JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.72.8.159

103.72.8.159 was found in our database!

This IP was reported 44 times. Confidence of Abuse is 50%: ?

50%

ISP	SWIFTIFY PRIVATE LIMITED
Usage Type	Fixed Line ISP
ASN	AS151729
Hostname(s)	103.72.8.159.swiftify.in
Domain Name	swiftify.in
Country	🇮🇳 India
City	Delhi, Delhi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.72.8.159

Whois 103.72.8.159

IP Abuse Reports for 103.72.8.159:

This IP address has been reported a total of 44 times from 29 distinct sources. 103.72.8.159 was first reported on January 24th 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇳 ThreatBook.io	2026-05-18 22:39:59 (2 weeks ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/103.72.8.159	SSH
🇫🇷 SpaceHost-Server	2026-05-17 22:26:06 (3 weeks ago)		Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-05-17 18:55:47 (3 weeks ago)	(mod_security) mod_security (id:225170) triggered by 103.72.8.159 (103.72.8.159.swiftify.in): 1 in t ... show more (mod_security) mod_security (id:225170) triggered by 103.72.8.159 (103.72.8.159.swiftify.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 17 14:55:39.797597 2026] [security2:error] [pid 6201:tid 6201] [client 103.72.8.159:62736] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|thingstodonude.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "thingstodonude.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agoPK0HJE776CFGcE0O9WQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-05-17 13:07:55 (3 weeks ago)	[redacted] 103.72.8.159 - - [17/May/2026:15:06:36 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mo ... show more [redacted] 103.72.8.159 - - [17/May/2026:15:06:36 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (Windows NT 6.3; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/75.0.0.0 Safari/537.36" [redacted] 103.72.8.159 - - [17/May/2026:15:07:03 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (Windows NT 6.2; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36" [redacted] 103.72.8.159 - - [17/May/2026:15:07:04 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.0.0 Safari/537.36" [redacted] 103.72.8.159 - - [17/May/2026:15:07:27 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (Windows NT 6.3; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/12.0.0.0 Safari/537.36" [redacted] 103.72.8.159 - - [17/May/2026:15:07:28 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/ ... show less	Hacking Web App Attack
🇩🇪 4server	2026-05-17 05:54:14 (3 weeks ago)	[SunMay1707:54:08.9102602026][security2:error][pid3407882:tid3407944][client103.72.8.159:0]ModSecuri ... show more [SunMay1707:54:08.9102602026][security2:error][pid3407882:tid3407944][client103.72.8.159:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"fidmeyer.ch\"][uri\"/xmlrpc.php\"][unique_id\"aglYAGTsLLrVy8eZed2fRAAAAIE\"] show less	Port Scan Brute-Force Web App Attack
Anonymous	2026-05-17 05:46:02 (3 weeks ago)	Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1	Hacking Web App Attack
🇳🇱 wlt-blocker	2026-05-16 19:13:11 (3 weeks ago)	Unauthorized access to webpage admin	Web App Attack
🇩🇪 big-cloud.nl	2026-05-16 18:04:32 (3 weeks ago)	Try to access /xmlrpc.php	Web App Attack
🇳🇱 ipoac.nl	2026-05-16 08:00:54 (3 weeks ago)	ipoac.nl:443 103.72.8.159 - - [16/May/2026:10:00:53 +0200] ipoac.nl "POST /xmlrpc.php HTTP/1.1" 404 ... show more ipoac.nl:443 103.72.8.159 - - [16/May/2026:10:00:53 +0200] ipoac.nl "POST /xmlrpc.php HTTP/1.1" 404 4570 "-" "Mozilla/5.0 (Windows NT 6.3; x86) AppleWebKit/537.36 (KHTML, like Gecko) Safari/13.0.0.0 Safari/537.36" show less	Bad Web Bot
🇦🇹 urnilxfgbez	2026-05-15 22:45:00 (3 weeks ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇩🇪 banankicks	2026-05-14 08:20:33 (3 weeks ago)	Unauthorized connection attempt detected from IP address 103.72.8.159 to port 23 (banankicks-server) ... show more Unauthorized connection attempt detected from IP address 103.72.8.159 to port 23 (banankicks-server) [x] show less	Brute-Force Exploited Host
🇷🇸 Smel	2026-05-14 02:30:02 (3 weeks ago)	MH/MP Probe, Scan, Hack -	Port Scan Hacking
🇬🇧 PeravixGroup	2026-05-13 23:26:41 (3 weeks ago)	Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: ME ... show more Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Brute-Force
🇨🇳 ThreatBook.io	2026-05-13 22:38:43 (3 weeks ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/103.72.8.159	SSH
Anonymous	2026-05-01 15:04:30 (1 month ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host

Showing 1 to 15 of 44 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 147.185.132.106

🇵🇭 120.28.109.188

🇨🇳 116.167.94.142

🇨🇳 115.190.142.147

🇫🇷 84.247.189.133

🇩🇪 84.233.195.161

🇳🇱 64.89.162.131

🇳🇱 45.148.10.181

🇨🇳 14.103.111.167

🇺🇸 216.25.89.72

🇩🇪 212.80.7.172

🇬🇧 198.244.168.119

🇨🇳 122.158.88.174

🇩🇪 84.233.195.160

🇺🇸 67.207.84.8

🇨🇳 60.25.70.139

🇩🇪 46.224.78.218

🇧🇷 45.160.177.79

🇩🇪 45.38.190.201

🇺🇸 44.192.161.54