JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.137.63.101

103.137.63.101 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 0%: ?

ISP	Pittqiao Network Information Co.,Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS131642
Hostname(s)	103-137-63-101.dynamic-ip.pni.tw
Domain Name	pni.com.tw
Country	🇹🇼 Taiwan
City	Taipei, Taiwan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.137.63.101

Whois 103.137.63.101

IP Abuse Reports for 103.137.63.101:

This IP address has been reported a total of 17 times from 9 distinct sources. 103.137.63.101 was first reported on October 19th 2024, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2025-01-12 15:45:12 (1 year ago)	Ports: 25,110,143,993,995; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇬🇧 PulseServers	2024-11-07 04:53:38 (1 year ago)	Malicious Web Traffic - Exploit probing, request floods, etc. on a server hosted by PulseServers.com ... show more Malicious Web Traffic - Exploit probing, request floods, etc. on a server hosted by PulseServers.com - ISUK1 ... show less	DDoS Attack Exploited Host
🇺🇸 TPI-Abuse	2024-10-28 07:16:44 (1 year ago)	(mod_security) mod_security (id:240335) triggered by 103.137.63.101 (103-137-63-101.static.pni.tw): ... show more (mod_security) mod_security (id:240335) triggered by 103.137.63.101 (103-137-63-101.static.pni.tw): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 28 03:16:38.629088 2024] [security2:error] [pid 1289:tid 1289] [client 103.137.63.101:56156] [client 103.137.63.101] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.137.63.101 (+1 hits since last alert)\|www.lenorasflowers.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.lenorasflowers.com"] [uri "/xmlrpc.php"] [unique_id "Zx86Vsh4e485QtLqwoqFlgAAAB8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-10-26 11:16:57 (1 year ago)	(mod_security) mod_security (id:240335) triggered by 103.137.63.101 (103-137-63-101.static.pni.tw): ... show more (mod_security) mod_security (id:240335) triggered by 103.137.63.101 (103-137-63-101.static.pni.tw): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 26 07:16:50.036708 2024] [security2:error] [pid 30825:tid 30825] [client 103.137.63.101:49802] [client 103.137.63.101] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.137.63.101 (+1 hits since last alert)\|www.tulameenvalleysales.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.tulameenvalleysales.com"] [uri "/xmlrpc.php"] [unique_id "ZxzPoiuR0gjym6AKoqnsfAAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 MAGIC	2024-10-26 04:06:37 (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2024-10-25 13:45:07 (1 year ago)	(mod_security) mod_security (id:240335) triggered by 103.137.63.101 (103-137-63-101.static.pni.tw): ... show more (mod_security) mod_security (id:240335) triggered by 103.137.63.101 (103-137-63-101.static.pni.tw): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 25 09:44:59.909373 2024] [security2:error] [pid 28047:tid 28047] [client 103.137.63.101:45888] [client 103.137.63.101] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.137.63.101 (+1 hits since last alert)\|www.platinummedicalevaluations.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.platinummedicalevaluations.com"] [uri "/xmlrpc.php"] [unique_id "Zxug2_EZS8a_PbILPiexbQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-10-25 07:35:25 (1 year ago)	[redacted] 103.137.63.101 - - [25/Oct/2024:09:35:04 +0200] "POST /xmlrpc.php HTTP/1.1" 200 170 "-" " ... show more [redacted] 103.137.63.101 - - [25/Oct/2024:09:35:04 +0200] "POST /xmlrpc.php HTTP/1.1" 200 170 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.6613.138 Safari/537.36" [redacted] 103.137.63.101 - - [25/Oct/2024:09:35:07 +0200] "POST /xmlrpc.php HTTP/1.1" 200 170 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.6613.138 Safari/537.36" [redacted] 103.137.63.101 - - [25/Oct/2024:09:35:09 +0200] "POST /xmlrpc.php HTTP/1.1" 200 170 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.6613.138 Safari/537.36" [redacted] 103.137.63.101 - - [25/Oct/2024:09:35:11 +0200] "POST /xmlrpc.php HTTP/1.1" 200 170 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.6613.138 Safari/537.36" [redacted] 103.137.63.101 - - [25/Oct/2024:09:35:13 +0200] "POST /xmlrpc.php HTTP/1.1" 200 170 "-" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2024-10-23 14:25:26 (1 year ago)	(mod_security) mod_security (id:240335) triggered by 103.137.63.101 (103-137-63-101.static.pni.tw): ... show more (mod_security) mod_security (id:240335) triggered by 103.137.63.101 (103-137-63-101.static.pni.tw): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 23 10:25:20.345876 2024] [security2:error] [pid 23076:tid 23091] [client 103.137.63.101:45780] [client 103.137.63.101] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.137.63.101 (+1 hits since last alert)\|orthopedica.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "orthopedica.org"] [uri "/xmlrpc.php"] [unique_id "ZxkHUE0Rh7MdeEucDQJIVAAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 MAGIC	2024-10-22 17:04:34 (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2024-10-22 10:04:10 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-10-21 07:39:17 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇳🇱 maxxsense	2024-10-21 00:32:00 (1 year ago)	(wordpress) Failed wordpress login from 103.137.63.101 (TW/Taiwan/103-137-63-101.static.pni.tw)	Brute-Force
🇳🇱 BlueWire Hosting	2024-10-20 14:10:06 (1 year ago)	Probing for Wordpress vulnerabilities	Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2024-10-20 10:35:01 (1 year ago)	Looking for CMS/PHP/SQL vulnerablilities - 13	Exploited Host Web App Attack
Anonymous	2024-10-20 07:36:53 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 171.244.143.209

🇺🇸 162.216.149.86

🇺🇸 103.143.11.150

🇩🇪 69.5.169.165

🇦🇹 68.210.200.55

🇳🇱 51.15.59.186

🇳🇱 45.148.10.157

🇺🇸 20.65.195.123

🇧🇪 198.235.24.166

🇷🇺 185.248.19.60

🇺🇸 185.246.174.132

🇭🇰 185.227.153.56

🇧🇷 160.238.25.59

🇵🇰 116.71.136.125

🇫🇷 91.231.89.104

🇩🇪 69.5.169.42

🇺🇸 64.62.197.69

🇯🇵 8.216.5.94

🇬🇧 5.226.140.62

🇸🇬 217.216.111.63