JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.154.64.137

103.154.64.137 was found in our database!

This IP was reported 35 times. Confidence of Abuse is 64%: ?

64%

ISP	Nasstec Airnet Networks Private Limited
Usage Type	Fixed Line ISP
ASN	AS150129
Domain Name	nasstecairnet.net.pk
Country	🇵🇰 Pakistan
City	Lahore, Punjab

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.154.64.137

Whois 103.154.64.137

IP Abuse Reports for 103.154.64.137:

This IP address has been reported a total of 35 times from 22 distinct sources. 103.154.64.137 was first reported on December 23rd 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 ghostwarriors	2026-07-24 10:50:23 (2 days ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 10:44:49 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 103.154.64.137 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 103.154.64.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 06:44:42.814630 2026] [security2:error] [pid 800887:tid 800907] [client 103.154.64.137:61662] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.154.64.137 (+1 hits since last alert)\|sandiegosamsolo.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "sandiegosamsolo.com"] [uri "/xmlrpc.php"] [unique_id "amNCGkgJXkoVyI0Dffvx5wAAANE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-24 10:42:32 (2 days ago)	Fail2Ban: WordPress XML-RPC brute-force attack detected.	Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-07-24 10:14:10 (2 days ago)	(xmlrpc) Apache: Failed xmlrpc access from 103.154.64.137 (PK/Pakistan/-): 10 in the last 3600 secs ... show more (xmlrpc) Apache: Failed xmlrpc access from 103.154.64.137 (PK/Pakistan/-): 10 in the last 3600 secs (0-201) show less	Hacking
🇺🇸 TPI-Abuse	2026-07-24 09:41:24 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 103.154.64.137 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 103.154.64.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 05:41:17.273475 2026] [security2:error] [pid 21847:tid 21847] [client 103.154.64.137:60218] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.154.64.137 (+1 hits since last alert)\|stinsonbeachsurfandkayak.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "stinsonbeachsurfandkayak.com"] [uri "/xmlrpc.php"] [unique_id "amMzPS6C_x7WzF50Nwi0XwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 IndigoRidge	2026-07-24 09:24:13 (2 days ago)	103.154.64.137 - - [24/Jul/2026:05:21:45 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5122 "-" "WordPress. ... show more 103.154.64.137 - - [24/Jul/2026:05:21:45 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5122 "-" "WordPress.com; https://wordpress.com" 103.154.64.137 - - [24/Jul/2026:05:23:30 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5122 "-" "WordPress.com; https://wordpress.com" 103.154.64.137 - - [24/Jul/2026:05:23:51 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5122 "-" "WordPress.com; https://wordpress.com" 103.154.64.137 - - [24/Jul/2026:05:24:01 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5122 "-" "WordPress.com; https://wordpress.com" 103.154.64.137 - - [24/Jul/2026:05:24:12 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5122 "-" "WordPress.com; https://wordpress.com" ... show less	Web App Attack
🇱🇻 garmtech.com	2026-07-24 08:17:29 (2 days ago)	IM360 WAF: Rate limit exceeded for XMLRPC DoS	Web App Attack
🇺🇸 kosada.com	2026-07-06 04:55:37 (2 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-06-29 14:47:06 (3 weeks ago)	[server.tmg.gr] httpd-xmlrpc-post: sites=tmg.gr; logs=/var/log/httpd/domains/tmg.gr.log; samples=/xm ... show more [server.tmg.gr] httpd-xmlrpc-post: sites=tmg.gr; logs=/var/log/httpd/domains/tmg.gr.log; samples=/xmlrpc.php show less	Brute-Force Web App Attack
🇺🇸 kosada.com	2026-06-29 14:01:04 (3 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-06-27 07:39:05 (4 weeks ago)	Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-06-27 06:41:13 (4 weeks ago)	(mod_security) mod_security (id:240335) triggered by 103.154.64.137 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 103.154.64.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 02:41:05.443265 2026] [security2:error] [pid 31573:tid 31591] [client 103.154.64.137:54427] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.154.64.137 (+1 hits since last alert)\|smarterproductions.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "smarterproductions.com"] [uri "/xmlrpc.php"] [unique_id "aj9wgZssI6Lal25jKFH0GQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-27 06:14:31 (4 weeks ago)	(mod_security) mod_security (id:240335) triggered by 103.154.64.137 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 103.154.64.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 02:14:25.506794 2026] [security2:error] [pid 4945:tid 4945] [client 103.154.64.137:51301] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.154.64.137 (+1 hits since last alert)\|roguetechscene.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "roguetechscene.com"] [uri "/xmlrpc.php"] [unique_id "aj9qQRbIIIMRH06WC2uhZwAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 clapper	2026-06-21 12:37:50 (1 month ago)	(mod_security) mod_security (id:350202) triggered by 103.154.64.137 (PK/Pakistan/-): 5 in the last 6 ... show more (mod_security) mod_security (id:350202) triggered by 103.154.64.137 (PK/Pakistan/-): 5 in the last 600 secs; ID: rub show less	Brute-Force Bad Web Bot
🇺🇸 integrantservices.com	2026-06-21 10:54:03 (1 month ago)	(wordpress) Failed wordpress login from 103.154.64.137 (PK/Pakistan/-)	Brute-Force

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇭 203.156.108.68

🇨🇳 121.227.152.250

🇺🇸 2600:3c00::2000:d5ff:fefb:7299

🇬🇧 217.146.80.120

🇻🇳 171.231.196.238

🇪🇸 158.158.45.59

🇫🇷 146.59.144.192

🇦🇺 134.199.169.225

🇵🇰 103.244.172.61

🇮🇳 103.240.234.169

🇫🇷 91.196.152.112

🇫🇷 85.217.140.22

🇵🇱 74.248.96.101

🇺🇸 68.225.61.18

🇺🇸 54.152.39.42

🇺🇸 52.167.144.184

🇳🇱 45.94.31.102

🇳🇱 23.254.227.189

🇰🇷 218.157.179.170

🇬🇧 194.50.235.144