JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 195.78.54.203

195.78.54.203 was found in our database!

This IP was reported 84 times. Confidence of Abuse is 2%: ?

ISP	Internet Utilities NA LLC
Usage Type	Fixed Line ISP
ASN	AS174
Domain Name	iana.org
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 195.78.54.203

Whois 195.78.54.203

IP Abuse Reports for 195.78.54.203:

This IP address has been reported a total of 84 times from 36 distinct sources. 195.78.54.203 was first reported on August 28th 2021, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇱🇻 garmtech.com	2026-06-07 18:08:27 (1 week ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 21-08.195.78.54.203.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 21-08.195.78.54.203.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇩🇪 marzzzello	2025-08-28 07:20:39 (9 months ago)	Ports: 24x 31709	Port Scan
Anonymous	2025-06-11 04:43:13 (1 year ago)		Web Spam Bad Web Bot
🇮🇹 Progetto1	2025-06-11 04:35:01 (1 year ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇫🇮 paissangroup	2025-06-10 19:09:32 (1 year ago)	Multiple WAF Violations	Web App Attack
Anonymous	2025-06-10 17:47:32 (1 year ago)	TIPSDE WEBFORM SPAM 195.78.54.203 (195.78.54.203)	Web Spam
🇩🇪 stalker.to	2025-05-22 02:09:49 (1 year ago)	Datacenter Proxy	Web Spam
🇩🇪 stalker.to	2025-05-21 18:05:19 (1 year ago)	Datacenter Proxy	Web Spam
🇩🇪 stalker.to	2025-05-21 16:53:19 (1 year ago)	Datacenter Proxy	Web Spam
🇳🇱 Linuxmalwarehuntingnl	2024-07-03 08:56:56 (1 year ago)	Unauthorized connection attempt	Brute-Force
🇨🇭 backslash	2024-06-15 14:17:45 (2 years ago)		Web Spam
🇺🇸 TPI-Abuse	2024-05-12 12:47:01 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 195.78.54.203 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 195.78.54.203 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 12 08:46:57.927430 2024] [security2:error] [pid 32067] [client 195.78.54.203:64442] [client 195.78.54.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sunsettrailsardmore.com"] [uri "/wp-includes/css/wp-config.php"] [unique_id "ZkC6QSLW8BPShsrnJGxmagAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-05-12 05:38:53 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 195.78.54.203 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 195.78.54.203 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 12 01:38:47.262049 2024] [security2:error] [pid 4968] [client 195.78.54.203:52080] [client 195.78.54.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.goalsnet.net"] [uri "/wp-includes/css/wp-config.php"] [unique_id "ZkBV5zLD0ThMFXEevhE1ZwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-05-12 04:35:50 (2 years ago)	Ports: 20,21,25,53,80,110,143,443,465,587,993,995,2077,2078,2079,2080,2082,2083,2086,2087,2095,2096, ... show more Ports: 20,21,25,53,80,110,143,443,465,587,993,995,2077,2078,2079,2080,2082,2083,2086,2087,2095,2096,3306,2195; Direction: 0; Trigger: LF_CUSTOMTRIGGER show less	Brute-Force SSH
🇺🇸 TPI-Abuse	2024-05-12 01:43:18 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 195.78.54.203 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 195.78.54.203 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 11 21:43:14.305441 2024] [security2:error] [pid 13883] [client 195.78.54.203:58611] [client 195.78.54.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jolenesteffen.com"] [uri "/wp-includes/css/wp-config.php"] [unique_id "ZkAessMxbx_35AuXiPypKAAAABI"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 84 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 221.156.126.1

🇯🇵 218.45.48.22

🇷🇺 195.2.67.184

🇩🇪 172.71.144.43

🇺🇸 143.42.1.52

🇶🇦 34.153.65.26

🇨🇳 183.192.35.191

🇨🇳 180.76.105.69

🇺🇸 172.210.9.172

🇩🇪 172.71.148.36

🇮🇩 103.151.140.97

🇺🇸 66.132.172.149

🇳🇱 45.156.87.117

🇳🇱 5.61.209.224

🇺🇸 2604:a880:400:d1:0:4:9e98:4001

🇧🇷 191.235.101.1

🇩🇪 172.70.240.139

🇮🇩 160.187.174.22

🇨🇳 106.75.25.139

🇨🇳 101.200.52.133