JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.198.154.136

103.198.154.136 was found in our database!

This IP was reported 33 times. Confidence of Abuse is 29%: ?

29%

ISP	PLAY BROADBAND (PRIVATE) LIMITED
Usage Type	Fixed Line ISP
ASN	AS151330
Domain Name	pbb.net.pk
Country	🇵🇰 Pakistan
City	Lahore, Punjab

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.198.154.136

Whois 103.198.154.136

IP Abuse Reports for 103.198.154.136:

This IP address has been reported a total of 33 times from 19 distinct sources. 103.198.154.136 was first reported on July 27th 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 alferez	2026-06-04 15:51:33 (1 month ago)	Multiple WP Login Attack	Brute-Force
🇺🇸 TPI-Abuse	2026-06-04 06:42:12 (1 month ago)	(mod_security) mod_security (id:240335) triggered by 103.198.154.136 (103.198.154.136-pbb.net.pk): 1 ... show more (mod_security) mod_security (id:240335) triggered by 103.198.154.136 (103.198.154.136-pbb.net.pk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 02:42:05.405912 2026] [security2:error] [pid 14660:tid 14675] [client 103.198.154.136:6994] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.198.154.136 (+1 hits since last alert)\|killasgarage.bike\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "killasgarage.bike"] [uri "/xmlrpc.php"] [unique_id "aiEePanfNMqtu-dwfDiZRQAAAcA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-02 08:14:33 (1 month ago)	Attac	Brute-Force
Anonymous	2026-06-01 07:20:03 (1 month ago)	Blocked: Reason='Vulnerability probing — PHP scan detected (124/60 min)'; Requests=124	Port Scan
🇺🇸 TPI-Abuse	2026-05-29 18:00:29 (1 month ago)	(mod_security) mod_security (id:240335) triggered by 103.198.154.136 (103.198.154.136-pbb.net.pk): 1 ... show more (mod_security) mod_security (id:240335) triggered by 103.198.154.136 (103.198.154.136-pbb.net.pk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 29 14:00:25.928220 2026] [security2:error] [pid 9284:tid 9284] [client 103.198.154.136:65038] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.198.154.136 (+1 hits since last alert)\|snowrideadventures.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "snowrideadventures.com"] [uri "/xmlrpc.php"] [unique_id "ahnUOfdNUNXAXV4i-8CLaQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-05-29 14:44:59 (1 month ago)	Attac	Brute-Force
🇺🇸 TPI-Abuse	2026-05-28 22:44:03 (1 month ago)	(mod_security) mod_security (id:240335) triggered by 103.198.154.136 (103.198.154.136-pbb.net.pk): 1 ... show more (mod_security) mod_security (id:240335) triggered by 103.198.154.136 (103.198.154.136-pbb.net.pk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 28 18:43:55.639856 2026] [security2:error] [pid 28107:tid 28107] [client 103.198.154.136:48509] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.198.154.136 (+1 hits since last alert)\|lowkeytiki.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "lowkeytiki.com"] [uri "/xmlrpc.php"] [unique_id "ahjFK7UM-Ug1jkJS-gRruAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-26 22:08:04 (1 month ago)	(mod_security) mod_security (id:240335) triggered by 103.198.154.136 (103.198.154.136-pbb.net.pk): 1 ... show more (mod_security) mod_security (id:240335) triggered by 103.198.154.136 (103.198.154.136-pbb.net.pk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 26 18:07:55.538040 2026] [security2:error] [pid 24092:tid 24092] [client 103.198.154.136:53604] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.198.154.136 (+1 hits since last alert)\|bayareamustangs.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "bayareamustangs.com"] [uri "/xmlrpc.php"] [unique_id "ahYZu_9DJu96qxlfO_djXAAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 ConsulHosting	2026-05-24 16:50:54 (1 month ago)	Excessive failed CAPTCHA attempts (CAPTCHA DoS)	Web App Attack
🇩🇪 grassau.com	2026-05-24 13:04:38 (1 month ago)	(wordpress) Failed wordpress login from 103.198.154.136 (PK/Pakistan/Punjab/Lahore/103.198.154.136-p ... show more (wordpress) Failed wordpress login from 103.198.154.136 (PK/Pakistan/Punjab/Lahore/103.198.154.136-pbb.net.pk) show less	Brute-Force
🇩🇪 rh24	2026-05-23 22:07:21 (1 month ago)	(wordpress) Failed wordpress login from 103.198.154.136 (PK/Pakistan/103.198.154.136-pbb.net.pk): ( ... show more (wordpress) Failed wordpress login from 103.198.154.136 (PK/Pakistan/103.198.154.136-pbb.net.pk): (CF_ENABLE) show less	Brute-Force
🇺🇸 TPI-Abuse	2026-05-23 21:12:21 (1 month ago)	(mod_security) mod_security (id:240335) triggered by 103.198.154.136 (103.198.154.136-pbb.net.pk): 1 ... show more (mod_security) mod_security (id:240335) triggered by 103.198.154.136 (103.198.154.136-pbb.net.pk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 23 17:12:17.538187 2026] [security2:error] [pid 22270:tid 22270] [client 103.198.154.136:15783] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.198.154.136 (+1 hits since last alert)\|dorismitchell.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "dorismitchell.com"] [uri "/xmlrpc.php"] [unique_id "ahIYMcwen3dUtNJF1ERPjQAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-05-23 18:06:55 (1 month ago)	Attac	Brute-Force
🇫🇷 applemooz	2026-05-20 08:26:31 (1 month ago)	WordPress XMLRPC Brute Force Attacks ...	Brute-Force Web App Attack
Anonymous	2026-05-20 05:40:46 (1 month ago)	Attac	Brute-Force

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇴 181.188.162.173

🇺🇸 147.185.132.33

🇮🇩 103.187.165.26

🇺🇸 103.143.10.140

🇬🇧 81.19.219.217

🇧🇪 34.156.133.92

🇺🇸 205.210.31.77

🇸🇪 193.183.186.142

🇩🇴 187.63.159.18

🇬🇧 185.247.137.205

🇩🇪 185.242.3.195

🇻🇳 171.239.7.114

🇮🇩 163.7.0.179

🇳🇱 160.119.69.14

🇺🇸 154.83.197.54

🇻🇳 116.105.190.40

🇮🇳 113.21.78.72

🇨🇳 111.13.109.162

🇫🇷 91.231.89.225

🇹🇷 81.214.38.139