JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

154.163.239.110

Activity Trending Down

Abuse Confidence Score

58% Elevated

23 reports

13 reporters · latest 1 week ago

ISP: Scancom Limited
Usage Type: Mobile ISP
ASN: AS30986
Domain Name: scancom.eu
Country: 🇬🇭 Ghana
City: Kumasi, Ashanti

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

23 from 13 distinct reporters

First reported

October 30th 2026

Most recent report

1 week ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 12 🇳🇱 Netherlands 4 🇩🇪 Germany 2

Most common categories Web App Attack 21 Bad Web Bot 12 Brute-Force 11 Hacking 5 SSH 3

Old reports The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-11-01 22:59:38 UTC · (1 week ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-31.	Web App Attack SSH Hacking
🇳🇱 homeshowdomain.nl	2026-10-31 22:59:16 UTC · (1 week ago)	Auto-ban: >3000 req/min op 2026-10-31	Web App Attack SSH Hacking
🇳🇱 Roderic	2026-10-31 10:19:49 UTC · (1 week ago)	Insights: web vulnerability probing, 9 requests on 3 sites, e.g. /.env (as: Python-script)	Web App Attack
🇺🇸 TPI-Abuse	2026-10-31 09:57:45 UTC · (1 week ago)	(mod_security) mod_security (id:210492) triggered by 154.163.239.110 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 05:57:41.356025 2026] [security2:error] [pid 20933:tid 20933] [client 154.163.239.110:3587 ... show more (mod_security) mod_security (id:210492) triggered by 154.163.239.110 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 05:57:41.356025 2026] [security2:error] [pid 20933:tid 20933] [client 154.163.239.110:35876] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lumentravel.com"] [uri "/.env"] [unique_id "auW7lTRGnntoo93d_ZfPzgAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 BlueWire Hosting	2026-10-31 09:50:32 UTC · (1 week ago)	Bad bot ignoring robot.txt	Bad Web Bot
🇩🇪 kkw	2026-10-31 08:28:25 UTC · (1 week ago)	[REDACTED] 154.163.239.110 - - [31/Oct/2026:09:28:25 +0100] "GET /.env HTTP/1.1" 302 4874 "-" "python-requests/2.32.5" ... (mode: searching http-sensitive-files)	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-31 07:33:40 UTC · (1 week ago)	(mod_security) mod_security (id:210492) triggered by 154.163.239.110 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 03:33:34.150388 2026] [security2:error] [pid 7813:tid 7813] [client 154.163.239.110:46507] ... show more (mod_security) mod_security (id:210492) triggered by 154.163.239.110 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 03:33:34.150388 2026] [security2:error] [pid 7813:tid 7813] [client 154.163.239.110:46507] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lukeschicago.com"] [uri "/.env"] [unique_id "auWZzvExnamVO4Q0uAzdUwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 madeit	2026-10-31 07:05:50 UTC · (1 week ago)		Web App Attack
🇺🇸 TPI-Abuse	2026-10-31 06:35:38 UTC · (1 week ago)	(mod_security) mod_security (id:210492) triggered by 154.163.239.110 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 02:35:35.624517 2026] [security2:error] [pid 31841:tid 31841] [client 154.163.239.110:5850 ... show more (mod_security) mod_security (id:210492) triggered by 154.163.239.110 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 02:35:35.624517 2026] [security2:error] [pid 31841:tid 31841] [client 154.163.239.110:58500] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lucid-events.com"] [uri "/.env"] [unique_id "auWMN0qhY6SkrenjDWjHywAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-31 05:56:24 UTC · (1 week ago)	(mod_security) mod_security (id:210492) triggered by 154.163.239.110 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 01:56:19.098382 2026] [security2:error] [pid 14079:tid 14079] [client 154.163.239.110:1540 ... show more (mod_security) mod_security (id:210492) triggered by 154.163.239.110 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 01:56:19.098382 2026] [security2:error] [pid 14079:tid 14079] [client 154.163.239.110:15405] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "luckypupdesigns.com"] [uri "/.env"] [unique_id "auWDA9Rurf0Fdmkh1C1QCgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-31 04:52:06 UTC · (1 week ago)	