AbuseIPDB » 39.34.160.54
39.34.160.54 was found in our database!
This IP was reported 5 times. Confidence of
Abuse
is 0% : ?
ISP
Pakistan Telecommuication company limited
Usage Type
Fixed Line ISP
ASN
AS141450
Domain Name
ptcl.net.pk
Country
๐ต๐ฐ
Pakistan
City
Karachi, Sindh
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 39.34.160.54 :
This IP address has been reported a total of
5
times from
5 distinct
sources.
39.34.160.54 was first reported on
March 3rd 2026 , and the most recent report was
3 months ago .
Old Reports:
The most recent abuse report for this IP address is from
3 months ago
. It is possible that this IP is no longer involved in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
๐จ๐ฆ
Paulo Henrique dos Santos Nichio
2026-05-12 20:19:06
(3 months ago)
(ls_brute) LiteSpeed Brute Force Attack 39.34.160.54 (PK/Pakistan/-): 3 in the last 600 secs; Ports: ...
show more
(ls_brute) LiteSpeed Brute Force Attack 39.34.160.54 (PK/Pakistan/-): 3 in the last 600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 2026-05-12 17:18:41.906582 [WARN] [681271] [T0] [39.34.160.54:58132-29#APVH_www.nowradios.com.br:443] Brute force detected for IP [39.34.160.54], throttle.
2026-05-12 17:18:52.920922 [WARN] [681271] [T0] [39.34.160.54:58132-30#APVH_www.nowradios.com.br:443] Brute force detected for IP [39.34.160.54], throttle.
2026-05-12 17:19:02.903553 [WARN] [681271] [T0] [39.34.160.54:58132-31#APVH_www.nowradios.com.br:443] Brute force detected for IP [39.34.160.54], throttle.
show less
Port Scan
๐บ๐ธ
TPI-Abuse
2026-05-11 20:25:40
(3 months ago)
(mod_security) mod_security (id:240335) triggered by 39.34.160.54 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:240335) triggered by 39.34.160.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 11 16:25:36.561480 2026] [security2:error] [pid 14796:tid 14796] [client 39.34.160.54:58321] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 39.34.160.54 (+1 hits since last alert)|ismaelcavazos.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "ismaelcavazos.com"] [uri "/xmlrpc.php"] [unique_id "agI7QHUMNcidEDYxQ5--CQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
graphics-muse.org
2026-05-11 16:48:52
(3 months ago)
Mon May 11 10:48:30.079267 202639.34.160.54 - - [11/May/2026:10:48:30 -0600] "POST /xmlrpc.php HTTP/ ...
show more
Mon May 11 10:48:30.079267 202639.34.160.54 - - [11/May/2026:10:48:30 -0600] "POST /xmlrpc.php HTTP/1.1" 200 446
Mon May 11 10:48:30.079267 202639.34.160.54 - - [11/May/2026:10:48:30 -0600] "POST /xmlrpc.php HTTP/1.1" 200 3377 "-" "Jetpack/12.0; WordPress/6.2; http://site73665636.com"
Mon May 11 10:48:40.469521 202639.34.160.54 - - [11/May/2026:10:48:40 -0600] "POST /xmlrpc.php HTTP/1.1" 200 446
Mon May 11 10:48:40.469521 202639.34.160.54 - - [11/May/2026:10:48:40 -0600] "POST /xmlrpc.php HTTP/1.1" 200 3377 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.1)"
Mon May 11 10:48:51.261177 202639.34.160.54 - - [11/May/2026:10:48:51 -0600] "POST /xmlrpc.php HTTP/1.1" 200 446
Mon May 11 10:48:51.261177 202639.34.160.54 - - [11/May/2026:10:48:51 -0600] "POST /xmlrpc.php HTTP/1.1" 200 3376 "-" "Jetpack by WordPress.com"
...
show less
Brute-Force
Web App Attack
๐ณ๐ฑ
wlt-blocker
2026-05-11 16:17:36
(3 months ago)
Unauthorized access to webpage admin
Web App Attack
๐บ๐ธ
matt
2026-03-03 23:52:14
(5 months ago)
DDOS attack with query parameters attempting to overload WordPress site.
DDoS Attack
Showing 1 to
5
of 5 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ
Recently Reported IPs: