JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 164.100.153.202

164.100.153.202 was found in our database!

This IP was reported 125 times. Confidence of Abuse is 82%: ?

82%

ISP	National Informatics Centre
Usage Type	Data Center/Web Hosting/Transit
ASN	AS4758
Domain Name	Unknown
Country	🇮🇳 India
City	Saiyad-ul-ajaib, Delhi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 164.100.153.202

Whois 164.100.153.202

IP Abuse Reports for 164.100.153.202:

This IP address has been reported a total of 125 times from 61 distinct sources. 164.100.153.202 was first reported on July 28th 2025, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 dynamix	2026-07-15 05:36:44 (2 hours ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇳🇱 Site.eu	2026-07-14 12:01:05 (20 hours ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇫🇷 Yepngo	2026-07-14 11:59:36 (20 hours ago)	164.100.153.202 - - [14/Jul/2026:13:59:32 +0200] "POST /xmlrpc.php HTTP/2.0" 200 410 "-" "Jetpack by ... show more 164.100.153.202 - - [14/Jul/2026:13:59:32 +0200] "POST /xmlrpc.php HTTP/2.0" 200 410 "-" "Jetpack by WordPress.com" 164.100.153.202 - - [14/Jul/2026:13:59:35 +0200] "POST /xmlrpc.php HTTP/2.0" 200 410 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.1)" ... show less	Brute-Force Web App Attack
Anonymous	2026-07-14 10:18:39 (21 hours ago)	(wordpress) Failed wordpress login from 164.100.153.202 (IN/India/-)	Brute-Force
🇺🇸 TPI-Abuse	2026-07-14 09:18:15 (22 hours ago)	(mod_security) mod_security (id:240335) triggered by 164.100.153.202 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 164.100.153.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 05:18:07.432267 2026] [security2:error] [pid 27080:tid 27080] [client 164.100.153.202:65179] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 164.100.153.202 (+1 hits since last alert)\|kh6jim.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "kh6jim.com"] [uri "/xmlrpc.php"] [unique_id "alX-zwBpgGIx2IY5zuNKzgAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-07-13 08:43:24 (1 day ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-07-10 05:26:18 (5 days ago)	(mod_security) mod_security (id:240335) triggered by 164.100.153.202 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 164.100.153.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 10 01:26:11.609308 2026] [security2:error] [pid 26042:tid 26042] [client 164.100.153.202:56582] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 164.100.153.202 (+1 hits since last alert)\|crittergetterpestcontrol.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "crittergetterpestcontrol.com"] [uri "/xmlrpc.php"] [unique_id "alCCc5em3mvVRYe8Go-cKwAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 rh24	2026-07-07 11:43:16 (1 week ago)	(xmlrpc_405) XMLRPC-Bot 405 164.100.153.202 (IN/India/-)	Hacking
Anonymous	2026-07-07 10:46:31 (1 week ago)	[da.kdns.gr] httpd-xmlrpc-post: sites=www.diadromi.com; logs=/var/log/httpd/domains/diadromi.com.log ... show more [da.kdns.gr] httpd-xmlrpc-post: sites=www.diadromi.com; logs=/var/log/httpd/domains/diadromi.com.log; samples=/xmlrpc.php show less	Brute-Force Web App Attack
Anonymous	2026-07-06 07:40:20 (1 week ago)	Attac	Brute-Force
Anonymous	2026-07-06 07:38:27 (1 week ago)	Fail2ban filtered ...	Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 07:06:41 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 164.100.153.202 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 164.100.153.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 03:06:35.857028 2026] [security2:error] [pid 8868:tid 8868] [client 164.100.153.202:55279] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 164.100.153.202 (+1 hits since last alert)\|paleopathologist.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "paleopathologist.com"] [uri "/xmlrpc.php"] [unique_id "akdfe-sbFyE2kSob4mblXwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 06:34:17 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 164.100.153.202 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 164.100.153.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 02:34:11.163786 2026] [security2:error] [pid 21356:tid 21478] [client 164.100.153.202:63637] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 164.100.153.202 (+1 hits since last alert)\|coloradomountain.homes\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "coloradomountain.homes"] [uri "/xmlrpc.php"] [unique_id "akdX42h-dMUqhNv3pIfAegAAAoU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 08:09:39 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 164.100.153.202 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 164.100.153.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 04:09:32.988225 2026] [security2:error] [pid 26232:tid 26311] [client 164.100.153.202:50539] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 164.100.153.202 (+1 hits since last alert)\|frannykingsmith.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "frannykingsmith.com"] [uri "/xmlrpc.php"] [unique_id "akYcvLDyAUp9TvkxcK0t0gAAAJM"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-07-02 08:08:32 (1 week ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH

Showing 1 to 15 of 125 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.57

🇺🇸 153.66.28.132

🇮🇳 103.232.245.164

🇬🇧 45.133.173.64

🇮🇳 3.109.139.101

🇷🇴 2.57.122.209

🇳🇱 2a00:1450:4013:c1c::12c

🇹🇷 176.239.246.180

🇩🇪 140.248.227.58

🇩🇪 140.248.75.94

🇺🇸 66.132.172.120

🇺🇸 64.62.197.174

🇦🇹 2a09:bac5:fa:478::72:fe

🇺🇸 2a04:4e40:e040:0:e70:d895:c255:a5b2

🇳🇱 195.178.110.227

🇩🇪 172.111.80.58

🇵🇭 136.158.41.171

🇨🇳 124.237.99.4

🇳🇬 102.217.204.7

🇪🇸 88.30.55.234