JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.61.113.46

103.61.113.46 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 44%: ?

44%

ISP	Amogh Broadband Services Private Limited
Usage Type	Fixed Line ISP
ASN	AS45184
Domain Name	dennetworks.com
Country	🇮🇳 India
City	Bareilly, Uttar Pradesh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.61.113.46

Whois 103.61.113.46

IP Abuse Reports for 103.61.113.46:

This IP address has been reported a total of 15 times from 12 distinct sources. 103.61.113.46 was first reported on May 24th 2022, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Kenshin869	2026-06-17 16:04:42 (1 hour ago)	Wordpress unauthorized access attempt	Brute-Force
🇺🇸 TPI-Abuse	2026-06-17 16:01:20 (1 hour ago)	(mod_security) mod_security (id:240335) triggered by 103.61.113.46 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 103.61.113.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 12:01:13.486093 2026] [security2:error] [pid 22034:tid 22099] [client 103.61.113.46:17544] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.61.113.46 (+1 hits since last alert)\|darrylrichards.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "darrylrichards.com"] [uri "/xmlrpc.php"] [unique_id "ajLEyUXl_tDuvG07zgQ0fQAAApc"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 debestelapp	2026-06-17 13:20:10 (4 hours ago)		Web App Attack
🇩🇪 pscriptos	2026-06-17 09:59:29 (7 hours ago)	{"ClientAddr":"103.61.113.46:17750","ClientHost":"103.61.113.46","ClientPort":"17750","ClientUsernam ... show more {"ClientAddr":"103.61.113.46:17750","ClientHost":"103.61.113.46","ClientPort":"17750","ClientUsername":"-","DownstreamContentSize":418,"DownstreamStatus":403,"Duration":141142496,"OriginContentSize":418,"OriginDuration":136599319,"OriginStatus":403,"Overhead":4543177,"RequestAddr":"www.cleveradmin.de","RequestContentSize":702,"RequestCount":462999,"RequestHost":"www.cleveradmin.de","RequestMethod":"POST","RequestPath":"/xmlrpc.php","RequestPort":"-","RequestProtocol":"HTTP/1.1","RequestScheme":"https","RetryAttempts":0,"RouterName":"cleveradmin-www-websecure@file","ServiceAddr":"172.16.80.10:80","ServiceName":"cleveradmin-www@file","ServiceURL":"http://172.16.80.10:80","StartLocal":"2026-06-17T11:59:09.67624743+02:00","StartUTC":"2026-06-17T09:59:09.67624743Z","TLSCipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","TLSVersion":"1.2","entryPointName":"websecure","level":"info","msg":"","time":"2026-06-17T11:59:09+02:00"} {"ClientAddr":"103.61.113.46:17750","ClientHost":"103.61.113.46","Cli ... show less	Brute-Force Web App Attack
Anonymous	2026-06-17 09:07:56 (8 hours ago)	(wordpress) Failed wordpress login from 103.61.113.46 (IN/India/-)	Brute-Force
🇺🇸 TPI-Abuse	2026-06-17 07:53:01 (9 hours ago)	(mod_security) mod_security (id:240335) triggered by 103.61.113.46 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 103.61.113.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 03:52:56.031090 2026] [security2:error] [pid 9925:tid 9925] [client 103.61.113.46:19344] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.61.113.46 (+1 hits since last alert)\|greatwesternfirearms.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "greatwesternfirearms.com"] [uri "/xmlrpc.php"] [unique_id "ajJSWFzAH1hF3GHaCdETjgAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-17 05:58:00 (11 hours ago)	(mod_security) mod_security (id:240335) triggered by 103.61.113.46 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 103.61.113.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 01:57:57.022068 2026] [security2:error] [pid 4870:tid 4870] [client 103.61.113.46:18799] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.61.113.46 (+1 hits since last alert)\|bethanpearce.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "bethanpearce.com"] [uri "/xmlrpc.php"] [unique_id "ajI3ZfrI8-hNGYZUPfmMkgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 check-the-sum.fr	2026-05-06 08:35:53 (1 month ago)	Port Scanning	Port Scan
🇬🇧 PeravixGroup	2026-05-06 06:04:12 (1 month ago)	Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aar ... show more Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aaran.cloud show less	Hacking Exploited Host
Anonymous	2026-05-06 05:58:54 (1 month ago)	1778047133 - 05/06/2026 07:58:53 Host: 103.61.113.46/103.61.113.46 Port: 445 TCP Blocked ...	Port Scan
Anonymous	2026-05-02 16:08:43 (1 month ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇳🇱 Study Bitcoin 🤗	2025-09-12 06:32:51 (9 months ago)	Port probe to tcp/445 (smb) [srv134]	Port Scan Hacking
Anonymous	2024-04-23 11:45:12 (2 years ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇩🇪 alliance	2023-03-04 09:13:35 (3 years ago)	04.03.2023 09:05:34 Connection to port 445 blocked by firewall	Port Scan
🇲🇾 Sean64	2022-05-24 04:33:13 (4 years ago)	May 24 16:33:12 sean postfix/smtpd[1665737]: NOQUEUE: reject: RCPT from unknown[103.61.113.46]: 554 ... show more May 24 16:33:12 sean postfix/smtpd[1665737]: NOQUEUE: reject: RCPT from unknown[103.61.113.46]: 554 5.7.1 Service unavailable; Client host [103.61.113.46] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/103.61.113.46 / https://www.spamhaus.org/sbl/query/SBLCSS; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[103.61.113.46]> ... show less	Email Spam Brute-Force

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 204.76.203.81

🇮🇹 176.201.152.113

🇳🇱 88.151.32.61

🇳🇱 85.11.167.7

🇲🇾 49.124.151.84

🇳🇱 195.178.110.30

🇩🇪 193.122.2.186

🇻🇳 125.212.217.143

🇬🇧 81.77.196.19

🇸🇬 8.219.104.103

🇳🇱 5.61.209.43

🇵🇱 194.180.49.145

🇩🇪 185.242.3.195

🇺🇸 154.49.181.46

🇺🇿 84.54.115.46

🇧🇬 79.124.40.138

🇳🇱 45.148.10.157

🇨🇦 40.85.241.15

🇳🇱 204.76.203.51

🇳🇱 176.65.132.24