 02:28:22 (1 week ago)	Bot detected scanning for vulnerable pages	Port Scan
🇩🇪 D3vNu11	2026-07-20 02:21:46 (1 week ago)	Level: (MEDIUM): Known Attacker via CitrixHoneypot IOC Country: France 21x -> Target Country: German ... show more Level: (MEDIUM): Known Attacker via CitrixHoneypot IOC Country: France 21x -> Target Country: Germany HTTPS show less	Hacking Web App Attack
Anonymous	2026-07-20 02:18:39 (1 week ago)	163.172.157.54 - - [20/Jul/2026:04:18:38 +0200] "GET /.env.bak HTTP/1.1" 403 6483 "-" "websiphon/0.1 ... show more 163.172.157.54 - - [20/Jul/2026:04:18:38 +0200] "GET /.env.bak HTTP/1.1" 403 6483 "-" "websiphon/0.1" 163.172.157.54 - - [20/Jul/2026:04:18:38 +0200] "GET /.env.old HTTP/1.1" 403 406 "-" "websiphon/0.1" ... show less	Web App Attack
🇹🇷 SeczarSecureOps	2026-07-20 01:54:42 (1 week ago)	Auto-blocked by Seczar SecureOps — IPS Web Attack Signature (3 events in 5min) at 2026-07-20 01:54	Web App Attack Bad Web Bot
🇳🇱 donarev419	2026-07-20 01:51:45 (1 week ago)	Connection to port 80 with data transfer. Data preview: GET / HTTP/1.1 Host: 87.229.95.155 User-Ag ... show more Connection to port 80 with data transfer. Data preview: GET / HTTP/1.1 Host: 87.229.95.155 User-Agent: websiphon/0.1 Accept-Encoding: gzip show less	Port Scan Hacking
🇳🇱 tpjg	2026-07-20 01:34:51 (1 week ago)	Automated: 15 requests with error status in 120s window from 163.172.157.54. Evidence: /.env.backup: ... show more Automated: 15 requests with error status in 120s window from 163.172.157.54. Evidence: /.env.backup:301,/.env.dev:301,/.env.development:301,/.env.test:301,/.env.old:301,/.env.save:301,/.env.staging:301,/.env:301,/sitemap.xml:301,/robots.txt:301,/.env.local:301,/.env.production:301,/.env.defaults:301,/.env.sample:301,/.env.example:301 show less	Web App Attack
🇮🇩 Burayot	2026-07-20 01:20:26 (1 week ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 163.172.157.54 (FR/France/54-157-172 ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 163.172.157.54 (FR/France/54-157-172-163.instances.scw.cloud): 2 in the last 3600 secs show less	Web App Attack
Anonymous	2026-07-20 00:23:51 (1 week ago)	(mod_security) mod_security triggered on hostname [redacted] 163.172.157.54 (FR/France/54-157-172-16 ... show more (mod_security) mod_security triggered on hostname [redacted] 163.172.157.54 (FR/France/54-157-172-163.instances.scw.cloud) show less	SQL Injection
🇫🇷 Coco Bongo	2026-07-20 00:23:25 (1 week ago)	163.172.157.54 [redacted] (12876-Scaleway S.a.s. France -) - - [20/Jul/2026:02:23:09 +0200] "GET /.e ... show more 163.172.157.54 [redacted] (12876-Scaleway S.a.s. France -) - - [20/Jul/2026:02:23:09 +0200] "GET /.env.save HTTP/1.1" 404 118 "-" "websiphon/0.1" 163.172.157.54 [redacted] (12876-Scaleway S.a. ... show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 89 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇴 193.32.162.82

🇺🇸 185.251.19.117

🇨🇳 183.11.219.5

🇧🇾 178.124.213.46

🇩🇪 178.27.90.142

🇺🇸 162.216.150.79

🇺🇸 162.216.149.170

🇨🇳 153.0.87.62

🇺🇸 104.207.37.79

🇸🇬 94.231.206.9

🇳🇱 45.148.10.151

🇩🇪 217.93.86.89

🇺🇸 185.198.240.239

🇨🇭 172.253.14.19

🇺🇸 162.216.149.192

🇺🇸 143.42.0.97

🇺🇸 104.28.246.113

🇧🇩 103.205.36.6

🇳🇱 85.11.167.7

🇩🇪 69.5.169.219