This IP address has been reported a total of
17
times from
12 distinct
sources.
154.159.254.77 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 6
reports;
Russian Federation
with 1
report.
The most common categories in these recent reports were:
Bad Web Bot
6
times;
DDoS Attack
1
time;
Web App Attack
1
time;
SSH
1
time;
Hacking
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/S ...
show moreLarge-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim|LIS|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies Group | Offpeak: Sessionless Catalog Access Blocked: /wishlist/index/add/product/10971/form_key/WeHe4MMeRktMl2bI/ | UA: Mozilla/5.0 (iPod; U; CPU iPhone OS 4_0 like Mac OS X; my-MM) AppleWebKit/531.1.3 (KHTML, like Gecko) Version/4.0.5 Mobile/8B113 Safari/6531.1.3 | (Magento Site)
show less
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ...
show moreMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0
show less
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ...
show moreMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0
show less
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ...
show moreMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36
show less
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ...
show moreMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0
show less
โHTTP Flood DDoS targeting domain.tld:443 via repeated GET requests to /[category]?q=Po%C4%8Det+stra ...
show moreโHTTP Flood DDoS targeting domain.tld:443 via repeated GET requests to /[category]?q=Po%C4%8Det+stran-[random-numbers] (e.g., /2-vsechny-produkty?q=Po%C4%8Det+stran-112-144-160-368-96). Uses spoofed Chrome/Safari/Googlebot UAs. Returns 403/404 errors due to fail2ban. Likely Layer 7 attack to exhaust server resources via pagination brute-forcing.โ
show less
154.159.254.77 | Port: 14009 | DNS: 77-254-159-154.r.airtelkenya.com 2026-01-11T15:50:40+08:00 Afric ...
show more154.159.254.77 | Port: 14009 | DNS: 77-254-159-154.r.airtelkenya.com 2026-01-11T15:50:40+08:00 Africa/Nairobi | Fake HTTP Protocol detected! | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36 HTTP/1.1 443 GET | URL: /hashtag/angry/ | Ref: - | Country: KE/Kenya/+03:00 IP City: Mombasa macOS 9bc2d19569a3f7f6-JNB/Johannesburg, South Africa 1 hits/0 secs Browser 2
show less
Web Spam
Blog Spam
Brute-Force
Exploited Host
Web App Attack
Anonymous
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.12.24 is noted in report tim ...
show moreAttempted brute force login to web vpn 1 time(s); last attempt for 2025.12.24 is noted in report timestamp
show less
