JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.152.100.168

103.152.100.168 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 40%: ?

40%

ISP	HOMENET PRIVATE LIMITED
Usage Type	Fixed Line ISP
ASN	AS151330
Hostname(s)	103.152.100.168-pbb.net.pk
Domain Name	homenet.com.pk
Country	🇵🇰 Pakistan
City	Lahore, Punjab

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.152.100.168

Whois 103.152.100.168

IP Abuse Reports for 103.152.100.168:

This IP address has been reported a total of 21 times from 14 distinct sources. 103.152.100.168 was first reported on May 18th 2024, and the most recent report was 18 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 applemooz	2026-07-01 04:55:50 (18 minutes ago)	WordPress XMLRPC Brute Force Attacks ...	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-01 04:28:57 (45 minutes ago)	(mod_security) mod_security (id:240335) triggered by 103.152.100.168 (103.152.100.168-pbb.net.pk): 1 ... show more (mod_security) mod_security (id:240335) triggered by 103.152.100.168 (103.152.100.168-pbb.net.pk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 00:28:53.704800 2026] [security2:error] [pid 29648:tid 29648] [client 103.152.100.168:12239] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.152.100.168 (+1 hits since last alert)\|websitesforauthors.design\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "websitesforauthors.design"] [uri "/xmlrpc.php"] [unique_id "akSXhQpgbMm7m2_cSdEfNAAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-06-29 06:58:40 (1 day ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-26 17:23:21 (4 days ago)	(mod_security) mod_security (id:210730) triggered by 103.152.100.168 (103.152.100.168-pbb.net.pk): 1 ... show more (mod_security) mod_security (id:210730) triggered by 103.152.100.168 (103.152.100.168-pbb.net.pk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 13:23:18.203431 2026] [security2:error] [pid 17043:tid 17043] [client 103.152.100.168:51354] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.rimworld.com\|F\|2"] [data ".marsasystems.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.rimworld.com"] [uri "/www.marsasystems.com"] [unique_id "aj61hucOovX181dI7u29cgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-26 16:57:37 (4 days ago)	(mod_security) mod_security (id:240335) triggered by 103.152.100.168 (103.152.100.168-pbb.net.pk): 1 ... show more (mod_security) mod_security (id:240335) triggered by 103.152.100.168 (103.152.100.168-pbb.net.pk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 12:57:30.155709 2026] [security2:error] [pid 8508:tid 8508] [client 103.152.100.168:53944] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.152.100.168 (+1 hits since last alert)\|gaeltv.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "gaeltv.com"] [uri "/xmlrpc.php"] [unique_id "aj6vekvC-7O5l5Lbh9OrywAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-26 15:56:57 (4 days ago)	(mod_security) mod_security (id:240335) triggered by 103.152.100.168 (103.152.100.168-pbb.net.pk): 1 ... show more (mod_security) mod_security (id:240335) triggered by 103.152.100.168 (103.152.100.168-pbb.net.pk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 11:56:51.947114 2026] [security2:error] [pid 10635:tid 10635] [client 103.152.100.168:12283] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.152.100.168 (+1 hits since last alert)\|bonesband.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "bonesband.com"] [uri "/xmlrpc.php"] [unique_id "aj6hQ8DKbNu_jf11dtRmqAAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-06-25 18:33:11 (5 days ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-25 18:02:26 (5 days ago)	(mod_security) mod_security (id:240335) triggered by 103.152.100.168 (103.152.100.168-pbb.net.pk): 1 ... show more (mod_security) mod_security (id:240335) triggered by 103.152.100.168 (103.152.100.168-pbb.net.pk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 14:02:20.904137 2026] [security2:error] [pid 20286:tid 20286] [client 103.152.100.168:1971] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.152.100.168 (+1 hits since last alert)\|kbalan.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "kbalan.com"] [uri "/xmlrpc.php"] [unique_id "aj1tLHf4V3zSQ-Hkskk7KgAAACI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Vegascosmetics	2026-06-09 09:42:47 (3 weeks ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated encoding. Vegas Security	DDoS Attack Hacking Bad Web Bot
🇳🇱 wlt-blocker	2026-06-03 19:30:09 (3 weeks ago)	Unauthorized access to webpage admin	Web App Attack
🇫🇷 SpaceHost-Server	2026-05-15 06:44:01 (1 month ago)	103.152.100.168 - - [15/May/2026:08:43:38 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4894 "-" "Jetpack b ... show more 103.152.100.168 - - [15/May/2026:08:43:38 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4894 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.3)" 103.152.100.168 - - [15/May/2026:08:43:48 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4894 "-" "Jetpack/13.0; WordPress/6.3; http://site71503521.com" 103.152.100.168 - - [15/May/2026:08:44:00 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4894 "-" "Jetpack/13.0; WordPress/6.3; http://site74558480.com" show less	Hacking Web App Attack
🇫🇷 SpaceHost-Server	2026-05-15 06:28:33 (1 month ago)	103.152.100.168 - - [15/May/2026:08:28:08 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4894 "-" "Jetpack b ... show more 103.152.100.168 - - [15/May/2026:08:28:08 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4894 "-" "Jetpack by WordPress.com" 103.152.100.168 - - [15/May/2026:08:28:20 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4894 "-" "Jetpack/12.0; WordPress/6.1; http://site30330609.com" 103.152.100.168 - - [15/May/2026:08:28:31 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4894 "-" "Jetpack/12.1; WordPress/6.4; http://site64526241.com" show less	Hacking Web App Attack
🇳🇱 maxxsense	2026-04-03 03:04:16 (2 months ago)	103.152.100.168 (PK/Pakistan/103.152.100.168-pbb.net.pk), 12 distributed imapd attacks on account [r ... show more 103.152.100.168 (PK/Pakistan/103.152.100.168-pbb.net.pk), 12 distributed imapd attacks on account [redacted] show less	Brute-Force
🇺🇸 kosada.com	2026-03-28 06:27:02 (3 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇩🇪 HandyTreff.de	2026-03-21 04:02:29 (3 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -55.65 (Bad < -10 / Very Bad < -20 / ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -55.65 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Sa show less	Web App Attack Bad Web Bot

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 185.247.137.147

🇬🇧 139.59.183.60

🇺🇸 104.152.52.239

🇺🇸 104.152.52.234

🇺🇸 104.152.52.72

🇺🇸 104.152.52.63

🇺🇸 104.152.52.62

🇺🇸 104.152.52.56

🇺🇸 104.152.52.55

🇳🇱 91.92.40.24

🇩🇪 69.5.169.106

🇩🇪 69.5.169.83

🇩🇪 69.5.169.67

🇩🇪 69.5.169.22

🇳🇱 45.148.10.151

🇺🇸 172.253.85.210

🇮🇳 115.96.118.142

🇫🇷 92.205.213.181

🇺🇸 20.81.46.136

🇨🇳 220.180.107.193