JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.110.242.164

103.110.242.164 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 55%: ?

55%

ISP	Imperium Digital Network Pvt Ltd
Usage Type	Fixed Line ISP
ASN	AS137122
Domain Name	idnpl.in
Country	🇮🇳 India
City	Pimpri, Maharashtra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.110.242.164

Whois 103.110.242.164

IP Abuse Reports for 103.110.242.164:

This IP address has been reported a total of 14 times from 11 distinct sources. 103.110.242.164 was first reported on October 2nd 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 SpaceHost-Server	2026-06-26 22:25:10 (2 days ago)		Brute-Force Web App Attack
🇩🇪 4server	2026-06-26 09:13:48 (3 days ago)	[FriJun2611:13:45.2489822026][security2:error][pid2950856:tid2950875][client103.110.242.164:0]ModSec ... show more [FriJun2611:13:45.2489822026][security2:error][pid2950856:tid2950875][client103.110.242.164:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"feldenkraistherapy.ch\"][uri\"/xmlrpc.php\"][unique_id\"aj5CycWgT28xs12GrxfKVwAAAQw\"] show less	Port Scan Brute-Force Web App Attack
🇫🇷 SpaceHost-Server	2026-06-25 22:25:08 (3 days ago)		Brute-Force Web App Attack
🇫🇷 dynamix	2026-06-25 04:09:22 (4 days ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
Anonymous	2026-06-20 12:05:04 (1 week ago)	Blocked: Reason='Vulnerability probing — PHP scan detected (12/60 min)'; Requests=12	Port Scan
🇺🇸 TPI-Abuse	2026-06-20 04:54:23 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 103.110.242.164 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 103.110.242.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 00:54:13.197038 2026] [security2:error] [pid 25681:tid 25681] [client 103.110.242.164:59456] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|splashstation.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "splashstation.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ajYc9agIDYXxnt0CxEcnNwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇪 vaia.cloud	2026-06-19 09:11:01 (1 week ago)	trying wp-login.php/xmlrpc.php 44 times in 1 minutes	Brute-Force Web App Attack
Anonymous	2026-06-19 07:57:05 (1 week ago)	Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1	Hacking Web App Attack
Anonymous	2026-06-18 11:34:07 (1 week ago)	[ssd1.kdns.gr] httpd-xmlrpc-post: sites=nbmedical.gr; logs=/var/log/httpd/domains/nbmedical.gr.log; ... show more [ssd1.kdns.gr] httpd-xmlrpc-post: sites=nbmedical.gr; logs=/var/log/httpd/domains/nbmedical.gr.log; samples=/xmlrpc.php show less	Brute-Force Web App Attack
🇩🇪 wlt-blocker	2026-06-18 04:55:08 (1 week ago)	Unauthorized access to webpage admin	Web App Attack
🇺🇸 TPI-Abuse	2026-06-17 06:18:19 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 103.110.242.164 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 103.110.242.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 02:18:09.782605 2026] [security2:error] [pid 25868:tid 25868] [client 103.110.242.164:58448] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|vm-srl.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vm-srl.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajI8IT9ZIG0VptQRCXZcOgAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Kenshin869	2026-06-15 09:09:50 (2 weeks ago)	Wordpress unauthorized access attempt	Brute-Force
🇺🇸 TPI-Abuse	2026-06-15 06:05:42 (2 weeks ago)	(mod_security) mod_security (id:225170) triggered by 103.110.242.164 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 103.110.242.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 02:05:33.756919 2026] [security2:error] [pid 20668:tid 20776] [client 103.110.242.164:61606] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|jimlawrencesongs.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jimlawrencesongs.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai-WLeNt_9w410CO5Tr3JwAAAhE"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 exxos	2025-10-02 07:03:01 (8 months ago)	Attacks with Bad user agents	Hacking

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.218.206.107

🇺🇸 195.184.76.212

🇳🇱 195.178.110.30

🇬🇧 178.62.89.9

🇧🇷 143.105.141.69

🇮🇳 113.193.209.152

🇻🇳 103.109.31.96

🇺🇸 71.6.232.30

🇺🇸 47.77.228.238

🇳🇱 45.148.10.151

🇸🇬 43.134.39.34

🇮🇩 39.194.1.71

🇻🇳 2402:800:634c:6349:9313:435c:5813:49be

🇧🇷 177.22.168.95

🇺🇦 176.103.7.55

🇭🇰 165.154.43.179

🇮🇳 150.242.72.89

🇺🇸 137.184.216.19

🇮🇳 103.59.202.215

🇹🇷 94.154.43.140