JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

154.0.167.201

Neutral Activity

Abuse Confidence Score

0% Low Risk

198 reports

84 reporters · latest 7 months ago

ISP: AFRIHOST SP (PTY) LTD
Usage Type: Fixed Line ISP
ASN: AS37611
Domain Name: afrihost.com
Country: 🇿🇦 South Africa
City: Johannesburg, Gauteng

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

154.0.167.201 has been reported 198 times. The most recent report is from 7 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

198 from 84 distinct reporters

First reported

January 24th 2026

Most recent report

7 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-03-17 04:53:53 UTC · (7 months ago)	Failed Wordpress Logins	Web App Attack
Anonymous	2026-03-08 09:30:14 UTC · (8 months ago)	Failed Wordpress Logins	Web App Attack
Anonymous	2026-02-24 17:25:46 UTC · (8 months ago)	Failed Wordpress Logins	Web App Attack
Anonymous	2026-02-15 01:00:07 UTC · (8 months ago)	Failed Wordpress Logins	Web App Attack
Anonymous	2026-02-04 08:30:11 UTC · (9 months ago)	Failed Wordpress Logins	Web App Attack
🇹🇷 rtbh.com.tr	2026-02-02 20:11:21 UTC · (9 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 mind5t0rm	2026-02-01 17:10:03 UTC · (9 months ago)	(XMLRPC) WP XMLPRC Attack 154.0.167.201 (ZA/South Africa/afriink.dedicated.co.za): 3 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: 154.0.167.201 - - [02/Feb/2026:00:09:46 +0700] "POST /xmlrpc.php HTTP/2.0" 403 154 "-" ... show more (XMLRPC) WP XMLPRC Attack 154.0.167.201 (ZA/South Africa/afriink.dedicated.co.za): 3 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: 154.0.167.201 - - [02/Feb/2026:00:09:46 +0700] "POST /xmlrpc.php HTTP/2.0" 403 154 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; MAMD; rv:11.0) like Gecko" 154.0.167.201 - - [02/Feb/2026:00:09:54 +0700] "POST /xmlrpc.php HTTP/2.0" 403 154 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; MAMD; rv:11.0) like Gecko" 154.0.167.201 - - [02/Feb/2026:00:10:03 +0700] "POST /xmlrpc.php HTTP/2.0" 403 154 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; MAMD; rv:11.0) like Gecko" show less	Port Scan
🇺🇸 rsiddall	2026-02-01 15:22:46 UTC · (9 months ago)	154.0.167.201 - - [01/Feb/2026:10:22:29 -0500] "POST /xmlrpc.php HTTP/1.1" 403 212 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; MAPBJS; rv:11.0) like Gecko" 154.0.167.201 - - [01/Feb/2026:10:22:45 -0500] "POST /xmlrpc.php HTTP/1.1" 403 212 " ... show more 154.0.167.201 - - [01/Feb/2026:10:22:29 -0500] "POST /xmlrpc.php HTTP/1.1" 403 212 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; MAPBJS; rv:11.0) like Gecko" 154.0.167.201 - - [01/Feb/2026:10:22:45 -0500] "POST /xmlrpc.php HTTP/1.1" 403 212 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; MAPBJS; rv:11.0) like Gecko" ... show less	Brute-Force
