JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 195.78.54.141

195.78.54.141 was found in our database!

This IP was reported 74 times. Confidence of Abuse is 0%: ?

ISP	Internet Utilities NA LLC
Usage Type	Fixed Line ISP
ASN	AS174
Domain Name	iana.org
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 195.78.54.141

Whois 195.78.54.141

IP Abuse Reports for 195.78.54.141:

This IP address has been reported a total of 74 times from 39 distinct sources. 195.78.54.141 was first reported on May 3rd 2021, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 OceanTreasure	2026-04-15 02:20:08 (2 months ago)	tcp/3306; SCAN Suspicious inbound to mySQL port 3306 @ 2026-04-14T08:34:27Z	Brute-Force
🇷🇸 Smel	2026-04-14 09:23:03 (2 months ago)	SQL/MH Probe, Scan, Hack -	Port Scan Hacking SQL Injection
🇨🇭 Origon	2026-04-14 05:34:39 (2 months ago)	postfix-non-smtp-command - IP: 195.78.54.141 - time="2026-04-14T07:34:39+02:00" level=info msg="(55 ... show more postfix-non-smtp-command - IP: 195.78.54.141 - time="2026-04-14T07:34:39+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/postfix-non-smtp-command by ip 195.78.54.141 (NL/174) : 4h ban on Ip 195.78.54.141" module=db show less	Email Spam
🇺🇸 OceanTreasure	2026-04-14 02:10:14 (2 months ago)	tcp/9998; Multiple SYN connections to closed port (≥10 in 10 min) (R18) @ 2026-04-14T02:05:25Z	Brute-Force
🇺🇸 TPI-Abuse	2025-12-10 14:52:11 (6 months ago)	"Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized ac ... show more "Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized access" show less	DDoS Attack SQL Injection Exploited Host
🇫🇷 security.rdmc.fr	2025-09-28 19:02:03 (8 months ago)	Port Scan Attack proto:TCP src:39250 dst:873	Port Scan
🇮🇹 VHosting	2025-09-28 16:16:23 (8 months ago)	Detected attack by Imunify360	Brute-Force Web App Attack
🇹🇷 rtbh.com.tr	2025-02-20 00:49:39 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-02-19 20:49:39 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇬🇧 openstrike.co.uk	2025-02-19 06:12:37 (1 year ago)	91 attacks on Wordpress URLs, PHP URLs: GET /domain.cgi?id=215/cms/wp-includes/wlwmanifest.xml HTTP/ ... show more 91 attacks on Wordpress URLs, PHP URLs: GET /domain.cgi?id=215/cms/wp-includes/wlwmanifest.xml HTTP/1.1 GET /domain.cgi?id=215/xmlrpc.php?rsd HTTP/1.1 show less	Web App Attack
🇺🇸 octageeks.com	2025-02-19 05:06:37 (1 year ago)	Wordpress malicious attack:[octawp]	Web App Attack
🇺🇸 TPI-Abuse	2025-02-19 04:28:12 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 195.78.54.141 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 195.78.54.141 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 18 23:28:09.339626 2025] [security2:error] [pid 26825:tid 26825] [client 195.78.54.141:46424] [client 195.78.54.141] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|kildarafarms.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kildarafarms.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "Z7Vd2QrqbZejgjygvT7uXQAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob.fr	2025-02-19 04:00:29 (1 year ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot
🇺🇸 TPI-Abuse	2025-02-19 03:45:16 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 195.78.54.141 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 195.78.54.141 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 18 22:45:12.966627 2025] [security2:error] [pid 20837:tid 20837] [client 195.78.54.141:21705] [client 195.78.54.141] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|marv.us\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "marv.us"] [uri "/wp-json/wp/v2/users/"] [unique_id "Z7VTyFAbydOC2jQ6bN97OAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 zynex	2025-02-19 00:47:58 (1 year ago)	URL Probing: /shop/wp-includes/wlwmanifest.xml	Web App Attack

Showing 1 to 15 of 74 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇱 212.192.11.56

🇺🇸 109.105.209.3

🇨🇳 49.232.251.164

🇳🇱 45.148.10.141

🇺🇸 44.160.165.82

🇧🇷 189.75.208.220

🇳🇱 185.28.37.194

🇻🇳 103.200.25.79

🇳🇱 91.92.40.13

🇱🇹 81.30.98.62

🇺🇸 66.132.172.114

🇳🇱 45.148.10.121

🇺🇸 40.124.175.234

🇮🇷 37.148.32.79

🇷🇴 2.57.122.177

🇦🇲 178.160.228.254

🇺🇸 147.185.132.90

🇻🇳 103.90.227.203

🇫🇷 85.204.70.94

🇱🇹 81.30.98.144