JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 154.113.158.226

154.113.158.226 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 62%: ?

62%

ISP	Main one Cable Company Nigeria Limited
Usage Type	Fixed Line ISP
ASN	AS37282
Domain Name	mainone.net
Country	🇳🇬 Nigeria
City	Ikeja, Lagos

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 154.113.158.226

Whois 154.113.158.226

IP Abuse Reports for 154.113.158.226:

This IP address has been reported a total of 21 times from 12 distinct sources. 154.113.158.226 was first reported on August 11th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Vegascosmetics	2026-09-14 12:36:14 (1 day ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB repu ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB reputation policy (no URL signature). Evidence: Suspicion-Ban (Score 65>=65, Abuse 60, NonEU, first-seen) show less	Hacking Exploited Host Web App Attack
🇫🇷 UM3	2026-09-13 09:51:52 (2 days ago)	Exim Auth Failed	Brute-Force
🇩🇪 zerodaysystemde	2026-09-12 02:33:57 (4 days ago)	Port (53 udp) Scanner - DNS - HoneyPot	Port Scan
🇺🇸 gui-ying233	2026-09-09 09:20:24 (6 days ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇩🇪 Admins@FBN	2026-09-08 06:22:23 (1 week ago)	FW-PortScan: Traffic Blocked srcport=57964 dstport=28746	Port Scan
🇺🇸 kosada.com	2026-09-07 00:44:58 (1 week ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0 ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0%5D=digest_key_terms%3A308&f%5B1%5D=digest_key_terms%3A325&f%5B2%5D=digest_key_terms%3A491&f%5B3%5D=digest_key_terms%3A519&f%5B4%5D=digest_publication_type%3A927&field_article_edition%5B504%5D=504&field_key_terms%5B358%5D=358 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0") show less	DDoS Attack Bad Web Bot
🇺🇸 gui-ying233	2026-09-03 09:59:05 (1 week ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇦🇹 urnilxfgbez	2026-09-02 22:45:00 (1 week ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇺🇸 gui-ying233	2026-09-02 07:41:44 (1 week ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇵🇱 MatStef132	2026-08-28 19:44:50 (2 weeks ago)	MatShield L7: blocked on test-clean.mathost.eu (ua-quarantined)	Bad Web Bot
🇫🇷 UM3	2026-08-28 10:12:05 (2 weeks ago)	Exim Auth Failed	Brute-Force
🇿🇦 maximonline.co.za	2026-08-27 19:30:41 (2 weeks ago)	Brute Force SMTP AUTH Attack	Brute-Force
🇺🇸 gui-ying233	2026-08-25 13:24:38 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-08-24 14:38:28 (3 weeks ago)	(mod_security) mod_security (id:210350) triggered by 154.113.158.226 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 154.113.158.226 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 10:38:19.925336 2026] [security2:error] [pid 21652:tid 21652] [client 154.113.158.226:33354] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|davidnevue.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "davidnevue.com"] [uri "/wamp/adminer.php"] [unique_id "aoxXW7nasCzKCfGl-sZzlAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 gui-ying233	2026-08-23 17:19:23 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.225

🇨🇳 182.123.82.253

🇨🇦 153.68.200.248

🇨🇳 124.220.77.252

🇷🇺 88.147.174.191

🇳🇱 52.233.193.61

🇲🇾 49.124.151.40

🇸🇬 47.128.96.89

🇺🇦 46.200.67.31

🇨🇭 45.85.93.127

🇺🇦 45.14.108.86

🇧🇷 43.164.194.198

🇺🇸 35.226.6.223

🇺🇸 35.184.27.151

🇺🇸 34.42.40.216

🇬🇧 213.166.84.59

🇺🇸 204.44.121.28

🇺🇸 194.104.11.93

🇿🇦 185.132.186.95

🇿🇦 185.132.186.84