🇺🇸 mind5t0rm	2026-02-01 12:45:05 UTC · (9 months ago)	(WPLOGIN,XMLRPC) Login failure/trigger from 154.0.167.201 (ZA/South Africa/afriink.dedicated.co.za): 3 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: 154.0.167.201 - - [01/Feb/2026:19:44:56 +0700] "GET /wp-login.php HTT ... show more (WPLOGIN,XMLRPC) Login failure/trigger from 154.0.167.201 (ZA/South Africa/afriink.dedicated.co.za): 3 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: 154.0.167.201 - - [01/Feb/2026:19:44:56 +0700] "GET /wp-login.php HTTP/2.0" 499 0 "https://elgreco-kohchang.com/wp-login.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; wbx 1.0.0)" 154.0.167.201 - - [01/Feb/2026:19:45:01 +0700] "GET /wp-login.php HTTP/2.0" 200 2548 "https://elgreco-kohchang.com/wp-login.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; wbx 1.0.0)" 154.0.167.201 - - [01/Feb/2026:19:45:03 +0700] "GET /wp-login.php HTTP/2.0" 200 2548 "https://elgreco-kohchang.com/wp-login.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; wbx 1.0.0)" show less	Port Scan
🇺🇸 mind5t0rm	2026-02-01 10:36:43 UTC · (9 months ago)	(XMLRPC,WPLOGIN) Login failure/trigger from 154.0.167.201 (ZA/South Africa/afriink.dedicated.co.za): 3 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: 154.0.167.201 - - [01/Feb/2026:17:12:45 +0700] "GET /wp-login.php HTT ... show more (XMLRPC,WPLOGIN) Login failure/trigger from 154.0.167.201 (ZA/South Africa/afriink.dedicated.co.za): 3 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: 154.0.167.201 - - [01/Feb/2026:17:12:45 +0700] "GET /wp-login.php HTTP/2.0" 200 2549 "https://elgreco-kohchang.com/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; EIE10;ENUSWOL; rv:11.0) like Gecko" 154.0.167.201 - - [01/Feb/2026:17:12:49 +0700] "GET /wp-login.php HTTP/2.0" 200 2549 "https://elgreco-kohchang.com/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; EIE10;ENUSWOL; rv:11.0) like Gecko" 154.0.167.201 - - [01/Feb/2026:17:36:38 +0700] "POST /xmlrpc.php HTTP/2.0" 403 154 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.170 Safari/537.36" show less	Port Scan
🇫🇮 bittiguru.fi	2026-02-01 08:55:15 UTC · (9 months ago)	154.0.167.201 - [01/Feb/2026:10:54:55 +0200] "POST /xmlrpc.php HTTP/2.0" 404 15323 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36" "4.88" 154.0.167.201 - [01/Feb/2026:10:55:14 +0200 ... show more 154.0.167.201 - [01/Feb/2026:10:54:55 +0200] "POST /xmlrpc.php HTTP/2.0" 404 15323 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36" "4.88" 154.0.167.201 - [01/Feb/2026:10:55:14 +0200] "POST /xmlrpc.php HTTP/2.0" 404 15317 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36" "4.88" ... show less	Hacking Brute-Force Web App Attack
🇬🇧 andypiper	2026-02-01 02:06:29 UTC · (9 months ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇺🇸 [email protected]	2026-02-01 01:03:07 UTC · (9 months ago)	Fail2Ban jail apache-json-scanners detected activity on 2026-02-01T01:03:07Z	Brute-Force
🇩🇪 paissangroup	2026-02-01 01:01:47 UTC · (9 months ago)	Multiple WAF Violations	Web App Attack
🇺🇸 [email protected]	2026-02-01 00:03:44 UTC · (9 months ago)	Fail2Ban jail apache-json-scanners detected activity on 2026-02-01T00:03:44Z	Brute-Force

Showing 1 to 15 of 198 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇲🇾 202.165.14.135

🇸🇬 145.223.151.100

🇵🇹 89.152.142.188

🇺🇸 74.249.130.208

🇺🇸 40.124.178.154

🇧🇪 34.22.159.76

🇨🇳 223.83.131.241

🇩🇪 195.182.16.23

🇨🇱 170.150.156.28

🇺🇸 157.22.102.171

🇺🇸 147.185.132.246

🇮🇳 139.5.39.252

🇰🇷 121.167.235.181

🇲🇾 121.121.56.118

🇷🇴 80.94.92.130

🇳🇱 77.239.124.42

🇺🇸 64.202.191.109

🇦🇿 37.114.151.251

🇷🇴 2.57.121.112

🇺🇸 152.39.185.123