JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 144.48.128.154

144.48.128.154 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 84%: ?

84%

ISP	Cyber Internet Services Pakistan
Usage Type	Fixed Line ISP
ASN	AS9541
Domain Name	cyber.net.pk
Country	🇵🇰 Pakistan
City	Karachi, Sindh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 144.48.128.154

Whois 144.48.128.154

IP Abuse Reports for 144.48.128.154:

This IP address has been reported a total of 22 times from 21 distinct sources. 144.48.128.154 was first reported on September 1st 2025, and the most recent report was 21 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 konseptit	2026-10-16 10:46:12 (21 hours ago)	(wordpress) Failed wordpress login from 144.48.128.154 (PK/Pakistan/-)	Brute-Force
🇫🇷 masterguru	2026-10-13 11:06:57 (3 days ago)	(xmlrpc) Apache: Failed xmlrpc access from 144.48.128.154 (PK/Pakistan/-): 10 in the last 3600 secs ... show more (xmlrpc) Apache: Failed xmlrpc access from 144.48.128.154 (PK/Pakistan/-): 10 in the last 3600 secs (0-201) show less	Hacking
🇩🇪 FD-IX	2026-10-12 20:56:49 (4 days ago)	Fail2Ban: WordPress XML-RPC brute-force attack detected.	Bad Web Bot Web App Attack
Anonymous	2026-10-12 11:19:52 (4 days ago)	[redacted] 144.48.128.154 - - [12/Oct/2026:13:19:12 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" " ... show more [redacted] 144.48.128.154 - - [12/Oct/2026:13:19:12 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.3)" [redacted] 144.48.128.154 - - [12/Oct/2026:13:19:19 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "WordPress.com; https://wordpress.com" [redacted] 144.48.128.154 - - [12/Oct/2026:13:19:30 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.2)" [redacted] 144.48.128.154 - - [12/Oct/2026:13:19:41 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "WordPress.com; https://wordpress.com" [redacted] 144.48.128.154 - - [12/Oct/2026:13:19:51 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.1)" ... show less	Hacking Web App Attack
🇩🇪 dbmwebdesign	2026-10-10 12:30:11 (6 days ago)	WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail	Brute-Force Web App Attack
Anonymous	2026-10-10 06:13:29 (1 week ago)	Reported by internal abuse tracking	DDoS Attack Web App Attack
🇦🇺 screwlooseit.com.au	2026-10-09 11:56:03 (1 week ago)	Blocked by CSF 13 firewall - Rule: XMLRPC PK/Pakistan/-	Web App Attack
🇩🇪 LRob	2026-10-07 15:40:07 (1 week ago)	WordPress login brute force \| path: /xmlrpc.php \| ua: Jetpack by WordPress.com (Jetpack 12.5; WordPr ... show more WordPress login brute force \| path: /xmlrpc.php \| ua: Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.2), Jetpack by WordPress.com, WordPress.com; https://wordpress.com (+2 more) show less	Brute-Force Web App Attack
🇫🇷 Kenshin869	2026-10-07 15:39:50 (1 week ago)	Wordpress unauthorized access attempt	Brute-Force
🇩🇪 lenz	2026-10-07 12:36:48 (1 week ago)	Oct 7 14:36:07 hosting wordpress(grupa-ddd.pl)[8083]: XML-RPC authentication failure for admin from ... show more Oct 7 14:36:07 hosting wordpress(grupa-ddd.pl)[8083]: XML-RPC authentication failure for admin from 144.48.128.154 Oct 7 14:36:15 hosting wordpress(grupa-ddd.pl)[1114]: XML-RPC authentication failure for admin from 144.48.128.154 Oct 7 14:36:26 hosting wordpress(grupa-ddd.pl)[1118]: XML-RPC authentication failure for admin from 144.48.128.154 Oct 7 14:36:37 hosting wordpress(grupa-ddd.pl)[1120]: XML-RPC authentication failure for admin from 144.48.128.154 Oct 7 14:36:47 hosting wordpress(grupa-ddd.pl)[2824]: XML-RPC authentication failure for admin from 144.48.128.154 ... show less	Brute-Force Web App Attack
🇺🇸 bigwavedave	2026-10-07 11:36:17 (1 week ago)	Wordpress Attack	Web App Attack
🇺🇸 interbiznw.com	2026-10-06 21:52:42 (1 week ago)	malicious-web-requests-vulnerability-scanning	Hacking Brute-Force Exploited Host Web App Attack
🇧🇪 cmbplf	2026-10-04 22:36:23 (1 week ago)	5.693 requests with url.path */xmlrpc.php	Brute-Force Bad Web Bot
🇩🇪 pscriptos	2026-10-03 12:16:52 (1 week ago)	{"ClientAddr":"144.48.128.154:21944","ClientHost":"144.48.128.154","ClientPort":"21944","ClientUsern ... show more {"ClientAddr":"144.48.128.154:21944","ClientHost":"144.48.128.154","ClientPort":"21944","ClientUsername":"-","DownstreamContentSize":418,"DownstreamStatus":403,"Duration":154454043,"OriginContentSize":418,"OriginDuration":147455374,"OriginStatus":403,"Overhead":6998669,"RequestAddr":"www.cleveradmin.de","RequestContentSize":707,"RequestCount":1368135,"RequestHost":"www.cleveradmin.de","RequestMethod":"POST","RequestPath":"/xmlrpc.php","RequestPort":"-","RequestProtocol":"HTTP/1.1","RequestScheme":"https","RetryAttempts":0,"RouterName":"cleveradmin-www-websecure@file","ServiceAddr":"172.16.80.10:80","ServiceName":"cleveradmin-www@file","ServiceURL":"http://172.16.80.10:80","StartLocal":"2026-10-03T14:16:30.784127518+02:00","StartUTC":"2026-10-03T12:16:30.784127518Z","TLSCipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","TLSVersion":"1.2","entryPointName":"websecure","level":"info","msg":"","time":"2026-10-03T14:16:30+02:00"} {"ClientAddr":"144.48.128.154:21944","ClientHost":"144.48.128.15 ... show less	Brute-Force Web App Attack
Anonymous	2026-10-03 11:38:07 (1 week ago)	144.48.128.154 - - [03/Oct/2026:11:38:06 +0000] "POST /xmlrpc.php HTTP/1.1" 302 4344 "-" "Jetpack by ... show more 144.48.128.154 - - [03/Oct/2026:11:38:06 +0000] "POST /xmlrpc.php HTTP/1.1" 302 4344 "-" "Jetpack by WordPress.com" ... show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 223.191.68.6

🇩🇪 217.138.216.130

🇧🇷 189.108.215.39

🇨🇴 179.32.213.29

🇺🇸 173.48.107.47

🇹🇼 104.155.215.247

🇺🇸 20.64.98.133

🇰🇷 218.155.74.4

🇧🇷 205.210.31.168

🇩🇪 188.166.166.205

🇯🇵 161.33.14.212

🇹🇲 119.235.126.50

🇧🇪 91.86.88.73

🇳🇱 77.239.124.48

🇩🇪 69.5.169.129

🇺🇸 51.8.102.45

🇺🇸 20.163.38.21

🇹🇼 1.169.238.240

🇹🇭 203.156.108.110

🇺🇸 195.184.76.194