JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 154.64.228.239

154.64.228.239 was found in our database!

This IP was reported 80 times. Confidence of Abuse is 100%: ?

100%

ISP	NetLab Global
Usage Type	Commercial
ASN	AS979
Domain Name	as979.net
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 154.64.228.239

Whois 154.64.228.239

IP Abuse Reports for 154.64.228.239:

This IP address has been reported a total of 80 times from 65 distinct sources. 154.64.228.239 was first reported on July 5th 2026, and the most recent report was 49 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-07-05 12:47:14 (49 minutes ago)	Blocked by UFW (TCP on 3389) Source port: 49136 TTL: 243 Packet length: 40 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 3389) Source port: 49136 TTL: 243 Packet length: 40 TOS: 0x08 This report (for 154.64.228.239) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
🇦🇩 bakunin1848	2026-07-05 12:38:04 (58 minutes ago)	Firewall IPS Detection on 05-07-2026 at 14:38:04	Port Scan Exploited Host
🇺🇸 Axel	2026-07-05 12:04:16 (1 hour ago)	Blocked by UFW on MVI [3389/tcp] \| SPT: 49136 \| TTL: 247 \| LEN: 40 \| TOS: 0x00 • Reported by: github ... show more Blocked by UFW on MVI [3389/tcp] \| SPT: 49136 \| TTL: 247 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-07-05 12:04:03 (1 hour ago)	IP & Port Scan.	SSH Port Scan Brute-Force
🇺🇸 MPL	2026-07-05 11:54:50 (1 hour ago)	tcp/3389 (4 or more attempts)	Port Scan
Anonymous	2026-07-05 11:36:27 (2 hours ago)	Jul 5 06:04:58 localhost kernel: [111591149.606926] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ... show more Jul 5 06:04:58 localhost kernel: [111591149.606926] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=154.64.228.239 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=237 ID=61460 PROTO=TCP SPT=56298 DPT=3389 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 5 06:04:58 localhost kernel: [111591149.606955] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=154.64.228.239 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=237 ID=61460 PROTO=TCP SPT=56298 DPT=3389 SEQ=2505219415 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 5 07:36:26 localhost kernel: [111596637.722360] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=154.64.228.239 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x40 TTL=237 ID=37176 PROTO=TCP SPT=49136 DPT=3389 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 5 07:36:26 localhost kernel: [111596637.722378] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=154.64.228.239 DST=[mungedIP2] LEN=40 T show less	Port Scan
🇮🇪 RoboSOC	2026-07-05 11:22:18 (2 hours ago)	SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found	Port Scan
🇺🇸 MPL	2026-07-05 11:17:05 (2 hours ago)	tcp/3389 (14 or more attempts)	Port Scan
🇬🇧 OptimusGO	2026-07-05 10:50:20 (2 hours ago)	Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Time ... show more Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Timestamp: 2026-07-05 11:50:20 UTC Log evidence: 07/05/2026-11:50:19.098886 [] [1:1000103:1] SECURITY Management Port Probe - CRITICAL [] [Classification: Attempted Administrator Privilege Gain] [Priority: 1] {TCP} 154.64.228.239:56298 -> 185.127.18.66:3389 show less	Port Scan Brute-Force
Anonymous	2026-07-05 10:44:54 (2 hours ago)	2026-07-05T11:44:53.646626+01:00 vps kernel: [44988429.238649] [PORTSCAN DETECTED] IN=ens3 OUT= MAC= ... show more 2026-07-05T11:44:53.646626+01:00 vps kernel: [44988429.238649] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=154.64.228.239 DST=54.37.14.118 LEN=40 TOS=0x00 PREC=0x00 TTL=235 ID=41182 PROTO=TCP SPT=56298 DPT=3389 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
🇫🇷 sthoyer.de	2026-07-05 10:38:41 (2 hours ago)	Jul 5 12:38:40 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Jul 5 12:38:40 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=154.64.228.239 DST=173.212.223.67 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=64218 PROTO=TCP SPT=56298 DPT=3389 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 Hiigara	2026-07-05 10:30:25 (3 hours ago)	connection attempt : 154.64.228.239 on port : tcp/3389 (RDP)	Port Scan
🇩🇪 iNetWorker	2026-07-05 10:22:52 (3 hours ago)	trying to access non-authorized port	Port Scan
Anonymous	2026-07-05 10:22:34 (3 hours ago)	Blocked by UFW (TCP on 3389) Source port: 56298 TTL: 239 Packet length: 40 TOS: 0x14 This report (f ... show more Blocked by UFW (TCP on 3389) Source port: 56298 TTL: 239 Packet length: 40 TOS: 0x14 This report (for 154.64.228.239) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
🇺🇸 etu brutus	2026-07-05 10:22:20 (3 hours ago)	154.64.228.239 Blocked by [Attack Vector List] ...	Hacking Brute-Force Exploited Host

Showing 1 to 15 of 80 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 220.243.137.204

🇺🇸 143.110.231.77

🇺🇸 100.50.17.159

🇹🇼 61.224.248.125

🇨🇳 60.25.69.169

🇭🇰 46.247.61.98

🇳🇱 45.148.10.157

🇷🇺 213.180.203.10

🇩🇪 193.124.20.231

🇳🇱 185.224.128.16

🇩🇪 69.5.169.58

🇨🇳 60.16.222.179

🇨🇳 60.16.221.127

🇨🇳 60.16.221.7

🇬🇧 5.252.83.220

🇰🇿 5.34.52.59

🇲🇽 200.68.173.99

🇧🇴 190.104.24.6

🇺🇸 98.80.4.105

🇹🇷 94.154.43.181