JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 196.196.220.54

196.196.220.54 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 27%: ?

27%

ISP	SA
Usage Type	Data Center/Web Hosting/Transit
ASN	AS58065
Domain Name	fibergrid.co.za
Country	🇪🇪 Estonia
City	Tallinn, Harjumaa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 196.196.220.54

Whois 196.196.220.54

IP Abuse Reports for 196.196.220.54:

This IP address has been reported a total of 16 times from 10 distinct sources. 196.196.220.54 was first reported on March 28th 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob	2026-08-18 12:00:45 (2 weeks ago)	WordPress probing \| req: /wp-login.php?action=register \| UA: Mozilla/5.0 (Windows NT 6.3; Win64; x64 ... show more WordPress probing \| req: /wp-login.php?action=register \| UA: Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36 show less	Brute-Force Web App Attack
🇺🇸 ipblock.com	2026-08-16 13:44:00 (2 weeks ago)	IPBlock protected site ID [4055-d][s=03]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
🇲🇾 Rizzy	2026-08-15 23:51:07 (2 weeks ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇩🇪 LRob	2026-08-15 18:32:46 (2 weeks ago)	WordPress probing \| req: /wp-login.php?action=register \| UA: Mozilla/5.0 (Windows NT 6.3; Win64; x64 ... show more WordPress probing \| req: /wp-login.php?action=register \| UA: Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36 show less	Brute-Force Web App Attack
🇦🇺 paulshipley.com.au	2026-08-14 18:45:02 (2 weeks ago)	[Sat Aug 15 04:45:01.651491 2026] [security2:error] [pid 676534] [client 196.196.220.54:44613] [clie ... show more [Sat Aug 15 04:45:01.651491 2026] [security2:error] [pid 676534] [client 196.196.220.54:44613] [client 196.196.220.54] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "paulshipley.com.au"] [uri "/xmlrpc.php"] [unique_id "an9iLfeBb29w4_wia3OwKgAAAAA"], referer: https://paulshipley.com.au/xmlrpc.php?rsd ... show less	Web App Attack
🇩🇪 big-cloud.nl	2026-08-14 11:56:40 (2 weeks ago)	Try to access /xmlrpc.php	Web App Attack
🇦🇺 paulshipley.com.au	2026-08-14 09:12:33 (2 weeks ago)	[Fri Aug 14 19:12:31.767398 2026] [security2:error] [pid 626725] [client 196.196.220.54:36208] [clie ... show more [Fri Aug 14 19:12:31.767398 2026] [security2:error] [pid 626725] [client 196.196.220.54:36208] [client 196.196.220.54] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "paulshipley.com.au"] [uri "/xmlrpc.php"] [unique_id "an7b_9JbmWimQW4fGD-U1gAAAAU"], referer: https://paulshipley.com.au/xmlrpc.php?rsd ... show less	Web App Attack
🇵🇱 sefinek.net	2025-04-14 12:00:18 (1 year ago)	Triggered Cloudflare WAF (firewallCustom) from EE. Action taken: MANAGED_CHALLENGE ASN: 58065 (PACKE ... show more Triggered Cloudflare WAF (firewallCustom) from EE. Action taken: MANAGED_CHALLENGE ASN: 58065 (PACKETEXCHANGE) Protocol: HTTP/1.1 (GET method) Timestamp: 2025-04-14T11:37:32Z UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Xbox; Xbox One) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edge/44.18363.8131 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 london2038.com	2025-04-12 10:05:02 (1 year ago)	Detected by WP fail2ban 2025-04-12T12:05:01.192438+02:00 wordpress: Authentication attempt from 196. ... show more Detected by WP fail2ban 2025-04-12T12:05:01.192438+02:00 wordpress: Authentication attempt from 196.196.220.54 show less	Brute-Force Web App Attack
Anonymous	2025-04-09 17:37:56 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2025-04-06 06:36:47 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇩🇪 london2038.com	2025-04-06 05:38:40 (1 year ago)	Detected by WP fail2ban 2025-04-06T07:38:39.450455+02:00 wordpress: Authentication attempt from 196. ... show more Detected by WP fail2ban 2025-04-06T07:38:39.450455+02:00 wordpress: Authentication attempt from 196.196.220.54 show less	Brute-Force Web App Attack
Anonymous	2025-04-01 10:27:41 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇩🇪 botreporter	2025-04-01 02:40:42 (1 year ago)	bot wiki account creation attempts	Web Spam Bad Web Bot
🇺🇸 octageeks.com	2025-03-30 04:07:57 (1 year ago)	Wordpress malicious attack:[octaxmlrpc]	Web App Attack

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 179.189.155.168

🇺🇸 147.185.132.251

🇹🇼 114.32.53.166

🇲🇲 103.217.158.159

🇱🇹 62.60.130.253

🇹🇭 223.24.60.30

🇮🇩 202.152.148.30

🇧🇷 187.49.63.41

🇩🇪 172.105.87.171

🇩🇪 161.35.64.154

🇺🇸 139.41.193.16

🇩🇪 130.12.180.101

🇭🇰 103.210.237.224

🇲🇾 49.124.153.50

🇺🇸 45.79.207.129

🇺🇸 35.227.35.122

🇺🇸 34.67.93.218

🇺🇦 31.129.245.144

🇺🇸 20.65.146.188

🇺🇸 4.227.181.49