AbuseIPDB » 154.241.4.171
154.241.4.171
This IP was reported 8 times. Confidence of
Abuse
is 44% : ?
ISP
Telecom Algeria
Usage Type
Fixed Line ISP
ASN
AS36947
Domain Name
algerietelecom.dz
Country
🇩🇿
Algeria
City
Algiers, Algiers
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 154.241.4.171 :
This IP address has been reported a total of
8
times from
7 distinct
sources.
154.241.4.171 was first reported on
November 5th 2025 , and the most recent report was
22 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
drewf.ink
2026-07-06 09:59:05
(22 hours ago)
[09:59] Triggered SMB honeypot on port 445. Type: NetBIOS + SMB1. Dialect(s): LANMAN1.0, LM1.2X002, ...
show more
[09:59] Triggered SMB honeypot on port 445. Type: NetBIOS + SMB1. Dialect(s): LANMAN1.0, LM1.2X002, NT LANMAN 1.0, NT LM 0.12
show less
Hacking
Exploited Host
🇫🇷
sthoyer.de
2026-07-06 09:50:12
(22 hours ago)
Jul 6 11:50:11 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ...
show more
Jul 6 11:50:11 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=154.241.4.171 DST=173.212.223.67 LEN=52 TOS=0x08 PREC=0x20 TTL=113 ID=27451 DF PROTO=TCP SPT=62295 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0
...
show less
Port Scan
🇫🇷
Little Iguana
2026-07-06 09:48:54
(22 hours ago)
trying to access non-authorized port
Port Scan
🇭🇰
mutebot.net
2026-07-06 08:19:31
(23 hours ago)
SRC=154.241.4.171, PROTO=TCP, SPT=56256, DPT=445
Port Scan
🇫🇷
sthoyer.de
2026-07-06 08:17:42
(23 hours ago)
Jul 6 10:17:41 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ...
show more
Jul 6 10:17:41 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=154.241.4.171 DST=173.212.223.67 LEN=52 TOS=0x08 PREC=0x20 TTL=113 ID=22817 DF PROTO=TCP SPT=59576 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0
...
show less
Port Scan
2026-07-06 04:50:04
(1 day ago)
Unauthorized connection attempt
Port Scan
Hacking
Exploited Host
🇩🇪
Honeypot-EU-Fru
2026-07-05 21:31:38
(1 day ago)
1783287098 - 07/05/2026 23:31:38 Host: 154.241.4.171/154.241.4.171 Port: 445 TCP Blocked
...
Port Scan
🇺🇸
TPI-Abuse
2025-11-05 08:16:49
(8 months ago)
(mod_security) mod_security (id:210730) triggered by 154.241.4.171 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 154.241.4.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 05 03:16:42.261271 2025] [security2:error] [pid 2912:tid 2912] [client 154.241.4.171:43379] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||borzois.com|F|2"] [data ".borzois.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "borzois.com"] [uri "/silkenswift/www.borzois.com"] [unique_id "aQsH6paXH3E22BSj0_PQoQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
8
of 8 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: