JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

154.54.100.185

Recent Activity

Abuse confidence score ?

100% Critical

337 reports

251 reporters · latest 1 hour ago

ISP	American Information Network
Usage Type	Fixed Line ISP
ASN	AS6405
Domain Name	ainetfactory.com
Country	🇺🇸 United States of America
City	Beltsville, Maryland

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 154.54.100.185

This IP address has been reported a total of 337 times from 251 distinct sources. 154.54.100.185 was first reported on September 24th 2026, and the most recent report was 1 hour ago. In the last 60 days, the top reporter locations were: United States of America with 79 reports; Germany with 63 reports; France with 42 reports. The most common categories in these recent reports were: Web App Attack 253 times; Bad Web Bot 105 times; Hacking 72 times; Brute-Force 66 times; Port Scan 46 times; Other 39 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-09-25 13:18:33 (1 hour ago)	fail2ban jail apache-secrets-probe: 154.54.100.185 - - [24/Sep/2026:02:16:21 -0700] "GET /.git/confi ... show more fail2ban jail apache-secrets-probe: 154.54.100.185 - - [24/Sep/2026:02:16:21 -0700] "GET /.git/config HTTP/1.1" 403 4425 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-J327T1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.99 Mobile Safari/537.36" show less	Web App Attack
🇹🇷 oalver	2026-09-25 10:54:12 (3 hours ago)	Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: nginx_path_signa ... show more Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: nginx_path_signature. Sources: nginx. Details: path_signature: request to /.git/config (HTTP 404). First seen: 2026-09-25. Risk score: 30/100. show less	Web App Attack
🇭🇺 kranem	2026-09-25 09:00:25 (5 hours ago)	Triggered Cloudflare WAF from US. Action taken: BLOCK ASN: 6405 (American Information Network) Proto ... show more Triggered Cloudflare WAF from US. Action taken: BLOCK ASN: 6405 (American Information Network) Protocol: HTTP/1.1 (GET method) Endpoint: /.git/config Timestamp: 2026-09-25T06:13:31Z User-Agent: Mozilla/5.0 (Linux; Android 9; H3223) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36 show less	Bad Web Bot
🇺🇸 MPL	2026-09-25 07:32:11 (6 hours ago)	tcp/443 (3 or more attempts)	Port Scan
Anonymous	2026-09-25 07:30:10 (6 hours ago)	$f2bV_matches	Brute-Force
🇩🇪 sdos.es	2026-09-25 07:17:13 (7 hours ago)	"Restricted File Access Attempt - Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"	Web App Attack
Anonymous	2026-09-25 07:16:36 (7 hours ago)	Automated report (2026-09-25T15:16:36+08:00). Caught probing for exposed Git data.	Hacking Web App Attack
🇧🇪 boxed-it	2026-09-25 07:13:04 (7 hours ago)	GET /.git/config (Tarpitted for 38m6s, wasted 134.06kB)	Web App Attack
🇫🇷 Baking333	2026-09-25 07:12:48 (7 hours ago)	[redacted] 154.54.100.185 - - [25/Sep/2026:08:09:27 +0100] "GET /.git/config HTTP/1.1" 302 6778 0/48 ... show more [redacted] 154.54.100.185 - - [25/Sep/2026:08:09:27 +0100] "GET /.git/config HTTP/1.1" 302 6778 0/48873 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.94 Safari/537.36" 443 [redacted] 154.54.100.185 - - [25/Sep/2026:08:12:46 +0100] "GET /.git/config HTTP/1.1" 302 6773 0/80582 "-" "Mozilla/5.0 (Linux; Android 8.1.0; Redmi Note 6 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.105 Mobile Safari/537.36" 443 show less	Bad Web Bot Web App Attack
