JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.216.220.40

103.216.220.40

Activity Trending Down

95 reports found in our database

9% ▼ ▼ ▼ Caution

Abuse confidence score ?

ISP

Host Universal Pty Ltd

Usage Type

Data Center/Web Hosting/Transit

ASN

AS136557

Domain Name

hostuniversal.com.au

Country

🇦🇺 Australia

City

Brisbane, Queensland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 103.216.220.40:

This IP address has been reported a total of 95 times from 56 distinct sources. 103.216.220.40 was first reported on December 9th 2023, and the most recent report was 3 weeks ago. In the last 60 days, the top reporter locations were: France with 1 report; United States of America with 1 report. The most common categories in these recent reports were: Web App Attack 1 time; Port Scan 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-08-19 11:47:17 (3 weeks ago)	Blocked by UFW (TCP on 50570) Source port: 28652 TTL: 47 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 50570) Source port: 28652 TTL: 47 Packet length: 60 TOS: 0x08 This report (for 103.216.220.40) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 francoisunix	2026-08-03 08:00:49 (1 month ago)	103.216.220.40 - - [03/Aug/2026:10:00:42 +0200] "POST //xmlrpc.php HTTP/1.1" 401 422 "-" "Mozilla/5. ... show more 103.216.220.40 - - [03/Aug/2026:10:00:42 +0200] "POST //xmlrpc.php HTTP/1.1" 401 422 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/120.0.2210.91" "103.216.220.40" "www.eco-conscient.com" sn="www.eco-conscient.com" rt=0.095 ua="unix:/var/run/php/php8.2-fpm.sock" us="401" ut="0.095" ul="427" cs=-cf_country="AU" cf_region="Queensland" cf_city="Brisbane"rip=127.0.0.1 cf_ip=103.216.220.40 xff="103.216.220.40" p_xff="103.216.220.40, 103.216.220.40" 103.216.220.40 - - [03/Aug/2026:10:00:42 +0200] "POST //xmlrpc.php HTTP/1.1" 401 422 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" "103.216.220.40" "www.eco-conscient.com" sn="www.eco-conscient.com" rt=0.090 ua="unix:/var/run/php/php8.2-fpm.sock" us="401" ut="0.091" ul="427" cs=-cf_country="AU" cf_region="Queensland" cf_city="Brisbane"rip=127.0.0.1 cf_ip=103.216.220.40 xff="103.216.220.40" p_xff="103.216.220.40, 103.216.220.40" 10 ... show less	Web App Attack
🇧🇷 chronos	2026-05-03 02:11:13 (4 months ago)	Generic malicious activity: Tentativa de varredura de porta TCP... \| Port: 59601 \| Proto: TCP \| Loca ... show more Generic malicious activity: Tentativa de varredura de porta TCP... \| Port: 59601 \| Proto: TCP \| Location: Australia, Brisbane show less	Port Scan Hacking
🇺🇸 nyt	2026-03-21 18:19:37 (5 months ago)	404 flood (16/60s), 404 flood (17/60s)	Bad Web Bot Web App Attack
🇺🇸 jcbriar	2026-03-21 15:03:24 (5 months ago)	Searching for vulnerable scripts	Hacking Web App Attack
🇳🇱 Site.eu	2026-03-21 01:43:52 (5 months ago)	Excessive 404/403 errors	Brute-Force
🇳🇿 Tripwire	2026-03-10 22:51:06 (5 months ago)	Scanning for exploits - /ueditor/ueditor.config.js/x.php	Hacking Web App Attack
🇧🇪 madeit	2026-03-10 20:36:34 (5 months ago)		Web App Attack
🇬🇧 openstrike.co.uk	2026-03-10 06:12:50 (6 months ago)	11 attacks on PHP URLs: GET /public/static/common/lib/ueditor/ueditor.config.js/x.php HTTP/1.1	Web App Attack
🇪🇸 gnom4ik	2026-02-21 04:40:27 (6 months ago)	ban-reviewer auto report; ip=103.216.220.40; scenario=http:scan; verdict=valid_ban; confidence=0.85; ... show more ban-reviewer auto report; ip=103.216.220.40; scenario=http:scan; verdict=valid_ban; confidence=0.85; categories=14,15,22; active_decisions=1; lookback_decisions=1; nginx_requests=0; appsec_matches=0; auth_events=0; kernel_events=0; signals=IP flagged for HTTP scanning activity (scenario: http:scan); AbuseIPDB category 14 (Port Scan) is applicable; AbuseIPDB category 15 (Hacking) is applicable; AbuseIPDB category 22 (SSH) is applicable show less	Port Scan Hacking SSH
🇩🇪 Vegascosmetics	2026-01-21 22:50:47 (7 months ago)	Kingcopy(AI-IDS): IP is wandering around the site and acting suspiciously.	Bad Web Bot
Anonymous	2026-01-20 15:22:35 (7 months ago)	Infected user bad webscan	Exploited Host
🇮🇪 RoboSOC	2026-01-20 06:54:23 (7 months ago)	ThinkPHP Remote Code Execution Vulnerability , PTR: PTR record not found	Web App Attack
Anonymous	2026-01-20 05:15:03 (7 months ago)	Bot / scanning and/or hacking attempts: GET /Incs/UEditor/ueditor.config.js/x.php HTTP/1.1, GET /Dat ... show more Bot / scanning and/or hacking attempts: GET /Incs/UEditor/ueditor.config.js/x.php HTTP/1.1, GET /Data/editor/ueditor/ueditor.config.js/x.php HTTP/1.1, GET /admin/lib/ueditor/ueditor.config.js/x.php HTTP/1.1, GET /library/ueditor/ueditor.config.js/x.php HTTP/1.1, GET /admin/ueditor/ueditor.config.js/x.php HTTP/1.1, GET /res/plugins/ueditor/ueditor.config.js/x.php HTTP/1.1 show less	Hacking Web App Attack
🇫🇷 dynamix	2026-01-20 01:29:35 (7 months ago)	Multiple WAF Violations	Web App Attack

Showing 1 to 15 of 95 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2600:3c0a::2000:2fff:fe2f:277d

🇩🇪 168.119.115.23

🇺🇸 166.168.201.198

🇮🇳 165.232.186.58

🇦🇺 114.31.75.33

🇷🇺 91.185.47.28

🇺🇸 2a03:2880:f806:1d::

🇮🇹 204.216.221.207

🇺🇸 192.3.150.128

🇭🇰 152.32.131.245

🇫🇮 147.185.133.212

🇮🇩 139.255.18.29

🇨🇳 122.240.223.245

🇮🇩 117.102.101.52

🇮🇶 65.20.204.41

🇨🇳 49.235.140.5

🇳🇱 45.156.128.159

🇩🇪 223.29.253.7

🇹🇼 198.235.24.104

🇨🇴 181.48.81.172