JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 154.16.41.18

154.16.41.18 was found in our database!

This IP was reported 43 times. Confidence of Abuse is 16%: ?

16%

ISP	Digital Energy Technologies Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS32159
Domain Name	abuseradar.com
Country	🇺🇸 United States of America
City	Miami, Florida

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 154.16.41.18

Whois 154.16.41.18

IP Abuse Reports for 154.16.41.18:

This IP address has been reported a total of 43 times from 27 distinct sources. 154.16.41.18 was first reported on January 3rd 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇴 Fn4ticHz	2026-05-30 15:42:12 (1 week ago)	DDoS blocked via ZeroGuard.ID	DDoS Attack Exploited Host
🇨🇦 leithzz	2026-05-25 11:49:42 (1 week ago)	Report by Cloudflare.Time: 2026-05-25T11:49:05Z	DDoS Attack
🇷🇴 Fn4ticHz	2026-05-09 14:14:02 (4 weeks ago)	Repeated DDoS targeted -- ZeroGuard X ManagedSRV	DDoS Attack Exploited Host
🇺🇸 Vano Ganzzz	2026-05-03 08:30:46 (1 month ago)	Triggered Cloudflare WAF (l7ddos) from US. Action taken: BLOCK ASN: 32159 (GUNG HO LLC) Protocol: HT ... show more Triggered Cloudflare WAF (l7ddos) from US. Action taken: BLOCK ASN: 32159 (GUNG HO LLC) Protocol: HTTP/2 (GET method) Endpoint: / Timestamp: 2026-05-03T08:30:46Z Ray ID: 9f5de7d19a374077 UA: hsyR07i/5.0 (Windows 10 version 1703; Daytona; x86-64, ARM64 ; 8737283 112.0) /Gecko/20100101 Edg/91.0.864.59 112.0 show less	DDoS Attack Bad Web Bot
🇩🇪 NoaQT	2026-04-05 22:03:36 (2 months ago)	154.16.41.18 - - [05/Apr/2026:16:45:06 +0200] "GET /web/login HTTP/1.1" 499 0 "https://news.zone50.o ... show more 154.16.41.18 - - [05/Apr/2026:16:45:06 +0200] "GET /web/login HTTP/1.1" 499 0 "https://news.zone50.org/blog" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 154.16.41.18 - - [05/Apr/2026:16:46:07 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.qgtGa.io/products" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 154.16.41.18 - - [05/Apr/2026:16:48:14 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.google.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 154.16.41.18 - - [05/Apr/2026:16:48:18 +0200] "GET /web/login HTTP/1.1" 499 0 "https://blog.wXBefFXG.net/home" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 154.16.41.18 - - [05/Apr/2026:16:48:26 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.bing.com/" "Mozilla/5.0 (Windows NT 10. ... show less	DDoS Attack
🇩🇪 NoaQT	2026-04-05 17:10:29 (2 months ago)	154.16.41.18 - - [05/Apr/2026:19:05:23 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.yahoo.com ... show more 154.16.41.18 - - [05/Apr/2026:19:05:23 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.yahoo.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 154.16.41.18 - - [05/Apr/2026:19:05:28 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.linkedin.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 154.16.41.18 - - [05/Apr/2026:19:05:28 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.linkedin.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 154.16.41.18 - - [05/Apr/2026:19:05:59 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.instagram.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 154.16.41.18 - - [05/Apr/2026:19:05:59 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.instagram.com/" "Mozilla/5.0 (Windows NT ... show less	DDoS Attack
🇩🇪 NoaQT	2026-04-05 14:58:49 (2 months ago)	154.16.41.18 - - [05/Apr/2026:16:48:14 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.google.co ... show more 154.16.41.18 - - [05/Apr/2026:16:48:14 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.google.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 154.16.41.18 - - [05/Apr/2026:16:48:18 +0200] "GET /web/login HTTP/1.1" 499 0 "https://blog.wXBefFXG.net/home" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 154.16.41.18 - - [05/Apr/2026:16:48:26 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.bing.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 154.16.41.18 - - [05/Apr/2026:16:51:48 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.instagram.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 154.16.41.18 - - [05/Apr/2026:16:51:55 +0200] "GET /web/login HTTP/1.1" 499 0 "https://modern.io/news" "Mozilla/5.0 (X11; Linux x86_64) Appl ... show less	DDoS Attack
🇩🇪 grassau.com	2026-03-19 16:11:34 (2 months ago)	(mod_security) mod_security triggered on hostname [redacted] 154.16.41.18 (ZA/South Africa/-/-/-)	SQL Injection
🇮🇹 VHosting	2026-02-24 10:34:22 (3 months ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇧🇪 cmbplf	2026-02-22 11:50:18 (3 months ago)	520 limiting connections by zone (11m59s)	DDoS Attack
🇮🇳 liveaspankaj	2026-02-20 23:22:16 (3 months ago)	DDoS attack: 120 requests in 5m (GET / or repair.php).	DDoS Attack
🇩🇪 kranem	2026-01-28 21:06:54 (4 months ago)	Triggered Cloudflare WAF from US. Action taken: BLOCK ASN: 32159 (GUNGHO-SAS) Protocol: HTTP/2 (GET ... show more Triggered Cloudflare WAF from US. Action taken: BLOCK ASN: 32159 (GUNGHO-SAS) Protocol: HTTP/2 (GET method) Endpoint: / Timestamp: 2026-01-28T20:07:40Z User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 show less	Bad Web Bot
🇨🇭 Modules	2026-01-18 19:17:38 (4 months ago)	Open proxy http://154.16.41.18:5555 (RT:43151ms,Loc:United States,ASN:AS32159)	Open Proxy
🇸🇬 Vano Ganzzz	2025-11-30 11:47:50 (6 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK ASN: 32159 (GUNGHO-SAS) Proto ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK ASN: 32159 (GUNGHO-SAS) Protocol: HTTP/2 (GET method) Endpoint: / Timestamp: 2025-11-30T11:47:50Z Ray ID: 9a6a1cbf7b64b0ae UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.99 Safari/537.36 show less	Bad Web Bot
🇵🇱 sefinek.net	2025-11-15 09:40:36 (6 months ago)	Triggered Cloudflare WAF (l7ddos) from US. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoin ... show more Triggered Cloudflare WAF (l7ddos) from US. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	DDoS Attack Bad Web Bot

Showing 1 to 15 of 43 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 211.223.107.86

🇨🇳 180.95.238.196

🇻🇳 171.251.238.96

🇸🇬 152.42.217.112

🇨🇳 111.26.106.119

🇬🇧 92.118.60.128

🇨🇴 181.119.85.215

🇨🇳 144.123.77.64

🇨🇳 139.9.191.197

🇰🇷 122.202.250.160

🇵🇱 87.251.64.176

🇨🇳 59.59.212.49

🇩🇪 43.228.157.8

🇮🇳 20.193.250.198

🇷🇴 2.57.121.112

🇺🇸 2604:a880:400:d1:0:4:8bf7:6001

🇵🇦 190.97.165.93

🇲🇴 182.93.50.90

🇳🇱 157.245.79.143

🇧🇬 79.124.62.178