JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 192.154.102.34

192.154.102.34 was found in our database!

This IP was reported 48 times. Confidence of Abuse is 0%: ?

ISP	GorillaServers, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS53850
Hostname(s)	192.154.102.34.static.gorillaservers.com
Domain Name	gorillaservers.com
Country	🇺🇸 United States of America
City	Layton, Utah

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 192.154.102.34

Whois 192.154.102.34

IP Abuse Reports for 192.154.102.34:

This IP address has been reported a total of 48 times from 40 distinct sources. 192.154.102.34 was first reported on April 30th 2026, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-05-13 07:18:32 (3 months ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇨🇳 ThreatBook.io	2026-05-13 01:26:46 (3 months ago)	2026-05-12 06:43:50 / 2026-05-12 06:43:50 / 2026-05-12 06:43:50 / 2026-05-12 06:43:50 /	Web App Attack
🇵🇱 derester	2026-05-12 12:29:59 (3 months ago)	Port scan detected by MikroTik PSD (threshold: 15 ports / 3s)	Port Scan
Anonymous	2026-05-12 10:23:15 (3 months ago)	192.154.102.34 - - [12/May/2026:12:23:15 +0200] "GET / HTTP/1.0" 403 146 "-" "-" 192.154.102.34 - - ... show more 192.154.102.34 - - [12/May/2026:12:23:15 +0200] "GET / HTTP/1.0" 403 146 "-" "-" 192.154.102.34 - - [12/May/2026:12:23:15 +0200] "GET / HTTP/1.0" 400 248 "-" "-" ... show less	Bad Web Bot Web App Attack
🇫🇷 EDSL	2026-05-12 06:01:57 (3 months ago)	[gps.edsl.fr] Blocked by SysWarden Firewall (Web Attack Port 443)	Web App Attack Port Scan Hacking
🇩🇪 Justin F. \| AS204464	2026-05-12 04:58:58 (3 months ago)	Honeypot [nx-infrastructure]: HTTP/1.0 request on 8000 GET /; 8000 [1], 10000 [1], 8081 [1], 9000 [ ... show more Honeypot [nx-infrastructure]: HTTP/1.0 request on 8000 GET /; 8000 [1], 10000 [1], 8081 [1], 9000 [1], 8188 [1], 8001 [1] TCP Reported by: Justin F. show less	Hacking Bad Web Bot
🇨🇦 Blinker73	2026-05-11 21:52:15 (3 months ago)	2026-05-11T17:52 kernel: OUT= SRC=192.154.102.34 LEN=60 TOS=0x00 PREC=0x00 TTL=44 ID=3588 DF P ... show more 2026-05-11T17:52 kernel: OUT= SRC=192.154.102.34 LEN=60 TOS=0x00 PREC=0x00 TTL=44 ID=3588 DF PROTO=TCP SPT=32908 DPT=8000 WINDOW=64240 RES=0x00 SYN URGP=0 2026-05-11T17:52 kernel: OUT= SRC=192.154.102.34 LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=21209 DF PROTO=TCP SPT=40794 DPT=8001 WINDOW=64240 RES=0x00 SYN URGP=0 2026-05-11T17:52 kernel: OUT= SRC=192.154.102.34 LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=7863 DF PROTO=TCP SPT=36334 DPT=8188 WINDOW=64240 RES=0x00 SYN URGP= show less	Port Scan
🇺🇸 itsnixk	2026-05-11 17:55:40 (3 months ago)	(mod_security) mod_security (id:920280) triggered by 192.154.102.34 (US/United States/192.154.102.34 ... show more (mod_security) mod_security (id:920280) triggered by 192.154.102.34 (US/United States/192.154.102.34.static.gorillaservers.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Mon May 11 13:55:38.203659 2026] [security2:error] [pid 57346:tid 57823] [client 192.154.102.34:51092] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "567"] [id "920280"] [msg "Request Missing a Host Header"] [severity "CRITICAL"] [ver "OWASP_CRS/4.25.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "agIYGgtjfxAYKZl3s67f7AAAAGU"] show less	Port Scan
🇬🇧 Deezel	2026-05-11 17:55:00 (3 months ago)	Port scan	Port Scan Exploited Host
🇨🇦 polycoda	2026-05-11 14:47:53 (3 months ago)	AutoBlock: 📡 Port Scan (Non Decay-Based)	Port Scan
🇦🇺 afleventoffice.com.au	2026-05-11 09:10:03 (3 months ago)	GET / HTTP/1.0	Web App Attack
🇵🇱 derester	2026-05-11 08:43:37 (3 months ago)	Port scan detected by MikroTik PSD (threshold: 15 ports / 3s)	Port Scan
🇩🇪 Justin F. \| AS204464	2026-05-11 05:42:59 (3 months ago)	Honeypot [nx-infrastructure]: HTTP/1.0 request on 8001 GET /; 8001 [1], 8081 [1], 10000 [1], 8189 [ ... show more Honeypot [nx-infrastructure]: HTTP/1.0 request on 8001 GET /; 8001 [1], 8081 [1], 10000 [1], 8189 [1], 8000 [1], 9000 [1] TCP Reported by: Justin F. show less	Hacking Bad Web Bot
🇨🇳 ThreatBook.io	2026-05-11 01:10:45 (3 months ago)	2026-05-10 15:54:12 / 2026-05-10 17:20:08 / 2026-05-10 17:22:39 /	Web App Attack
🇳🇱 donarev419	2026-05-11 00:54:52 (3 months ago)	Connection to port 80 with data transfer. Data preview: GET / HTTP/1.0 Connection: close	Port Scan Hacking

Showing 1 to 15 of 48 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2400:cb00:988:1000:ed02:ac35:e748:be86

🇱🇹 62.60.130.201

🇮🇳 49.43.216.137

🇺🇸 205.210.31.72

🇺🇸 192.3.251.33

🇧🇷 179.99.43.198

🇨🇳 120.48.90.166

🇭🇰 103.229.125.91

🇿🇦 102.129.63.92

🇨🇦 85.217.149.66

🇵🇸 82.102.239.220

🇮🇪 82.25.215.124

🇳🇱 77.91.71.10

🇺🇸 68.51.134.27

🇨🇱 45.4.3.118

🇧🇷 20.226.91.14

🇰🇷 14.46.99.87

🇮🇳 2404:6800:4000:101d::129

🇻🇪 200.59.186.139

🇭🇰 199.45.154.76