JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 154.72.170.104

154.72.170.104 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 38%: ?

38%

ISP	CAMTEL
Usage Type	Fixed Line ISP
ASN	AS15964
Domain Name	camtel.cm
Country	🇨🇲 Cameroon
City	Douala, Littoral

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 154.72.170.104

Whois 154.72.170.104

IP Abuse Reports for 154.72.170.104:

This IP address has been reported a total of 12 times from 8 distinct sources. 154.72.170.104 was first reported on October 7th 2022, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-23 14:11:57 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 154.72.170.104 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 154.72.170.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 10:11:50.442101 2026] [security2:error] [pid 2529952:tid 2529952] [client 154.72.170.104:13287] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 154.72.170.104 (+1 hits since last alert)\|studioyau.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "studioyau.com"] [uri "/xmlrpc.php"] [unique_id "amIhJtfB_VMI5H0Yb1TiEQAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-23 13:07:57 (1 day ago)	(wordpress) Failed wordpress login from 154.72.170.104 (CM/Cameroon/-)	Brute-Force
🇺🇸 TPI-Abuse	2026-07-23 11:32:56 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 154.72.170.104 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 154.72.170.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 07:32:48.089456 2026] [security2:error] [pid 2364147:tid 2364147] [client 154.72.170.104:11333] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 154.72.170.104 (+1 hits since last alert)\|premierveterinarysurgery.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "premierveterinarysurgery.com"] [uri "/xmlrpc.php"] [unique_id "amH74DFAjLWUsSESIE4H9gAAAB8"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 masterguru	2026-07-23 10:27:33 (1 day ago)	(xmlrpc) Failed xmlrpc access from 154.72.170.104 (CM/Cameroon/-): 5 in the last 3600 secs (0-122)	Hacking
🇩🇪 ghostwarriors	2026-07-23 08:50:15 (1 day ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-23 08:24:37 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 154.72.170.104 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 154.72.170.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 04:24:32.046830 2026] [security2:error] [pid 3545122:tid 3545122] [client 154.72.170.104:11341] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 154.72.170.104 (+1 hits since last alert)\|takeapawsboston.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "takeapawsboston.com"] [uri "/xmlrpc.php"] [unique_id "amHPwM1WHMFMz86R7sRnPAAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-23 08:20:33 (1 day ago)	Fail2Ban: WordPress XML-RPC brute-force attack detected.	Bad Web Bot Web App Attack
🇳🇱 maxxsense	2026-02-04 13:54:31 (5 months ago)	(smtpauth) Failed SMTP AUTH login from 154.72.170.104 (CM/Cameroon/-)	Brute-Force
🇺🇸 TPI-Abuse	2025-12-10 14:52:11 (7 months ago)	"Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized ac ... show more "Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized access" show less	DDoS Attack SQL Injection Exploited Host
Anonymous	2025-01-08 18:39:34 (1 year ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
Anonymous	2024-02-04 07:38:28 (2 years ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇵🇹 rnl	2022-10-07 06:11:53 (3 years ago)	postfix (unknown user, SPF fail or relay access denied)	Brute-Force

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 221.156.126.1

🇲🇽 186.96.145.241

🇨🇳 123.191.158.225

🇨🇳 106.75.216.134

🇮🇩 103.148.100.146

🇳🇱 91.92.40.19

🇫🇷 86.48.3.3

🇩🇪 47.245.129.12

🇻🇳 27.79.41.229

🇺🇸 20.64.104.94

🇷🇴 2.57.121.112

🇵🇾 186.16.213.54

🇻🇳 157.66.26.151

🇨🇳 109.244.40.114

🇷🇴 92.118.39.211

🇮🇪 52.31.99.165

🇨🇳 106.13.234.209

🇨🇿 91.232.247.229

🇳🇱 91.92.40.25

🇩🇪 45.135.141.9