JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 106.0.54.153

106.0.54.153 was found in our database!

This IP was reported 100 times. Confidence of Abuse is 38%: ?

38%

ISP	Virgo Communication Ltd
Usage Type	Fixed Line ISP
ASN	AS58945
Domain Name	virgoiig.com
Country	🇧🇩 Bangladesh
City	Dhaka, Dhaka Division

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 106.0.54.153

Whois 106.0.54.153

IP Abuse Reports for 106.0.54.153:

This IP address has been reported a total of 100 times from 44 distinct sources. 106.0.54.153 was first reported on February 21st 2022, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 bigorre.org	2026-08-23 10:40:16 (1 day ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
🇺🇸 kosada.com	2026-08-18 10:50:08 (6 days ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-08-13 09:00:51 (1 week ago)	Large-scale coordinated botnet (1M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/S ... show more Large-scale coordinated botnet (1M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky); Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan) employed by Angara Technologies Group \| Attack Signature Blocked: /wishlist/index/add/product/9620/form_key/k2GBI8kfyWvHtVmu/ \| UA: Mozilla/5.0 (iPhone; CPU iPhone OS 13_5_1 like Mac OS X) AppleWebKit/535.2 (KHTML, like Gecko) CriOS/28.0.851.0 Mobile/09A434 Safari/535.2 \| (Magento Site) show less	Hacking Bad Web Bot Web App Attack
🇳🇱 DrLex0	2026-08-09 23:17:59 (2 weeks ago)	BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap, violating robots.txt an ... show more BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap, violating robots.txt and meta directives 106.0.54.153 443 - [09/Aug/2026:23:17:59 +0000] "GET [redacted] HTTP/1.1" 200 6891 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:133.0) Gecko/20100101 Firefox/133.0" show less	Bad Web Bot Exploited Host
Anonymous	2026-08-06 00:00:00 (2 weeks ago)	“HTTP Flood DDoS targeting domain.tld:443 via repeated GET requests to /[category]?q=Po%C4%8Det+stra ... show more “HTTP Flood DDoS targeting domain.tld:443 via repeated GET requests to /[category]?q=Po%C4%8Det+stran-[random-numbers] (e.g., /2-vsechny-produkty?q=Po%C4%8Det+stran-112-144-160-368-96). Uses spoofed Chrome/Safari/Googlebot UAs. Returns 403/404 errors due to fail2ban. Likely Layer 7 attack to exhaust server resources via pagination brute-forcing.“ show less	DDoS Attack
🇺🇸 TPI-Abuse	2026-08-05 10:10:23 (2 weeks ago)	(mod_security) mod_security (id:217210) triggered by 106.0.54.153 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:217210) triggered by 106.0.54.153 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 05 06:10:16.963386 2026] [security2:error] [pid 7027:tid 7027] [client 106.0.54.153:41164] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./](?::\\\\d+)?)?/[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S])?\|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?\|options \\\\)\\\\s+[\\\\w\\\\./]+\|get /[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line\|\|www.n3fjp.com\|F\|4"] [data "GET http://www.n3fjp.com HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.n3fjp.com"] [uri "/"] [unique_id "anMMCIvJoRepCeSQgrOBHgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-08-02 03:05:31 (3 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇫🇷 Tilellit.PRO	2026-07-28 13:22:05 (3 weeks ago)	WooCommerce YITH AJAX Filder product_cat filter flood attempt with taxonomies	DDoS Attack Bad Web Bot
🇫🇷 bigorre.org	2026-07-15 14:47:04 (1 month ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
🇺🇸 kosada.com	2026-07-12 12:25:09 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-06-29 08:49:59 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇳🇱 DrLex0	2026-06-15 22:56:40 (2 months ago)	BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap despite it clearly being ... show more BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap despite it clearly being a burning bag of dog poop. 106.0.54.153 443 - [15/Jun/2026:22:56:40 +0000] "GET [redacted] HTTP/1.1" 503 4654 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" show less	Bad Web Bot Exploited Host
🇺🇸 RAP	2026-05-21 07:30:47 (3 months ago)	2026-05-21 07:30:47 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇩🇪 milcraft.nl	2026-05-18 00:31:37 (3 months ago)	Suspicious WooCommerce query combination detected. Not default available on websites. Matched combi ... show more Suspicious WooCommerce query combination detected. Not default available on websites. Matched combi patterns: filter_, add-to-cart=, orderby=, product_count=. Activity is consistent with high-volume request abuse. show less	DDoS Attack Web App Attack
🇺🇸 cybsecaoccol	2026-05-11 10:10:51 (3 months ago)	unauthorized connection or malicious port scan attempted on tcp port - corp	Port Scan Hacking

Showing 1 to 15 of 100 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 129.121.75.215

🇻🇳 103.154.63.62

🇱🇹 213.176.26.194

🇩🇪 207.154.230.149

🇨🇳 202.107.164.50

🇺🇦 188.191.79.225

🇦🇷 181.20.143.152

🇧🇷 170.78.118.173

🇪🇬 154.177.170.122

🇺🇸 104.23.160.155

🇮🇳 103.38.219.22

🇨🇳 47.93.58.140

🇬🇧 35.203.210.89

🇺🇸 4.246.117.137

🇭🇰 199.45.155.26

🇧🇦 195.222.43.138

🇺🇸 195.184.76.114

🇺🇸 172.236.103.8

🇫🇮 147.185.133.89

🇺🇸 143.244.190.86