JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.216.221.97

103.216.221.97 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 20%: ?

20%

ISP	Host Universal Pty Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS136557
Domain Name	hostuniversal.com.au
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.216.221.97

Whois 103.216.221.97

IP Abuse Reports for 103.216.221.97:

This IP address has been reported a total of 24 times from 19 distinct sources. 103.216.221.97 was first reported on November 25th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 hermawan	2026-06-23 13:10:47 (2 days ago)	1782220235.740936 103.216.221.97 103.166.156.58 64240_2-4-8-1-3_1460_8 2026-06-23 20:10:35 WIB ...	Email Spam Hacking
Anonymous	2026-06-21 18:29:47 (4 days ago)	Aggressive web scan	Web App Attack
🇮🇩 sockominfo	2026-06-09 16:00:36 (2 weeks ago)	Reported by TangerangKota-CSIRT. Status: MALICIOUS	Hacking Web App Attack
🇨🇦 1gz	2026-04-23 01:42:38 (2 months ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /lajme/beleri-e-perplasi-me-mitsotakis-rama-deri-ne-fund-te-vitit-zgjidhen-te-gjitha-ceshtjet-mes-shqiperise-e-greqise/874183/ UA: Mozilla/5.0 (Windows 7 Enterprise; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6099.71 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇿 ptlab	2026-04-17 14:45:07 (2 months ago)	Detected wp_login attack from WP-host.	Hacking Web App Attack
🇩🇪 big-cloud.nl	2026-04-17 12:33:31 (2 months ago)	Try to access /xmlrpc.php	Web App Attack
🇺🇸 TPI-Abuse	2026-04-17 12:26:46 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 103.216.221.97 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 103.216.221.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 17 08:26:38.713781 2026] [security2:error] [pid 930281:tid 930281] [client 103.216.221.97:12913] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.stationrestaurant.ca\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.stationrestaurant.ca"] [uri "/wp-json/wp/v2/users"] [unique_id "aeIm_m9ayEMCglfFkQHpbwAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 mgarofano80	2026-04-17 10:58:38 (2 months ago)		Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-04-17 10:41:19 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 103.216.221.97 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 103.216.221.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 17 06:41:15.134297 2026] [security2:error] [pid 1319985:tid 1319985] [client 103.216.221.97:40253] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|salernospizza.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "salernospizza.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aeIOS6cCQwJuu1p3LasWQQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-04-17 10:05:18 (2 months ago)	Xmlrpc Caught (6)	Brute-Force Web App Attack
🇩🇪 LRob.fr	2026-04-17 09:45:08 (2 months ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇫🇮 bittiguru.fi	2026-04-17 08:30:57 (2 months ago)	103.216.221.97 - [17/Apr/2026:11:30:55 +0300] "POST /xmlrpc.php HTTP/1.1" 200 233 "-" "Mozilla/5.0 ( ... show more 103.216.221.97 - [17/Apr/2026:11:30:55 +0300] "POST /xmlrpc.php HTTP/1.1" 200 233 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Mobile/15E148 Safari/604.1" "1.92" 103.216.221.97 - [17/Apr/2026:11:30:56 +0300] "POST /xmlrpc.php HTTP/1.1" 500 622 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" "-" ... show less	Hacking Brute-Force Web App Attack
Anonymous	2026-04-12 08:02:03 (2 months ago)	Web attack	Bad Web Bot Web App Attack
🇳🇱 wlt-blocker	2026-03-29 00:14:49 (2 months ago)	Unauthorized access to webpage admin	Web App Attack
🇧🇪 cmbplf	2026-03-19 22:28:28 (3 months ago)	1.029 requests with url.path *.env	Brute-Force Bad Web Bot

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 202.39.153.245

🇧🇪 198.235.24.161

🇮🇶 194.49.87.68

🇺🇸 192.0.101.192

🇺🇸 173.239.213.4

🇫🇮 147.185.133.255

🇮🇩 202.152.201.166

🇧🇷 186.248.197.77

🇨🇳 110.43.37.72

🇮🇳 103.108.4.42

🇭🇺 89.148.92.242

🇬🇧 31.14.254.42

🇲🇽 187.249.105.226

🇺🇸 172.172.170.199

🇮🇶 169.224.105.51

🇵🇰 139.135.46.57

🇺🇸 134.195.152.230

🇨🇳 111.198.221.98

🇺🇸 47.252.81.253

🇷🇺 46.42.2.115