JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 154.58.229.19

154.58.229.19 was found in our database!

This IP was reported 139 times. Confidence of Abuse is 100%: ?

100%

ISP	Limestone Networks, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS400810
Domain Name	limestonenetworks.com
Country	🇺🇸 United States of America
City	New York City, New York

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 154.58.229.19

Whois 154.58.229.19

IP Abuse Reports for 154.58.229.19:

This IP address has been reported a total of 139 times from 102 distinct sources. 154.58.229.19 was first reported on October 24th 2025, and the most recent report was 23 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-29 15:27:25 (23 minutes ago)	154.58.229.19 - - [29/Jul/2026:15:27:24 +0000] "GET /.git/config HTTP/1.1" 404 410 "-" "Mozilla/5.0 ... show more 154.58.229.19 - - [29/Jul/2026:15:27:24 +0000] "GET /.git/config HTTP/1.1" 404 410 "-" "Mozilla/5.0 (compatible; xAI-SearchBot/1.0; +https://x.ai)" ... show less	Bad Web Bot Web App Attack
🇩🇪 ISPLtd	2026-07-29 15:24:13 (26 minutes ago)	154.58.229.19 [29/Jul/2026:12:24:12 -0300] target.domain.com:443 URL:/.git/config "GET /.git/config ... show more 154.58.229.19 [29/Jul/2026:12:24:12 -0300] target.domain.com:443 URL:/.git/config "GET /.git/config 154.58.229.19 [29/Jul/2026:12:24:12 -0300] target.domain.com:443 URL:/.git/HEAD "GET /.git/HEAD ... show less	Hacking Web App Attack
🇵🇱 Budyn	2026-07-29 12:51:07 (2 hours ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: URI: /.git/config \| UA: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) \| BODY: [Empty / GET Request] show less	Hacking Web App Attack
🇳🇱 e.fierstra	2026-07-29 12:44:05 (3 hours ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇩🇪 paissangroup	2026-07-29 12:43:18 (3 hours ago)	Multiple WAF Violations	Web App Attack
🇨🇿 sajmon0011	2026-07-29 11:57:38 (3 hours ago)	154.58.229.19 - - [29/Jul/2026:13:57:37 +0200] "GET /.git/config HTTP/1.1" 404 196 "-" "Mozilla/5.0 ... show more 154.58.229.19 - - [29/Jul/2026:13:57:37 +0200] "GET /.git/config HTTP/1.1" 404 196 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)" ... show less	Web App Attack
🇳🇱 0xffffffff	2026-07-29 11:54:44 (3 hours ago)	[2026-07-29 14:54:41.303958] [authz_core:error] [pid 23984:tid 136577787315904] [client 154.58.229.1 ... show more [2026-07-29 14:54:41.303958] [authz_core:error] [pid 23984:tid 136577787315904] [client 154.58.229.19:58756] AH01630: client denied by server configuration: /var/www//.git , error_notes:config-files , URI:'/.git/config' [2026-07-29 14:54:42.233387] [authz_core:error] [pid 23984:tid 136577820886720] [client 154.58.229.19:58756] AH01630: client denied by server configuration: /var/www// , error_notes:wrong-host , URI:'/' [2026-07-29 14:54:42.394252] [authz_core:error] [pid 23985:tid 136577703388864] [client 154.58.229.19:58742] AH01630: client denied by server configuration: /var/www//.git , error_notes:config-files , URI:'/.git/HEAD' [2026-07-29 14:54:42.683933] [authz_core:error] [pid 23984:tid 136577804101312] [client 154.58.229.19:58756] AH01630: client denied by server configuration: /var/www//.well-known/security.txt , error_notes:wrong-host , URI:'/.well-known/security.txt' [2026-07-29 14:54:43.041433] [authz_core:error] [pid 23984:tid 136577795708608] [client 154.58.229.19:58756] AH01630: client den show less	Web App Attack Bad Web Bot
