JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 154.208.48.132

154.208.48.132 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 55%: ?

55%

ISP	IN CABLE INTERNET PRIVATE LIMITED
Usage Type	Fixed Line ISP
ASN	AS150750
Domain Name	incableinternet.com
Country	🇵🇰 Pakistan
City	Lahore, Punjab

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 154.208.48.132

Whois 154.208.48.132

IP Abuse Reports for 154.208.48.132:

This IP address has been reported a total of 28 times from 17 distinct sources. 154.208.48.132 was first reported on September 12th 2024, and the most recent report was 20 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-07 18:13:19 (20 hours ago)	(mod_security) mod_security (id:240335) triggered by 154.208.48.132 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 154.208.48.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 14:13:11.138281 2026] [security2:error] [pid 18564:tid 18564] [client 154.208.48.132:12241] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 154.208.48.132 (+1 hits since last alert)\|tomartsmedia.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "tomartsmedia.org"] [uri "/xmlrpc.php"] [unique_id "ak1Btyh-qNjGM64oMRoGWAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 integrantservices.com	2026-07-06 18:33:50 (1 day ago)	(wordpress) Failed wordpress login from 154.208.48.132 (PK/Pakistan/-)	Brute-Force
🇩🇪 neckaralb-admin.de	2026-07-06 16:53:00 (1 day ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇬🇧 NotCool	2026-07-04 20:25:04 (3 days ago)	(XMLRPC) WP XMLPRC Attack 154.208.48.132 (PK/Pakistan/-): 50 in the last 3600 secs	Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 19:07:05 (3 days ago)	(mod_security) mod_security (id:240335) triggered by 154.208.48.132 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 154.208.48.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 15:07:00.127252 2026] [security2:error] [pid 4611:tid 4611] [client 154.208.48.132:48545] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 154.208.48.132 (+1 hits since last alert)\|technesa.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "technesa.com"] [uri "/xmlrpc.php"] [unique_id "aklZ1Ksnj2eSoUGcfG5OKgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 09:10:16 (4 days ago)	(mod_security) mod_security (id:240335) triggered by 154.208.48.132 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 154.208.48.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 05:10:08.591106 2026] [security2:error] [pid 11323:tid 11323] [client 154.208.48.132:64588] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 154.208.48.132 (+1 hits since last alert)\|radicalchange.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "radicalchange.org"] [uri "/xmlrpc.php"] [unique_id "akjN8I0peVhOnuKuVBjIvgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 07:47:57 (4 days ago)	(mod_security) mod_security (id:240335) triggered by 154.208.48.132 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 154.208.48.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 03:47:53.033351 2026] [security2:error] [pid 6579:tid 6579] [client 154.208.48.132:49992] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 154.208.48.132 (+1 hits since last alert)\|mjkhan.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "mjkhan.com"] [uri "/xmlrpc.php"] [unique_id "aki6qWvtPbGdIMCkmosTDgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-04 07:46:40 (4 days ago)	Attac	Brute-Force
🇫🇮 YF	2026-07-03 21:01:04 (4 days ago)	xmlrpc.php Potential DDoS or brute force	DDoS Attack Brute-Force
🇺🇸 TPI-Abuse	2026-07-03 20:49:21 (4 days ago)	(mod_security) mod_security (id:240335) triggered by 154.208.48.132 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 154.208.48.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 16:49:18.318335 2026] [security2:error] [pid 11099:tid 11099] [client 154.208.48.132:19439] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 154.208.48.132 (+1 hits since last alert)\|pharmaceuticalsalescertifications.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "pharmaceuticalsalescertifications.com"] [uri "/xmlrpc.php"] [unique_id "akggTq41aGGFjL5XjIg7WgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 integrantservices.com	2026-07-03 20:26:05 (4 days ago)	(wordpress) Failed wordpress login from 154.208.48.132 (PK/Pakistan/-)	Brute-Force
Anonymous	2026-07-03 19:34:19 (4 days ago)	154.208.48.132 - - [03/Jul/2026:21:33:56 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "Jetpack by ... show more 154.208.48.132 - - [03/Jul/2026:21:33:56 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "Jetpack by WordPress.com" 154.208.48.132 - - [03/Jul/2026:21:33:58 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Jetpack by WordPress.com" 154.208.48.132 - - [03/Jul/2026:21:34:05 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "WordPress.com; https://wordpress.com" 154.208.48.132 - - [03/Jul/2026:21:34:07 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "WordPress.com; https://wordpress.com" 154.208.48.132 - - [03/Jul/2026:21:34:17 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.3)" ... show less	Brute-Force Web App Attack
🇺🇸 stechusa	2026-07-02 13:53:15 (6 days ago)	[Askari] \| country=PK	Bad Web Bot DDoS Attack
🇺🇸 stechusa	2026-07-02 13:53:14 (6 days ago)	ELEVATED_THREAT \| country=PK \| ASN=IN CABLE INTERNET (PRIVATE) LIMITED \| Request from PK (Pakistan), ... show more ELEVATED_THREAT \| country=PK \| ASN=IN CABLE INTERNET (PRIVATE) LIMITED \| Request from PK (Pakistan), outside target markets (US/CA) show less	Bad Web Bot DDoS Attack
🇩🇪 ghostwarriors	2026-06-06 06:50:28 (1 month ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 185.244.8.110

🇩🇪 150.241.77.28

🇺🇸 108.189.159.87

🇺🇸 107.172.88.206

🇩🇪 87.106.211.149

🇸🇬 43.160.200.19

🇮🇩 43.157.203.234

🇸🇬 43.156.168.37

🇸🇬 43.156.61.33

🇸🇬 43.156.60.15

🇨🇳 14.103.118.145

🇺🇸 216.218.206.80

🇧🇷 177.10.88.172

🇵🇰 163.61.227.176

🇮🇳 152.58.57.131

🇻🇳 116.109.216.74

🇵🇹 94.61.159.91

🇳🇱 91.92.40.8

🇳🇱 64.89.162.172

🇸🇬 43.156.217.191