JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.216.221.98

103.216.221.98 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 38%: ?

38%

ISP	Host Universal Pty Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS136557
Domain Name	hostuniversal.com.au
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.216.221.98

Whois 103.216.221.98

IP Abuse Reports for 103.216.221.98:

This IP address has been reported a total of 23 times from 20 distinct sources. 103.216.221.98 was first reported on December 13th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇿🇦 hostsec_za	2026-07-26 18:22:01 (1 day ago)	cPanel Auth Attack. 10 failed logins in 1 hour.	Brute-Force
🇺🇸 TPI-Abuse	2026-07-13 06:13:31 (2 weeks ago)	(mod_security) mod_security (id:225170) triggered by 103.216.221.98 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 103.216.221.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 02:13:24.361004 2026] [security2:error] [pid 29713:tid 29713] [client 103.216.221.98:62051] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|kaylamaclaincounseling.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kaylamaclaincounseling.com"] [uri "/wp-json/wp/v2/users"] [unique_id "alSCBKeh6jGRloUWBdB9BAAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Artelis	2026-07-12 19:42:42 (2 weeks ago)	103.216.221.98 - - [12/Jul/2026:19:42:41 +0000] "POST /xmlrpc.php HTTP/1.1" 404 146 "-" "Mozilla/5.0 ... show more 103.216.221.98 - - [12/Jul/2026:19:42:41 +0000] "POST /xmlrpc.php HTTP/1.1" 404 146 "-" "Mozilla/5.0 (Windows NT 6.3; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/13.0.0.0 Safari/537.36" ... show less	Web App Attack
🇩🇪 big-cloud.nl	2026-07-12 18:06:21 (2 weeks ago)	Try to access /xmlrpc.php	Web App Attack
🇺🇸 TPI-Abuse	2026-07-12 07:40:48 (2 weeks ago)	(mod_security) mod_security (id:225170) triggered by 103.216.221.98 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 103.216.221.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 12 03:40:41.496435 2026] [security2:error] [pid 13119:tid 13119] [client 103.216.221.98:47558] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|limeroc.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "limeroc.com"] [uri "/wp-json/wp/v2/users"] [unique_id "alNE-at6_X4bMWgdtUq_KQAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-07-12 07:18:58 (2 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 AbuseBaer	2026-07-12 02:18:38 (2 weeks ago)	access attempt detected by IDS script (C)	Web App Attack
🇺🇸 kosada.com	2026-06-29 18:27:47 (4 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇫🇷 dynamix	2026-06-23 04:53:30 (1 month ago)	Multiple WAF Violations	Web App Attack
🇩🇪 stinpriza	2026-06-22 04:24:50 (1 month ago)	Web App Attack	Web App Attack
🇩🇪 ZIME	2026-05-12 20:38:20 (2 months ago)	UFW BLOCK Report: Total attempts: 10 Top ports and details: - Port 8080 (1x): Tomcat / Proxy / ... show more UFW BLOCK Report: Total attempts: 10 Top ports and details: - Port 8080 (1x): Tomcat / Proxy / Web App Attack (e.g., Apache Tomcat vulnerabilities, deserialization attacks) - Port 4001 (9x): Unknown service/attack type. Possible scanning or brute-force. Source IP: 103.216.221.98 \| this report is autogenerated by ZIME Cloud show less	Hacking Web App Attack
🇺🇸 xserverx.ru	2026-05-12 17:01:35 (2 months ago)	Honeypot triggered: IP: 103.216.221.98 Request to: https://horny-pot.ru/xmlrpc.php Method: POST Host ... show more Honeypot triggered: IP: 103.216.221.98 Request to: https://horny-pot.ru/xmlrpc.php Method: POST Host: horny-pot.ru User-Agent: Mozilla/5.0 (Windows NT 6.2; x86) AppleWebKit/537.36 (KHTML, like Gecko) Opera/72.0.0.0 Safari/537.36 Referer: Direct Country: SG ASN: Unknown Triggered rules: /xmlrpc\.php, \.php, (<methodCall>\|<methodName>\|<params>) Timestamp: 2026-05-12T17:01:34.540Z show less	Hacking Bad Web Bot Web App Attack
🇦🇺 MAGIC	2026-04-19 00:10:54 (3 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇨🇭 YF	2026-04-05 06:05:01 (3 months ago)	Unauthorized WordPress access attempt	Brute-Force Web App Attack
🇩🇪 ketovoila.pl	2026-04-05 04:26:13 (3 months ago)	ketovoila.pl HONEYPOT traffic: count=1, paths=1; sample_path=ketovoila.pl/xmlrpc.php; UA=Mozilla/5.0 ... show more ketovoila.pl HONEYPOT traffic: count=1, paths=1; sample_path=ketovoila.pl/xmlrpc.php; UA=Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Opera/60.0.0.0 Safari/537.36; window=2026-04-05T03:55:10Z..2026-04-05T03:55:10Z show less	Hacking Brute-Force

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇴 2.57.121.112

🇮🇳 202.141.55.229

🇩🇪 193.124.20.228

🇳🇱 192.42.116.13

🇺🇸 137.184.88.129

🇮🇩 125.166.12.68

🇸🇬 118.139.164.171

🇨🇳 116.179.32.17

🇱🇹 77.90.185.10

🇩🇪 69.5.169.91

🇸🇬 47.129.38.204

🇯🇵 47.91.2.219

🇺🇸 216.25.89.87

🇭🇰 202.82.20.241

🇬🇧 181.214.140.22

🇺🇸 143.198.6.160

🇨🇳 116.181.16.129

🇸🇬 103.250.11.156

🇭🇰 103.30.40.129

🇷🇺 94.241.54.179