JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.204.247.222

103.204.247.222 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 34%: ?

34%

ISP	CiTYCOM Network
Usage Type	Data Center/Web Hosting/Transit
ASN	AS134990
Domain Name	citycomnetwork.com.bd
Country	🇧🇩 Bangladesh
City	Dhaka, Dhaka Division

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.204.247.222

Whois 103.204.247.222

IP Abuse Reports for 103.204.247.222:

This IP address has been reported a total of 28 times from 22 distinct sources. 103.204.247.222 was first reported on February 16th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob.fr	2026-06-21 10:45:07 (1 week ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-21 04:01:27 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 103.204.247.222 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 103.204.247.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 00:01:23.255913 2026] [security2:error] [pid 22832:tid 22832] [client 103.204.247.222:34073] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|alejandrogorsse.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "alejandrogorsse.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajdiE_h59BKZLZxzF-KQtgAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 polycoda	2026-06-20 10:48:52 (1 week ago)	🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27	DDoS Attack
🇺🇸 TPI-Abuse	2026-06-19 16:54:27 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 103.204.247.222 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 103.204.247.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 12:54:22.031451 2026] [security2:error] [pid 28541:tid 28552] [client 103.204.247.222:63821] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|ethicmark.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ethicmark.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ajV0PsP4nDap53S7v9pNzAAAAEk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-13 04:46:27 (2 weeks ago)	(mod_security) mod_security (id:225170) triggered by 103.204.247.222 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 103.204.247.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 00:46:21.584216 2026] [security2:error] [pid 15263:tid 15263] [client 103.204.247.222:5125] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|professionalpianomoversinc.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "professionalpianomoversinc.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aizgnVzXVrRH038jKhCapQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇲🇽 octageeks.com	2026-06-12 04:17:08 (2 weeks ago)	Wordpress malicious attack:[octaxmlrpc]	Web App Attack
🇺🇸 TPI-Abuse	2026-06-11 15:34:31 (2 weeks ago)	(mod_security) mod_security (id:225170) triggered by 103.204.247.222 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 103.204.247.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 11:34:23.727411 2026] [security2:error] [pid 27859:tid 27869] [client 103.204.247.222:34736] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|reghay.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "reghay.com"] [uri "/wp-json/wp/v2/users"] [unique_id "airVf5dvlCtvv8FfWlYi4gAAAQg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-10 15:34:33 (2 weeks ago)	[redacted] 103.204.247.222 - - [10/Jun/2026:17:33:23 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" ... show more [redacted] 103.204.247.222 - - [10/Jun/2026:17:33:23 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (Linux; Android 10; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/87.0.0.0 Safari/537.36" [redacted] 103.204.247.222 - - [10/Jun/2026:17:33:39 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (Windows NT 6.2; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/15.0.0.0 Safari/537.36" [redacted] 103.204.247.222 - - [10/Jun/2026:17:33:45 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (Windows NT 6.2; x86) AppleWebKit/537.36 (KHTML, like Gecko) Opera/63.0.0.0 Safari/537.36" [redacted] 103.204.247.222 - - [10/Jun/2026:17:33:55 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (Linux; Android 10; x64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/14.0.0.0 Safari/537.36" [redacted] 103.204.247.222 - - [10/Jun/2026:17:33:57 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (Windows NT 6.3; x64) AppleWebKit/537.36 (KHTML, like Gecko) Opera/73.0 ... show less	Hacking Web App Attack
🇩🇪 SMARTNET	2026-05-27 06:03:53 (1 month ago)	Aisuru(Mirai variant) DDoS \| Incident ID: e316b406-db2c-400a-bc37-dfbfcc0acc61	DDoS Attack
Anonymous	2026-05-08 11:13:33 (1 month ago)	Unauthorized connection to Telnet port 23	Port Scan
🇺🇸 TPI-Abuse	2026-05-02 12:57:36 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 103.204.247.222 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 103.204.247.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 02 08:57:23.285027 2026] [security2:error] [pid 16448:tid 16448] [client 103.204.247.222:54542] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.bahamascruisersguide.com\|F\|2"] [data ". capesantamaria.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.bahamascruisersguide.com"] [uri "/Long-Island/Long-Island/www. capesantamaria.com"] [unique_id "afX0s6kdmF2b5Pzs690qhQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2026-05-01 00:52:14 (2 months ago)	ThreatBook Intelligence: Zombie,vpn_proxy more details on https://threatbook.io/ip/103.204.247.222	SSH
Anonymous	2026-04-20 10:18:26 (2 months ago)	Automated bot traffic — residential proxy, fake browser fingerprint. UA="Mozilla/5.0 (Windows NT 10. ... show more Automated bot traffic — residential proxy, fake browser fingerprint. UA="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack
🇺🇸 stechusa	2026-03-31 11:19:35 (3 months ago)	ELEVATED_THREAT \| country=BD \| ASN=CiTYCOM Network \| form_key HCgyTOxd... shared by 3 IPs: 181.213.1 ... show more ELEVATED_THREAT \| country=BD \| ASN=CiTYCOM Network \| form_key HCgyTOxd... shared by 3 IPs: 181.213.102.253, 103.204.247.222, 82.129.23.42 \| 27 IPs targeting /brand/satco-products-inc.html \| Facet request during elevated threat (facet_ratio=0.90, unique_ips=407) show less	Bad Web Bot DDoS Attack
Anonymous	2026-03-27 13:58:48 (3 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.73.216.39

🇧🇷 177.66.167.136

🇺🇸 91.230.168.91

🇯🇵 43.165.170.198

🇨🇳 14.103.121.146

🇦🇪 2.50.165.47

🇺🇸 2a04:c300:400::fb

🇰🇷 218.144.90.41

🇮🇹 151.33.59.187

🇨🇳 120.26.202.71

🇨🇳 116.179.37.215

🇺🇿 84.54.73.39

🇨🇳 27.24.141.88

🇿🇦 4.221.162.168

🇰🇷 218.156.93.203

🇺🇸 192.169.197.250

🇰🇭 175.100.79.69

🇺🇸 165.154.173.226

🇺🇸 162.144.34.123

🇻🇳 113.177.27.200