JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 154.12.53.229

154.12.53.229 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 68%: ?

68%

ISP	NetLab Global
Usage Type	Commercial
ASN	AS979
Domain Name	as979.net
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 154.12.53.229

Whois 154.12.53.229

IP Abuse Reports for 154.12.53.229:

This IP address has been reported a total of 17 times from 16 distinct sources. 154.12.53.229 was first reported on May 20th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-05-25 03:56:28 (1 week ago)	udp_scan	DDoS Attack Port Scan Brute-Force
🇨🇭 SOC [GOLINE SA]	2026-05-25 03:25:14 (1 week ago)	IDS Alert: ET SCAN Sipvicious User-Agent Detected (friendly-scanner) === ATTACK === Signature: ET SC ... show more IDS Alert: ET SCAN Sipvicious User-Agent Detected (friendly-scanner) === ATTACK === Signature: ET SCAN Sipvicious User-Agent Detected (friendly-scanner) \| SID: 2011716 \| Severity: 2 \| Category: Attempted Information Leak === SOURCE === IP: 154.12.53.229 (IPv4) \| Port: 31567 \| Country: United States \| ISP: NET-154-12-0-0 \| rDNS: None === TARGET === Host: wireguard.goline.ch \| IP: 185.54.80.7 \| Port: 5060 \| Protocol: UDP \| App: failed === RESPONSE === Time: 2026-05-25 05:25:14 \| Action: Blocked show less	Port Scan
Anonymous	2026-05-25 03:24:00 (1 week ago)	Shorewall log file match.	Port Scan
🇩🇪 phil2k	2026-05-24 18:46:10 (1 week ago)	portscan on multiple UDP ports : Firewall: Within 2026-05-21 02:20:45 - 2026-05-21 04:25:36 CEST(+02 ... show more portscan on multiple UDP ports : Firewall: Within 2026-05-21 02:20:45 - 2026-05-21 04:25:36 CEST(+0200) identified: port scan from 154.12.53.229/32 on uncommon port/s: 5062(udp:5062),5090(udp:5090),5160(udp:5160),5080(udp:5080),5060(sip),6060(udp:6060),5070(udp:5070) (7 trials) Fail2ban: Within 2026-05-21 02:20:45 - 2026-05-21 04:25:36 CEST(+0200) banned: 12 times by fail2ban[firewall]; 12 times by fail2ban[recidive] show less	Port Scan
🇧🇷 maviei	2026-05-24 03:21:02 (1 week ago)	2026-05-24T00:21:01.721638-03:00 srv01 kernel: [749497.799797] [UFW BLOCK] IN=enp34s0 OUT= MAC=d8:43 ... show more 2026-05-24T00:21:01.721638-03:00 srv01 kernel: [749497.799797] [UFW BLOCK] IN=enp34s0 OUT= MAC=d8:43:ae:66:30:d5:40:b9:3c:95:87:d4:08:00 SRC=154.12.53.229 DST=177.19.138.245 LEN=444 TOS=0x00 PREC=0x00 TTL=51 ID=20319 DF PROTO=UDP SPT=58246 DPT=5060 LEN=424 2026-05-24T00:21:01.722021-03:00 srv01 kernel: [749497.799951] [UFW BLOCK] IN=enp34s0 OUT= MAC=d8:43:ae:66:30:d5:40:b9:3c:95:87:d4:08:00 SRC=154.12.53.229 DST=177.19.138.245 LEN=446 TOS=0x00 PREC=0x00 TTL=51 ID=20322 DF PROTO=UDP SPT=58246 DPT=5060 LEN=426 2026-05-24T00:21:01.724997-03:00 srv01 kernel: [749497.802332] [UFW BLOCK] IN=enp34s0 OUT= MAC=d8:43:ae:66:30:d5:40:b9:3c:95:87:d4:08:00 SRC=154.12.53.229 DST=177.19.138.245 LEN=445 TOS=0x00 PREC=0x00 TTL=51 ID=20320 DF PROTO=UDP SPT=58246 DPT=6060 LEN=425 ... show less	Port Scan
🇧🇷 diego	2026-05-24 02:47:02 (1 week ago)	[rede-164-29] 05/23/2026-23:47:01.703980, 154.12.53.229, Protocol: 17, ET SCAN Sipvicious Scan	Port Scan
🇺🇸 anon333	2026-05-21 04:33:15 (2 weeks ago)	Hacker syslog review 1779337994	Hacking
Anonymous	2026-05-21 02:53:04 (2 weeks ago)		Port Scan
🇹🇷 Threat.live	2026-05-21 01:05:04 (2 weeks ago)	Suspicious Connection Attempts	Brute-Force
🇩🇪 phil2k	2026-05-21 00:20:48 (2 weeks ago)	fail2ban:firewall:2026-05-21T02:20:45.243455+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> ... show more fail2ban:firewall:2026-05-21T02:20:45.243455+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=154.12.53.229 DST=<ANONYMIZED_IP> LEN=442 TOS=0x08 PREC=0x20 TTL=45 ID=45470 DF PROTO=UDP SPT=22607 DPT=5062 LEN=422 2026-05-21T02:20:45.243478+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=154.12.53.229 DST=<ANONYMIZED_IP> LEN=441 TOS=0x08 PREC=0x20 TTL=45 ID=45469 DF PROTO=UDP SPT=22607 DPT=5090 LEN=421 show less	DDoS Attack Port Scan
🇺🇸 Cyber Crusader	2026-05-20 17:07:44 (2 weeks ago)	Hundreds of Attempts (at least) to Connect to and Access Firewall Ports	Port Scan Hacking Brute-Force
🇺🇸 kot	2026-05-20 13:01:37 (2 weeks ago)	scan port 22, 154.12.53.229 block	Port Scan
🇦🇩 bakunin1848	2026-05-20 09:05:04 (2 weeks ago)	Firewall IPS Detection on 20-05-2026 at 11:05:04	Port Scan Exploited Host
🇳🇱 BIV	2026-05-20 09:03:16 (2 weeks ago)	Honeypot multi-source hit. Sources: dshield:fw,tpot:Sentrypeer,tpot:Suricata. Ports: 5060,5062,5070, ... show more Honeypot multi-source hit. Sources: dshield:fw,tpot:Sentrypeer,tpot:Suricata. Ports: 5060,5062,5070,5080,5090,5160,6060,7777. Automated tiered (T-Pot+DShield). show less	Port Scan Hacking Bad Web Bot
🇩🇪 iNetWorker	2026-05-20 08:01:09 (2 weeks ago)	firewall-block, port(s): 5060/udp, 5062/udp, 5070/udp, 5080/udp, 5090/udp, 5160/udp, 6060/udp, 7777/ ... show more firewall-block, port(s): 5060/udp, 5062/udp, 5070/udp, 5080/udp, 5090/udp, 5160/udp, 6060/udp, 7777/udp show less	Port Scan

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 37.77.150.241

🇨🇳 220.202.112.178

🇻🇳 171.231.188.52

🇻🇳 115.84.183.240

🇨🇳 106.117.114.54

🇫🇷 91.231.89.138

🇩🇪 69.5.169.162

🇩🇪 69.5.169.85

🇨🇳 218.66.22.202

🇮🇹 172.235.235.248

🇺🇸 162.216.150.154

🇪🇬 154.182.245.159

🇪🇬 144.123.77.27

🇺🇸 18.116.60.76

🇬🇧 206.189.120.50

🇨🇳 171.211.85.166

🇨🇳 123.207.99.233

🇨🇳 117.172.64.102

🇻🇳 103.200.25.79

🇩🇪 102.220.160.137