154.159.237.167

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
23% Elevated
60 reports
37 reporters · latest 5 days ago
ISP
Airtel Networks Kenya Limited
Usage Type
Mobile ISP
ASN
AS36926
Hostname(s)
167-237-159-154.r.airtelkenya.com
Domain Name
airtel.in
Country
🇰🇪 Kenya
City
Nakuru, Nakuru County

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV
Total reports
60 from 37 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 7 🇫🇷 France 1 🇳🇱 Netherlands 1
Most common categories Bad Web Bot 8 Brute-Force 2 SSH 1 Web App Attack 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Log in to search reports. Log In
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 justbible
Bad Web Bot
🇫🇷 LRob
Not following 301 redirects — wasted requests | method: GET | path: /en/blog/le-cloud-nexiste-pas-pieges-et-dangers/ | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
Bad Web Bot
🇳🇱 SchorelWeb
Cluster member (Omitted) (FR/France/-) said, TEMPDENY 154.159.237.167, Reason:[(Suspicious403) Suspicious activity detected 154.159.237.167 (KE/Kenya/167-237-159-154.r.airtelkenya.com): 2 in the last 3600 secs]
Brute-Force SSH
🇺🇸 TPI-Abuse
Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸 鬼影233
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸 鬼影233
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0
Bad Web Bot
🇺🇸 鬼影233
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸 鬼影233
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
Bad Web Bot
🇩🇪 LRob
Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for | method: GET | path: / | 2026-09-13 03:53 UTC
Bad Web Bot
🇺🇸 鬼影233
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36
Bad Web Bot
🇩🇪 Vegascosmetics
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB reputation policy (no URL signature). Evidence: Suspicion-Ban (Score 67>=65, Abuse 64, NonEU, first-seen, Change* path)
Hacking Exploited Host Web App Attack
🇩🇪 bancix
Heimdall NIDS: Automatic ban triggered. Reason: TRAP_PORT_HIT (porta 23)
Port Scan
🇨🇭 backslash
block ruleset WAF detection and high score on abuseIPDB 149EB1B42C242111FADBBC2EF8F90219570691E1
Bad Web Bot
🇺🇸 鬼影233
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
Bad Web Bot

Showing 1 to 15 of 60 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 45.148.10.157
🇪🇬 41.237.172.178
🇬🇧 35.203.211.12
🇺🇸 172.236.228.220
🇺🇸 157.55.39.201
🇫🇷 141.101.68.212
🇩🇪 31.77.192.7
🇺🇸 20.109.189.63
🇺🇸 4.154.188.234
🇺🇸 184.178.56.77
🇿🇦 102.164.30.94
🇩🇪 69.5.169.19
🇳🇱 204.76.203.214
🇦🇷 181.95.241.200
🇦🇷 161.22.28.249
🇺🇸 152.32.234.184
🇷🇺 46.8.246.210
🇰🇷 211.220.156.232
🇩🇪 172.71.144.47
🇭🇰 152.32.212.224
feedback