JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 195.78.54.131

195.78.54.131 was found in our database!

This IP was reported 57 times. Confidence of Abuse is 0%: ?

ISP	Internet Utilities NA LLC
Usage Type	Fixed Line ISP
ASN	AS174
Domain Name	iana.org
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 195.78.54.131

Whois 195.78.54.131

IP Abuse Reports for 195.78.54.131:

This IP address has been reported a total of 57 times from 31 distinct sources. 195.78.54.131 was first reported on June 5th 2022, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 rtbh.com.tr	2025-04-05 20:05:56 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-04-05 00:05:55 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 Vegascosmetics	2025-04-04 21:52:04 (1 year ago)	Kingcopy(AI-IDS): IP is wandering around the site and acting suspiciously.	Bad Web Bot
🇹🇷 rtbh.com.tr	2025-04-04 20:05:55 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 Vegascosmetics	2025-04-03 21:51:41 (1 year ago)	Kingcopy(AI-IDS):IP is Probing for Wordpress vulnerabilities WTF:Banned	Hacking Bad Web Bot Web App Attack
Anonymous	2025-04-03 15:41:47 (1 year ago)	(wordpress) Failed wordpress login from 195.78.54.131 (NL/The Netherlands/-)	Brute-Force
🇩🇪 stinpriza	2025-04-03 15:18:41 (1 year ago)	(XMLRPC) xmlrpc banned 195.78.54.131 (NL/The Netherlands/-): 1 in the last 3600 secs	Web App Attack
🇺🇸 TPI-Abuse	2025-04-03 15:15:59 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 195.78.54.131 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 195.78.54.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 03 11:15:53.334205 2025] [security2:error] [pid 24136:tid 24136] [client 195.78.54.131:28247] [client 195.78.54.131] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|bonesband.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bonesband.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "Z-6mKfHl0ZMK6LpzF2NsPgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2025-04-03 14:44:52 (1 year ago)	Web vulnerability probing	Web App Attack
🇳🇱 Savvii	2025-04-03 14:37:03 (1 year ago)	10 attempts against mh-misc-ban on lunar	Web App Attack
Anonymous	2025-04-03 13:51:13 (1 year ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-04-03 13:51:12 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 195.78.54.131 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 195.78.54.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 03 09:51:06.397067 2025] [security2:error] [pid 221287:tid 221287] [client 195.78.54.131:26977] [client 195.78.54.131] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.babylontravelone.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.babylontravelone.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "Z-6SSv154rPWlv4TxQldtwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 cmbplf	2025-04-03 12:59:59 (1 year ago)	9.333 POST requests in 1 hour (2w3d8h)	Brute-Force Bad Web Bot
Anonymous	2025-04-03 12:59:03 (1 year ago)	Malicious activity detected	Hacking Web App Attack
🇺🇸 TPI-Abuse	2025-04-03 12:41:22 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 195.78.54.131 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 195.78.54.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 03 08:41:16.872091 2025] [security2:error] [pid 23755:tid 23755] [client 195.78.54.131:3081] [client 195.78.54.131] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.blublk.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.blublk.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "Z-6B7HmwnyffA8JTNzu0mwAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 57 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 201.182.15.37

🇩🇪 195.63.26.23

🇺🇸 185.198.240.5

🇺🇸 172.174.248.115

🇺🇸 150.107.38.146

🇺🇸 148.72.141.89

🇰🇷 106.251.244.178

🇧🇩 103.65.240.34

🇺🇸 72.177.13.224

🇺🇸 66.132.172.128

🇷🇴 2.57.121.25

🇰🇼 178.161.123.128

🇺🇸 172.56.95.252

🇨🇳 120.48.106.205

🇨🇳 111.227.28.186

🇷🇴 2.57.122.177

🇺🇸 2620:171:f1:f0:9999::242

🇳🇵 2401:b6a0:5a6:6820:88:b02c:e361:1f4f

🇧🇷 201.140.208.93

🇪🇬 196.159.192.11