JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.216.220.173

103.216.220.173 was found in our database!

This IP was reported 43 times. Confidence of Abuse is 4%: ?

ISP	Host Universal Pty Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS136557
Domain Name	hostuniversal.com.au
Country	🇦🇺 Australia
City	Brisbane, Queensland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.216.220.173

Whois 103.216.220.173

IP Abuse Reports for 103.216.220.173:

This IP address has been reported a total of 43 times from 8 distinct sources. 103.216.220.173 was first reported on July 17th 2025, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇳 pengpeng	2026-08-01 01:32:33 (1 hour ago)	monitor: on VM-0-7-ubuntu \| port: 28207 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 28207 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇳 pengpeng	2026-07-31 09:35:16 (16 hours ago)	monitor: on VM-0-7-ubuntu \| port: 24935 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 24935 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇳 pengpeng	2026-07-31 01:14:20 (1 day ago)	monitor: on VM-0-7-ubuntu \| port: 28207 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 28207 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇳 pengpeng	2026-07-29 20:57:41 (2 days ago)	monitor: on VM-0-7-ubuntu \| port: 28207 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 28207 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇳 pengpeng	2026-07-28 19:57:48 (3 days ago)	monitor: on VM-0-7-ubuntu \| port: 28207 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 28207 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇳 pengpeng	2026-07-27 16:32:54 (4 days ago)	monitor: on VM-0-7-ubuntu \| port: 28207 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 28207 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇳 pengpeng	2026-07-26 14:23:14 (5 days ago)	monitor: on VM-0-7-ubuntu \| port: 28207 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 28207 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇳 pengpeng	2026-07-25 08:57:11 (6 days ago)	monitor: on VM-0-7-ubuntu \| port: 28207 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 28207 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-02-28 13:20:17 (5 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
🇳🇱 homeshowdomain.nl	2026-02-25 23:00:34 (5 months ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-02-24. show less	Web App Attack SSH Hacking
Anonymous	2026-02-24 17:50:02 (5 months ago)	suspicious request in access.log	Web App Attack
🇺🇸 TPI-Abuse	2026-02-24 17:46:50 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 103.216.220.173 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 103.216.220.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 24 12:46:46.143639 2026] [security2:error] [pid 15030:tid 15030] [client 103.216.220.173:23302] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vanmeer.info"] [uri "/.env"] [unique_id "aZ3kBhEhpbkOlZzPina2aQAAACg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-02-24 02:20:29 (5 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
Anonymous	2026-02-19 11:50:20 (5 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
Anonymous	2026-02-06 02:05:19 (5 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking

Showing 1 to 15 of 43 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 199.45.154.180

🇹🇼 198.235.24.32

🇰🇷 175.198.62.180

🇦🇺 170.64.171.150

🇦🇺 170.64.170.239

🇦🇺 170.64.169.103

🇺🇸 154.92.23.249

🇸🇪 90.230.115.5

🇩🇪 69.5.169.233

🇨🇳 47.95.208.39

🇧🇷 45.232.244.96

🇳🇱 45.148.10.39

🇳🇱 45.148.10.29

🇸🇦 5.82.58.70

🇬🇧 2a06:4880::21

🇺🇸 216.73.216.94

🇺🇸 209.141.46.157

🇦🇺 170.64.168.70

🇦🇺 170.64.167.14

🇦🇺 170.64.164.217