JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 204.217.131.54

204.217.131.54 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 16%: ?

16%

ISP	Aventice LLC
Usage Type	Fixed Line ISP
ASN	AS11572
Domain Name	aventice.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 204.217.131.54

Whois 204.217.131.54

IP Abuse Reports for 204.217.131.54:

This IP address has been reported a total of 12 times from 10 distinct sources. 204.217.131.54 was first reported on October 21st 2024, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-19 17:13:38 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 204.217.131.54 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 204.217.131.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 13:13:32.580076 2026] [security2:error] [pid 24070:tid 24070] [client 204.217.131.54:43319] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "caitypopxart.com"] [uri "/.git/HEAD"] [unique_id "aq7CvDOncO3NaQSeu2w5-QAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Alt255	2026-09-19 00:11:51 (4 days ago)	[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 204.217.131.54 - - [19/Sep/2026:02:11:31 +0200] "GET /tochten/bruggentocht/.git/HEAD HTTP/2.0" 404 123451 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0" ... show less	Bad Web Bot Web App Attack
Anonymous	2026-08-04 11:25:31 (1 month ago)	FortiWeb WAF: 14 attacks detected. Threat Score: 10658780. Types: Client Management(7), Signature De ... show more FortiWeb WAF: 14 attacks detected. Threat Score: 10658780. Types: Client Management(7), Signature Detection(7). Origin: United States. show less	Web App Attack
Anonymous	2026-07-22 02:58:50 (2 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-10-21 08:31:11 (11 months ago)	(mod_security) mod_security (id:210740) triggered by 204.217.131.54 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210740) triggered by 204.217.131.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 21 04:31:04.470168 2025] [security2:error] [pid 7112:tid 7112] [client 204.217.131.54:41679] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy\|\|barkan.us:80\|F\|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "barkan.us"] [uri "/"] [unique_id "aPdEyNaaMXW8VXflEUeO1wAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Psycho Solutions LLC	2025-04-12 17:31:38 (1 year ago)	Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N ... show more Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N/A - Timestamp: 4/12/2025 5:31 pm (UTC-6) show less	Web Spam Hacking Bad Web Bot Web App Attack
🇺🇸 Psycho Solutions LLC	2025-04-07 00:29:59 (1 year ago)	Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N ... show more Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N/A - Timestamp: 4/7/2025 12:29 am (UTC-6) show less	Web Spam Hacking Bad Web Bot Web App Attack
🇧🇪 voormedia	2025-04-04 08:45:45 (1 year ago)	Accessed trap at '/wp-login.php'	Web App Attack
🇬🇧 SecondEdge	2025-03-22 23:52:31 (1 year ago)	A web attack was detected from 204.217.131.54 (United States / Georgia / Atlanta) against lifeofstu. ... show more A web attack was detected from 204.217.131.54 (United States / Georgia / Atlanta) against lifeofstu.com (Wordpress). show less	Web App Attack
Anonymous	2024-12-18 13:01:45 (1 year ago)	(mod_security) mod_security triggered on hostname [redacted] 204.217.131.54 (US/United States/-)	SQL Injection
🇫🇷 www.unitiz.com	2024-11-01 02:27:08 (1 year ago)	Probing non-existent URLs	Bad Web Bot Web App Attack
🇺🇸 jcbriar	2024-10-21 05:38:38 (1 year ago)	Searching for vulnerable scripts	Hacking Web App Attack

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 178.62.57.9

🇺🇸 136.85.139.85

🇮🇳 104.211.74.130

🇺🇸 68.48.70.217

🇭🇰 65.181.71.117

🇸🇦 37.104.148.161

🇮🇩 34.50.106.33

🇦🇷 200.114.214.217

🇩🇪 167.94.146.64

🇺🇾 167.58.181.170

🇨🇳 129.211.218.71

🇫🇷 91.196.152.200

🇺🇸 70.166.140.36

🇺🇸 69.12.166.128

🇺🇸 64.62.156.81

🇺🇸 47.146.159.156

🇺🇸 34.58.124.191

🇰🇷 1.215.233.74

🇹🇼 2400:cb00:80:1000:4b27:2b29:cd37:5afa

🇮🇳 223.233.80.87