JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.168.3.81

103.168.3.81 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 52%: ?

52%

ISP	Userlinks Netcom Pvt. Ltd.
Usage Type	Fixed Line ISP
ASN	AS135761
Hostname(s)	static-103-168-3-81.unpl.net
Domain Name	unpl.co.in
Country	🇮🇳 India
City	Bahadurgarh, Haryana

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.168.3.81

Whois 103.168.3.81

IP Abuse Reports for 103.168.3.81:

This IP address has been reported a total of 14 times from 13 distinct sources. 103.168.3.81 was first reported on February 10th 2023, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob	2026-08-25 18:14:42 (1 day ago)	Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: ... show more Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: /xmlrpc.php \| 2026-08-25 18:14 UTC show less	Hacking Web App Attack
🇲🇹 Malta	2026-08-25 18:11:24 (1 day ago)	103.168.3.81 - - [25/Aug/2026:20:11:23 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Macintosh; I ... show more 103.168.3.81 - - [25/Aug/2026:20:11:23 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/75.0.0.0 Safari/537.36" show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-08-24 20:43:38 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 103.168.3.81 (static-103-168-3-81.unpl.net): 1 ... show more (mod_security) mod_security (id:225170) triggered by 103.168.3.81 (static-103-168-3-81.unpl.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 16:43:31.560810 2026] [security2:error] [pid 28850:tid 28850] [client 103.168.3.81:33342] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|indiahouseportland.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "indiahouseportland.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aoys82AbJosKdf-ycylWiAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-20 18:36:33 (5 days ago)	[redacted] 103.168.3.81 - - [20/Aug/2026:20:35:23 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mo ... show more [redacted] 103.168.3.81 - - [20/Aug/2026:20:35:23 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; x86) AppleWebKit/537.36 (KHTML, like Gecko) Edge/91.0.0.0 Safari/537.36" [redacted] 103.168.3.81 - - [20/Aug/2026:20:35:36 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (Windows NT 10.0; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.0.0 Safari/537.36" [redacted] 103.168.3.81 - - [20/Aug/2026:20:35:44 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (Linux; Android 10; x86) AppleWebKit/537.36 (KHTML, like Gecko) Opera/75.0.0.0 Safari/537.36" [redacted] 103.168.3.81 - - [20/Aug/2026:20:35:56 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (Linux; Android 10; x86) AppleWebKit/537.36 (KHTML, like Gecko) Edge/93.0.0.0 Safari/537.36" [redacted] 103.168.3.81 - - [20/Aug/2026:20:36:05 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (Windows NT 6.3; x86) AppleWebKit/537.36 (KHTML, like Gecko) Opera/7 ... show less	Hacking Web App Attack
🇬🇧 myintarweb	2026-08-18 20:18:03 (1 week ago)	103.168.3.81 - - [18/Aug/2026:21:18:02 +0100] 443 "POST /xmlrpc.php HTTP/1.1" 301 7028 "-" "Mozilla/ ... show more 103.168.3.81 - - [18/Aug/2026:21:18:02 +0100] 443 "POST /xmlrpc.php HTTP/1.1" 301 7028 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Opera/75.0.0.0 Safari/537.36" ... show less	Hacking Bad Web Bot Web App Attack
🇫🇮 6kilowatti	2026-08-18 19:48:37 (1 week ago)	103.168.3.81 - - [18/Aug/2026:22:48:36 +0300] "POST /xmlrpc.php HTTP/1.1" 403 55 "-" "Mozilla/5.0 (L ... show more 103.168.3.81 - - [18/Aug/2026:22:48:36 +0300] "POST /xmlrpc.php HTTP/1.1" 403 55 "-" "Mozilla/5.0 (Linux; Android 10; x86) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/89.0.0.0 Safari/537.36" 103.168.3.81 - [18/Aug/2026:22:48:36 +0300] "POST /xmlrpc.php HTTP/1.1" 403 14336 "-" "Mozilla/5.0 (Linux; Android 10; x86) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/89.0.0.0 Safari/537.36" ... show less	Web App Attack
🇮🇹 VHosting	2026-08-18 17:50:03 (1 week ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇳🇿 Tripwire	2026-08-18 06:49:19 (1 week ago)	Probing for Wordpress - /xmlrpc.php	Brute-Force Web App Attack
🇳🇱 Study Bitcoin 🤗	2025-06-30 08:13:01 (1 year ago)	Port probe to tcp/23 (telnet) [srv134]	Port Scan Hacking
Anonymous	2025-06-20 07:01:14 (1 year ago)	Unauthorized connection to Telnet port 23	Port Scan
🇺🇸 MPL	2025-06-18 21:57:08 (1 year ago)	tcp/23	Port Scan
🇺🇸 MPL	2025-06-18 21:57:08 (1 year ago)	tcp/23	Port Scan
Anonymous	2025-06-15 23:29:36 (1 year ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
🇰🇬 dos5n	2023-02-10 06:58:28 (3 years ago)	2023-02-10T12:57:46.451500mail.megaline.kg postfix/smtpd[30010]: NOQUEUE: reject: RCPT from unknown[ ... show more 2023-02-10T12:57:46.451500mail.megaline.kg postfix/smtpd[30010]: NOQUEUE: reject: RCPT from unknown[103.168.3.81]: 550 5.1.1 <[email protected]>: Recipient address rejected: megaline.kg; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[103.168.3.81]> 2023-02-10T12:58:03.254576mail.megaline.kg postfix/smtpd[30010]: NOQUEUE: reject: RCPT from unknown[103.168.3.81]: 550 5.1.1 <[email protected]>: Recipient address rejected: megaline.kg; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[103.168.3.81]> 2023-02-10T12:58:16.020726mail.megaline.kg postfix/smtpd[31952]: NOQUEUE: reject: RCPT from unknown[103.168.3.81]: 550 5.1.1 <[email protected]>: Recipient address rejected: megaline.kg; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[103.168.3.81]> 2023-02-10T12:58:26.311771mail.megaline.kg postfix/smtpd[31952]: NOQUEUE: reject: RCPT from unknown[103.168.3.81]: 550 5.1.1 <[email protected]>: Recipient address rejected: megaline.kg; from=<connor@ ... show less	Brute-Force

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 192.178.95.210

🇦🇷 191.84.233.233

🇧🇷 187.126.105.42

🇦🇷 186.182.88.167

🇨🇳 183.6.187.227

🇺🇸 147.185.132.152

🇰🇪 102.135.169.105

🇩🇪 2.26.53.142

🇹🇷 2a00:1d34:3f4f:4d00:fd6d:5590:f2f6:7793

🇰🇷 222.239.251.12

🇺🇸 185.150.190.130

🇩🇪 176.9.199.178

🇨🇳 113.200.114.156

🇻🇳 103.63.108.25

🇧🇪 62.235.158.139

🇺🇸 47.88.29.116

🇨🇳 223.199.182.88

🇩🇪 130.12.180.107

🇲🇾 47.250.85.160

🇨🇳 27.18.82.243