JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 154.29.235.241

154.29.235.241 was found in our database!

This IP was reported 79 times. Confidence of Abuse is 0%: ?

ISP	Aventice LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS46261
Domain Name	aventice.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 154.29.235.241

Whois 154.29.235.241

IP Abuse Reports for 154.29.235.241:

This IP address has been reported a total of 79 times from 8 distinct sources. 154.29.235.241 was first reported on February 23rd 2024, and the most recent report was 4 months ago.

Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-01-27 03:18:43 (4 months ago)	(mod_security) mod_security (id:210730) triggered by 154.29.235.241 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 154.29.235.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 26 22:18:34.425929 2026] [security2:error] [pid 23296:tid 23307] [client 154.29.235.241:57279] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.kettlehill.kettlehill.com\|F\|2"] [data ".kettlehill.kettlehill.com.db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.kettlehill.kettlehill.com"] [uri "/www.kettlehill.kettlehill.com.db"] [unique_id "aXguiknBpq4P6Y3u9V4KNAAAAMc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-17 00:14:44 (4 months ago)	(mod_security) mod_security (id:211190) triggered by 154.29.235.241 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:211190) triggered by 154.29.235.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 16 19:14:22.815009 2026] [security2:error] [pid 25989:tid 25989] [client 154.29.235.241:49783] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt\|\|ftp.nbcnewsradio.com\|F\|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /plugins/servlet/snjFooterNavigationConfig?fileName=../../../../etc/passwd&fileMime=$textMime"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ftp.nbcnewsradio.com"] [uri "/plugins/servlet/snjFooterNavigationConfig"] [unique_id "aWrUXi-Y4GkaTnGksu-29gAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-13 10:07:02 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 154.29.235.241 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 154.29.235.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 13 05:06:57.555467 2025] [security2:error] [pid 6406:tid 6406] [client 154.29.235.241:49943] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|ftp.nbcnewsradio.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ftp.nbcnewsradio.com"] [uri "/backup.sql"] [unique_id "aRWtwWKW_1FtuoJ7Bgf8aQAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇿🇦 slartybartfast69420blazit	2025-08-14 20:22:45 (9 months ago)	Fail2ban picked up 154.29.235.241 attacking nginx	Web App Attack
🇿🇦 slartybartfast69420blazit	2025-08-13 20:18:31 (9 months ago)	Fail2ban picked up 154.29.235.241 attacking nginx	Web App Attack
🇿🇦 slartybartfast69420blazit	2025-08-12 20:15:42 (9 months ago)	Fail2ban picked up 154.29.235.241 attacking nginx	Web App Attack
🇿🇦 slartybartfast69420blazit	2025-08-11 20:12:08 (9 months ago)	Fail2ban picked up 154.29.235.241 attacking nginx	Web App Attack
🇿🇦 slartybartfast69420blazit	2025-08-09 20:28:17 (9 months ago)	Fail2ban picked up 154.29.235.241 attacking nginx	Web App Attack
🇿🇦 slartybartfast69420blazit	2025-08-08 20:25:19 (9 months ago)	Fail2ban picked up 154.29.235.241 attacking nginx	Web App Attack
🇿🇦 slartybartfast69420blazit	2025-08-07 20:22:15 (9 months ago)	Fail2ban picked up 154.29.235.241 attacking nginx	Web App Attack
🇿🇦 slartybartfast69420blazit	2025-08-06 20:19:22 (10 months ago)	Fail2ban picked up 154.29.235.241 attacking nginx	Web App Attack
🇿🇦 slartybartfast69420blazit	2025-08-05 20:16:12 (10 months ago)	Fail2ban picked up 154.29.235.241 attacking nginx	Web App Attack
🇿🇦 slartybartfast69420blazit	2025-08-04 20:12:45 (10 months ago)	Fail2ban picked up 154.29.235.241 attacking nginx	Web App Attack
🇿🇦 slartybartfast69420blazit	2025-08-02 20:28:08 (10 months ago)	Fail2ban picked up 154.29.235.241 attacking nginx	Web App Attack
🇿🇦 slartybartfast69420blazit	2025-08-01 20:24:59 (10 months ago)	Fail2ban picked up 154.29.235.241 attacking nginx	Web App Attack

Showing 1 to 15 of 79 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇪 158.173.241.119

🇰🇷 112.161.83.247

🇸🇬 47.236.242.185

🇺🇸 34.215.10.49

🇮🇷 2.180.76.1

🇺🇸 2607:f8b0:4001:c34::127

🇮🇩 202.145.0.61

🇩🇪 195.248.243.171

🇲🇽 189.230.171.53

🇲🇽 187.210.77.100

🇦🇷 186.61.107.119

🇩🇪 185.176.94.38

🇵🇪 179.6.55.225

🇮🇶 169.224.112.135

🇬🇧 149.34.158.149

🇮🇳 145.79.210.32

🇮🇳 143.110.176.128

🇨🇳 120.48.109.59

🇫🇷 91.196.152.192

🇫🇷 86.217.21.47