JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 62.102.148.154

62.102.148.154 was found in our database!

This IP was reported 1,533 times. Confidence of Abuse is 23%: ?

23%

ISP	Kustbandet AB
Usage Type	Fixed Line ISP
ASN	AS51815
Domain Name	kustbandet.com
Country	🇸🇪 Sweden
City	Akersberga, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 62.102.148.154

Whois 62.102.148.154

IP Abuse Reports for 62.102.148.154:

This IP address has been reported a total of 1,533 times from 172 distinct sources. 62.102.148.154 was first reported on June 29th 2022, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 matthieul.dev	2026-07-04 22:35:20 (1 day ago)	Blocked by os-abuseipdb; 11 hits, proto=tcp, ports=1637	Port Scan Brute-Force
🇨🇳 pengpeng	2026-05-20 15:39:09 (1 month ago)	monitor: on VM-0-7-ubuntu \| port: 25596 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 25596 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇪🇸 masterguru	2026-05-07 06:39:25 (1 month ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-122) show less	Bad Web Bot
🇮🇹 VHosting	2026-05-07 06:35:03 (1 month ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇨🇦 Dolphi	2026-05-07 06:30:02 (1 month ago)	Excessive POST /xmlrpc.php requests	Brute-Force Web App Attack
🇩🇪 4server	2026-05-07 06:28:37 (1 month ago)	[ThuMay0708:28:30.7945902026][security2:error][pid3043:tid3140][client62.102.148.154:0]ModSecurity:A ... show more [ThuMay0708:28:30.7945902026][security2:error][pid3043:tid3140][client62.102.148.154:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"sisuconsulting.net\"][uri\"/xmlrpc.php\"][unique_id\"afwxDiSEGykWtKz0Mu6emwAAAMo\"] show less	Port Scan Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-05-07 06:28:05 (1 month ago)	(mod_security) mod_security (id:240335) triggered by 62.102.148.154 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 62.102.148.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 02:27:58.175274 2026] [security2:error] [pid 7475:tid 7475] [client 62.102.148.154:35428] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 62.102.148.154 (+1 hits since last alert)\|dandksupply.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "dandksupply.com"] [uri "/xmlrpc.php"] [unique_id "afww7oye214-bgdvT5J-lAAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 madeit	2026-04-12 01:45:46 (2 months ago)		Web App Attack
🇺🇸 Mundo Bueno	2026-04-12 01:43:44 (2 months ago)	[ISILIA Protection v2.1] Tentative d'accès: /xmlrpc.php \| Pays: SE \| UA: Go-http-client/1.1	Hacking Web App Attack
🇩🇪 4server	2026-04-12 01:41:45 (2 months ago)	[SunApr1203:41:40.9189322026][security2:error][pid3058775:tid3058781][client62.102.148.154:0]ModSecu ... show more [SunApr1203:41:40.9189322026][security2:error][pid3058775:tid3058781][client62.102.148.154:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"148\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"gagspettacolo.ch\"][uri\"/xmlrpc.php\"][unique_id\"adr4VD-tiS50_kvGI3cE8wAAAAM\"] show less	Port Scan Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-04-09 16:32:27 (2 months ago)	(mod_security) mod_security (id:240335) triggered by 62.102.148.154 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 62.102.148.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 09 12:32:22.257713 2026] [security2:error] [pid 4057376:tid 4057376] [client 62.102.148.154:55646] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 62.102.148.154 (+1 hits since last alert)\|jdeloa.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "jdeloa.com"] [uri "/xmlrpc.php"] [unique_id "adfUlkzuZPj3RTvyv1QJhQAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 madeit	2026-04-09 09:48:46 (2 months ago)		Web App Attack
🇨🇭 4server	2026-04-09 09:46:42 (2 months ago)	[ThuApr0911:46:35.8134632026][security2:error][pid2029160:tid2029264][client62.102.148.154:0]ModSecu ... show more [ThuApr0911:46:35.8134632026][security2:error][pid2029160:tid2029264][client62.102.148.154:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"231\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"edilmarra.ch\"][uri\"/xmlrpc.php\"][unique_id\"add1exkhojDwkgo-Wr514QAAAI4\"] show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-04-09 09:42:55 (2 months ago)	(mod_security) mod_security (id:240335) triggered by 62.102.148.154 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 62.102.148.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 09 05:42:51.315145 2026] [security2:error] [pid 358386:tid 358386] [client 62.102.148.154:60662] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 62.102.148.154 (+1 hits since last alert)\|fundingangelinvestors.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "fundingangelinvestors.com"] [uri "/xmlrpc.php"] [unique_id "add0mzcT-F2lniD_C1NMCwAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-08 05:36:35 (2 months ago)	(mod_security) mod_security (id:240335) triggered by 62.102.148.154 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 62.102.148.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 01:36:26.777966 2026] [security2:error] [pid 2419196:tid 2419196] [client 62.102.148.154:47112] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 62.102.148.154 (+1 hits since last alert)\|rocksolidhomebuilders.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "rocksolidhomebuilders.com"] [uri "/xmlrpc.php"] [unique_id "adXpWo8L6VamqnnpMtHVIAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 1533 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 211.46.188.16

🇳🇱 204.76.203.206

🇹🇭 203.154.158.195

🇻🇳 171.244.141.86

🇺🇸 129.121.102.3

🇨🇳 117.34.125.173

🇨🇳 114.220.238.21

🇮🇩 103.176.78.162

🇮🇶 65.20.148.53

🇧🇩 45.117.62.121

🇸🇬 43.128.88.177

🇧🇪 35.205.164.137

🇳🇱 20.23.229.100

🇸🇱 169.239.247.131

🇮🇳 122.184.118.126

🇨🇳 120.48.15.138

🇨🇳 112.124.70.111

🇺🇸 63.135.161.181

🇮🇳 59.183.228.193

🇫🇷 51.83.10.161