JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.134.0.78

103.134.0.78 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 24%: ?

24%

ISP	Prime Networks ISP
Usage Type	Fixed Line ISP
ASN	AS138590
Domain Name	prime.net.pk
Country	🇵🇰 Pakistan
City	Multan, Punjab

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.134.0.78

Whois 103.134.0.78

IP Abuse Reports for 103.134.0.78:

This IP address has been reported a total of 15 times from 11 distinct sources. 103.134.0.78 was first reported on June 4th 2026, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 kosada.com	2026-08-02 02:53:54 (3 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇷🇺 Reaper	2026-07-16 04:38:03 (1 month ago)	GET /boaform/admin/formLogin?username=admin%26psd=admin	Web App Attack
🇺🇸 TPI-Abuse	2026-07-12 23:08:21 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 103.134.0.78 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 103.134.0.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 12 19:08:14.174777 2026] [security2:error] [pid 29560:tid 29560] [client 103.134.0.78:29475] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.cajunpicasso.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.cajunpicasso.com"] [uri "/roslyns-choice-2/[email protected]"] [unique_id "alQeXmb1z8l8Yn63-XYxQAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-07 11:13:53 (1 month ago)	(mod_security) mod_security (id:240335) triggered by 103.134.0.78 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240335) triggered by 103.134.0.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 07:13:47.252006 2026] [security2:error] [pid 25792:tid 25792] [client 103.134.0.78:50033] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.134.0.78 (+1 hits since last alert)\|firebelly.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "firebelly.org"] [uri "/xmlrpc.php"] [unique_id "akzfa7u5TEqQcb66h8HXFgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 SpaceHost-Server	2026-07-07 08:54:22 (1 month ago)	103.134.0.78 - - [07/Jul/2026:10:54:01 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6476 "-" "Jetpack by W ... show more 103.134.0.78 - - [07/Jul/2026:10:54:01 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6476 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.4)" 103.134.0.78 - - [07/Jul/2026:10:54:10 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6476 "-" "WordPress.com; https://wordpress.com" 103.134.0.78 - - [07/Jul/2026:10:54:21 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6476 "-" "WordPress.com; https://wordpress.com" show less	Hacking Web App Attack
🇫🇷 SpaceHost-Server	2026-07-07 08:36:36 (1 month ago)	103.134.0.78 - - [07/Jul/2026:10:36:14 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6476 "-" "WordPress.co ... show more 103.134.0.78 - - [07/Jul/2026:10:36:14 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6476 "-" "WordPress.com; https://wordpress.com" 103.134.0.78 - - [07/Jul/2026:10:36:23 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6476 "-" "WordPress.com; https://wordpress.com" 103.134.0.78 - - [07/Jul/2026:10:36:34 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6476 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.3)" show less	Hacking Web App Attack
🇩🇪 Marc	2026-07-07 00:55:38 (1 month ago)	103.134.0.78 - - [07/Jul/2026:02:49:11 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3419 "-" "Jetpack by W ... show more 103.134.0.78 - - [07/Jul/2026:02:49:11 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3419 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.2)" 103.134.0.78 - - [07/Jul/2026:02:53:34 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3465 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.1)" 103.134.0.78 - - [07/Jul/2026:02:55:37 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3465 "-" "Jetpack by WordPress.com" show less	Brute-Force Web App Attack
🇦🇹 urnilxfgbez	2026-07-05 22:45:00 (1 month ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇺🇸 MPL	2026-07-05 02:59:59 (1 month ago)	tcp/23	Port Scan
Anonymous	2026-07-05 01:32:06 (1 month ago)	Port scan / connection attempts on port 23/TCP to unused IP	Port Scan
🇺🇸 Cyber Crusader	2026-06-16 11:41:12 (2 months ago)	Hundreds of Attempts (at least) to Connect to and Access Firewall Ports	Port Scan Hacking Brute-Force
Anonymous	2026-06-13 08:37:23 (2 months ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
🇦🇹 urnilxfgbez	2026-06-05 22:45:00 (2 months ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇬🇧 PeravixGroup	2026-06-04 22:22:19 (2 months ago)	Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: ME ... show more Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Brute-Force
Anonymous	2026-06-04 00:47:37 (2 months ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇹 213.176.26.82

🇦🇷 200.123.46.50

🇩🇪 162.19.241.120

🇨🇳 116.179.37.210

🇬🇧 62.60.130.253

🇺🇸 18.116.101.220

🇯🇵 202.239.44.126

🇺🇦 185.30.203.21

🇻🇳 183.91.186.36

🇺🇸 172.217.36.222

🇨🇱 160.19.203.185

🇺🇸 148.105.8.35

🇹🇼 111.70.9.143

🇩🇪 43.228.157.8

🇺🇸 34.85.204.16

🇵🇰 223.123.92.56

🇨🇳 218.73.76.5

🇮🇩 210.79.142.201

🇭🇰 199.45.154.64

🇺🇸 195.184.76.129