AbuseIPDB » 154.216.20.134

154.216.20.134 was found in our database!

This IP was reported 560 times. Confidence of Abuse is 100%: ?

100%

ISP	Silent Connections LTD
Usage Type	Data Center/Web Hosting/Transit
Domain Name	as215240.net
Country	Lithuania
City	Vilnius, Vilnius

Report 154.216.20.134

Whois 154.216.20.134

IP Abuse Reports for 154.216.20.134:

This IP address has been reported a total of 560 times from 219 distinct sources. 154.216.20.134 was first reported on August 4th 2024, and the most recent report was 10 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Pornomens	2024-12-13 02:20:36 (12 hours ago)	154.216.20.134 - - [13/Dec/2024:03:20:35 +0100] "GET /.env HTTP/1.1" 403 473 "-" "Mozilla/5.0 (Linux ... show more154.216.20.134 - - [13/Dec/2024:03:20:35 +0100] "GET /.env HTTP/1.1" 403 473 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" 154.216.20.134 - - [13/Dec/2024:03:20:35 +0100] "POST / HTTP/1.1" 403 473 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" 154.216.20.134 - - [13/Dec/2024:03:20:35 +0100] "GET /.env HTTP/1.1" 403 3979 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" ... show less	Web App Attack
bmino.pl	2024-12-12 03:57:13 (1 day ago)	Autoban 154.216.20.134 BLOCK ACCESS	Brute-Force
bmino.pl	2024-12-10 03:57:52 (3 days ago)	Autoban 154.216.20.134 BLOCK ACCESS	Brute-Force
bmino.pl	2024-12-09 03:57:39 (4 days ago)	Autoban 154.216.20.134 BLOCK ACCESS	Brute-Force
bmino.pl	2024-12-08 03:57:27 (5 days ago)	Autoban 154.216.20.134 BLOCK ACCESS	Brute-Force
gu-alvareza	2024-12-07 07:06:11 (6 days ago)	AndroxGh0st.Malware	Hacking Exploited Host
bmino.pl	2024-12-07 03:57:13 (6 days ago)	Autoban 154.216.20.134 BLOCK ACCESS	Brute-Force
lnklnx	2024-12-07 03:54:17 (6 days ago)	www.lnklnx.com:80 154.216.20.134 - - [06/Dec/2024:21:54:16 -0600] "GET /.env HTTP/1.1" 301 484 "-" " ... show morewww.lnklnx.com:80 154.216.20.134 - - [06/Dec/2024:21:54:16 -0600] "GET /.env HTTP/1.1" 301 484 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" ... show less	Web App Attack
legitssl	2024-12-06 20:57:07 (6 days ago)	154.216.20.134 - - [06/Dec/2024:15:57:06 -0500] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin ... show more154.216.20.134 - - [06/Dec/2024:15:57:06 -0500] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 302 145 "-" "python-requests/2.25.1" 154.216.20.134 - - [06/Dec/2024:15:57:06 -0500] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 302 145 "-" "python-requests/2.25.1" 154.216.20.134 - - [06/Dec/2024:15:57:06 -0500] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 302 145 "-" "python-requests/2.25.1" 154.216.20.134 - - [06/Dec/2024:15:57:06 -0500] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 302 145 "-" "python-requests/2.25.1" 154.216.20.134 - - [06/Dec/2024:15:57:06 -0500] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 302 145 "-" "python-requests/2.25.1" ... show less	Hacking Web App Attack
Anonymous	2024-12-06 09:27:05 (1 week ago)	[05/Dec/2024:14:25:56 -0500] \"GET /.env HTTP/1.1\" \"Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; H ... show more[05/Dec/2024:14:25:56 -0500] \"GET /.env HTTP/1.1\" \"Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30\" [05/Dec/2024:14:25:57 -0500] \"POST / HTTP/1.1\" \"Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30\" [05/Dec/2024:14:25:58 -0500] \"GET /.env HTTP/1.1\" \"Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30\" [05/Dec/2024:14:25:58 -0500] \"POST / HTTP/1.1\" \"Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30\" [05/Dec/2024:14:26:02 -0500] \"GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1\" \"python-requests/2. show less	Hacking
bmino.pl	2024-12-06 03:57:13 (1 week ago)	Autoban 154.216.20.134 BLOCK ACCESS	Brute-Force
www.elivecd.org	2024-12-05 11:14:36 (1 week ago)	2024/12/05 11:14:36 [error] 1554918#1554918: 224626 FastCGI sent in stderr: "PHP message: BOT WARNI ... show more2024/12/05 11:14:36 [error] 1554918#1554918: 224626 FastCGI sent in stderr: "PHP message: BOT WARNING: visitor used the honeypot: 154.216.20.134, you should ban it for long time (honeypot form function-abuseipdb)" while reading response header from upstream, client: 154.216.20.134, server: www.elivecd.org, request: "POST / HTTP/1.1", upstream: "fastcgi://unix:/run/php/php8.2-fpm-elivewp.sock:", host: "78.141.243.157" ... show less	Web Spam Email Spam
gu-alvareza	2024-12-05 07:05:24 (1 week ago)	AndroxGh0st.Malware	Hacking Exploited Host
chronos	2024-12-04 19:00:11 (1 week ago)	[AUTORAVALT][[04/12/2024 - 16:00:11 -03:00 UTC] Attack from [Cloud Innovation Support] [ ... show more[AUTORAVALT][[04/12/2024 - 16:00:11 -03:00 UTC] Attack from [Cloud Innovation Support] [154.216.20.134]-[RANGE:154.216.20.0 - 154.216.20.255] Action: BLocKed DDoS Attack -> Participating in distributed denial-of-service. Phishing -> Phishing websites and/or email. Web Spam -> Comment/forum spam, HTTP referer spam, or other CMS spam. Blog Spam -> CMS blog comm] ... show less	DDoS Attack Phishing Web Spam Blog Spam Web App Attack
sdos.es	2024-12-04 18:47:46 (1 week ago)	"Restricted File Access Attempt - Matched Data: /.env found within REQUEST_FILENAME: /.env"	Web App Attack