JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 154.36.110.239

154.36.110.239 was found in our database!

This IP was reported 7 times. Confidence of Abuse is 0%: ?

ISP	Aventice LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS28753
Domain Name	aventice.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 154.36.110.239

Whois 154.36.110.239

IP Abuse Reports for 154.36.110.239:

This IP address has been reported a total of 7 times from 7 distinct sources. 154.36.110.239 was first reported on March 19th 2025, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 gnom4ik	2026-02-21 02:37:04 (3 months ago)	ban-reviewer auto report; ip=154.36.110.239; scenario=http:scan; verdict=valid_ban; confidence=0.85; ... show more ban-reviewer auto report; ip=154.36.110.239; scenario=http:scan; verdict=valid_ban; confidence=0.85; categories=14,15,18; active_decisions=1; lookback_decisions=1; nginx_requests=0; appsec_matches=0; auth_events=0; kernel_events=0; signals=IP flagged for HTTP scanning activity (scenario: http:scan); Decision was placed within a short time window (48 hours) with no prior active decisions; No evidence of legitimate traffic patterns or user activity show less	Port Scan Hacking Brute-Force
🇮🇪 AutosOnShow	2025-11-04 07:12:04 (7 months ago)	blocked for webapp attack \| path requested: /.env \| seen at 2025-11-04 07:11:07.160 \|	Web App Attack
🇮🇪 Jim Keir	2025-10-20 17:01:00 (7 months ago)	2025-10-20 17:00:58 154.36.110.239 File scanning, blocking 154.36.110.239 for 5 minutes	Web App Attack
🇺🇸 ne1for23	2025-10-12 23:01:36 (8 months ago)	Attempt to access invalid virtual host name (###.###.###.###). Typically used to access "internal" ... show more Attempt to access invalid virtual host name (###.###.###.###). Typically used to access "internal" resources improperly exposed externally and "protected" only by a lack of external DNS resolution. 154.36.110.239 - - [12/Oct/2025:23:01:35 +0000] "GET /.env HTTP/1.1" 403 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" "-" show less	Hacking
🇨🇴 j458rjqwi348fhjq46	2025-08-07 06:26:59 (10 months ago)	Malicious IP detected by WAF with anomaly score 10.0. Attack types: Suspicious URL detected (extende ... show more Malicious IP detected by WAF with anomaly score 10.0. Attack types: Suspicious URL detected (extended rules), Exposure of environment file (.env). Activity: 12 requests to 2 URLs. Period: 2025-08-07 00:54:11 - 2025-08-07 00:54:11 (America/Bogota). Origin: US. Source: Automated WAF log analysis. show less	Hacking Web App Attack
🇵🇱 rafix	2025-07-20 11:40:33 (10 months ago)	Botnet, DDoS #20250720	Bad Web Bot
🇨🇦 polycoda	2025-03-19 18:09:21 (1 year ago)	🔑 Wordpress login brute force attempt	Hacking Web App Attack

Showing 1 to 7 of 7 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 109.244.96.120

🇮🇳 58.84.61.126

🇦🇺 54.66.224.4

🇺🇸 20.127.153.188

🇨🇳 220.196.160.218

🇳🇱 193.176.31.232

🇲🇽 187.191.48.9

🇨🇳 175.9.134.172

🇺🇸 172.59.213.194

🇺🇸 143.42.173.101

🇸🇬 128.199.231.249

🇨🇳 120.240.178.198

🇨🇳 112.111.105.184

🇫🇷 82.67.154.57

🇨🇦 51.222.95.170

🇬🇧 35.203.210.184

🇨🇳 14.103.98.184

🇺🇸 205.210.31.43

🇹🇼 198.235.24.80

🇩🇪 195.63.27.118