JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 154.208.48.149

154.208.48.149 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 76%: ?

76%

ISP	IN CABLE INTERNET PRIVATE LIMITED
Usage Type	Fixed Line ISP
ASN	AS150750
Domain Name	incableinternet.com
Country	🇵🇰 Pakistan
City	Lahore, Punjab

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 154.208.48.149

Whois 154.208.48.149

IP Abuse Reports for 154.208.48.149:

This IP address has been reported a total of 20 times from 18 distinct sources. 154.208.48.149 was first reported on June 11th 2026, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Site.eu	2026-07-29 15:24:48 (13 hours ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
Anonymous	2026-07-29 07:00:00 (21 hours ago)	Apache probe; attempts=37; exact paths: /xmlrpc.php	Web App Attack
🇫🇷 Kenshin869	2026-07-28 09:32:19 (1 day ago)	Wordpress unauthorized access attempt	Brute-Force
🇺🇸 kosada.com	2026-07-27 02:37:27 (3 days ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-07-22 00:22:03 (1 week ago)	Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1	Hacking Web App Attack
🇫🇮 YF	2026-07-22 00:00:34 (1 week ago)	xmlrpc.php Potential DDoS or brute force	DDoS Attack Brute-Force
🇺🇸 IndigoRidge	2026-07-19 20:23:02 (1 week ago)	154.208.48.149 - - [19/Jul/2026:16:21:47 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5803 "-" "WordPress. ... show more 154.208.48.149 - - [19/Jul/2026:16:21:47 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5803 "-" "WordPress.com; https://wordpress.com" 154.208.48.149 - - [19/Jul/2026:16:22:08 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5803 "-" "WordPress.com; https://wordpress.com" 154.208.48.149 - - [19/Jul/2026:16:22:29 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5803 "-" "WordPress.com; https://wordpress.com" 154.208.48.149 - - [19/Jul/2026:16:22:51 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5803 "-" "WordPress.com; https://wordpress.com" 154.208.48.149 - - [19/Jul/2026:16:23:02 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5803 "-" "WordPress.com; https://wordpress.com" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-19 20:21:41 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 154.208.48.149 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 154.208.48.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 16:21:37.719008 2026] [security2:error] [pid 3146:tid 3146] [client 154.208.48.149:54135] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 154.208.48.149 (+1 hits since last alert)\|reelvisionboard.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "reelvisionboard.com"] [uri "/xmlrpc.php"] [unique_id "al0x0RoS2P2OO-nKQNXv3wAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-07-16 16:48:48 (1 week ago)	CrowdSec: crowdsecurity/http-bf-wordpress_bf_xmlrpc \| req: /xmlrpc.php \| UA: Jetpack by WordPress.co ... show more CrowdSec: crowdsecurity/http-bf-wordpress_bf_xmlrpc \| req: /xmlrpc.php \| UA: Jetpack by WordPress.com show less	Brute-Force Web App Attack
Anonymous	2026-07-16 15:46:31 (1 week ago)	[redacted] 154.208.48.149 - - [16/Jul/2026:17:45:47 +0200] "POST /xmlrpc.php HTTP/1.1" 403 239 "-" " ... show more [redacted] 154.208.48.149 - - [16/Jul/2026:17:45:47 +0200] "POST /xmlrpc.php HTTP/1.1" 403 239 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.1)" [redacted] 154.208.48.149 - - [16/Jul/2026:17:45:57 +0200] "POST /xmlrpc.php HTTP/1.1" 403 239 "-" "WordPress.com; https://wordpress.com" [redacted] 154.208.48.149 - - [16/Jul/2026:17:46:07 +0200] "POST /xmlrpc.php HTTP/1.1" 403 239 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.4)" [redacted] 154.208.48.149 - - [16/Jul/2026:17:46:18 +0200] "POST /xmlrpc.php HTTP/1.1" 403 239 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.4)" [redacted] 154.208.48.149 - - [16/Jul/2026:17:46:30 +0200] "POST /xmlrpc.php HTTP/1.1" 403 239 "-" "Jetpack by WordPress.com" ... show less	Hacking Web App Attack
Anonymous	2026-07-14 18:41:05 (2 weeks ago)		Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-13 12:51:50 (2 weeks ago)	(mod_security) mod_security (id:240335) triggered by 154.208.48.149 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 154.208.48.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 08:51:47.109508 2026] [security2:error] [pid 735:tid 735] [client 154.208.48.149:50888] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 154.208.48.149 (+1 hits since last alert)\|lyldevelopers.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "lyldevelopers.com"] [uri "/xmlrpc.php"] [unique_id "alTfYzelwEQM8L7e-4PTFQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇲🇾 Rizzy	2026-07-13 10:41:49 (2 weeks ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇮🇹 LTM	2026-07-12 06:20:01 (2 weeks ago)	WebServer - Attempts to exploit	Hacking Brute-Force Web App Attack
🇩🇪 HandyTreff.de	2026-07-03 01:49:38 (3 weeks ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -54.562 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -54.562 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Sa show less	Web App Attack Bad Web Bot

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.244

🇺🇸 195.184.76.52

🇺🇸 150.107.38.251

🇧🇪 130.211.78.94

🇫🇷 91.231.89.70

🇵🇭 49.151.169.185

🇧🇷 205.210.31.163

🇺🇾 200.58.148.60

🇺🇸 172.253.86.83

🇰🇷 168.126.36.209

🇸🇬 118.26.110.171

🇰🇷 115.178.75.243

🇮🇳 106.214.222.128

🇫🇷 91.238.181.6

🇺🇸 147.185.132.218

🇿🇦 129.232.187.42

🇺🇸 91.230.168.133

🇫🇮 74.125.74.19

🇵🇭 61.28.144.154

🇮🇳 61.1.105.105