AbuseIPDB » 103.160.241.134
103.160.241.134
This IP was reported 9 times. Confidence of
Abuse
is 32% : ?
ISP
Niss Broadband Services
Usage Type
Fixed Line ISP
ASN
AS132774
Domain Name
nissbroadband.com
Country
🇮🇳
India
City
Kalakkadu, Tamil Nadu
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 103.160.241.134 :
This IP address has been reported a total of
9
times from
7 distinct
sources.
103.160.241.134 was first reported on
April 10th 2026 , and the most recent report was
1 hour ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇱🇻
garmtech.com
2026-06-25 04:26:41
(1 hour ago)
IM360 WAF: Rate limit exceeded for XMLRPC DoS
Web App Attack
🇺🇸
TPI-Abuse
2026-06-19 12:29:36
(5 days ago)
(mod_security) mod_security (id:240335) triggered by 103.160.241.134 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:240335) triggered by 103.160.241.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 08:29:28.489608 2026] [security2:error] [pid 25967:tid 25967] [client 103.160.241.134:59620] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 103.160.241.134 (+1 hits since last alert)|lysedzija.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "lysedzija.com"] [uri "/xmlrpc.php"] [unique_id "ajU2KMsTBQDUp6bZg__7QAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
YF
2026-06-18 17:15:19
(6 days ago)
xmlrpc.php Potential DDoS or brute force
DDoS Attack
Brute-Force
🇺🇸
TPI-Abuse
2026-06-17 04:34:33
(1 week ago)
(mod_security) mod_security (id:240335) triggered by 103.160.241.134 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:240335) triggered by 103.160.241.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 00:34:27.836996 2026] [security2:error] [pid 26485:tid 26485] [client 103.160.241.134:50286] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 103.160.241.134 (+1 hits since last alert)|thenutritionfixhollysprings.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "thenutritionfixhollysprings.com"] [uri "/xmlrpc.php"] [unique_id "ajIj051nlTWdCbifai7UYwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
n2nguyenn2nguyen
2026-06-02 12:42:12
(3 weeks ago)
Blocked by YFC Security on https://fencingforward.com — type: xmlrpc_attempts
Brute-Force
Web App Attack
🇳🇱
BlueWire Hosting
2026-05-21 12:55:14
(1 month ago)
Wordpress brute force attempt
Brute-Force
Web App Attack
🇺🇸
Jason Howell
2026-05-19 06:12:35
(1 month ago)
103.160.241.134 - - [19/May/2026:01:11:47 -0500] "POST /xmlrpc.php HTTP/1.1" 200 2955 "-" "Jetpack/1 ...
show more
103.160.241.134 - - [19/May/2026:01:11:47 -0500] "POST /xmlrpc.php HTTP/1.1" 200 2955 "-" "Jetpack/12.1; WordPress/6.2; http://site40487328.com"
103.160.241.134 - - [19/May/2026:01:11:58 -0500] "POST /xmlrpc.php HTTP/1.1" 200 2954 "-" "Jetpack by WordPress.com"
103.160.241.134 - - [19/May/2026:01:12:09 -0500] "POST /xmlrpc.php HTTP/1.1" 200 2955 "-" "WordPress.com; https://wordpress.com"
103.160.241.134 - - [19/May/2026:01:12:19 -0500] "POST /xmlrpc.php HTTP/1.1" 200 2954 "-" "WordPress.com; https://wordpress.com"
103.160.241.134 - - [19/May/2026:01:12:30 -0500] "POST /xmlrpc.php HTTP/1.1" 200 2954 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.3)"
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-05-17 13:18:54
(1 month ago)
(mod_security) mod_security (id:240335) triggered by 103.160.241.134 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:240335) triggered by 103.160.241.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 17 09:18:48.712412 2026] [security2:error] [pid 13736:tid 13736] [client 103.160.241.134:8943] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 103.160.241.134 (+1 hits since last alert)|loneoakhoney.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "loneoakhoney.com"] [uri "/xmlrpc.php"] [unique_id "agnAOAybBwpf4mMudESmWAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
Gem
2026-04-10 22:10:23
(2 months ago)
Unauthorized web scan.
Web App Attack
Showing 1 to
9
of 9 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: