JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

103.134.207.154

Activity Trending Down

Abuse Confidence Score

48% Elevated

26 reports

21 reporters · latest 1 week ago

ISP: Orange Broadband Co.,Ltd
Usage Type: Fixed Line ISP
ASN: AS136480
Domain Name: orangebroadband.com.mm
Country: 🇲🇲 Myanmar
City: Yangon, Yangon

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

26 from 21 distinct reporters

First reported

April 26th 2026

Most recent report

1 week ago

Last 60 days

Top reporter locations 🇩🇪 Germany 3 🇫🇷 France 3 🇬🇧 United Kingdom of Great Britain and Northern Ireland 2

Most common categories Port Scan 5 Brute-Force 3 DDoS Attack 3 Web App Attack 3 Bad Web Bot 3

Old reports The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇹 urnilxfgbez	2026-10-27 23:45:00 (1 week ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇺🇸 HamSammich	2026-10-27 05:42:48 (1 week ago)	Automated sensor: 2 telnet connection/probe attempts over the last 24h (latest 2026-10-27T05:42Z).	Port Scan IoT Targeted
🇫🇷 LRob	2026-10-18 03:35:59 (2 weeks ago)	Not following 301 redirects — wasted requests \| method: GET \| path: /wp-login.php \| ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36	Bad Web Bot
🇩🇪 FeG Deutschland	2026-10-18 01:57:53 (2 weeks ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257	Exploited Host Web App Attack
🇬🇧 Celtic	2026-10-17 10:46:27 (2 weeks ago)	Blocked by Fail2Ban with Jail (plesk-modsecurity)	Brute-Force SSH
🇬🇧 gigatech	2026-10-16 17:10:03 (2 weeks ago)	Webserver Probing	Web App Attack
🇺🇸 TPI-Abuse	2026-10-13 07:06:58 (3 weeks ago)	(mod_security) mod_security (id:225170) triggered by 103.134.207.154 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 03:06:54.846924 2026] [security2:error] [pid 13337:tid 13337] [client 103.134.207.154:5451 ... show more (mod_security) mod_security (id:225170) triggered by 103.134.207.154 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 03:06:54.846924 2026] [security2:error] [pid 13337:tid 13337] [client 103.134.207.154:54518] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|sneedvillefarmersmarket.daisydoesoap.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sneedvillefarmersmarket.daisydoesoap.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "as3Yjpp8NQugOqRUQMeqIwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Packets-Decreaser.NET	2026-10-11 01:21:23 (3 weeks ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇫🇷 Tilellit.PRO	2026-10-03 00:54:11 (1 month ago)	WooCommerce YITH AJAX Filder product_cat filter flood attempt with taxonomies	DDoS Attack Bad Web Bot
Anonymous	2026-09-24 01:51:21 (1 month ago)	denied Telnet access attempt. destination port 23.	Port Scan Brute-Force
🇫🇮 saamkuu	2026-09-21 05:50:40 (1 month ago)	DDoS botnet: TCP connection flood, 42 connections to port 443.	DDoS Attack
🇵🇱 ToJa	2026-09-10 08:27:55 (1 month ago)	SSH (tcp/22) Honeypot Trap: Sep 10 10:27:54 server1 sshd-session[382908]: Connection closed by 103.134.207.154 port 56114	Port Scan SSH
🇫🇷 vtchost.com	2026-09-09 05:19:28 (1 month ago)	portscan ...	Port Scan
🇬🇪 ORDUNET	2026-09-03 19:59:33 (2 months ago)	Botnet UDP flood (DDoS) against a hosted game server at 185.143.177.x:27004/udp in AS203136 (LLC Ordunet), Georgia. This source sustained more than 150 packets/sec toward that single UDP port and was one of 3229 distinct sources from 1488 autonomous ... show more Botnet UDP flood (DDoS) against a hosted game server at 185.143.177.x:27004/udp in AS203136 (LLC Ordunet), Georgia. This source sustained more than 150 packets/sec toward that single UDP port and was one of 3229 distinct sources from 1488 autonomous systems in 139 countries taking part in a coordinated flood on 2026-09-03/04. Our border router discarded 184 million packets (149 GB) of this attack traffic in 24 hours. Detected on a MikroTik RouterOS router by per-source rate accounting in the raw/prerouting chain (dst-limit 150,50,src-address/10s); the timestamp is the moment this source crossed the threshold, timezone +04:00. This is not a port scan and not a brute-force attempt - it is a packet flood, so the host is almost certainly compromised and part of a botnet. Full packet-level evidence available on request to [email protected]. show less	DDoS Attack Exploited Host
Anonymous	2026-09-02 10:24:09 (2 months ago)	denied Telnet access attempt. destination port 23.	Port Scan Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇵 202.70.78.237

🇹🇼 198.235.24.78

🇵🇦 194.165.16.161

🇩🇪 178.104.126.123

🇮🇹 151.28.161.125

🇵🇰 139.135.44.3

🇨🇭 132.243.161.98

🇻🇳 103.154.62.14

🇺🇸 98.180.248.248

🇫🇷 91.196.152.136

🇦🇪 83.110.148.61

🇫🇷 78.232.34.184

🇳🇱 77.67.26.71

🇺🇸 45.148.125.75

🇺🇸 20.29.29.221

🇺🇸 216.73.217.52

🇧🇪 198.235.24.151

🇹🇳 197.7.40.158

🇧🇷 187.8.64.94

🇸🇬 157.245.148.231