JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.225.244.13

103.225.244.13 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 43%: ?

43%

ISP	Websurfer Nepal Communication System Pvt. Ltd
Usage Type	Fixed Line ISP
ASN	AS24550
Domain Name	websurfer.com.np
Country	🇳🇵 Nepal
City	Kathmandu, Bagmati Province

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.225.244.13

Whois 103.225.244.13

IP Abuse Reports for 103.225.244.13:

This IP address has been reported a total of 30 times from 17 distinct sources. 103.225.244.13 was first reported on June 30th 2021, and the most recent report was 16 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 nodepile	2026-06-27 04:35:39 (16 hours ago)	Requests denied due to proxy/VPN risk (tenant=82 method=GET path=/catalogsearch/result/index/ ua='Mo ... show more Requests denied due to proxy/VPN risk (tenant=82 method=GET path=/catalogsearch/result/index/ ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36') show less	Open Proxy VPN IP
🇺🇸 kosada.com	2026-06-26 22:47:30 (22 hours ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 Vegascosmetics	2026-06-24 07:10:07 (3 days ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
🇨🇭 ALPHANET	2026-06-20 05:40:03 (1 week ago)	Botnet or web spider not respecting robots.txt	DDoS Attack Exploited Host
🇺🇸 gui-ying233	2026-06-20 00:07:13 (1 week ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 nodepile	2026-06-08 07:18:46 (2 weeks ago)	Requests denied due to proxy/VPN risk (tenant=82 method=GET path=/catalogsearch/result/ ua='Mozilla/ ... show more Requests denied due to proxy/VPN risk (tenant=82 method=GET path=/catalogsearch/result/ ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36') show less	Open Proxy VPN IP
🇺🇸 nodepile	2026-06-06 03:41:03 (3 weeks ago)	Requests denied due to proxy/VPN risk (tenant=82 method=GET path=/catalogsearch/result/index/ ua='Mo ... show more Requests denied due to proxy/VPN risk (tenant=82 method=GET path=/catalogsearch/result/index/ ua='Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36') show less	Open Proxy VPN IP
🇩🇪 Vegascosmetics	2026-06-05 19:40:57 (3 weeks ago)	Kingcopy(AI-IDS) Report: IP automatically blocked after obfuscated encoding. Vegas Security System	DDoS Attack Hacking Exploited Host
Anonymous	2026-06-03 15:00:23 (3 weeks ago)	Botnet activity. Attribution: Angara Technologies Group / mikhail-smirnov-79830322 \| Attack Signatur ... show more Botnet activity. Attribution: Angara Technologies Group / mikhail-smirnov-79830322 \| Attack Signature Blocked: /wishlist/index/add/product/11361/form_key/M6tA1k6UPik63qfa/ \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like G... show less	Hacking Bad Web Bot Web App Attack
🇨🇭 ALPHANET	2026-05-10 00:00:15 (1 month ago)	Botnet or web spider not respecting robots.txt	DDoS Attack Exploited Host
🇺🇸 factor1	2026-04-29 15:01:19 (1 month ago)	Fail2ban at saturn Reports Abuse.	Brute-Force Web App Attack
🇫🇷 SpaceHost-Server	2026-04-28 22:26:44 (1 month ago)		Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-04-28 22:16:13 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 103.225.244.13 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 103.225.244.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 28 18:16:07.667015 2026] [security2:error] [pid 29683:tid 29683] [client 103.225.244.13:6728] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|iconflgc.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "iconflgc.com"] [uri "/wp-json/wp/v2/users"] [unique_id "afExp-j9pz9XawT52rWSNQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-28 20:47:16 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 103.225.244.13 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 103.225.244.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 28 16:47:08.048959 2026] [security2:error] [pid 29631:tid 29631] [client 103.225.244.13:6767] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|gerrytolentino.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gerrytolentino.net"] [uri "/wp-json/wp/v2/users"] [unique_id "afEczBoQ5SUsB8ox-749HAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-28 17:46:42 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 103.225.244.13 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 103.225.244.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 28 13:46:38.239621 2026] [security2:error] [pid 15043:tid 15043] [client 103.225.244.13:17277] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|chickiesbeef.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "chickiesbeef.com"] [uri "/wp-json/wp/v2/users"] [unique_id "afDyfkzl1zY6xszD4xJ4hAAAABI"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 208.68.37.246

🇺🇸 193.56.116.205

🇬🇧 35.203.211.4

🇨🇳 223.199.168.53

🇦🇷 190.5.21.35

🇫🇮 147.185.133.134

🇱🇹 85.206.93.169

🇧🇷 43.164.195.160

🇻🇳 14.162.104.74

🇹🇭 202.29.225.158

🇻🇳 103.166.182.186

🇳🇱 91.92.40.11

🇳🇱 45.148.10.121

🇨🇳 182.43.235.75

🇺🇸 172.81.129.130

🇸🇬 159.65.130.36

🇮🇩 103.247.14.24

🇳🇱 91.92.40.29

🇱🇹 62.60.130.219

🇳🇱 45.198.224.5