JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.135.254.138

103.135.254.138 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 52%: ?

52%

ISP	Fair Computer
Usage Type	Fixed Line ISP
ASN	AS132298
Domain Name	faircomputer.net
Country	🇧🇩 Bangladesh
City	Chattogram, Chittagong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.135.254.138

Whois 103.135.254.138

IP Abuse Reports for 103.135.254.138:

This IP address has been reported a total of 37 times from 19 distinct sources. 103.135.254.138 was first reported on February 16th 2026, and the most recent report was 16 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-15 14:46:43 (16 hours ago)	(mod_security) mod_security (id:240335) triggered by 103.135.254.138 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 103.135.254.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 10:46:26.298790 2026] [security2:error] [pid 3022:tid 3022] [client 103.135.254.138:53549] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.135.254.138 (+1 hits since last alert)\|premierveterinarysurgery.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "premierveterinarysurgery.com"] [uri "/xmlrpc.php"] [unique_id "aledQqKRl-QUNWlS6SYsRAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 screwlooseit.com.au	2026-07-15 14:15:24 (17 hours ago)	Blocked by CSF 13 firewall - Rule: XMLRPC BD/Bangladesh/-	Web App Attack
🇫🇷 bigorre.org	2026-07-15 10:00:47 (21 hours ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
Anonymous	2026-07-14 10:14:38 (1 day ago)	[da.kdns.gr] httpd-xmlrpc-post: sites=www.xamogelo.edu.gr; logs=/var/log/httpd/domains/xamogelo.edu. ... show more [da.kdns.gr] httpd-xmlrpc-post: sites=www.xamogelo.edu.gr; logs=/var/log/httpd/domains/xamogelo.edu.gr.log; samples=/xmlrpc.php show less	Brute-Force Web App Attack
🇫🇷 bigorre.org	2026-07-10 15:25:01 (5 days ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-09 03:59:59 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 103.135.254.138 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 103.135.254.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 23:59:45.020710 2026] [security2:error] [pid 7789:tid 7789] [client 103.135.254.138:54718] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.135.254.138 (+1 hits since last alert)\|stationrestaurant.ca\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "stationrestaurant.ca"] [uri "/xmlrpc.php"] [unique_id "ak8csZJ-F2As1yrTR-v32wAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-07-06 21:05:42 (1 week ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-06-29 11:44:58 (2 weeks ago)	[osotir.org] httpd-xmlrpc-post: sites=ear-books.com; logs=/var/log/httpd/domains/ear-books.com.log; ... show more [osotir.org] httpd-xmlrpc-post: sites=ear-books.com; logs=/var/log/httpd/domains/ear-books.com.log; samples=/xmlrpc.php show less	Brute-Force Web App Attack
🇺🇸 kosada.com	2026-06-29 09:50:32 (2 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇱🇻 garmtech.com	2026-06-27 08:16:03 (2 weeks ago)	IM360 WAF: Rate limit exceeded for XMLRPC DoS	Web App Attack
🇱🇻 garmtech.com	2026-06-27 08:14:48 (2 weeks ago)	IM360 WAF: Rate limit exceeded for XMLRPC DoS (fault code)	Web App Attack
🇺🇸 TPI-Abuse	2026-06-24 11:23:41 (3 weeks ago)	(mod_security) mod_security (id:240335) triggered by 103.135.254.138 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 103.135.254.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 07:23:26.596990 2026] [security2:error] [pid 9457:tid 9457] [client 103.135.254.138:65126] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.135.254.138 (+1 hits since last alert)\|kompareiq.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "kompareiq.com"] [uri "/xmlrpc.php"] [unique_id "aju-LsgO1whJUNaFLujgMAAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-22 10:05:27 (3 weeks ago)	[redacted] 103.135.254.138 - - [22/Jun/2026:12:04:43 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" ... show more [redacted] 103.135.254.138 - - [22/Jun/2026:12:04:43 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 103.135.254.138 - - [22/Jun/2026:12:04:53 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 103.135.254.138 - - [22/Jun/2026:12:05:04 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.1; WordPress/6.3; http://site16568058.com" [redacted] 103.135.254.138 - - [22/Jun/2026:12:05:14 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 103.135.254.138 - - [22/Jun/2026:12:05:25 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" ... show less	Hacking Web App Attack
🇦🇺 screwlooseit.com.au	2026-06-20 04:20:40 (3 weeks ago)	Blocked by CSF 13 firewall - Rule: XMLRPC BD/Bangladesh/-	Web App Attack
🇺🇸 TPI-Abuse	2026-06-14 10:57:35 (1 month ago)	(mod_security) mod_security (id:240335) triggered by 103.135.254.138 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 103.135.254.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 06:57:18.012193 2026] [security2:error] [pid 28576:tid 28576] [client 103.135.254.138:63153] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.135.254.138 (+1 hits since last alert)\|dymesich.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "dymesich.com"] [uri "/xmlrpc.php"] [unique_id "ai6JDsn4f6Z3PxgIC8oAqAAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 216.26.255.54

🇺🇸 206.232.31.86

🇫🇷 173.249.63.49

🇮🇹 88.147.43.112

🇬🇧 51.195.215.93

🇺🇸 44.109.172.157

🇬🇧 217.154.38.181

🇺🇸 216.25.89.83

🇦🇴 193.163.125.179

🇨🇳 180.153.236.112

🇷🇺 178.217.231.191

🇩🇪 169.58.8.121

🇺🇸 151.240.59.62

🇺🇸 130.51.22.28

🇧🇬 79.124.49.114

🇬🇧 51.89.129.195

🇺🇸 47.251.190.201

🇺🇸 44.47.87.71

🇰🇷 43.174.156.20

🇻🇳 43.168.165.63