JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.241.205.82

103.241.205.82 was found in our database!

This IP was reported 347 times. Confidence of Abuse is 100%: ?

100%

ISP	Universitas Jember
Usage Type	University/College/School
ASN	AS132678
Hostname(s)	205-82.unej.ac.id
Domain Name	unej.ac.id
Country	🇮🇩 Indonesia
City	Jember, East Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.241.205.82

Whois 103.241.205.82

IP Abuse Reports for 103.241.205.82:

This IP address has been reported a total of 347 times from 136 distinct sources. 103.241.205.82 was first reported on June 4th 2021, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 tall1oN	2026-10-16 16:00:33 (1 hour ago)	103.241.205.82 - - [16/Oct/2026:18:00:22 +0200] "GET /xmlrpc.php HTTP/2.0" 200 9807 "http://gadget.d ... show more 103.241.205.82 - - [16/Oct/2026:18:00:22 +0200] "GET /xmlrpc.php HTTP/2.0" 200 9807 "http://gadget.demons-gaming.cc/xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.0" "gadget.demons-gaming.cc" 103.241.205.82 - - [16/Oct/2026:18:00:33 +0200] "GET /xmlrpc.php HTTP/2.0" 200 10820 "http://gadget.demons-gaming.cc/xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 Edg/138.0.0.0" "gadget.demons-gaming.cc" ... show less	Web App Attack Port Scan Hacking
🇳🇱 i-turnradio.nl	2026-10-16 15:12:24 (2 hours ago)	2026-10-16 @ 17:12:22 (CET) ~ Blocked for trying to access: /xmlrpc.php	Web App Attack
Anonymous	2026-10-16 14:50:59 (2 hours ago)	Attempted access to sensitive endpoint (/xmlrpc.php) detected. Automated scan or unauthorized probin ... show more Attempted access to sensitive endpoint (/xmlrpc.php) detected. Automated scan or unauthorized probing. show less	Web App Attack
🇫🇮 inlink.ltd	2026-10-16 14:13:11 (3 hours ago)	Known malicious PHP file or CMS probe	Web App Attack
🇩🇪 london2038.com	2026-10-16 13:46:53 (3 hours ago)	Probing for exploits 103.241.205.82 - - [16/Oct/2026:15:46:49 +0200] "POST /xmlrpc.php HTTP/1.1" 422 ... show more Probing for exploits 103.241.205.82 - - [16/Oct/2026:15:46:49 +0200] "POST /xmlrpc.php HTTP/1.1" 422 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 103.241.205.82 - - [16/Oct/2026:15:46:50 +0200] "POST /xmlrpc.php HTTP/1.1" 422 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.0" show less	Hacking Web App Attack
🇬🇧 Bytemark	2026-10-16 13:36:50 (3 hours ago)	103.241.205.82 - - [16/Oct/2026:14:36:32 +0100] "GET /xmlrpc.php HTTP/1.1" 404 27 "http://xiaomi.eu/ ... show more 103.241.205.82 - - [16/Oct/2026:14:36:32 +0100] "GET /xmlrpc.php HTTP/1.1" 404 27 "http://xiaomi.eu/xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 Edg/138.0.0.0" 103.241.205.82 - - [16/Oct/2026:14:36:33 +0100] "GET /xmlrpc.php HTTP/1.1" 404 27 "http://xiaomi.eu/xmlrpc.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 103.241.205.82 - - [16/Oct/2026:14:36:50 +0100] "GET /wp-login.php HTTP/1.1" 404 27 "http://xiaomi.eu/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.0" show less	Brute-Force Web App Attack
🇫🇷 votrewebfacile	2026-10-16 12:27:55 (4 hours ago)	xmlrpc abuse	Brute-Force
🇫🇷 gavrielpiperno	2026-10-16 08:55:03 (8 hours ago)	PrestaShop Security Module: WordPress probe path detected	Web App Attack
🇧🇾 lns.bz	2026-10-16 07:41:39 (9 hours ago)	Banned for trying to access xmlrpc [BY]	Web App Attack
Anonymous	2026-10-16 06:56:22 (10 hours ago)	103.241.205.82 - - [16/Oct/2026:08:56:18 +0200] "POST /xmlrpc.php HTTP/1.1" 404 6781 "-" "Mozilla/5. ... show more 103.241.205.82 - - [16/Oct/2026:08:56:18 +0200] "POST /xmlrpc.php HTTP/1.1" 404 6781 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.0" 103.241.205.82 - - [16/Oct/2026:08:56:19 +0200] "POST /xmlrpc.php HTTP/1.1" 404 6781 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 Edg/138.0.0.0" 103.241.205.82 - - [16/Oct/2026:08:56:19 +0200] "POST /blog/xmlrpc.php HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.0" 103.241.205.82 - - [16/Oct/2026:08:56:19 +0200] "POST /wp/xmlrpc.php HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 103.241.205.82 - - [16/Oct/2026:08:56:19 +0200] "POST /wordpress/xmlrpc.php HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 103.241.205.82 - - ... show less	Brute-Force
🇩🇪 botreporter	2026-10-16 05:58:27 (11 hours ago)	CMS vulnerability/installation scanning	Brute-Force Web App Attack
🇲🇾 Rizzy	2026-10-16 05:55:05 (11 hours ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇬🇧 catalink.com	2026-10-16 05:53:57 (11 hours ago)	Brute forcing Wordpress login	Exploited Host Web App Attack
🇮🇪 Coolnagour	2026-10-16 05:15:19 (11 hours ago)	http-probing: /xmlrpc.php	Web App Attack
🇨🇱 Fernando Soto	2026-10-16 04:45:02 (12 hours ago)	WAF propio vps1 (CL): sensx15 score 20 en 1h. sondeo rutas sensibles.	Web App Attack

Showing 1 to 15 of 347 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 151.245.151.17

🇰🇷 222.99.237.249

🇵🇰 153.117.33.168

🇳🇱 109.160.32.49

🇷🇴 82.152.132.24

🇨🇦 45.198.224.32

🇧🇪 35.189.229.134

🇦🇹 187.15.158.82

🇧🇾 178.121.26.108

🇺🇸 162.216.150.202

🇯🇵 103.62.49.130

🇷🇺 85.175.72.188

🇺🇸 65.111.14.19

🇵🇱 51.68.151.167

🇮🇳 4.240.126.25

🇦🇺 4.196.200.15

🇰🇷 211.220.197.170

🇦🇷 186.139.192.40

🇨🇳 112.46.215.244

🇳🇱 45.148.10.141