AbuseIPDB » 84.147.54.138
84.147.54.138 was found in our database!
This IP was reported 2 times. Confidence of
Abuse
is 15% : ?
ISP
Deutsche Telekom AG
Usage Type
Fixed Line ISP
ASN
AS3320
Hostname(s)
p5493368a.dip0.t-ipconnect.de
Domain Name
telekom.de
Country
๐ฉ๐ช
Germany
City
Karlsruhe, Baden-Wurttemberg
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 84.147.54.138 :
This IP address has been reported a total of
2
times from
2 distinct
sources.
84.147.54.138 was first reported on
June 25th 2026 , and the most recent report was
2 days ago .
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
๐บ๐ธ
TPI-Abuse
2026-06-29 08:37:44
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 84.147.54.138 (p5493368a.dip0.t-ipconnect.de): ...
show more
(mod_security) mod_security (id:210730) triggered by 84.147.54.138 (p5493368a.dip0.t-ipconnect.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 04:37:40.007814 2026] [security2:error] [pid 3988:tid 3988] [client 84.147.54.138:40972] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gapanda.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gapanda.com"] [uri "/php-old.ini"] [unique_id "akIu1DgOfC1jXkpfQS0EeAAAAAY"], referer: https://gapanda.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฆ๐บ
paulshipley.com.au
2026-06-25 16:48:03
(5 days ago)
[Fri Jun 26 02:48:02.384932 2026] [security2:error] [pid 522662] [client 84.147.54.138:50294] [clien ...
show more
[Fri Jun 26 02:48:02.384932 2026] [security2:error] [pid 522662] [client 84.147.54.138:50294] [client 84.147.54.138] ModSecurity: Access denied with code 403 (phase 4). Operator GE matched 4 at TX:outbound_anomaly_score. [file "/etc/modsecurity/crs/rules/RESPONSE-959-BLOCKING-EVALUATION.conf"] [line "77"] [id "959100"] [msg "Outbound Anomaly Score Exceeded (Total Score: 4)"] [ver "OWASP_CRS/3.3.4"] [tag "anomaly-evaluation"] [hostname "stkildashule.org.au"] [uri "/wp-content/plugins/form-maker/"] [unique_id "aj1bwgHAjBp2YJPOQWaVpgAAAAs"], referer: https://stkildashule.org.au/wp-content/plugins/form-maker
...
show less
Web App Attack
Showing 1 to
2
of 2 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ
Recently Reported IPs: