JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.223.8.137

103.223.8.137 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 31%: ?

31%

ISP	Fastway Aerospace Pvt. Ltd.
Usage Type	Fixed Line ISP
ASN	AS133661
Domain Name	netplus.co.in
Country	🇮🇳 India
City	Ludhiana, Punjab

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.223.8.137

Whois 103.223.8.137

IP Abuse Reports for 103.223.8.137:

This IP address has been reported a total of 17 times from 12 distinct sources. 103.223.8.137 was first reported on May 6th 2021, and the most recent report was 19 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 konseptit	2026-07-31 19:01:23 (19 hours ago)	(wordpress) Failed wordpress login from 103.223.8.137 (IN/India/-)	Brute-Force
🇺🇸 TPI-Abuse	2026-07-31 18:01:52 (20 hours ago)	(mod_security) mod_security (id:240335) triggered by 103.223.8.137 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 103.223.8.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 31 14:01:46.888781 2026] [security2:error] [pid 1061221:tid 1061221] [client 103.223.8.137:8104] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.223.8.137 (+1 hits since last alert)\|kritaka.ai\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "kritaka.ai"] [uri "/xmlrpc.php"] [unique_id "amzjCvExpYlemKzVnDjN8wAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-31 17:29:58 (20 hours ago)	(mod_security) mod_security (id:240335) triggered by 103.223.8.137 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 103.223.8.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 31 13:29:53.537646 2026] [security2:error] [pid 839441:tid 839441] [client 103.223.8.137:8109] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.223.8.137 (+1 hits since last alert)\|brushmileage.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "brushmileage.org"] [uri "/xmlrpc.php"] [unique_id "amzbkT-S9NuwkrkAaYctzAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-31 17:28:02 (20 hours ago)	(wordpress) Failed wordpress login from 103.223.8.137 (IN/India/-)	Brute-Force
🇫🇷 SpaceHost-Server	2026-07-31 17:12:18 (21 hours ago)	103.223.8.137 - - [31/Jul/2026:19:11:59 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6382 "-" "Jetpack by ... show more 103.223.8.137 - - [31/Jul/2026:19:11:59 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6382 "-" "Jetpack by WordPress.com" 103.223.8.137 - - [31/Jul/2026:19:12:06 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6382 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.3)" 103.223.8.137 - - [31/Jul/2026:19:12:17 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6382 "-" "Jetpack/12.0; WordPress/6.4; http://site43838933.com" show less	Hacking Web App Attack
🇫🇷 SpaceHost-Server	2026-07-31 16:57:01 (21 hours ago)	103.223.8.137 - - [31/Jul/2026:18:56:38 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6382 "-" "Jetpack/12. ... show more 103.223.8.137 - - [31/Jul/2026:18:56:38 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6382 "-" "Jetpack/12.5; WordPress/6.2; http://site63197974.com" 103.223.8.137 - - [31/Jul/2026:18:56:47 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6382 "-" "WordPress.com; https://wordpress.com" 103.223.8.137 - - [31/Jul/2026:18:56:58 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6382 "-" "Jetpack/12.0; WordPress/6.2; http://site65039807.com" show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-31 05:28:58 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 103.223.8.137 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 103.223.8.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 31 01:28:52.537705 2026] [security2:error] [pid 3441217:tid 3441217] [client 103.223.8.137:8344] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.223.8.137 (+1 hits since last alert)\|igolfallday.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "igolfallday.com"] [uri "/xmlrpc.php"] [unique_id "amwylOwZffeF79xzHeATAAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-31 04:26:22 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 103.223.8.137 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 103.223.8.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 31 00:26:17.004447 2026] [security2:error] [pid 2367816:tid 2367819] [client 103.223.8.137:8111] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.223.8.137 (+1 hits since last alert)\|illianapartyrentals.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "illianapartyrentals.com"] [uri "/xmlrpc.php"] [unique_id "amwj6W3oOPxp5O3aX0OTGgAAAEE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Schnuffi	2025-10-03 13:35:50 (9 months ago)	ports, 445/24H:1/7D:1	Port Scan
Anonymous	2025-05-31 08:18:32 (1 year ago)	Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1	Hacking Web App Attack
🇩🇪 stinpriza	2025-05-31 08:08:36 (1 year ago)	(XMLRPC) xmlrpc banned 103.223.8.137 (IN/India/-): 1 in the last 3600 secs	Web App Attack
🇳🇱 Joop	2025-05-31 07:18:59 (1 year ago)	2025-05-31 09:18:58 +0200 s40 /xmlrpc.php	Web App Attack
🇺🇸 TPI-Abuse	2025-05-30 17:25:48 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 103.223.8.137 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 103.223.8.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 30 13:25:41.173960 2025] [security2:error] [pid 562163:tid 562163] [client 103.223.8.137:4758] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|495metro.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "495metro.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aDnqFWl2B-bEJmzzBE5LOgAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-05-30 11:57:52 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇬🇧 D3monite	2024-01-16 11:56:31 (2 years ago)	Attempted Brute Force (dovecot)	Brute-Force

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 47.79.201.134

🇩🇪 213.209.159.228

🇳🇱 213.176.26.109

🇳🇱 160.119.71.121

🇨🇳 106.12.86.201

🇮🇩 103.165.206.238

🇧🇩 103.107.162.11

🇮🇩 103.98.176.164

🇳🇱 91.92.40.52

🇩🇪 69.5.169.134

🇨🇦 51.79.68.87

🇳🇱 45.148.10.183

🇨🇳 36.42.67.114

🇬🇧 2a06:4880:c000::eb

🇪🇹 196.189.126.185

🇺🇸 162.216.149.190

🇮🇩 103.174.62.26

🇧🇷 45.205.1.212

🇸🇬 43.156.115.178

🇩🇪 34.32.103.55