JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 154.208.48.244

154.208.48.244 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 29%: ?

29%

ISP	IN CABLE INTERNET PRIVATE LIMITED
Usage Type	Fixed Line ISP
ASN	AS150750
Domain Name	incableinternet.com
Country	🇵🇰 Pakistan
City	Choa Saidan Shah, Punjab

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 154.208.48.244

Whois 154.208.48.244

IP Abuse Reports for 154.208.48.244:

This IP address has been reported a total of 23 times from 17 distinct sources. 154.208.48.244 was first reported on August 22nd 2024, and the most recent report was 21 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-01 20:52:12 (21 hours ago)	(mod_security) mod_security (id:210730) triggered by 154.208.48.244 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 154.208.48.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 16:52:04.599061 2026] [security2:error] [pid 32005:tid 32005] [client 154.208.48.244:54446] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|gamepart.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gamepart.com"] [uri "/home/tancedi1/gamepart.com"] [unique_id "apc69LsFNBXh6V1gfrrBDQAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 gui-ying233	2026-08-26 19:15:04 (6 days ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-25 21:23:01 (1 week ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇫🇷 Zkillu	2026-08-19 21:05:59 (1 week ago)	UDP flood (DDoS) vs AS215599: 125 pkts / 0.18 MB to UDP 8443 across 89 dst IP(s), 2026-08-19 21:46 t ... show more UDP flood (DDoS) vs AS215599: 125 pkts / 0.18 MB to UDP 8443 across 89 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇩🇪 EGP Abuse Dept	2026-06-20 10:54:07 (2 months ago)	Scanning for port/service exploits on tpc-005.mach3builders.nl	Port Scan Hacking
🇩🇪 Vegascosmetics	2026-06-09 09:48:28 (2 months ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated encoding. Vegas Security	DDoS Attack Hacking Bad Web Bot
🇮🇹 A000Z	2026-03-21 00:00:36 (5 months ago)	Fail2Ban: 154.208.48.244 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5 ... show more Fail2Ban: 154.208.48.244 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36 show less	Bad Web Bot
🇱🇻 garmtech.com	2026-03-18 12:05:56 (5 months ago)	IM360 WAF: SQL Injection Attack: Common DB Names Detected	SQL Injection
🇱🇻 garmtech.com	2026-03-18 12:04:04 (5 months ago)	IM360 WAF: SQL Dorks collection for SQL Injection MV:154774',(SELECT//10950//FROM//(SELECT// ... show more IM360 WAF: SQL Dorks collection for SQL Injection MV:154774',(SELECT//10950//FROM//(SELECT//ROW(10950,7735)>(SELECT/*/COUNT(),CONCAT('~',(SELECT/*/(ELT(10950=10950,1))),'~',FLOOR(RAND(0)2))x//FROM//(SELECT//1470//UNION//SELECT//5208//UNION//SELECT//9913//UNION//SELECT//3901)a//GROUP//BY/**/x))s)-- - show less	SQL Injection
🇱🇻 garmtech.com	2026-03-18 12:03:03 (5 months ago)	IM360 WAF: Detects MySQL and PostgreSQL stored procedure/function injections	SQL Injection
🇫🇷 Sklurk	2026-02-24 02:54:12 (6 months ago)	Web App Attack	Web App Attack
Anonymous	2026-02-13 16:10:25 (6 months ago)	Web App Attack	Brute-Force Exploited Host Web App Attack
🇨🇦 polycoda	2026-02-06 16:00:29 (6 months ago)	🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27	DDoS Attack
Anonymous	2025-11-22 15:59:11 (9 months ago)	scanning http requests from known botnet	Web App Attack
🇩🇪 pressler.pro	2025-09-23 20:27:55 (11 months ago)	Fail2ban - DDoS attack on woocommerce shop ...	DDoS Attack

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 185.93.89.23

🇨🇳 115.190.192.114

🇮🇩 210.79.142.201

🇺🇸 192.236.234.16

🇺🇸 144.31.35.151

🇨🇳 117.72.29.93

🇳🇱 91.92.47.252

🇫🇷 85.217.140.47

🇱🇹 62.60.130.253

🇫🇮 34.88.29.206

🇷🇴 2.57.122.238

🇨🇳 222.136.222.6

🇺🇸 205.210.31.103

🇺🇸 166.142.197.35

🇰🇭 220.158.232.92

🇧🇷 168.205.233.5

🇰🇷 119.200.229.33

🇫🇷 85.69.240.210

🇫🇷 79.137.76.231

🇬🇧 35.203.211.66