154.159.237.11

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
45% Elevated
53 reports
27 reporters · latest 4 days ago
ISP
Airtel Networks Kenya Limited
Usage Type
Mobile ISP
ASN
AS36926
Hostname(s)
11-237-159-154.r.airtelkenya.com
Domain Name
airtel.in
Country
🇰🇪 Kenya
City
Nakuru, Nakuru County
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
53 from 27 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 9 🇩🇪 Germany 2 🇧🇷 Brazil 1
Most common categories Bad Web Bot 11 Web App Attack 7 Brute-Force 6 Hacking 2 Exploited Host 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 jakob
Fail2Ban rule: apache-cgit (robots.txt violation)
Bad Web Bot
🇨🇿 Countryman
repeated unauthorized VPN login attempt, user sweep
VPN IP Hacking Brute-Force
🇺🇸 TPI-Abuse
Brute-Force Bad Web Bot Web App Attack
🇧🇷 ICS Labs
ICS Labs threat intelligence (ICS Feeds): Brute-Force, Exploited Host. Last observed 2026-10-27 UTC.
Brute-Force Exploited Host
🇲🇹 Malta
154.159.237.11 - - [26/Oct/2026:07:35:00 +0100] "POST /xmlrpc.php HTTP/1.1" "Jetpack/12.1; WordPress/6.3; http://site72126661.com"
Hacking Web App Attack
🇩🇪 ghostwarriors
Webpage scraping
Brute-Force Bad Web Bot Web App Attack
🇩🇪 FD-IX
Fail2Ban: WordPress XML-RPC brute-force attack detected.
Bad Web Bot Web App Attack
🇳🇱 Site.eu
WordPress login brute force (wp-login/xmlrpc login attempts)
Brute-Force Web App Attack
🇵🇱 bmino.pl
Autoban IP(2): 154.159.237.11 - Hostname: Airtel KE Mobile \u0026 Fixed Internet - City: Nairobi - Country: Kenya - Organization: AS36926 Airtel Networks Kenya Limited - Reason: GET /?k=nup66eostt49086cvwwmpij HTTP/1.1
Web App Attack
🇺🇸 鬼影233
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0
Bad Web Bot
🇺🇸 鬼影233
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸 鬼影233
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸 TPI-Abuse
Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸 鬼影233
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
Bad Web Bot

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇸🇬 188.166.226.125
🇧🇷 187.49.11.84
🇩🇪 185.201.137.193
🇧🇷 177.44.82.151
🇺🇸 142.173.153.119
🇳🇵 103.144.106.72
🇮🇩 103.132.54.150
🇵🇱 85.221.140.21
🇳🇱 74.234.167.211
🇩🇪 69.5.169.67
🇫🇷 51.68.236.59
🇬🇧 35.203.211.43
🇳🇱 213.209.159.26
🇺🇸 213.188.85.185
🇧🇷 168.196.162.74
🇨🇳 113.98.254.50
feedback