JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.217.83.29

103.217.83.29 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 100%: ?

100%

ISP	A M B COMMUNICATIONS LIMITED
Usage Type	Fixed Line ISP
ASN	AS153236
Domain Name	ambcommunications.co.in
Country	🇮🇳 India
City	Gadag, Karnataka

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.217.83.29

Whois 103.217.83.29

IP Abuse Reports for 103.217.83.29:

This IP address has been reported a total of 23 times from 18 distinct sources. 103.217.83.29 was first reported on July 21st 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Site.eu	2026-07-22 23:11:34 (5 hours ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
Anonymous	2026-07-21 10:51:56 (1 day ago)	(wordpress) Failed wordpress login from 103.217.83.29 (IN/India/-)	Brute-Force
🇩🇪 lenz	2026-07-21 10:35:10 (1 day ago)	Jul 21 12:34:27 hosting wordpress(grupa-ddd.pl)[1238]: XML-RPC authentication failure for admin from ... show more Jul 21 12:34:27 hosting wordpress(grupa-ddd.pl)[1238]: XML-RPC authentication failure for admin from 103.217.83.29 Jul 21 12:34:38 hosting wordpress(grupa-ddd.pl)[1237]: XML-RPC authentication failure for admin from 103.217.83.29 Jul 21 12:34:48 hosting wordpress(grupa-ddd.pl)[1236]: XML-RPC authentication failure for admin from 103.217.83.29 Jul 21 12:34:59 hosting wordpress(grupa-ddd.pl)[1240]: XML-RPC authentication failure for admin from 103.217.83.29 Jul 21 12:35:09 hosting wordpress(grupa-ddd.pl)[1237]: XML-RPC authentication failure for admin from 103.217.83.29 ... show less	Brute-Force Web App Attack
🇩🇪 BlueWire Hosting	2026-07-21 09:54:30 (1 day ago)	Probing websites for vulnerabilities	Web App Attack
🇺🇸 TPI-Abuse	2026-07-21 09:25:05 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 103.217.83.29 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 103.217.83.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 05:24:59.763084 2026] [security2:error] [pid 18638:tid 18638] [client 103.217.83.29:65498] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.217.83.29 (+1 hits since last alert)\|tourissue.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "tourissue.com"] [uri "/xmlrpc.php"] [unique_id "al8668cDAkaHuHlsyAnYMAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 lostswordfish.com	2026-07-21 09:10:05 (1 day ago)	Wordfence waf block on jestrellafoundation	Web App Attack
🇬🇧 Bytemark	2026-07-21 09:05:50 (1 day ago)	103.217.83.29 - - [21/Jul/2026:10:05:47 +0100] "POST /xmlrpc.php HTTP/1.1" 301 5259 "-" "Mozilla/5.0 ... show more 103.217.83.29 - - [21/Jul/2026:10:05:47 +0100] "POST /xmlrpc.php HTTP/1.1" 301 5259 "-" "Mozilla/5.0 (Windows NT 10.0; x86) AppleWebKit/537.36 (KHTML, like Gecko) Safari/12.0.0.0 Safari/537.36" 103.217.83.29 - - [21/Jul/2026:10:05:48 +0100] "GET /xmlrpc.php HTTP/1.1" 301 5396 "-" "Mozilla/5.0 (Windows NT 10.0; x86) AppleWebKit/537.36 (KHTML, like Gecko) Safari/12.0.0.0 Safari/537.36" 103.217.83.29 - - [21/Jul/2026:10:05:49 +0100] "GET /xmlrpc.php HTTP/1.1" 404 5157 "-" "Mozilla/5.0 (Windows NT 10.0; x86) AppleWebKit/537.36 (KHTML, like Gecko) Safari/12.0.0.0 Safari/537.36" show less	Brute-Force Web App Attack
🇧🇾 lns.bz	2026-07-21 09:02:46 (1 day ago)	Banned for trying to access xmlrpc [BY]	Web App Attack
🇺🇸 TPI-Abuse	2026-07-21 08:26:07 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 103.217.83.29 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 103.217.83.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 04:26:03.060237 2026] [security2:error] [pid 6313:tid 6313] [client 103.217.83.29:65492] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.217.83.29 (+1 hits since last alert)\|paulsingdahlsen.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "paulsingdahlsen.com"] [uri "/xmlrpc.php"] [unique_id "al8tG-xC_3VrjDz_EkjV3QAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-07-21 08:26:02 (1 day ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇦🇺 screwlooseit.com.au	2026-07-21 08:06:38 (1 day ago)	Blocked by CSF 13 firewall - Rule: XMLRPC IN/India/-	Web App Attack
🇺🇸 mnsf	2026-07-21 08:05:20 (1 day ago)	Xmlrpc Caught (6)	Brute-Force Web App Attack
🇬🇧 consul.to	2026-07-21 06:43:48 (1 day ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 TPI-Abuse	2026-07-21 06:32:00 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 103.217.83.29 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 103.217.83.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 02:31:55.115003 2026] [security2:error] [pid 16766:tid 16766] [client 103.217.83.29:65458] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.217.83.29 (+1 hits since last alert)\|consolidatedoperationsgroup.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "consolidatedoperationsgroup.com"] [uri "/xmlrpc.php"] [unique_id "al8SW0eTizMdlrvZgH3I5wAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 applemooz	2026-07-21 05:42:17 (1 day ago)	WordPress XMLRPC Brute Force Attacks ...	Brute-Force Web App Attack

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇦 172.71.120.114

🇻🇳 171.244.37.97

🇹🇯 62.89.208.53

🇺🇸 209.141.34.121

🇨🇦 172.71.120.51

🇨🇦 172.70.80.21

🇯🇵 165.100.188.216

🇺🇸 162.216.150.71

🇮🇩 160.187.174.22

🇺🇸 107.167.34.125

🇫🇷 91.196.152.125

🇮🇹 91.80.141.26

🇫🇷 85.217.140.24

🇫🇷 85.217.140.12

🇧🇬 79.124.62.134

🇩🇪 65.111.22.35

🇷🇺 46.188.106.156

🇨🇳 39.152.240.15

🇮🇹 37.207.215.2

🇬🇧 35.203.211.146