🇳🇱 Eric	2026-07-29 11:48:49 (4 hours ago)	[Wed Jul 29 11:48:48.023609 2026] [security2:error] [pid 921559:tid 921559] [client 154.58.229.19:36 ... show more [Wed Jul 29 11:48:48.023609 2026] [security2:error] [pid 921559:tid 921559] [client 154.58.229.19:36174] [client 154.58.229.19] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "94.209.38.171"] [severity "WARNING"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "94.209.38.171"] [uri "/.git/HEAD"] [unique_id "amnooPGhXLlYIxaNrsdFNQAAAA4"] [Wed Jul 29 11:48:48.024064 2026] [security2:error] [pid 921559:tid 921559] [client 154.58.229.19:36174] [client 154.58.229.19] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [l ... show less	Hacking Web App Attack
Anonymous	2026-07-29 11:38:02 (4 hours ago)		Bad Web Bot
🇩🇪 mygcode.de	2026-07-29 11:33:22 (4 hours ago)	Scanning for Exploits	Bad Web Bot
🇩🇪 pcpiefke	2026-07-29 11:22:51 (4 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 154.58.229.19 (US/United States/-)	SQL Injection
🇮🇹 madaello	2026-07-29 11:19:34 (4 hours ago)	154.58.229.19 - - [29/Jul/2026:13:19:29 +0200] "GET / HTTP/1.1" 301 4654 "-" "Mozilla/5.0 (compatibl ... show more 154.58.229.19 - - [29/Jul/2026:13:19:29 +0200] "GET / HTTP/1.1" 301 4654 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/bot)" 154.58.229.19 - - [29/Jul/2026:13:19:29 +0200] "GET /.git/config HTTP/1.1" 301 4676 "-" "Mozilla/5.0 (compatible; ClaudeBot/1.0; [email protected])" 154.58.229.19 - - [29/Jul/2026:13:19:30 +0200] "GET /.git/HEAD HTTP/1.1" 301 606 "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 154.58.229.19 - - [29/Jul/2026:13:19:33 +0200] "GET / HTTP/1.1" 301 567 "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" ... show less	Hacking
🇮🇹 Inartis	2026-07-29 11:17:51 (4 hours ago)	154.58.229.19 - - [29/Jul/2026:13:17:50 +0200] "GET /.git/config HTTP/1.1" 404 5513 "-" "Mozilla/5.0 ... show more 154.58.229.19 - - [29/Jul/2026:13:17:50 +0200] "GET /.git/config HTTP/1.1" 404 5513 "-" "Mozilla/5.0 (compatible; xAI-SearchBot/1.0; +https://x.ai)" 154.58.229.19 - - [29/Jul/2026:13:17:50 +0200] "GET /.env HTTP/1.1" 404 403 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" 154.58.229.19 - - [29/Jul/2026:13:17:50 +0200] "GET /.env.production HTTP/1.1" 404 5513 "-" "Mozilla/5.0 (compatible; ClaudeBot/1.0; [email protected])" ... show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-29 10:10:07 (5 hours ago)	154.58.229.19 - - [29/Jul/2026:10:10:07 +0000] "GET /.env HTTP/1.1" 403 153 "-" "Mozilla/5.0 (compat ... show more 154.58.229.19 - - [29/Jul/2026:10:10:07 +0000] "GET /.env HTTP/1.1" 403 153 "-" "Mozilla/5.0 (compatible; xAI-SearchBot/1.0; +https://x.ai)" "-" "91.98.135.170" ... show less	Hacking Bad Web Bot Web App Attack
🇺🇸 [email protected]	2026-07-29 09:54:41 (5 hours ago)	Fail2Ban jail apache-json-scanners detected activity on 2026-07-29T09:54:41Z	Brute-Force

Showing 1 to 15 of 139 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 189.203.94.202

🇮🇩 160.187.174.22

🇫🇷 91.196.152.205

🇷🇺 83.142.11.227

🇵🇰 72.255.26.174

🇨🇦 72.251.13.241

🇰🇷 59.24.133.197

🇭🇰 45.207.197.91

🇺🇸 34.44.228.90

🇮🇳 157.49.58.185

🇻🇳 116.104.226.246

🇵🇰 116.71.136.125

🇨🇳 113.206.131.38

🇺🇸 80.97.44.25

🇺🇸 64.62.156.37

🇳🇱 34.7.199.129

🇮🇹 2a00:1450:4025:1803::122

🇳🇱 195.178.110.137

🇷🇺 193.242.149.209

🇭🇰 156.59.80.211