JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 154.28.229.82

154.28.229.82 was found in our database!

This IP was reported 125 times. Confidence of Abuse is 20%: ?

20%

ISP	Aventice LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS46261
Domain Name	aventice.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 154.28.229.82

Whois 154.28.229.82

IP Abuse Reports for 154.28.229.82:

This IP address has been reported a total of 125 times from 49 distinct sources. 154.28.229.82 was first reported on May 30th 2023, and the most recent report was 42 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 Budyn	2026-09-01 21:10:12 (42 minutes ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: keycloak.goblinpot.website \| URI: /xmlrpc.php?rsd \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-09-01 20:10:04 (1 hour ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇵🇱 Budyn	2026-08-17 12:48:15 (2 weeks ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: pma.goblinpot.tech \| URI: /xmlrpc.php \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-08-11 17:50:35 (3 weeks ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: cpanel.astropot.space \| URI: /xmlrpc.php \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-08-08 17:47:00 (3 weeks ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: staging.teddypot.pro \| URI: /xmlrpc.php \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-07-17 10:05:10 (1 month ago)	Too many Status 40X (12)	Brute-Force Web App Attack
Anonymous	2026-06-27 16:02:03 (2 months ago)	Web attack	Bad Web Bot Web App Attack
🇵🇱 lns.bz	2026-06-24 16:11:25 (2 months ago)	Web app attack [PL.Lu]	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-06-15 08:19:11 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 154.28.229.82 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 154.28.229.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 04:19:04.881626 2026] [security2:error] [pid 15006:tid 15006] [client 154.28.229.82:43532] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|keystroke.info\|F\|2"] [data ".php.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "keystroke.info"] [uri "/LocalSettings.php.backup"] [unique_id "ai-1eGKit9QPjuUwOus_5QAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-06-08 13:55:03 (2 months ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇩🇪 big-cloud.nl	2026-05-25 08:29:54 (3 months ago)	Try to access /xmlrpc.php	Web App Attack
Anonymous	2026-05-22 12:20:45 (3 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇦🇺 MAGIC	2026-05-18 03:06:07 (3 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇦🇺 nzhost.co.nz	2026-04-21 09:55:29 (4 months ago)	$f2bV_matches	Hacking Brute-Force
🇱🇹 juozaspo	2026-04-21 08:18:38 (4 months ago)	Automatic Report: Ignores robots.txt, visited bot-trap page linked through a hidden link, auto-banne ... show more Automatic Report: Ignores robots.txt, visited bot-trap page linked through a hidden link, auto-banned show less	Bad Web Bot

Showing 1 to 15 of 125 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 217.171.20.167

🇩🇪 213.209.159.238

🇬🇧 195.96.139.139

🇳🇴 185.12.59.118

🇺🇸 136.144.35.32

🇳🇱 45.148.10.157

🇺🇸 20.127.197.88

🇨🇳 218.89.48.175

🇨🇴 186.112.5.115

🇺🇸 144.225.6.184

🇺🇸 136.144.35.18

🇩🇪 130.12.182.197

🇨🇳 115.191.7.28

🇪🇪 95.85.245.227

🇫🇷 77.239.124.183

🇷🇺 212.32.207.100

🇺🇸 136.144.35.21

🇺🇸 136.144.35.20

🇺🇸 136.144.35.14

🇩🇪 43.228.157.161