JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

154.54.100.172

Recent Activity

Abuse confidence score ?

76% Critical

712 reports

400 reporters · latest 1 day ago

ISP	American Information Network
Usage Type	Fixed Line ISP
ASN	AS6405
Domain Name	ainetfactory.com
Country	🇺🇸 United States of America
City	Beltsville, Maryland

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 154.54.100.172

Export CSV

This IP address has been reported a total of 712 times from 400 distinct sources. 154.54.100.172 was first reported on March 31st 2026, and the most recent report was 1 day ago. In the last 60 days, the top reporter locations were: Germany with 19 reports; United States of America with 14 reports; France with 9 reports. The most common categories in these recent reports were: Web App Attack 61 times; Bad Web Bot 34 times; Hacking 23 times; Brute-Force 17 times; Port Scan 7 times; Other 14 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-10-08 08:52:42 (1 day ago)	Scanner hitting /.git/config on () — aaguard	Brute-Force Port Scan
🇺🇸 dvaydor	2026-10-05 02:00:10 (4 days ago)	Automated report from a monitored server (Sentinel). Activity: Secrets hunting. Requests seen: /.git ... show more Automated report from a monitored server (Sentinel). Activity: Secrets hunting. Requests seen: /.git/config. Source blocked at the firewall. show less	Web App Attack
🇺🇸 dvaydor	2026-10-03 02:00:16 (6 days ago)	Automated report from a monitored server (Sentinel). Activity: Secrets hunting. Requests seen: /.git ... show more Automated report from a monitored server (Sentinel). Activity: Secrets hunting. Requests seen: /.git/config. Source blocked at the firewall. show less	Web App Attack
🇺🇸 dvaydor	2026-10-02 01:50:07 (1 week ago)	Automated report from a monitored server (Sentinel). Activity: Secrets hunting. Requests seen: /.git ... show more Automated report from a monitored server (Sentinel). Activity: Secrets hunting. Requests seen: /.git/config. Source blocked at the firewall. show less	Web App Attack
🇺🇸 dvaydor	2026-10-01 01:50:06 (1 week ago)	Automated report from a monitored server (Sentinel). Activity: Secrets hunting. Requests seen: /.git ... show more Automated report from a monitored server (Sentinel). Activity: Secrets hunting. Requests seen: /.git/config. Source blocked at the firewall. show less	Web App Attack
🇺🇸 dvaydor	2026-09-30 01:40:07 (1 week ago)	Automated report from a monitored server (Sentinel). Activity: Secrets hunting. Requests seen: /.git ... show more Automated report from a monitored server (Sentinel). Activity: Secrets hunting. Requests seen: /.git/config. Source blocked at the firewall. show less	Web App Attack
🇸🇮 administrator	2026-09-11 22:07:28 (3 weeks ago)	2026-09-06 00:03:11,468 fail2ban.actions [1054]: NOTICE [apache-badbots] Ban 154.54.100.172 ... show more 2026-09-06 00:03:11,468 fail2ban.actions [1054]: NOTICE [apache-badbots] Ban 154.54.100.172 2026-09-06 00:03:11,468 fail2ban.actions [1054]: NOTICE [apache-badbots] Ban 154.54.100.172 2026-09-06 00:03:11,468 fail2ban.actions [1054]: NOTICE [apache-badbots] Ban 154.54.100.172 ... show less	Bad Web Bot Web Spam Email Spam Blog Spam Port Scan Brute-Force Web App Attack
🇳🇿 Antinson	2026-09-07 13:08:55 (1 month ago)	Scraping with a high error ratio and request rate Requests to unauthorized or suspicious endpoints ( ... show more Scraping with a high error ratio and request rate Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.) show less	Bad Web Bot
