JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.152.254.7

103.152.254.7 was found in our database!

This IP was reported 40 times. Confidence of Abuse is 0%: ?

ISP	Nexus Technologies Private Limited
Usage Type	Fixed Line ISP
ASN	AS7590
Domain Name	nexus.pk
Country	🇵🇰 Pakistan
City	Rawalpindi, Punjab

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.152.254.7

Whois 103.152.254.7

IP Abuse Reports for 103.152.254.7:

This IP address has been reported a total of 40 times from 28 distinct sources. 103.152.254.7 was first reported on October 16th 2025, and the most recent report was 8 months ago.

Old Reports: The most recent abuse report for this IP address is from 8 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 BellFix	2025-11-28 18:19:58 (8 months ago)	Fail2ban reported 103.152.254.7 for sshd	SSH
🇺🇸 bigscoots.com	2025-10-20 12:18:11 (9 months ago)	(sshd) Failed SSH login from 103.152.254.7 (PK/Pakistan/-): 5 in the last 3600 secs; Ports: ; Direc ... show more (sshd) Failed SSH login from 103.152.254.7 (PK/Pakistan/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Oct 20 07:11:21 14072 sshd[21993]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.152.254.7 user=root Oct 20 07:11:24 14072 sshd[21993]: Failed password for root from 103.152.254.7 port 40066 ssh2 Oct 20 07:14:24 14072 sshd[22211]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.152.254.7 user=root Oct 20 07:14:26 14072 sshd[22211]: Failed password for root from 103.152.254.7 port 40602 ssh2 Oct 20 07:18:01 14072 sshd[22446]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.152.254.7 user=root show less	Brute-Force SSH
🇫🇷 security.rdmc.fr	2025-10-20 11:48:46 (9 months ago)	Port Scan Attack proto:TCP src:37551 dst:23	Port Scan
🇰🇪 Oste	2025-10-20 08:14:29 (9 months ago)	Unauthorized activity detected from reported IP, including scanning and intrusion attempts.	Hacking SQL Injection Bad Web Bot Web App Attack
🇸🇾 Asem Dubosh	2025-10-20 07:52:00 (9 months ago)	/cgi-bin/../../../../../../../../../../bin/sh Port: 443 Description: Website-based attack is detecte ... show more /cgi-bin/../../../../../../../../../../bin/sh Port: 443 Description: Website-based attack is detected. Type:Path traversal show less	Web App Attack
🇹🇭 Sawasdee	2025-10-20 04:27:10 (9 months ago)	SSH break in attempt ...	SSH
🇺🇸 MPL	2025-10-20 02:29:26 (9 months ago)	tcp/23	Port Scan
🇺🇸 MPL	2025-10-20 02:10:47 (9 months ago)	tcp ports: 22,23 (6 or more attempts)	Port Scan
🇦🇹 urnilxfgbez	2025-10-19 22:45:00 (9 months ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇹🇷 rtbh.com.tr	2025-10-19 20:09:26 (9 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇳🇱 bontekoe.technology	2025-10-19 12:29:21 (9 months ago)	103.152.254.7 banned on rtr - Threshold reached: 5 failures	SSH
🇺🇸 bigscoots.com	2025-10-19 09:17:49 (9 months ago)	(sshd) Failed SSH login from 103.152.254.7 (PK/Pakistan/-): 5 in the last 3600 secs; Ports: ; Direc ... show more (sshd) Failed SSH login from 103.152.254.7 (PK/Pakistan/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Oct 19 04:12:22 16027 sshd[5229]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.152.254.7 user=root Oct 19 04:12:24 16027 sshd[5229]: Failed password for root from 103.152.254.7 port 39374 ssh2 Oct 19 04:15:17 16027 sshd[5457]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.152.254.7 user=root Oct 19 04:15:19 16027 sshd[5457]: Failed password for root from 103.152.254.7 port 59718 ssh2 Oct 19 04:17:37 16027 sshd[5613]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.152.254.7 user=root show less	Brute-Force SSH
🇺🇸 MPL	2025-10-19 06:27:00 (9 months ago)	tcp/2222 (3 or more attempts)	Port Scan
🇹🇷 rtbh.com.tr	2025-10-19 00:09:25 (9 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 William Friend AbuseIPDB Official	2025-10-18 20:40:27 (9 months ago)	2025-10-18T20:27:58.902374 telos sshd[1768393]: Invalid user test from 103.152.254.7 port 53738 2025 ... show more 2025-10-18T20:27:58.902374 telos sshd[1768393]: Invalid user test from 103.152.254.7 port 53738 2025-10-18T20:32:51.533616 telos sshd[1768445]: Invalid user install from 103.152.254.7 port 32776 2025-10-18T20:40:26.251231 telos sshd[1768460]: Invalid user dmdba from 103.152.254.7 port 53142 show less	Brute-Force SSH

Showing 1 to 15 of 40 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 199.45.154.120

🇺🇸 34.125.169.50

🇫🇷 217.113.196.97

🇬🇧 213.166.84.41

🇮🇪 185.108.129.190

🇺🇸 172.237.136.85

🇪🇸 162.158.123.229

🇨🇳 120.48.147.81

🇨🇳 113.219.177.95

🇹🇷 31.210.42.134

🇬🇧 31.14.254.10

🇬🇧 5.226.140.120

🇲🇾 1.9.226.162

🇺🇸 2001:19f0:4000:20fb:5400:6ff:fe66:3f3c

🇩🇪 213.209.159.226

🇧🇷 205.210.31.192

🇵🇪 200.37.179.83

🇹🇼 198.235.24.121

🇻🇪 190.6.32.107

🇨🇳 122.243.76.112