🇩🇪 macrob	2026-09-25 06:43:02 (7 hours ago)	2026/09/25 06:42:57 [error] 2823257#2823257: 34155154 access forbidden by rule, client: 154.54.100. ... show more 2026/09/25 06:42:57 [error] 2823257#2823257: 34155154 access forbidden by rule, client: 154.54.100.185, server: binixo-vn.com, request: "GET /.git/config HTTP/2.0", host: "binixo-vn.com" 2026/09/25 06:42:57 [error] 2823257#2823257: 34155155 access forbidden by rule, client: 154.54.100.185, server: binixo.com, request: "GET /.git/config HTTP/2.0", host: "binixo.com" 2026/09/25 06:43:01 [error] 2823254#2823254: 34155264 access forbidden by rule, client: 154.54.100.185, server: binixo.com.ua, request: "GET /.git/config HTTP/1.1", host: "binixo.com.ua" ... show less	Web App Attack
🇫🇷 arsonist	2026-09-25 06:34:17 (7 hours ago)	[fail2ban] 2026-09-25T06:34:16.523169+00:00 arson caddy[1890453]: {"level":"info","ts":1790318056.52 ... show more [fail2ban] 2026-09-25T06:34:16.523169+00:00 arson caddy[1890453]: {"level":"info","ts":1790318056.523145,"logger":"http.log.access.default","msg":"handled request","request":{"remote_ip":"154.54.100.185","remote_port":"39312","client_ip":"154.54.100.185","proto":"HTTP/1.1","method":"GET","host":"sync.arson.gg","uri":"/.git/config","headers":{"Accept-Charset":["utf-8"],"Accept-Encoding":["gzip"],"Connection":["close"],"User-Agent":["Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/534.24 (KHTML, like Gecko) Ubuntu/10.10 Chromium/12.0.703.0 Chrome/12.0.703.0 Safari/534.24"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"","server_name":"sync.arson.gg","ech":false}},"bytes_read":0,"user_id":"","duration":0.000053962,"size":7,"status":418,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Content-Type":["text/plain; charset=utf-8"]}} ... show less	Bad Web Bot
🇫🇮 as211431.net	2026-09-25 06:33:06 (7 hours ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /.git/config UA: Mozilla/5.0 (Linux; Android 9; Redmi Note 5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.89 Mobile Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 hero2026	2026-09-25 06:31:16 (7 hours ago)	Blocked by Fail2ban	Web App Attack
🇺🇸 craudiovizai	2026-09-25 06:30:39 (7 hours ago)	Automated honeypot detection. blocked ip against a Next.js application. Paths: /.git/config. Blocked ... show more Automated honeypot detection. blocked ip against a Next.js application. Paths: /.git/config. Blocked at the edge. show less	Bad Web Bot
🇳🇱 ByeByte API	2026-09-25 06:24:42 (8 hours ago)	byebyte.space auth: GET /.git/config at 2026-09-25T06:24:42Z. Honeypot path hit; firewall auto-banne ... show more byebyte.space auth: GET /.git/config at 2026-09-25T06:24:42Z. Honeypot path hit; firewall auto-banned the IP for 24h. UA: 'Mozilla/5.0 (Linux; Android 9; MI 8 SE Build/PKQ1.181121.001; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/66.0.3359.126 MQQBrowser/6.2 TBS/044'. Accept-Encoding: 'gzip, br'. Country (CF): US. TLS info: {"scheme":"https"}. show less	Web App Attack Port Scan

Showing 1 to 15 of 337 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 165.245.253.78

🇲🇽 189.254.200.132

🇬🇧 81.19.219.235

🇯🇵 223.134.89.104

🇲🇽 187.212.43.1

🇺🇸 170.106.115.142

🇺🇸 136.144.35.43

🇦🇺 118.208.201.71

🇮🇷 94.182.168.135

🇬🇪 94.43.141.184

🇩🇰 87.72.115.11

🇺🇸 47.252.34.242

🇬🇧 45.82.76.135

🇮🇷 212.33.198.115

🇧🇩 202.84.37.131

🇵🇾 190.104.164.93

🇺🇸 162.216.150.182

🇺🇸 146.190.74.52

🇺🇸 91.230.168.162

🇺🇸 70.183.235.233