JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

103.66.98.118

Neutral Activity

Abuse Confidence Score

0% Low Risk

3 reports

2 reporters · latest 2 months ago

ISP: Balaji Services
Usage Type: Fixed Line ISP
ASN: AS58763
Domain Name: Unknown
Country: 🇮🇳 India
City: Mumbai, Maharashtra

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

103.66.98.118 has been reported 3 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

3 from 2 distinct reporters

First reported

August 17th 2026

Most recent report

2 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-17 09:09:27 UTC · (2 months ago)	(mod_security) mod_security (id:240335) triggered by 103.66.98.118 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 05:09:22.402112 2026] [security2:error] [pid 12019:tid 12045] [client 103.66.98.118:65048] M ... show more (mod_security) mod_security (id:240335) triggered by 103.66.98.118 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 05:09:22.402112 2026] [security2:error] [pid 12019:tid 12045] [client 103.66.98.118:65048] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.66.98.118 (+1 hits since last alert)\|thestoryofmyvoice.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "thestoryofmyvoice.com"] [uri "/xmlrpc.php"] [unique_id "aoLPwgLOSqDpA_9BRs9atwAAAFU"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇪 ljo	2026-08-17 08:38:20 UTC · (2 months ago)	103.66.98.118 - - [17/Aug/2026:10:36:44 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5525 "-" "WordPress.com; https://wordpress.com" 103.66.98.118 - - [17/Aug/2026:10:36:55 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5525 "-" "Jetpack by WordPress.com" 103.66.9 ... show more 103.66.98.118 - - [17/Aug/2026:10:36:44 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5525 "-" "WordPress.com; https://wordpress.com" 103.66.98.118 - - [17/Aug/2026:10:36:55 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5525 "-" "Jetpack by WordPress.com" 103.66.98.118 - - [17/Aug/2026:10:37:05 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5525 "-" "WordPress.com; https://wordpress.com" 103.66.98.118 - - [17/Aug/2026:10:37:16 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5525 "-" "Jetpack/12.1; WordPress/6.2; http://site21716009.com" 103.66.98.118 - - [17/Aug/2026:10:37:26 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5525 "-" "Jetpack by WordPress.com" 103.66.98.118 - - [17/Aug/2026:10:37:37 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5525 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.1)" 103.66.98.118 - - [17/Aug/2026:10:37:48 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5525 "-" "Jetpack by WordPress.com" 103.66.98.118 - - [17/Aug/2026:10:37:58 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5525 "-" "Jetpack by WordPress.com ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-08-17 07:28:09 UTC · (2 months ago)	(mod_security) mod_security (id:240335) triggered by 103.66.98.118 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 03:28:01.168590 2026] [security2:error] [pid 7793:tid 7793] [client 103.66.98.118:54496] Mod ... show more (mod_security) mod_security (id:240335) triggered by 103.66.98.118 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 03:28:01.168590 2026] [security2:error] [pid 7793:tid 7793] [client 103.66.98.118:54496] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.66.98.118 (+1 hits since last alert)\|atidysort.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "atidysort.com"] [uri "/xmlrpc.php"] [unique_id "aoK4AWKwze03B8a3sWMkaAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇩🇪 104.207.57.191

🇺🇸 104.131.168.97

🇬🇧 87.192.106.182

🇺🇸 70.184.96.133

🇵🇪 38.25.17.10

🇺🇸 12.76.148.254

🇧🇷 201.28.234.10

🇦🇷 190.172.88.63

🇧🇷 189.6.9.140

🇨🇳 180.153.236.27

🇸🇬 172.70.142.112

🇺🇸 165.22.150.5

🇺🇸 98.173.235.214

🇳🇱 85.155.15.23

🇭🇰 45.249.244.136

🇺🇸 40.121.179.100

🇳🇱 35.214.224.182

🇳🇱 35.214.216.118

🇬🇧 35.203.210.172

🇺🇸 35.168.16.159