JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 154.160.18.147

154.160.18.147 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 62%: ?

62%

ISP	Scancom Limited
Usage Type	Mobile ISP
ASN	AS30986
Domain Name	scancom.eu
Country	🇬🇭 Ghana
City	Accra, Greater Accra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 154.160.18.147

Whois 154.160.18.147

IP Abuse Reports for 154.160.18.147:

This IP address has been reported a total of 21 times from 20 distinct sources. 154.160.18.147 was first reported on February 3rd 2024, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 Dunham Support	2026-09-17 17:36:41 (3 days ago)	(wordpress) Failed wordpress login from 154.160.18.147 (GH/Ghana/dyn-at-mobile-154-160-18-147.mtn.co ... show more (wordpress) Failed wordpress login from 154.160.18.147 (GH/Ghana/dyn-at-mobile-154-160-18-147.mtn.com.gh) show less	Brute-Force
🇺🇸 integrantservices.com	2026-09-17 12:32:33 (3 days ago)	(wordpress) Failed wordpress login from 154.160.18.147 (GH/Ghana/dyn-at-mobile-154-160-18-147.mtn.co ... show more (wordpress) Failed wordpress login from 154.160.18.147 (GH/Ghana/dyn-at-mobile-154-160-18-147.mtn.com.gh) show less	Brute-Force
🇧🇪 madeit	2026-09-15 16:11:53 (5 days ago)		Web App Attack
🇩🇪 pscriptos	2026-09-15 14:04:35 (5 days ago)	{"ClientAddr":"154.160.18.147:40321","ClientHost":"154.160.18.147","ClientPort":"40321","ClientUsern ... show more {"ClientAddr":"154.160.18.147:40321","ClientHost":"154.160.18.147","ClientPort":"40321","ClientUsername":"-","DownstreamContentSize":418,"DownstreamStatus":403,"Duration":218942766,"OriginContentSize":418,"OriginDuration":214019948,"OriginStatus":403,"Overhead":4922818,"RequestAddr":"www.cleveradmin.de","RequestContentSize":707,"RequestCount":1544826,"RequestHost":"www.cleveradmin.de","RequestMethod":"POST","RequestPath":"/xmlrpc.php","RequestPort":"-","RequestProtocol":"HTTP/1.1","RequestScheme":"https","RetryAttempts":0,"RouterName":"cleveradmin-www-websecure@file","ServiceAddr":"172.16.80.10:80","ServiceName":"cleveradmin-www@file","ServiceURL":"http://172.16.80.10:80","StartLocal":"2026-09-15T16:04:14.10763328+02:00","StartUTC":"2026-09-15T14:04:14.10763328Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"websecure","level":"info","msg":"","time":"2026-09-15T16:04:14+02:00"} {"ClientAddr":"154.160.18.147:40321","ClientHost":"154.160.18.147","ClientPort":" ... show less	Brute-Force Web App Attack
🇺🇸 IndigoRidge	2026-09-15 13:41:52 (5 days ago)	154.160.18.147 - - [15/Sep/2026:09:39:54 -0400] "POST /xmlrpc.php HTTP/1.1" 403 5477 "-" "WordPress. ... show more 154.160.18.147 - - [15/Sep/2026:09:39:54 -0400] "POST /xmlrpc.php HTTP/1.1" 403 5477 "-" "WordPress.com; https://wordpress.com" 154.160.18.147 - - [15/Sep/2026:09:40:15 -0400] "POST /xmlrpc.php HTTP/1.1" 403 5477 "-" "WordPress.com; https://wordpress.com" 154.160.18.147 - - [15/Sep/2026:09:40:58 -0400] "POST /xmlrpc.php HTTP/1.1" 403 5477 "-" "WordPress.com; https://wordpress.com" 154.160.18.147 - - [15/Sep/2026:09:41:19 -0400] "POST /xmlrpc.php HTTP/1.1" 403 5477 "-" "WordPress.com; https://wordpress.com" 154.160.18.147 - - [15/Sep/2026:09:41:51 -0400] "POST /xmlrpc.php HTTP/1.1" 403 5477 "-" "WordPress.com; https://wordpress.com" ... show less	Web App Attack
🇩🇪 ghostwarriors	2026-09-14 14:50:29 (6 days ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FD-IX	2026-09-14 14:47:07 (6 days ago)	Fail2Ban: WordPress XML-RPC brute-force attack detected.	Bad Web Bot Web App Attack
🇫🇷 tecnicorioja	2026-09-12 22:00:04 (1 week ago)	POST /xmlrpc.php [12/Sep/2026:17:46:01	Brute-Force Web App Attack
🇧🇪 cmbplf	2026-09-12 18:35:46 (1 week ago)	5.866 requests with url.path */xmlrpc.php	Brute-Force Bad Web Bot
🇩🇪 abdubhai	2026-09-12 13:01:13 (1 week ago)	154.160.18.147 - - [12/Sep/2026: ...	Brute-Force
🇨🇭 ALPHANET	2026-09-06 14:25:06 (2 weeks ago)	Botnet or web spider not respecting robots.txt	DDoS Attack Exploited Host
🇫🇮 as211431.net	2026-08-13 07:55:33 (1 month ago)	Triggered Cloudflare WAF (firewallCustom) from GH. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from GH. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Python/3.12 aiohttp/3.13.5 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇮🇱 auth.ink	2026-07-18 18:17:06 (2 months ago)	Malicious activity detected	Port Scan Brute-Force Hacking
🇧🇷 chronos	2026-06-04 00:42:32 (3 months ago)	Generic malicious activity: Tentativa de varredura de porta TCP... \| Port: 59601 \| Proto: TCP \| Loca ... show more Generic malicious activity: Tentativa de varredura de porta TCP... \| Port: 59601 \| Proto: TCP \| Location: Ghana, Accra show less	Port Scan Hacking
🇺🇸 TPI-Abuse	2025-05-03 15:03:45 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 154.160.18.147 (dyn-at-mobile-154-160-18-147.mt ... show more (mod_security) mod_security (id:225170) triggered by 154.160.18.147 (dyn-at-mobile-154-160-18-147.mtn.com.gh): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 03 11:03:41.074799 2025] [security2:error] [pid 2658983:tid 2658983] [client 154.160.18.147:60351] [client 154.160.18.147] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|bonesband.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bonesband.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aBYwTRH4WNnY7kZvmMwxkAAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 179.124.138.237

🇺🇸 165.22.41.116

🇰🇪 102.210.149.105

🇷🇺 91.185.47.28

🇺🇸 66.132.172.226

🇨🇳 223.104.69.144

🇺🇸 147.135.7.63

🇮🇳 123.108.230.231

🇳🇱 109.160.32.46

🇺🇸 98.159.233.116

🇺🇸 40.83.182.122

🇺🇸 20.65.169.105

🇵🇰 2401:8620:102:e7e:6a8f:c9ff:fe31:5db6

🇧🇷 190.123.199.193

🇺🇸 173.207.70.42

🇮🇹 146.241.3.189

🇯🇵 136.110.84.46

🇮🇳 117.250.250.2

🇫🇷 88.183.33.204

🇮🇹 79.57.94.57