(mod_security) mod_security (id:210492) triggered by 154.163.239.110 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 00:51:59.084133 2026] [security2:error] [pid 462:tid 462] [client 154.163.239.110:51003] M ... show more (mod_security) mod_security (id:210492) triggered by 154.163.239.110 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 00:51:59.084133 2026] [security2:error] [pid 462:tid 462] [client 154.163.239.110:51003] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lucypower.com"] [uri "/.env"] [unique_id "auVz79_HeOu7LdRrFSU42AAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-31 04:14:26 UTC · (1 week ago)	(mod_security) mod_security (id:210492) triggered by 154.163.239.110 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 00:14:22.344869 2026] [security2:error] [pid 28068:tid 28068] [client 154.163.239.110:4266 ... show more (mod_security) mod_security (id:210492) triggered by 154.163.239.110 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 00:14:22.344869 2026] [security2:error] [pid 28068:tid 28068] [client 154.163.239.110:42663] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lucitania.com"] [uri "/.env"] [unique_id "auVrHg55-KdNtfpUCVG2QAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 CoreTech srl	2026-10-31 04:13:58 UTC · (1 week ago)	cloudlinux2 fail2ban: 2026-10-31 05:09:19,794 fail2ban.filter [1802]: INFO [plesk-wordpress] Found 46.150.68.217 - 2026-10-31 05:09:18cloudlinux2 fail2ban: 2026-10-31 05:09:20,434 fail2ban.filter [1802]: INFO [plesk-wordpress] F ... show more cloudlinux2 fail2ban: 2026-10-31 05:09:19,794 fail2ban.filter [1802]: INFO [plesk-wordpress] Found 46.150.68.217 - 2026-10-31 05:09:18cloudlinux2 fail2ban: 2026-10-31 05:09:20,434 fail2ban.filter [1802]: INFO [plesk-wordpress] Found 61.9.10.184 - 2026-10-31 05:09:18cloudlinux2 fail2ban: 2026-10-31 05:09:26,653 fail2ban.filter [1802]: INFO [plesk-wordpress] Found 63.135.161.154 - 2026-10-31 05:09:23cloudlinux2 fail2ban: 2026-10-31 05:09:48,029 fail2ban.filter [1802]: INFO [plesk-wordpress] Found 174.163.0.28 - 2026-10-31 05:09:47cloudlinux2 fail2ban: 2026-10-31 05:10:39,014 fail2ban.filter [1802]: INFO [plesk-wordpress] Found 63.135.161.131 - 2026-10-31 05:10:38cloudlinux2 fail2ban: 2026-10-31 05:10:58,462 fail2ban.filter [1802]: INFO [plesk-wordpress] Found 63.135.161.137 - 2026-10-31 05:10:53cloudlinux2 fail2ban: 2026-10-31 05:10:56,234 fail2ban.filter [1802]: INFO [plesk-wordpress] Found 63.135.161.133 - 2026-10-31 05:10:53cloudlin show less	Web App Attack
🇺🇸 TPI-Abuse	2026-10-31 02:30:59 UTC · (1 week ago)	(mod_security) mod_security (id:210492) triggered by 154.163.239.110 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 22:30:55.642361 2026] [security2:error] [pid 25396:tid 25396] [client 154.163.239.110:2721 ... show more (mod_security) mod_security (id:210492) triggered by 154.163.239.110 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 22:30:55.642361 2026] [security2:error] [pid 25396:tid 25396] [client 154.163.239.110:27215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "luckydawgs.com"] [uri "/.env"] [unique_id "auVS30UFNUxjyuITd564mgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-31 02:10:42 UTC · (1 week ago)	(mod_security) mod_security (id:210492) triggered by 154.163.239.110 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 22:10:36.382373 2026] [security2:error] [pid 5135:tid 5135] [client 154.163.239.110:23273] ... show more (mod_security) mod_security (id:210492) triggered by 154.163.239.110 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 22:10:36.382373 2026] [security2:error] [pid 5135:tid 5135] [client 154.163.239.110:23273] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lozzy.net"] [uri "/.env"] [unique_id "auVOHPdOVvHkb-dTGWqLsgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 218.17.142.129

🇨🇱 201.223.221.65

🇨🇳 171.37.180.93

🇺🇸 24.151.230.57

🇱🇹 194.165.16.26

🇺🇦 176.105.201.194

🇺🇸 136.117.173.230

🇺🇸 104.22.193.37

🇷🇴 92.118.39.77

🇺🇸 74.125.40.80

🇳🇱 45.148.10.152

🇳🇱 195.178.110.30

🇵🇪 190.119.150.188

🇨🇭 179.43.153.2

🇺🇸 66.132.172.42

🇨🇳 39.104.64.139

🇺🇸 34.50.188.73

🇩🇪 2a02:c202:2360:503::1

🇫🇮 193.187.110.160

🇺🇸 192.178.38.80