JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 154.28.229.158

154.28.229.158 was found in our database!

This IP was reported 97 times. Confidence of Abuse is 33%: ?

33%

ISP	Aventice LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS46261
Domain Name	aventice.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 154.28.229.158

Whois 154.28.229.158

IP Abuse Reports for 154.28.229.158:

This IP address has been reported a total of 97 times from 41 distinct sources. 154.28.229.158 was first reported on June 7th 2023, and the most recent report was 21 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 VHosting	2026-09-01 16:05:03 (21 hours ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇵🇱 Budyn	2026-08-31 03:17:34 (2 days ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: pma.definitelynotahoneypot.online \| URI: /xmlrpc.php?rsd \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-08-26 21:39:31 (6 days ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: cloud.teddypot.site \| URI: /xmlrpc.php?rsd \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-08-21 05:21:33 (1 week ago)	Try to access /xmlrpc.php	Web App Attack
🇪🇸 librebit	2026-08-10 03:15:57 (3 weeks ago)	Brute force	Brute-Force
🇩🇪 wsyq	2026-08-09 01:05:09 (3 weeks ago)	Fail2Ban - \[NGINX\]40x-Forcing to access a restricted resource ...	Bad Web Bot Web App Attack
Anonymous	2026-07-30 02:14:43 (1 month ago)	Web attack	Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2026-06-24 23:39:50 (2 months ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 267	Exploited Host Web App Attack
🇮🇹 VHosting	2026-06-23 17:35:02 (2 months ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇩🇪 Richie	2026-06-18 16:55:30 (2 months ago)	[HOST1] WordPress probe: GET /wp-admin/admin-ajax.php -> HTTP 400; UA: Mozilla/5.0 (Macintosh; Intel ... show more [HOST1] WordPress probe: GET /wp-admin/admin-ajax.php -> HTTP 400; UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 show less	Bad Web Bot Web App Attack
🇧🇪 Scampi_ml	2026-06-10 12:55:51 (2 months ago)	11x HTTP 403/404 responses in short timeframe. Likely vulnerability scanner or brute-force attack on ... show more 11x HTTP 403/404 responses in short timeframe. Likely vulnerability scanner or brute-force attack on web application paths. show less	Bad Web Bot Web App Attack
🇺🇸 mnsf	2025-10-04 11:06:08 (10 months ago)	Too many Status 40X (11) Too many Status 50X (11)	Brute-Force Web App Attack
🇩🇪 london2038.com	2025-08-06 06:49:03 (1 year ago)	Probing for exploits 154.28.229.158 - - [06/Aug/2025:08:48:58 +0200] "GET /https%3A/<REDACTED>/comme ... show more Probing for exploits 154.28.229.158 - - [06/Aug/2025:08:48:58 +0200] "GET /https%3A/<REDACTED>/comments/feed/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" 154.28.229.158 - - [06/Aug/2025:08:48:59 +0200] "GET /https%3A/<REDACTED>/wp-content/themes/sparkling/assets/css/fontawesome-all.min.css%3Fver%3D5.1.1. HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" show less	Hacking Web App Attack
🇺🇸 mnsf	2025-07-22 11:05:23 (1 year ago)	Too many Status 40X (11) Too many Status 50X (11)	Brute-Force Web App Attack
🇫🇷 ᴀʀᴛ	2025-07-13 11:05:00 (1 year ago)	Triggered Cloudflare WAF (firewallCustom) from US. ASN: 46261 (QUICKPACKET) Protocol: HTTP/1.1 (GET ... show more Triggered Cloudflare WAF (firewallCustom) from US. ASN: 46261 (QUICKPACKET) Protocol: HTTP/1.1 (GET method) UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot

Showing 1 to 15 of 97 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 218.13.47.83

🇯🇵 162.159.108.158

🇩🇪 158.94.208.191

🇫🇷 85.217.140.6

🇷🇺 81.23.173.32

🇦🇿 62.217.152.56

🇬🇧 2a06:4880:2000::42

🇺🇸 2603:3026:431:9900:ed98:d91a:9e83:7a1c

🇦🇷 198.12.52.35

🇨🇴 190.5.200.98

🇮🇩 182.9.37.177

🇳🇱 91.92.42.61

🇮🇱 84.111.136.210

🇸🇬 47.236.236.208

🇸🇬 43.98.166.36

🇸🇬 43.98.165.197

🇳🇱 195.178.110.30

🇳🇱 193.47.62.69

🇺🇸 165.154.206.242

🇺🇸 148.105.14.155