JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.211.54.234

103.211.54.234 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 25%: ?

25%

ISP	Nitin Networks
Usage Type	Fixed Line ISP
ASN	AS133982
Domain Name	excitel.com
Country	🇮🇳 India
City	Gurugram, Haryana

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.211.54.234

Whois 103.211.54.234

IP Abuse Reports for 103.211.54.234:

This IP address has been reported a total of 14 times from 11 distinct sources. 103.211.54.234 was first reported on February 10th 2023, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇭 thaizone.com	2026-07-13 04:11:07 (1 week ago)	Brute-forcing login against websites (D1-1) #1	Web App Attack Hacking
Anonymous	2026-07-13 04:10:06 (1 week ago)	IP banned by Fail2Ban in jail wordpress	Web App Attack Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2026-05-26 07:25:09 (1 month ago)	(mod_security) mod_security (id:240335) triggered by 103.211.54.234 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 103.211.54.234 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 26 03:25:04.337177 2026] [security2:error] [pid 15168:tid 15168] [client 103.211.54.234:54602] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.211.54.234 (+1 hits since last alert)\|agrollum.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "agrollum.com"] [uri "/xmlrpc.php"] [unique_id "ahVK0EerG6jFGNLFOhQcXAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-26 06:39:24 (1 month ago)	(mod_security) mod_security (id:240335) triggered by 103.211.54.234 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 103.211.54.234 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 26 02:39:20.568901 2026] [security2:error] [pid 29385:tid 29385] [client 103.211.54.234:51589] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.211.54.234 (+1 hits since last alert)\|schlegelcreative.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "schlegelcreative.com"] [uri "/xmlrpc.php"] [unique_id "ahVAGDqzsge4zjlC0aIjmwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-26 05:20:15 (1 month ago)	(mod_security) mod_security (id:240335) triggered by 103.211.54.234 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 103.211.54.234 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 26 01:20:11.340815 2026] [security2:error] [pid 31985:tid 31985] [client 103.211.54.234:56957] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.211.54.234 (+1 hits since last alert)\|theseoscribe.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "theseoscribe.com"] [uri "/xmlrpc.php"] [unique_id "ahUti2rdYxQIIGIUDfqIawAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 rh24	2026-05-26 02:46:52 (1 month ago)	(wordpress) Failed wordpress login from 103.211.54.234 (IN/India/-): (CF_ENABLE)	Brute-Force
🇧🇪 cmbplf	2026-05-26 02:32:52 (1 month ago)	4.386 requests with url.path */xmlrpc.php	Brute-Force Bad Web Bot
🇺🇸 OceanTreasure	2026-05-26 01:45:13 (1 month ago)	tcp/443; WordPress XML-RPC brute force attempt: "POST /xmlrpc.php" @ 2026-05-26T01:35:26Z [proxy]	Brute-Force
Anonymous	2026-05-26 01:34:40 (1 month ago)	Attac	Brute-Force
🇫🇷 bigorre.org	2026-05-04 16:42:02 (2 months ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
🇳🇱 exxos	2025-08-08 16:07:59 (11 months ago)	HTTP1.x attacks	DDoS Attack
🇳🇱 exxos	2025-08-04 08:10:01 (11 months ago)	HTTP1.x attacks	DDoS Attack
Anonymous	2023-10-17 07:57:13 (2 years ago)	Requesting restricted files	Web App Attack
🇩🇪 IP Analyzer	2023-02-10 12:31:49 (3 years ago)	Unauthorized connection attempt from IP address 103.211.54.234 on Port 445(SMB)	Port Scan

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 152.32.205.153

🇺🇸 198.211.107.50

🇳🇱 195.178.110.227

🇵🇾 186.17.14.215

🇨🇴 181.52.113.170

🇹🇷 94.154.43.99

🇳🇱 91.92.42.87

🇺🇸 71.6.135.131

🇫🇷 37.67.144.40

🇺🇸 20.163.33.179

🇺🇸 13.221.67.44

🇺🇸 2607:f8b0:4001:c2b::128

🇨🇳 220.197.85.234

🇺🇸 216.25.89.128

🇰🇬 212.112.108.50

🇹🇼 198.235.24.74

🇵🇹 188.251.246.191

🇺🇸 173.255.223.73

🇩🇪 172.253.1.221

🇺🇸 147.185.132.123