JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.214.61.61

103.214.61.61 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 33%: ?

33%

ISP	Kumar Networks
Usage Type	Fixed Line ISP
ASN	AS133982
Domain Name	krrishkumarnetworks.in
Country	🇮🇳 India
City	Bengaluru, Karnataka

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.214.61.61

Whois 103.214.61.61

IP Abuse Reports for 103.214.61.61:

This IP address has been reported a total of 25 times from 20 distinct sources. 103.214.61.61 was first reported on February 1st 2022, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-03 16:28:48 (2 weeks ago)	(mod_security) mod_security (id:225170) triggered by 103.214.61.61 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 103.214.61.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 12:28:41.131191 2026] [security2:error] [pid 19864:tid 19882] [client 103.214.61.61:54262] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|piazza9.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "piazza9.com"] [uri "/wp-json/wp/v2/users"] [unique_id "akfjOe52HG2e_sEs3TRZ4QAAAE4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 lnklnx	2026-07-03 15:32:16 (2 weeks ago)	www.lincolnclan.com:443 103.214.61.61 - - [03/Jul/2026:10:32:14 -0500] "POST /xmlrpc.php HTTP/1.1" 4 ... show more www.lincolnclan.com:443 103.214.61.61 - - [03/Jul/2026:10:32:14 -0500] "POST /xmlrpc.php HTTP/1.1" 401 4128 "-" "Mozilla/5.0 (Windows NT 6.3; x86) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/100.0.0.0 Safari/537.36" ... show less	Web App Attack
🇨🇭 4server	2026-07-03 09:18:15 (2 weeks ago)	[FriJul0311:18:08.6745652026][security2:error][pid1389239:tid1389464][client103.214.61.61:0]ModSecur ... show more [FriJul0311:18:08.6745652026][security2:error][pid1389239:tid1389464][client103.214.61.61:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"368\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"creazione-siti-ticino.ch\"][uri\"/xmlrpc.php\"][unique_id\"akd-UKdO_VF_xcUe-TEn9gAAAME\"] show less	Hacking Web App Attack
🇺🇸 mnsf	2026-07-03 09:05:52 (2 weeks ago)	Xmlrpc Caught (6)	Brute-Force Web App Attack
🇳🇱 wlt-blocker	2026-07-03 08:29:47 (2 weeks ago)	Unauthorized access to webpage admin	Web App Attack
🇺🇦 URAN Publishing Service	2026-07-03 07:31:10 (2 weeks ago)	103.214.61.61 - - [03/Jul/2026:10:30:38 +0300] "POST /xmlrpc.php HTTP/1.1" 404 4750 "-" "Mozilla/5.0 ... show more 103.214.61.61 - - [03/Jul/2026:10:30:38 +0300] "POST /xmlrpc.php HTTP/1.1" 404 4750 "-" "Mozilla/5.0 (Linux; Android 10; x86) AppleWebKit/537.36 (KHTML, like Gecko) Safari/12.0.0.0 Safari/537.36" 103.214.61.61 - - [03/Jul/2026:10:31:09 +0300] "POST /xmlrpc.php HTTP/1.1" 404 4749 "-" "Mozilla/5.0 (Linux; Android 10; x64) AppleWebKit/537.36 (KHTML, like Gecko) Opera/69.0.0.0 Safari/537.36" ... show less	Web App Attack
🇩🇪 4server	2026-07-03 06:09:58 (2 weeks ago)	[FriJul0308:09:56.4569132026][security2:error][pid3969538:tid3969650][client103.214.61.61:0]ModSecur ... show more [FriJul0308:09:56.4569132026][security2:error][pid3969538:tid3969650][client103.214.61.61:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"vivereiltrentino.it\"][uri\"/xmlrpc.php\"][unique_id\"akdSNFSufXKo1_6fHJHutAAAAQE\"] show less	Port Scan Brute-Force Web App Attack
Anonymous	2026-04-19 04:03:43 (2 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇩🇪 stinpriza	2026-03-19 11:38:36 (3 months ago)	Web App Attack	Web App Attack
🇮🇩 Burayot	2026-03-19 10:51:58 (3 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 103.214.61.61 (IN/India/-): 1 in th ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 103.214.61.61 (IN/India/-): 1 in the last 3600 secs show less	Web App Attack
🇺🇸 rsiddall	2026-03-19 10:25:08 (3 months ago)	103.214.61.61 - - [19/Mar/2026:06:25:03 -0400] "POST /xmlrpc.php HTTP/1.1" 403 1809 "-" "Mozilla/5.0 ... show more 103.214.61.61 - - [19/Mar/2026:06:25:03 -0400] "POST /xmlrpc.php HTTP/1.1" 403 1809 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/10.0.0.0 Safari/537.36" 103.214.61.61 - - [19/Mar/2026:06:25:05 -0400] "POST /xmlrpc.php HTTP/1.1" 403 1809 "-" "Mozilla/5.0 (Windows NT 6.2; x64) AppleWebKit/537.36 (KHTML, like Gecko) Opera/71.0.0.0 Safari/537.36" ... show less	Brute-Force
🇧🇪 cmbplf	2026-03-19 05:23:00 (3 months ago)	1.438 requests with url.path */xmlrpc.php	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2026-03-19 03:04:09 (3 months ago)	(mod_security) mod_security (id:225170) triggered by 103.214.61.61 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 103.214.61.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 18 23:04:02.382585 2026] [security2:error] [pid 3521:tid 3521] [client 103.214.61.61:54677] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|futuresgrowhere.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "futuresgrowhere.com"] [uri "/wp-json/wp/v2/users"] [unique_id "abtnoptPWU056hlytJFLyAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇺 Agrohim	2026-01-10 11:00:39 (6 months ago)	Gate Inet blocked for categories:	DDoS Attack Ping of Death Port Scan Hacking Brute-Force
🇷🇺 Agrohim	2025-12-24 05:06:51 (6 months ago)	Gate Inet blocked for categories:	DDoS Attack Ping of Death Port Scan Hacking Brute-Force

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

251.59.66.123

🇺🇸 205.210.31.111

🇬🇧 193.46.0.246

🇯🇴 188.123.164.140

🇻🇳 183.91.186.36

🇵🇱 176.53.159.198

🇰🇿 149.27.161.161

🇫🇷 91.231.89.54

🇺🇸 74.7.175.171

🇺🇸 52.54.198.246

🇨🇿 46.135.106.165

🇳🇱 195.178.110.137

🇺🇸 184.105.247.254

🇧🇷 179.48.1.239

🇰🇷 175.45.204.121

🇹🇭 118.175.225.243

🇺🇸 47.253.221.248

🇩🇪 43.228.157.10

🇮🇩 38.103.170.206

🇩🇴 190.167.237.191