AbuseIPDB » 84.200.154.205
84.200.154.205
This IP was reported 9 times. Confidence of
Abuse
is 50% : ?
ISP
UltaHost Inc
Usage Type
Data Center/Web Hosting/Transit
ASN
AS214036
Hostname(s)
leer.benwish.com
Domain Name
ultahost.com
Country
🇩🇪
Germany
City
Frankfurt am Main, Hesse
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 84.200.154.205 :
This IP address has been reported a total of
9
times from
7 distinct
sources.
84.200.154.205 was first reported on
July 31st 2026 , and the most recent report was
1 hour ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-08-01 20:07:45
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 84.200.154.205 (leer.benwish.com): 1 in the las ...
show more
(mod_security) mod_security (id:210492) triggered by 84.200.154.205 (leer.benwish.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 16:07:37.784878 2026] [security2:error] [pid 19585:tid 19585] [client 84.200.154.205:34758] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chameleonpcs.com"] [uri "/.git/config"] [unique_id "am5SCcVQEcawYXYseEXSVwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇯🇵
S.O.B.A. Dev.
2026-07-31 23:19:38
(22 hours ago)
Web vulnerability scanning
Brute-Force
Web Spam
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-07-31 23:11:34
(22 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
🇮🇹
VHosting
2026-07-31 22:35:09
(22 hours ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-07-31 22:15:14
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 84.200.154.205 (leer.benwish.com): 1 in the las ...
show more
(mod_security) mod_security (id:210492) triggered by 84.200.154.205 (leer.benwish.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 31 18:15:10.042237 2026] [security2:error] [pid 1076969:tid 1076969] [client 84.200.154.205:35580] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wisdomworkforceoptimization.com"] [uri "/.git/config"] [unique_id "am0ebhw7CFDIb-tqGpLFMAAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-07-31 21:57:58
(23 hours ago)
CrowdSec: crowdsecurity/http-probing | req: /environment.json | 11 distinct paths | UA: Mozilla/5.0 ...
show more
CrowdSec: crowdsecurity/http-probing | req: /environment.json | 11 distinct paths | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36
show less
Port Scan
Web App Attack
🇧🇪
cmbplf
2026-07-31 21:24:50
(1 day ago)
382 requests with url.path *.env
326 requests with url.path *config.json
161 requests with url.pa ...
show more
382 requests with url.path *.env
326 requests with url.path *config.json
161 requests with url.path *secrets.json
136 requests with url.path *config.php
132 requests with url.path *.git/*
110 requests with url.path *credentials.json
104 requests with url.path *.php.bak
show less
Brute-Force
Bad Web Bot
🇩🇪
LRob
2026-07-31 20:57:49
(1 day ago)
CrowdSec: crowdsecurity/http-probing | req: /.well-known/openid-configuration | 11 distinct paths | ...
show more
CrowdSec: crowdsecurity/http-probing | req: /.well-known/openid-configuration | 11 distinct paths | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36
show less
Port Scan
Web App Attack
🇬🇧
Aetherweb Ark
2026-07-31 19:44:43
(1 day ago)
(mod_security) mod_security (id:949110) triggered by 84.200.154.205 (DE/Germany/leer.benwish.com): N ...
show more
(mod_security) mod_security (id:949110) triggered by 84.200.154.205 (DE/Germany/leer.benwish.com): N in the last X secs
show less
Web App Attack
Showing 1 to
9
of 9 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: