JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 196.240.254.157

196.240.254.157 was found in our database!

This IP was reported 146 times. Confidence of Abuse is 0%: ?

ISP	SA
Usage Type	Data Center/Web Hosting/Transit
ASN	AS58065
Domain Name	fibergrid.co.za
Country	🇪🇪 Estonia
City	Tallinn, Harjumaa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 196.240.254.157

Whois 196.240.254.157

IP Abuse Reports for 196.240.254.157:

This IP address has been reported a total of 146 times from 36 distinct sources. 196.240.254.157 was first reported on November 24th 2021, and the most recent report was 9 months ago.

Old Reports: The most recent abuse report for this IP address is from 9 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 Steve	2025-09-27 08:19:13 (9 months ago)	Repeated attempts against wordpress site	Brute-Force Web App Attack
🇳🇱 exxos	2025-09-01 16:03:01 (10 months ago)	HTTP1.x attacks	DDoS Attack
🇵🇱 sefinek.net	2025-08-11 07:54:03 (10 months ago)	Triggered Cloudflare WAF (firewallCustom) from EE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from EE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /genshin-stella-mod UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 YaBrowser/22.7.0 Yowser/2.5 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇵🇱 sefinek.net	2025-02-06 05:13:17 (1 year ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: MANAGED_CHALLENGE ASN: 58065 (PACKE ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: MANAGED_CHALLENGE ASN: 58065 (PACKETEXCHANGE) Protocol: HTTP/1.1 (GET method) Endpoint: / Timestamp: 2025-02-06T01:32:52Z Ray ID: 90d7638caeeec7fb UA: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:114.0) Gecko/20100101 Firefox/114.0 Report generated by Cloudflare-WAF-To-AbuseIPDB: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇵🇱 sefinek.net	2025-02-05 22:30:35 (1 year ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: MANAGED_CHALLENGE ASN: 58065 (PACKE ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: MANAGED_CHALLENGE ASN: 58065 (PACKETEXCHANGE) Protocol: HTTP/1.1 (GET method) Endpoint: / Timestamp: 2025-02-05T22:04:54Z Ray ID: 90d632e839495c28 UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/89.0.4447.51 Report generated by Cloudflare-WAF-To-AbuseIPDB: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇦🇺 MAGIC	2025-01-29 03:07:34 (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2025-01-28 13:31:06 (1 year ago)	(mod_security) mod_security (id:210831) triggered by 196.240.254.157 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210831) triggered by 196.240.254.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 28 08:31:02.358204 2025] [security2:error] [pid 15181:tid 15181] [client 196.240.254.157:40325] [client 196.240.254.157] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|thechoiceint.com\|F\|4"] [data "a href="] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "thechoiceint.com"] [uri "/webalizer/usage_202501.html"] [unique_id "Z5jcFjo5sRL2SA5F2D2tMAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-12-07 22:33:42 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 196.240.254.157 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 196.240.254.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 07 17:33:38.823077 2024] [security2:error] [pid 8118:tid 8118] [client 196.240.254.157:43603] [client 196.240.254.157] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.powerastronomy.com\|F\|2"] [data ".rozblog.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.powerastronomy.com"] [uri "/DataGraphingSims/DataGraphing_buy-backlinks.rozblog.com"] [unique_id "Z1TNQpzqqjtoQdj74YMHGwAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇻🇳 Xuan Can	2024-12-06 00:22:46 (1 year ago)	(mod_security) mod_security (id:6) triggered by 196.240.254.157 (SG/Singapore/-): 1 in the last 3600 ... show more (mod_security) mod_security (id:6) triggered by 196.240.254.157 (SG/Singapore/-): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 06 07:22:36.096428 2024] [security2:error] [pid 34230:tid 34385] [client 196.240.254.157:41250] [client 196.240.254.157] ModSecurity: Access denied with connection close (phase 2). Pattern match "wp-login.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "62"] [id "6"] [severity "CRITICAL"] [hostname "kb.pavietnam.vn"] [uri "/wp-login.php"] [unique_id "Z1JDzILBmLyuV-TItOCdDwAAAIE"], referer: https://kb.pavietnam.vn/wp-login.php?action=register show less	Brute-Force SSH
Anonymous	2024-12-03 23:47:51 (1 year ago)	XMLRPC Hack Attempts	Hacking Brute-Force
🇪🇸 el-brujo	2024-11-17 12:00:12 (1 year ago)	Cloudflare WAF: Request Path: /xmlrpc.php Request Query: Host: foro.elhacker.net userAgent: Mozilla ... show more Cloudflare WAF: Request Path: /xmlrpc.php Request Query: Host: foro.elhacker.net userAgent: Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36 Action: managed_challenge Source: firewallManaged ASN Description: PACKETEXCHANGE Country: SG Method: GET Timestamp: 2024-11-17T12:00:12Z ruleId: 5de7edfa648c4d6891dc3e7f84534ffa. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
Anonymous	2024-11-12 02:14:30 (1 year ago)	XMLRPC Hack Attempts	Hacking Brute-Force
🇻🇳 Xuan Can	2024-05-05 22:12:48 (2 years ago)	(mod_security) mod_security (id:6) triggered by 196.240.254.157 (SG/Singapore/-): 1 in the last 3600 ... show more (mod_security) mod_security (id:6) triggered by 196.240.254.157 (SG/Singapore/-): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 06 05:12:39.185982 2024] [security2:error] [pid 30349:tid 47673374586624] [client 196.240.254.157:58162] [client 196.240.254.157] ModSecurity: Access denied with connection close (phase 2). Pattern match "wp-login.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "63"] [id "6"] [severity "CRITICAL"] [hostname "kb.pavietnam.vn"] [uri "/wp-login.php"] [unique_id "ZjgEV-pfgsL50fLZ4dqvwgAAAQM"], referer: https://kb.pavietnam.vn/wp-login.php?action=register show less	Brute-Force SSH
🇦🇺 MAGIC	2024-05-04 13:01:33 (2 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇦🇺 MAGIC	2024-04-26 00:03:39 (2 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot

Showing 1 to 15 of 146 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 124.117.194.147

🇳🇱 45.148.10.141

🇬🇧 206.189.25.133

🇧🇷 205.210.31.168

🇰🇷 175.119.225.68

🇩🇪 172.70.246.247

🇺🇸 159.223.157.84

🇬🇧 142.93.43.189

🇱🇹 62.60.130.219

🇺🇸 35.229.59.200

🇺🇸 17.241.227.73

🇫🇷 85.217.140.52

🇺🇸 68.183.25.199

🇧🇩 221.120.103.171

🇧🇷 205.210.31.201

🇸🇬 161.118.198.164

🇨🇳 123.190.235.107

🇮🇳 117.236.124.166

🇫🇷 91.231.89.160

🇬🇧 87.106.44.172