JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 154.159.254.17

154.159.254.17 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 13%: ?

13%

ISP	Airtel Networks Kenya Limited
Usage Type	Mobile ISP
ASN	AS36926
Hostname(s)	17-254-159-154.r.airtelkenya.com
Domain Name	airtel.in
Country	🇰🇪 Kenya
City	Mombasa, Mombasa County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 154.159.254.17

Whois 154.159.254.17

IP Abuse Reports for 154.159.254.17:

This IP address has been reported a total of 24 times from 13 distinct sources. 154.159.254.17 was first reported on August 3rd 2025, and the most recent report was 16 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-26 11:53:35 (16 hours ago)	(mod_security) mod_security (id:210350) triggered by 154.159.254.17 (17-254-159-154.r.airtelkenya.co ... show more (mod_security) mod_security (id:210350) triggered by 154.159.254.17 (17-254-159-154.r.airtelkenya.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 07:53:29.364052 2026] [security2:error] [pid 24459:tid 24459] [client 154.159.254.17:10589] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|burnbuns.com\|F\|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "burnbuns.com"] [uri "/"] [unique_id "at8_OYkO0tkvY8jNi9NesgAAAAQ"], referer: https://each.co.in/redirect.php?ref_host=amparogallego.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-09-26 22:36:12 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-23 10:14:45 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-20 17:49:50 (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-01 11:17:44 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇺🇸 鬼影233	2026-08-29 09:59:26 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-08-27 03:50:54 (2 months ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-26 19:04:07 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 鬼影233	2026-08-23 20:00:11 (2 months ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇺🇸 鬼影233	2026-08-08 23:59:47 (2 months ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇩🇪 filstal.org	2026-07-27 10:16:33 (2 months ago)	Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. U ... show more Automated bot: spoofed/impossible user-agent, web scraping or automated request patterns detected. UA: Opera/9.75.(Windows NT 5.2; rw-RW) Presto/2.9.173 Version/10.00 show less	Bad Web Bot Web App Attack
Anonymous	2026-07-21 08:02:05 (3 months ago)	Web attack	Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-06-29 03:57:38 (3 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇮🇹 VHosting	2026-05-10 02:18:44 (5 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇺🇸 MPL	2026-05-03 18:06:49 (5 months ago)	tcp/23	Port Scan

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇶 217.142.31.75

🇩🇪 207.154.255.215

🇺🇸 199.165.159.135

🇷🇴 193.32.162.42

🇨🇳 122.226.38.134

🇰🇷 118.41.205.179

🇧🇩 103.92.218.63

🇱🇹 62.60.130.128

🇧🇪 34.53.140.248

🇫🇮 13.140.88.22

🇧🇬 5.188.206.30

🇵🇹 213.22.107.211

🇧🇪 207.175.21.206

🇹🇭 203.150.107.87

🇲🇽 201.110.146.72

🇺🇦 195.64.239.49

🇬🇧 194.164.21.97

🇩🇪 172.68.195.172

🇺🇸 162.216.149.122

🇵🇱 145.239.89.124