JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.113.0.38

103.113.0.38 was found in our database!

This IP was reported 109 times. Confidence of Abuse is 0%: ?

ISP	Tabnet Solutions Pvt. Ltd.
Usage Type	Fixed Line ISP
ASN	AS137171
Domain Name	tabnet.solutions
Country	🇮🇳 India
City	Kharagpur, West Bengal

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.113.0.38

Whois 103.113.0.38

IP Abuse Reports for 103.113.0.38:

This IP address has been reported a total of 109 times from 43 distinct sources. 103.113.0.38 was first reported on April 5th 2024, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇪 adaml1324	2026-04-23 19:14:42 (2 months ago)	TCP port scan detected	Port Scan
🇨🇳 ThreatBook.io	2025-12-26 23:26:25 (6 months ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/103.113.0.38	Brute-Force
🇳🇱 Cloud86 B.V.	2025-11-26 00:45:03 (7 months ago)	Email spam	Email Spam
🇦🇺 screwlooseit.com.au	2025-11-06 20:03:57 (8 months ago)	Blocked by CSF 13 firewall - Rule: WPLOGIN IN/India/-	Web App Attack
🇲🇾 syokadmin	2025-11-05 00:13:03 (8 months ago)	103.113.0.38 (IN/India/-), 5 distributed SMTP Logins on account [[email protected]] in the last 30 ... show more 103.113.0.38 (IN/India/-), 5 distributed SMTP Logins on account [[email protected]] in the last 300 secs show less	Brute-Force
🇺🇸 TPI-Abuse	2025-10-28 21:37:28 (8 months ago)	(mod_security) mod_security (id:225170) triggered by 103.113.0.38 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 103.113.0.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 28 17:37:12.523241 2025] [security2:error] [pid 19013:tid 19013] [client 103.113.0.38:50134] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|firstunitedreserve.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "firstunitedreserve.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aQE3iEvcQnCqj52MSKuU2QAAAAI"], referer: https://firstunitedreserve.com/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2025-10-07 18:33:35 (9 months ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 27	Exploited Host Web App Attack
🇩🇪 rh24	2025-10-07 18:23:48 (9 months ago)	(wordpress) Failed wordpress login from 103.113.0.38 (IN/India/-): (CF_ENABLE)	Brute-Force
🇺🇸 TPI-Abuse	2025-10-06 08:05:20 (9 months ago)	(mod_security) mod_security (id:225170) triggered by 103.113.0.38 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 103.113.0.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 06 04:05:06.326281 2025] [security2:error] [pid 3323522:tid 3323522] [client 103.113.0.38:39895] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|bernsteinip.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bernsteinip.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aON4Mv4viY7Xg6n_AdOFqQAAAA0"], referer: https://bernsteinip.com/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 rh24	2025-10-06 02:14:53 (9 months ago)	(wordpress) Failed wordpress login from 103.113.0.38 (IN/India/-): (CF_ENABLE)	Brute-Force
🇮🇹 VHosting	2025-10-05 23:11:32 (9 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇳🇱 Cloud86 B.V.	2025-09-30 18:55:04 (9 months ago)	Email spam	Email Spam
🇺🇸 nowyouknow	2025-09-26 23:20:22 (9 months ago)	(From [email protected])	Phishing Web Spam
🇲🇾 syokadmin	2025-09-20 01:58:05 (9 months ago)	103.113.0.38 (IN/India/-), 5 distributed SMTP Logins on account [[email protected]] in the ... show more 103.113.0.38 (IN/India/-), 5 distributed SMTP Logins on account [[email protected]] in the last 300 secs show less	Brute-Force
🇳🇱 maxxsense	2025-09-16 22:17:40 (9 months ago)	(wordpress) Failed wordpress login from 103.113.0.38 (IN/India/-)	Brute-Force

Showing 1 to 15 of 109 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.81

🇺🇸 157.245.245.246

🇹🇭 223.204.247.136

🇰🇷 222.108.147.76

🇧🇪 198.235.24.249

🇸🇪 185.202.108.41

🇵🇱 176.53.159.198

🇷🇴 151.242.30.56

🇫🇷 91.231.89.231

🇸🇪 31.220.15.62

🇺🇸 213.169.230.151

🇺🇸 205.185.125.209

🇧🇷 189.108.215.39

🇭🇰 152.32.186.240

🇦🇷 45.178.2.188

🇳🇱 45.148.10.141

🇰🇷 3.35.16.37

🇻🇳 113.164.66.10

🇮🇷 93.113.230.167

🇫🇮 65.108.252.22