JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 154.28.229.141

154.28.229.141 was found in our database!

This IP was reported 137 times. Confidence of Abuse is 23%: ?

23%

ISP	Aventice LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS46261
Domain Name	aventice.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 154.28.229.141

Whois 154.28.229.141

IP Abuse Reports for 154.28.229.141:

This IP address has been reported a total of 137 times from 52 distinct sources. 154.28.229.141 was first reported on May 30th 2023, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 VHosting	2026-06-09 05:55:03 (1 week ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇮🇹 [email protected]	2026-05-21 01:11:43 (3 weeks ago)	[Thu May 21 03:11:42.784701 2026] [authz_core:error] [pid 3825780:tid 3825899] [client 154.28.229.14 ... show more [Thu May 21 03:11:42.784701 2026] [authz_core:error] [pid 3825780:tid 3825899] [client 154.28.229.141:38812] AH01630: client denied by server configuration: /var/www/html/MyWeb/Wordpress_www/xmlrpc.php show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-05-16 01:32:25 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 154.28.229.141 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 154.28.229.141 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 21:32:19.363921 2026] [security2:error] [pid 21132:tid 21132] [client 154.28.229.141:33604] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|gapanda.com\|F\|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gapanda.com"] [uri "/php-old.ini"] [unique_id "agfJIxgGrHTwKcEH1pB6uAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 seal	2026-05-10 06:54:45 (1 month ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	SSH Brute-Force
Anonymous	2026-05-03 08:57:33 (1 month ago)	Malicious activity detected	Hacking Web App Attack
🇩🇪 LRob.fr	2026-04-12 15:45:03 (2 months ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot
🇺🇸 9LEVEL.com.br	2026-03-30 10:22:25 (2 months ago)	Blocked by Fail2ban for traefik-404 abuse	Web App Attack
🇫🇷 Octopuce	2026-03-08 06:29:39 (3 months ago)	Aggressive web search of vulnerable pages: /http%3A/www.ouvaton.coop/ /index.php%3Fpage%3Dart%26cat% ... show more Aggressive web search of vulnerable pages: /http%3A/www.ouvaton.coop/ /index.php%3Fpage%3Dart%26cat%3D1%26id%3D29 /index.php%3Fpage%3Dmaraicher ... show less	Web App Attack
🇫🇮 gnom4ik	2026-02-22 19:05:41 (3 months ago)	ban-reviewer auto report; ip=154.28.229.141; scenario=http:scan; verdict=valid_ban; confidence=0.90; ... show more ban-reviewer auto report; ip=154.28.229.141; scenario=http:scan; verdict=valid_ban; confidence=0.90; categories=14,15,18; active_decisions=1; lookback_decisions=1; nginx_requests=0; appsec_matches=0; auth_events=0; kernel_events=0; signals=scan/exploit pattern detected (http:scan); IP has been banned for 9960 minutes (6.9 days); decision originated from CAPI with high confidence show less	Port Scan Hacking Brute-Force
🇺🇸 mnsf	2026-02-01 11:05:03 (4 months ago)	Too many Status 40X (11)	Brute-Force Web App Attack
🇩🇪 big-cloud.nl	2026-01-16 02:40:48 (5 months ago)	Try to access /https%3A/interieurz.nl/xmlrpc.php%3Frsd	Web App Attack
🇪🇸 librebit	2026-01-14 14:08:15 (5 months ago)	Brute force	Brute-Force
🇳🇱 CryptoYakari	2026-01-11 21:19:35 (5 months ago)	154.28.229.141 - - [12/Jan/2026:00:19:33 +0300] "GET /https%3A/kaan.dogan.org HTTP/1.0" 404 3185 "-" ... show more 154.28.229.141 - - [12/Jan/2026:00:19:33 +0300] "GET /https%3A/kaan.dogan.org HTTP/1.0" 404 3185 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" 154.28.229.141 - - [12/Jan/2026:00:19:33 +0300] "GET /https%3A/s05.flagcounter.com/more/LWoL HTTP/1.0" 404 3185 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" 154.28.229.141 - - [12/Jan/2026:00:19:33 +0300] "GET /%23 HTTP/1.0" 404 3185 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" 154.28.229.141 - - [12/Jan/2026:00:19:34 +0300] "GET /https%3A/soundcloud.com/mkaand HTTP/1.0" 404 3185 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" 154.28.229.141 - - [12/Jan/2026:00:19:34 +0300] "GET /https%3A/x.com/mkaand HTTP/1.0" 404 3185 "-" "Mozilla/5.0 (M ... show less	Web Spam Blog Spam Bad Web Bot Web App Attack
🇫🇷 Savoie	2026-01-11 04:52:00 (5 months ago)	154.28.229.141 *.* - [11/Jan/2026:05:52:45 +0100] "GET /https%3A/*.* HTTP/1.1" 302 212 "-" " ... show more 154.28.229.141 *.* - [11/Jan/2026:05:52:45 +0100] "GET /https%3A/*.* HTTP/1.1" 302 212 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" AND : GET /https%3A/https%3A/*.*/404.php HTTP/1.1 show less	Bad Web Bot Web App Attack
🇺🇸 mnsf	2025-12-28 11:05:03 (5 months ago)	Too many Status 40X (11)	Brute-Force Web App Attack

Showing 1 to 15 of 137 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 177.104.199.201

🇺🇸 172.253.249.51

🇺🇸 172.238.188.122

🇺🇸 170.254.178.177

🇸🇬 152.42.227.173

🇳🇱 91.92.40.6

🇨🇦 66.49.214.18

🇺🇸 65.49.1.182

🇺🇸 64.62.156.38

🇨🇳 36.34.20.252

🇧🇪 34.76.215.59

🇯🇵 20.153.204.5

🇺🇸 20.15.200.1

🇬🇧 2a00:1450:4009:c19::121

🇦🇷 200.112.129.120

🇺🇸 192.169.197.123

🇨🇱 191.126.179.204

🇺🇸 156.232.13.161

🇮🇳 143.110.181.178

🇸🇬 101.47.159.125