JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.56.54.183

212.56.54.183 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 0%: ?

ISP	VPN Consumer New Jersey, United States of America
Usage Type	Data Center/Web Hosting/Transit
ASN	AS4213
Domain Name	vpnconsumer.com
Country	🇺🇸 United States of America
City	Trenton, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 212.56.54.183

Whois 212.56.54.183

IP Abuse Reports for 212.56.54.183:

This IP address has been reported a total of 19 times from 15 distinct sources. 212.56.54.183 was first reported on July 27th 2025, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 celestialcity	2026-03-11 21:36:08 (3 months ago)	Blocked by UFW on celestialcityeu [26767/tcp] \| SPT: 15423 \| TTL: 53 \| LEN: 60 \| TOS: 0x08 • Reporte ... show more Blocked by UFW on celestialcityeu [26767/tcp] \| SPT: 15423 \| TTL: 53 \| LEN: 60 \| TOS: 0x08 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 int8	2026-03-11 21:33:23 (3 months ago)	2026-03-11T21:33:23.584450616Z Minecraft server scanner: status request	Port Scan
🇺🇸 xmission.com	2025-11-24 02:17:55 (6 months ago)	Blocked by UFW (TCP on 54508) Source port: 29741 TTL: 112 Packet length: 52 TOS: 0x08 This report ( ... show more Blocked by UFW (TCP on 54508) Source port: 29741 TTL: 112 Packet length: 52 TOS: 0x08 This report (for 212.56.54.183) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇲🇾 syokadmin	2025-10-30 17:38:58 (7 months ago)	212.56.54.183 (US/United States/-), 2 distributed smtpauth attacks on account [admin@mbrainsolutions ... show more 212.56.54.183 (US/United States/-), 2 distributed smtpauth attacks on account [[email protected]] in the last 3600 secs show less	Brute-Force
Anonymous	2025-08-04 15:42:31 (10 months ago)	Botnet - login attempts with leaked random user/pass lists	Hacking Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-07-28 05:00:24 (10 months ago)	(mod_security) mod_security (id:225170) triggered by 212.56.54.183 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 212.56.54.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 28 01:00:18.414317 2025] [security2:error] [pid 17787:tid 17787] [client 212.56.54.183:57704] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|dancingorchidvillas.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dancingorchidvillas.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aIcD4lD0mPp6GByqIKMojQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 lnklnx	2025-07-27 23:37:50 (10 months ago)	www.lnklnx.com:443 212.56.54.183 - - [27/Jul/2025:18:37:48 -0500] "POST /xmlrpc.php HTTP/1.1" 403 35 ... show more www.lnklnx.com:443 212.56.54.183 - - [27/Jul/2025:18:37:48 -0500] "POST /xmlrpc.php HTTP/1.1" 403 3580 "-" "Mozilla/5.0 (Linux; Android 10; x86) AppleWebKit/537.36 (KHTML, like Gecko) Edge/86.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2025-07-27 23:16:04 (10 months ago)	(mod_security) mod_security (id:225170) triggered by 212.56.54.183 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 212.56.54.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 27 19:15:57.081812 2025] [security2:error] [pid 31423:tid 31423] [client 212.56.54.183:60908] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|uphillfarmvt.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "uphillfarmvt.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aIazLXMVu0YXeJIG4CdlsgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-07-27 21:20:38 (10 months ago)	(mod_security) mod_security (id:225170) triggered by 212.56.54.183 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 212.56.54.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 27 17:20:33.928381 2025] [security2:error] [pid 11151:tid 11151] [client 212.56.54.183:58462] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|gracebaptisthartsville.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gracebaptisthartsville.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aIaYIdAa9lbaHn0lvCo79AAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Apache	2025-07-27 21:01:23 (10 months ago)	(mod_security) mod_security (id:240335) triggered by 212.56.54.183 (US/United States/-): 5 in the la ... show more (mod_security) mod_security (id:240335) triggered by 212.56.54.183 (US/United States/-): 5 in the last 300 secs show less	Brute-Force Web App Attack
🇺🇸 MPL	2025-07-27 15:58:52 (10 months ago)	tcp/443 (3 or more attempts)	Port Scan
🇺🇸 MPL	2025-07-27 15:58:52 (10 months ago)	tcp/443 (3 or more attempts)	Port Scan
Anonymous	2025-07-27 15:52:00 (10 months ago)	suspicious activity	Web App Attack
🇩🇪 Ba-Yu	2025-07-27 14:06:51 (10 months ago)	WP-xmlrpc exploit	Web Spam Blog Spam Hacking Exploited Host Web App Attack
🇩🇪 stinpriza	2025-07-27 13:30:55 (10 months ago)	Web App Attack	Web App Attack

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.180.246.93

🇨🇦 209.107.116.185

🇷🇺 104.28.228.108

🇩🇪 69.5.169.132

🇨🇳 211.149.134.60

🇳🇱 176.65.139.181

🇰🇷 115.68.208.117

🇮🇳 103.38.219.22

🇺🇸 91.230.168.136

🇵🇱 83.168.95.29

🇯🇵 47.74.6.77

🇬🇧 35.203.210.233

🇺🇸 20.102.40.205

🇺🇸 13.89.125.21

🇰🇷 211.63.34.149

🇩🇪 157.90.172.93

🇺🇸 154.83.197.161

🇰🇷 110.14.190.221

🇩🇪 95.90.181.229

🇭🇰 91.208.73.57