JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 154.227.129.237

154.227.129.237 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 58%: ?

58%

ISP	Airtel-Uganda
Usage Type	Fixed Line ISP
ASN	AS37075
Hostname(s)	237-129-227-154.r.airtel.ug
Domain Name	airtel.in
Country	🇺🇬 Uganda
City	Kampala, Central Region

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 154.227.129.237

Whois 154.227.129.237

IP Abuse Reports for 154.227.129.237:

This IP address has been reported a total of 21 times from 11 distinct sources. 154.227.129.237 was first reported on October 17th 2024, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 applemooz	2026-06-19 13:37:16 (3 hours ago)	WordPress XMLRPC Brute Force Attacks ...	Brute-Force Web App Attack
🇩🇪 ger-stg-sifi1	2026-06-19 09:28:40 (7 hours ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇫🇷 masterguru	2026-06-19 06:51:57 (10 hours ago)	xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (88010-201)	Hacking
🇫🇷 dynamix	2026-06-16 18:02:50 (2 days ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇳🇱 debestelapp	2026-06-16 11:00:10 (3 days ago)		Web App Attack
🇺🇸 TPI-Abuse	2026-06-16 09:55:51 (3 days ago)	(mod_security) mod_security (id:240335) triggered by 154.227.129.237 (237-129-227-154.r.airtel.ug): ... show more (mod_security) mod_security (id:240335) triggered by 154.227.129.237 (237-129-227-154.r.airtel.ug): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 05:55:47.678357 2026] [security2:error] [pid 5156:tid 5156] [client 154.227.129.237:37035] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 154.227.129.237 (+1 hits since last alert)\|jennyfiore.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "jennyfiore.com"] [uri "/xmlrpc.php"] [unique_id "ajEdo4t0DUb7SobHMDslAwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-12 15:09:31 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 154.227.129.237 (237-129-227-154.r.airtel.ug): ... show more (mod_security) mod_security (id:240335) triggered by 154.227.129.237 (237-129-227-154.r.airtel.ug): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 11:09:28.613251 2026] [security2:error] [pid 10456:tid 10456] [client 154.227.129.237:57856] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 154.227.129.237 (+1 hits since last alert)\|webuychesterfieldhouses.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "webuychesterfieldhouses.com"] [uri "/xmlrpc.php"] [unique_id "aiwhKA7loO6r5HpS6k8_oQAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-12 14:51:33 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 154.227.129.237 (237-129-227-154.r.airtel.ug): ... show more (mod_security) mod_security (id:240335) triggered by 154.227.129.237 (237-129-227-154.r.airtel.ug): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 10:51:30.318059 2026] [security2:error] [pid 22435:tid 22435] [client 154.227.129.237:53792] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 154.227.129.237 (+1 hits since last alert)\|hsoftwaresystems.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "hsoftwaresystems.net"] [uri "/xmlrpc.php"] [unique_id "aiwc8mTZfoUYQJ1VxxuIUgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-12 14:03:58 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 154.227.129.237 (237-129-227-154.r.airtel.ug): ... show more (mod_security) mod_security (id:240335) triggered by 154.227.129.237 (237-129-227-154.r.airtel.ug): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 10:03:54.928064 2026] [security2:error] [pid 4903:tid 4903] [client 154.227.129.237:13504] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 154.227.129.237 (+1 hits since last alert)\|hotelkona.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "hotelkona.com"] [uri "/xmlrpc.php"] [unique_id "aiwRypCAA8QxSSWfrYyC7AAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-12 10:01:54 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 154.227.129.237 (237-129-227-154.r.airtel.ug): ... show more (mod_security) mod_security (id:240335) triggered by 154.227.129.237 (237-129-227-154.r.airtel.ug): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 06:01:49.503331 2026] [security2:error] [pid 29087:tid 29087] [client 154.227.129.237:5013] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 154.227.129.237 (+1 hits since last alert)\|techsunlimited.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "techsunlimited.net"] [uri "/xmlrpc.php"] [unique_id "aivZDfa2XeGaaXquyKKQ1wAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-06-12 09:52:05 (1 week ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇵🇾 SecOpsSL	2026-06-12 09:50:11 (1 week ago)	154.227.129.237 - - [12/Jun/2026:06:50:10 -0300] "POST /xmlrpc.php HTTP/1.1" 403 277 "-" "Jetpack by ... show more 154.227.129.237 - - [12/Jun/2026:06:50:10 -0300] "POST /xmlrpc.php HTTP/1.1" 403 277 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.3)" show less	Brute-Force Web App Attack
🇺🇸 lostswordfish.com	2026-06-12 08:50:06 (1 week ago)	Wordfence waf block on fairregistry	Web App Attack
🇺🇸 TPI-Abuse	2026-06-03 12:52:19 (2 weeks ago)	(mod_security) mod_security (id:240335) triggered by 154.227.129.237 (237-129-227-154.r.airtel.ug): ... show more (mod_security) mod_security (id:240335) triggered by 154.227.129.237 (237-129-227-154.r.airtel.ug): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 08:52:11.325608 2026] [security2:error] [pid 12555:tid 12555] [client 154.227.129.237:4886] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 154.227.129.237 (+1 hits since last alert)\|roguetechink.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "roguetechink.com"] [uri "/xmlrpc.php"] [unique_id "aiAje32agCqRoj3oWTe8CAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-06-03 12:40:19 (2 weeks ago)	(xmlrpc) Apache: Failed xmlrpc access from 154.227.129.237 (UG/Uganda/237-129-227-154.r.airtel.ug): ... show more (xmlrpc) Apache: Failed xmlrpc access from 154.227.129.237 (UG/Uganda/237-129-227-154.r.airtel.ug): 10 in the last 3600 secs (0-201) show less	Hacking

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.30

🇭🇰 172.253.5.25

🇮🇷 93.117.123.156

🇳🇱 45.148.10.157

🇺🇸 3.142.170.60

🇧🇷 187.58.241.90

🇫🇷 185.188.249.30

🇺🇸 162.216.150.184

🇵🇰 160.187.180.175

🇻🇪 153.67.5.61

🇸🇬 129.226.213.238

🇺🇸 107.150.103.88

🇳🇱 93.123.72.183

🇷🇺 45.89.70.254

🇩🇿 41.107.68.60

🇶🇦 34.18.62.244

🇺🇸 3.144.192.36

🇨🇭 209.99.185.98

🇦🇷 186.5.180.176

🇮🇩 182.10.100.98