JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 154.6.20.152

154.6.20.152 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 3%: ?

ISP	African Network Information Center - (AfriNIC) Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS64286
Domain Name	afrinic.net
Country	🇺🇸 United States of America
City	Edison, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 154.6.20.152

Whois 154.6.20.152

IP Abuse Reports for 154.6.20.152:

This IP address has been reported a total of 14 times from 12 distinct sources. 154.6.20.152 was first reported on October 25th 2021, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇹 Subnet Shadow Specter	2026-07-19 09:08:40 (1 day ago)	[Security] [Category: Bot Masquerading] FCrDNS mismatch detected. [IP Address]: 154.6.20.152 claimed ... show more [Security] [Category: Bot Masquerading] FCrDNS mismatch detected. [IP Address]: 154.6.20.152 claimed a fake identity but failed forward-confirmed reverse DNS verification. Automated scraping via spoofed User-Agent `compatible; Googlebot/2.1`. [Action]: IP block initiated. [User-Agent]: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) [IoA Datetime]: 2026-07-19 10:08:39 UTC +1. show less	Port Scan Hacking Spoofing Bad Web Bot Web App Attack
🇩🇪 ANDREAS LYTOS	2022-10-04 11:34:24 (3 years ago)	(smtpauth) Failed SMTP AUTH login from 154.6.20.152 (US/United States/-)	Brute-Force
Anonymous	2022-10-04 08:53:06 (3 years ago)	$f2bV_matches	Brute-Force
🇿🇦 Birdflew	2022-10-04 05:33:29 (3 years ago)	Failed SMTP login	Brute-Force
🇩🇪 Gwyneth Llewelyn	2021-10-27 13:49:33 (4 years ago)	2021/10/27 18:49:31 [error] 2605104#2605104: 352905 access forbidden by rule, client: 154.6.20.152, ... show more 2021/10/27 18:49:31 [error] 2605104#2605104: 352905 access forbidden by rule, client: 154.6.20.152, server: pelviclinic.pt, request: "GET /.env HTTP/2.0", host: "pelviclinic.pt" 154.6.20.152 - - [27/Oct/2021:18:49:31 +0100] "GET /.env HTTP/2.0" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 154.6.20.152 - - [27/Oct/2021:18:49:31 +0100] "GET /.env HTTP/2.0" 403 1166 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" ... show less	Web App Attack
🇫🇷 I.Hate.Spam	2021-10-27 09:14:29 (4 years ago)	Website hacking attempt	Hacking
🇩🇪 Gwyneth Llewelyn	2021-10-27 08:35:40 (4 years ago)	154.6.20.152 - - [27/Oct/2021:13:35:12 +0100] "GET /.env HTTP/2.0" 403 813 "-" "Mozilla/5.0 (Macinto ... show more 154.6.20.152 - - [27/Oct/2021:13:35:12 +0100] "GET /.env HTTP/2.0" 403 813 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 2021/10/27 13:35:38 [error] 1724908#1724908: *301168 access forbidden by rule, client: 154.6.20.152, server: git.gwynethllewelyn.net, request: "GET /.env HTTP/2.0", host: "git.gwynethllewelyn.net" 154.6.20.152 - - [27/Oct/2021:13:35:38 +0100] "GET /.env HTTP/2.0" 500 170 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" ... show less	Web App Attack
🇬🇧 openstrike.co.uk	2021-10-27 01:06:17 (4 years ago)	5 attacks on env grabbing URLs like: 154.6.20.152 - - [26/Oct/2021:18:41:21 +0100] "GET /.env HTTP/1 ... show more 5 attacks on env grabbing URLs like: 154.6.20.152 - - [26/Oct/2021:18:41:21 +0100] "GET /.env HTTP/1.1" 404 991 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" show less	Hacking
🇲🇾 syokadmin	2021-10-27 00:09:26 (4 years ago)	(mod_security) mod_security (id:210492) triggered by 154.6.20.152 (US/United States/-): 1 in the las ... show more (mod_security) mod_security (id:210492) triggered by 154.6.20.152 (US/United States/-): 1 in the last 3600 secs show less	Brute-Force
🇨🇭 zynex	2021-10-26 22:19:26 (4 years ago)	URL Probing: /.env	Web App Attack
🇸🇬 nyclee.net	2021-10-26 21:52:49 (4 years ago)	BOT Probe Forbidden Files like .env, etc	Hacking
🇬🇧 Epimetheus	2021-10-26 18:04:12 (4 years ago)	Unauthorized access attempts: From: 154.6.20.152 Method: HTTP GET URI Path: /.env UA: "Mozil ... show more Unauthorized access attempts: From: 154.6.20.152 Method: HTTP GET URI Path: /.env UA: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" show less	Web App Attack
🇩🇪 conseilgouz	2021-10-26 03:39:55 (4 years ago)	vee-17 : Block hidden directories=>/.env(/)	Hacking
🇲🇾 syokadmin	2021-10-25 21:44:38 (4 years ago)	(mod_security) mod_security (id:210492) triggered by 154.6.20.152 (US/United States/-): 1 in the las ... show more (mod_security) mod_security (id:210492) triggered by 154.6.20.152 (US/United States/-): 1 in the last 3600 secs show less	Brute-Force

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2607:f8b0:4001:c0a::124

🇩🇪 216.26.247.186

🇩🇪 216.26.247.143

🇩🇪 216.26.247.68

🇩🇪 209.50.184.75

🇹🇷 94.154.43.243

🇫🇷 92.222.104.213

🇩🇪 92.42.96.159

🇩🇪 65.111.26.107

🇩🇪 65.111.26.26

🇩🇪 45.3.44.239

🇩🇪 45.3.44.42

🇦🇺 40.82.214.8

🇧🇪 34.53.152.15

🇧🇪 198.235.24.200

🇻🇳 160.25.89.25

🇮🇳 106.219.153.11

🇺🇸 71.6.134.232

🇫🇷 51.75.200.91

🇺🇸 50.6.228.32