JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.149.16.77

103.149.16.77 was found in our database!

This IP was reported 44 times. Confidence of Abuse is 54%: ?

54%

ISP	MITHRIL TELECOMMUNICATIONS PVT. LTD.
Usage Type	Fixed Line ISP
ASN	AS140174
Hostname(s)	77.16.149.103-in-addr.arpa-mithriltele.net
Domain Name	mithriltele.com
Country	🇮🇳 India
City	Ramgundam, Telangana

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.149.16.77

Whois 103.149.16.77

IP Abuse Reports for 103.149.16.77:

This IP address has been reported a total of 44 times from 24 distinct sources. 103.149.16.77 was first reported on March 4th 2026, and the most recent report was 20 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 masterguru	2026-07-22 16:46:54 (20 hours ago)	(xmlrpc) Failed xmlrpc access from 103.149.16.77 (IN/India/77.16.149.103-in-addr.arpa-mithriltele.ne ... show more (xmlrpc) Failed xmlrpc access from 103.149.16.77 (IN/India/77.16.149.103-in-addr.arpa-mithriltele.net): 5 in the last 3600 secs (0-122) show less	Hacking
🇪🇸 masterguru	2026-07-21 10:38:16 (2 days ago)	(xmlrpc) Failed xmlrpc access from 103.149.16.77 (IN/India/77.16.149.103-in-addr.arpa-mithriltele.ne ... show more (xmlrpc) Failed xmlrpc access from 103.149.16.77 (IN/India/77.16.149.103-in-addr.arpa-mithriltele.net): 5 in the last 3600 secs (0-122) show less	Hacking
🇩🇪 ghostwarriors	2026-07-20 04:50:33 (3 days ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-20 04:23:56 (3 days ago)	Fail2Ban: WordPress XML-RPC brute-force attack detected.	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-18 13:07:04 (4 days ago)	(mod_security) mod_security (id:240335) triggered by 103.149.16.77 (77.16.149.103-in-addr.arpa-mithr ... show more (mod_security) mod_security (id:240335) triggered by 103.149.16.77 (77.16.149.103-in-addr.arpa-mithriltele.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 09:06:56.945577 2026] [security2:error] [pid 24229:tid 24229] [client 103.149.16.77:61840] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.149.16.77 (+1 hits since last alert)\|jimrichardart.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "jimrichardart.com"] [uri "/xmlrpc.php"] [unique_id "alt6cAEQkteTh_ko7EVHLAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 integrantservices.com	2026-07-18 09:30:33 (5 days ago)	(wordpress) Failed wordpress login from 103.149.16.77 (IN/India/77.16.149.103-in-addr.arpa-mithrilte ... show more (wordpress) Failed wordpress login from 103.149.16.77 (IN/India/77.16.149.103-in-addr.arpa-mithriltele.net) show less	Brute-Force
🇺🇸 TPI-Abuse	2026-07-18 05:14:29 (5 days ago)	(mod_security) mod_security (id:240335) triggered by 103.149.16.77 (77.16.149.103-in-addr.arpa-mithr ... show more (mod_security) mod_security (id:240335) triggered by 103.149.16.77 (77.16.149.103-in-addr.arpa-mithriltele.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 01:14:21.224214 2026] [security2:error] [pid 222862:tid 222862] [client 103.149.16.77:52294] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.149.16.77 (+1 hits since last alert)\|gellertdealers.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "gellertdealers.com"] [uri "/xmlrpc.php"] [unique_id "alsLrYeZkKiWIqhO1GlQ6AAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-17 12:58:47 (5 days ago)		Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-07-17 05:50:49 (6 days ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-17 05:47:55 (6 days ago)	Fail2Ban: WordPress XML-RPC brute-force attack detected.	Bad Web Bot Web App Attack
🇪🇸 masterguru	2026-07-05 13:48:31 (2 weeks ago)	(xmlrpc) Failed xmlrpc access from 103.149.16.77 (IN/India/77.16.149.103-in-addr.arpa-mithriltele.ne ... show more (xmlrpc) Failed xmlrpc access from 103.149.16.77 (IN/India/77.16.149.103-in-addr.arpa-mithriltele.net): 5 in the last 3600 secs (0-122) show less	Hacking
🇺🇸 TPI-Abuse	2026-07-03 04:06:55 (2 weeks ago)	(mod_security) mod_security (id:240335) triggered by 103.149.16.77 (77.16.149.103-in-addr.arpa-mithr ... show more (mod_security) mod_security (id:240335) triggered by 103.149.16.77 (77.16.149.103-in-addr.arpa-mithriltele.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 00:06:49.601221 2026] [security2:error] [pid 4082:tid 4100] [client 103.149.16.77:61212] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.149.16.77 (+1 hits since last alert)\|kettlehill.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "kettlehill.com"] [uri "/xmlrpc.php"] [unique_id "akc1Wf88je9y0yEGqRV8lQAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-01 15:46:46 (3 weeks ago)	(mod_security) mod_security (id:240335) triggered by 103.149.16.77 (77.16.149.103-in-addr.arpa-mithr ... show more (mod_security) mod_security (id:240335) triggered by 103.149.16.77 (77.16.149.103-in-addr.arpa-mithriltele.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 11:46:42.408167 2026] [security2:error] [pid 29986:tid 29986] [client 103.149.16.77:63909] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.149.16.77 (+1 hits since last alert)\|brianwhitty.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "brianwhitty.com"] [uri "/xmlrpc.php"] [unique_id "akU2YsFUJD18rFBuWSVE1gAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-01 04:24:18 (3 weeks ago)	(mod_security) mod_security (id:240335) triggered by 103.149.16.77 (77.16.149.103-in-addr.arpa-mithr ... show more (mod_security) mod_security (id:240335) triggered by 103.149.16.77 (77.16.149.103-in-addr.arpa-mithriltele.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 00:24:10.740374 2026] [security2:error] [pid 28482:tid 28482] [client 103.149.16.77:50303] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.149.16.77 (+1 hits since last alert)\|frogdesignmexico.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "frogdesignmexico.com"] [uri "/xmlrpc.php"] [unique_id "akSWakv4yxSByFV5eoKYmgAAACE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 neckaralb-admin.de	2026-06-28 14:22:55 (3 weeks ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack

Showing 1 to 15 of 44 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 185.223.235.17

🇺🇸 172.253.0.25

🇳🇱 136.144.188.179

🇵🇭 180.191.79.172

🇵🇱 176.53.159.198

🇳🇱 91.92.47.35

🇹🇷 176.40.240.157

🇺🇸 165.154.163.10

🇩🇪 130.12.180.244

🇧🇬 78.128.112.30

🇩🇪 43.228.157.183

🇬🇧 35.203.211.78

🇺🇸 157.254.194.17

🇹🇭 125.26.226.44

🇨🇳 123.14.125.191

🇷🇴 92.118.39.71

🇷🇺 91.244.74.228

🇫🇷 91.196.152.200

🇳🇱 91.92.47.128

🇫🇷 85.217.140.10