JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 154.28.229.150

154.28.229.150 was found in our database!

This IP was reported 125 times. Confidence of Abuse is 26%: ?

26%

ISP	Aventice LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS46261
Domain Name	aventice.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 154.28.229.150

Whois 154.28.229.150

IP Abuse Reports for 154.28.229.150:

This IP address has been reported a total of 125 times from 49 distinct sources. 154.28.229.150 was first reported on June 7th 2023, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-10 05:13:20 (13 hours ago)		Bad Web Bot
🇺🇸 mnsf	2026-06-01 10:05:46 (1 week ago)	Too many Status 40X (16)	Brute-Force Web App Attack
🇩🇪 big-cloud.nl	2026-05-26 23:00:34 (2 weeks ago)	Try to access /xmlrpc.php	Web App Attack
🇩🇪 big-cloud.nl	2026-05-16 01:15:02 (3 weeks ago)	Try to access /https%3A/th-inspecties.nl/xmlrpc.php	Web App Attack
🇩🇪 LRob.fr	2026-04-22 12:45:08 (1 month ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot
🇮🇹 abuseiphack	2026-04-16 19:37:23 (1 month ago)	Automatic report for brute force attack	Bad Web Bot
Anonymous	2026-04-12 18:35:47 (1 month ago)	[redacted] 154.28.229.150 - - [12/Apr/2026:20:35:45 +0200] "GET /https%3A/[redacted]/author/administ ... show more [redacted] 154.28.229.150 - - [12/Apr/2026:20:35:45 +0200] "GET /https%3A/[redacted]/author/administrator/ HTTP/1.1" 404 9064 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" [redacted] 154.28.229.150 - - [12/Apr/2026:20:35:46 +0200] "GET /https%3A/[redacted]/author/administrator/https%3A/gmpg.org/xfn/11 HTTP/1.1" 404 9064 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" [redacted] 154.28.229.150 - - [12/Apr/2026:20:35:46 +0200] "GET /https%3A/[redacted]/author/administrator/https%3A/[redacted]/wp-includes/css/dist/block-library/theme.min.css%3Fver%3D5.2.24 HTTP/1.1" 404 9064 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" [redacted] 154.28.229.150 - - [12/Apr/2026:20:35:46 +0200] "GET /https%3A/dev.zum-dicken-jup ... show less	Hacking Web App Attack
🇺🇸 mnsf	2026-04-08 10:07:10 (2 months ago)	Too many Status 40X (11)	Brute-Force Web App Attack
🇪🇸 librebit	2026-04-05 16:53:35 (2 months ago)	Brute force	Brute-Force
🇪🇸 gnom4ik	2026-02-22 19:08:23 (3 months ago)	ban-reviewer auto report; ip=154.28.229.150; scenario=http:scan; verdict=valid_ban; confidence=0.90; ... show more ban-reviewer auto report; ip=154.28.229.150; scenario=http:scan; verdict=valid_ban; confidence=0.90; categories=14,15,18; active_decisions=1; lookback_decisions=1; nginx_requests=0; appsec_matches=0; auth_events=0; kernel_events=0; signals=scan/exploit pattern detected (http:scan); IP has been banned previously (ip_active_decisions_total: 1); decision duration is 9060m (nearly 7 days), indicating sustained threat show less	Port Scan Hacking Brute-Force
🇮🇹 ciccio diddo	2026-01-31 23:46:45 (4 months ago)	CMS/WP Exploit multiple 404 port:Tcp/80,443	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-01-13 08:31:22 (4 months ago)	(mod_security) mod_security (id:210381) triggered by 154.28.229.150 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210381) triggered by 154.28.229.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 13 03:31:18.842138 2026] [security2:error] [pid 23147:tid 23147] [client 154.28.229.150:11830] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "82"] [id "210381"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt\|\|www.americanureport.com\|F\|4"] [data "REQUEST_URI=/https:/www.american.edu/facultysenate/index.cfm#:~:text=enrollment%and%retention"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.americanureport.com"] [uri "/https:/www.american.edu/facultysenate/index.cfm#:~:text=enrollment%and%retention"] [unique_id "aWYC1n4rxqIRzBcXDH_uMgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 librebit	2026-01-05 01:06:02 (5 months ago)	Brute force	Brute-Force
🇨🇭 Origon	2026-01-03 09:33:38 (5 months ago)	http-probing - IP: 154.28.229.150 - time="2026-01-03T10:33:37+01:00" level=info msg="(555f66b4f6a74 ... show more http-probing - IP: 154.28.229.150 - time="2026-01-03T10:33:37+01:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-probing by ip 154.28.229.150 (US/46261) : 4h ban on Ip 154.28.229.150" module=db show less	Web App Attack
🇩🇪 HandyTreff.de	2025-12-19 07:19:33 (5 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -72.472 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -72.472 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.3 show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 125 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 152.32.212.41

🇵🇰 110.93.224.226

🇧🇩 103.55.146.215

🇸🇬 8.219.11.123

🇧🇪 198.235.24.246

🇱🇧 178.135.18.158

🇨🇳 171.83.81.122

🇺🇸 165.227.5.246

🇨🇳 115.29.238.227

🇨🇳 106.117.114.228

🇬🇷 62.103.28.131

🇩🇪 57.129.81.224

🇨🇴 45.176.70.54

🇮🇷 2.178.222.215

🇨🇳 211.93.104.69

🇳🇱 204.76.203.206

🇪🇹 196.189.236.162

🇺🇸 172.105.128.11

🇮🇳 122.166.49.42

🇰🇷 119.209.12.20