Anonymous	2026-09-06 10:00:16 (1 month ago)	154.54.100.172 - - [06/Sep/2026:12:00:13 +0200] "GET /.git/ HTTP/1.1" 403 153 "-" "Mozilla/5.0 (Wind ... show more 154.54.100.172 - - [06/Sep/2026:12:00:13 +0200] "GET /.git/ HTTP/1.1" 403 153 "-" "Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0" 154.54.100.172 - - [06/Sep/2026:12:00:13 +0200] "GET /.git/hooks/post-commit.sample HTTP/1.1" 404 2517 "-" "Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0" 154.54.100.172 - - [06/Sep/2026:12:00:13 +0200] "GET /.git/hooks/post-receive.sample HTTP/1.1" 404 2519 "-" "Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0" 154.54.100.172 - - [06/Sep/2026:12:00:13 +0200] "GET /.git/COMMIT_EDITMSG HTTP/1.1" 404 2497 "-" "Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0" 154.54.100.172 - - [06/Sep/2026:12:00:13 +0200] "GET /.git/objects/info/packs HTTP/1.1" 404 2505 "-" "Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0" 154.54.100.172 - - [06/Sep/2026:12:00:15 +0200] "GET /.git/logs/refs/remotes/origin/master HTTP/1.1" 404 2531 "-" "Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/ ... show less	Bad Web Bot Web App Attack
🇩🇪 ramazan	2026-09-05 16:30:58 (1 month ago)	Fail2Ban: nginx-4xx \| Failures: 10 \| Log: /.git/objects/02/08110af2fc27913b5087565b2598f260f3ea0b /. ... show more Fail2Ban: nginx-4xx \| Failures: 10 \| Log: /.git/objects/02/08110af2fc27913b5087565b2598f260f3ea0b /.git/objects/13/853c1ab64014ccb379e6ad4b4b74508faf4173 /.git/objects/1f/5636d9a543607629936c5779dbf0014223f3ef /.git/objects/2c/a3b9543c02f20a1421f66e84a55b52ec04b551 /.git/objects/58/7ee9f477ebc08e1081069b6305ccbdcaa90f1b show less	Web App Attack Hacking
🇦🇺 aranguren.org	2026-09-05 16:22:39 (1 month ago)	154.54.100.172 - - [06/Sep/2026:01:52:41 +1000] "GET /.git/config HTTP/1.1" 200 332 "-" "Mozilla/5.0 ... show more 154.54.100.172 - - [06/Sep/2026:01:52:41 +1000] "GET /.git/config HTTP/1.1" 200 332 "-" "Mozilla/5.0" 154.54.100.172 - - [06/Sep/2026:01:52:54 +1000] "GET /.git/config HTTP/1.1" 200 332 "-" "Mozilla/5.0" 154.54.100.172 - - [06/Sep/2026:02:22:39 +1000] "GET /.git/config HTTP/1.1" 200 323 "-" "Mozilla/5.0" ... show less	Web App Attack
🇳🇱 thedreamer.nl	2026-09-05 16:21:49 (1 month ago)	154.54.100.172 - - [05/Sep/2026:18:20:04 +0200] "GET /.git/HEAD HTTP/1.1" 200 23 "-" "Mozilla/5.0" " ... show more 154.54.100.172 - - [05/Sep/2026:18:20:04 +0200] "GET /.git/HEAD HTTP/1.1" 200 23 "-" "Mozilla/5.0" "US" "-" "37.75100" "-97.82200" 154.54.100.172 - - [05/Sep/2026:18:20:06 +0200] "GET /.git/config HTTP/1.1" 200 261 "-" "Mozilla/5.0" "US" "-" "37.75100" "-97.82200" 154.54.100.172 - - [05/Sep/2026:18:20:07 +0200] "GET /.git/packed-refs HTTP/1.1" 200 1324 "-" "Mozilla/5.0" "US" "-" "37.75100" "-97.82200" 154.54.100.172 - - [05/Sep/2026:18:20:10 +0200] "GET /.git/FETCH_HEAD HTTP/1.1" 200 424 "-" "Mozilla/5.0" "US" "-" "37.75100" "-97.82200" ... show less	Hacking Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-09-05 16:11:19 (1 month ago)	Excessive multi-domain requests	Brute-Force
🇳🇿 Antinson	2026-09-05 15:59:05 (1 month ago)	Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)	Bad Web Bot
🇫🇷 SpaceHost-Server	2026-09-03 22:18:42 (1 month ago)		Brute-Force Web App Attack

Showing 1 to 15 of 712 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 175.209.156.146

🇺🇸 172.208.48.177

🇫🇷 91.231.89.73

🇨🇦 85.217.149.45

🇷🇴 80.94.95.245

🇺🇸 35.169.206.177

🇧🇷 205.210.31.215

🇮🇳 139.59.83.112

🇨🇳 122.114.255.230

🇨🇦 85.217.149.73

🇳🇱 45.148.10.157

🇺🇸 35.216.129.117

🇷🇴 2.57.122.168

🇺🇸 147.185.132.249

🇳🇱 129.121.111.123

🇩🇪 128.1.42.111

🇲🇦 105.158.169.200

🇳🇱 45.115.26.43

🇸🇦 5.111.12.28

🇨🇱 201.187.214.206