JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.73.100.97

103.73.100.97 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 88%: ?

88%

ISP	KK Networks
Usage Type	Fixed Line ISP
ASN	AS136969
Domain Name	kknetworks.com.pk
Country	🇵🇰 Pakistan
City	Lahore, Punjab

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.73.100.97

Whois 103.73.100.97

IP Abuse Reports for 103.73.100.97:

This IP address has been reported a total of 20 times from 15 distinct sources. 103.73.100.97 was first reported on August 13th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 security.rdmc.fr	2026-08-21 12:46:32 (1 day ago)	Port Scan Attack proto:TCP src:40440 dst:23	Port Scan
🇳🇱 Site.eu	2026-08-21 11:31:11 (1 day ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-08-21 09:41:42 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 103.73.100.97 (103.73.100-97.kkn.com.pk): 1 in ... show more (mod_security) mod_security (id:240335) triggered by 103.73.100.97 (103.73.100-97.kkn.com.pk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 05:41:35.743772 2026] [security2:error] [pid 23613:tid 23613] [client 103.73.100.97:26075] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.73.100.97 (+1 hits since last alert)\|souldata.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "souldata.com"] [uri "/xmlrpc.php"] [unique_id "aogdTwMsSTb6nyQtnTXJFAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-21 07:26:12 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 103.73.100.97 (103.73.100-97.kkn.com.pk): 1 in ... show more (mod_security) mod_security (id:240335) triggered by 103.73.100.97 (103.73.100-97.kkn.com.pk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 03:26:03.646048 2026] [security2:error] [pid 4474:tid 4474] [client 103.73.100.97:61240] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.73.100.97 (+1 hits since last alert)\|magacine.tv\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "magacine.tv"] [uri "/xmlrpc.php"] [unique_id "aof9i2wlvyZI-a1SxpKs7wAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-21 07:23:26 (1 day ago)	[redacted] 103.73.100.97 - - [21/Aug/2026:09:22:43 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "J ... show more [redacted] 103.73.100.97 - - [21/Aug/2026:09:22:43 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.5; WordPress/6.1; http://site16473152.com" [redacted] 103.73.100.97 - - [21/Aug/2026:09:22:54 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.2)" [redacted] 103.73.100.97 - - [21/Aug/2026:09:23:04 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/13.0; WordPress/6.2; http://site59372821.com" [redacted] 103.73.100.97 - - [21/Aug/2026:09:23:15 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.1)" [redacted] 103.73.100.97 - - [21/Aug/2026:09:23:26 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.4)" ... show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-08-20 18:35:47 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 103.73.100.97 (103.73.100-97.kkn.com.pk): 1 in ... show more (mod_security) mod_security (id:240335) triggered by 103.73.100.97 (103.73.100-97.kkn.com.pk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 20 14:35:39.638094 2026] [security2:error] [pid 10843:tid 10843] [client 103.73.100.97:50751] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.73.100.97 (+1 hits since last alert)\|monogay.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "monogay.org"] [uri "/xmlrpc.php"] [unique_id "aodI-_xNqoohxolYV73rWQAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-20 18:04:35 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 103.73.100.97 (103.73.100-97.kkn.com.pk): 1 in ... show more (mod_security) mod_security (id:240335) triggered by 103.73.100.97 (103.73.100-97.kkn.com.pk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 20 14:04:28.180033 2026] [security2:error] [pid 29744:tid 29744] [client 103.73.100.97:59585] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.73.100.97 (+1 hits since last alert)\|comobarbershop.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "comobarbershop.com"] [uri "/xmlrpc.php"] [unique_id "aodBrLduXnYtyQF761ucQQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-08-20 17:50:21 (1 day ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-20 17:24:19 (1 day ago)	Fail2Ban: WordPress XML-RPC brute-force attack detected.	Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-08-20 16:57:12 (1 day ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇫🇷 Zkillu	2026-08-20 16:17:27 (1 day ago)	DDoS flood attack against 31.56.58.0 (2026-08-20 16:12:27 -> 2026-08-20 16:27:27 UTC) targeting AS21 ... show more DDoS flood attack against 31.56.58.0 (2026-08-20 16:12:27 -> 2026-08-20 16:27:27 UTC) targeting AS215599. This IP (AS136969) sent ~153 packets (0.01 MB) during the attack window. Likely a compromised device (botnet). show less	DDoS Attack Exploited Host
🇫🇷 Zkillu	2026-08-20 15:42:20 (2 days ago)	DDoS flood attack against 46.232.235.0 (2026-08-20 15:37:20 -> 2026-08-20 15:52:20 UTC) targeting AS ... show more DDoS flood attack against 46.232.235.0 (2026-08-20 15:37:20 -> 2026-08-20 15:52:20 UTC) targeting AS215599. This IP (AS136969) sent ~118 packets (0.13 MB) during the attack window. Likely a compromised device (botnet). show less	DDoS Attack Exploited Host
🇺🇸 gui-ying233	2026-08-20 14:28:29 (2 days ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-08-20 14:03:10 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 103.73.100.97 (103.73.100-97.kkn.com.pk): 1 in ... show more (mod_security) mod_security (id:240335) triggered by 103.73.100.97 (103.73.100-97.kkn.com.pk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 20 10:03:04.068039 2026] [security2:error] [pid 2397:tid 2397] [client 103.73.100.97:60403] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.73.100.97 (+1 hits since last alert)\|waterjetsolutions.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "waterjetsolutions.com"] [uri "/xmlrpc.php"] [unique_id "aocJGHNgy72ibx2PccjAXQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-08-20 13:19:12 (2 days ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 159.65.5.51

🇰🇷 211.194.163.107

🇰🇷 211.62.73.218

🇳🇱 193.47.62.69

🇮🇷 94.182.149.20

🇫🇮 65.109.178.234

🇮🇳 27.123.113.30

🇰🇷 1.209.110.147

🇹🇷 2a00:1d34:345b:3900:d1c9:2179:971e:bc

🇭🇷 185.254.255.93

🇷🇴 80.94.95.211

🇺🇸 64.62.156.118

🇺🇸 43.135.149.69

🇬🇧 35.203.210.95

🇺🇸 20.97.182.130

🇬🇧 5.252.83.100

🇹🇭 210.86.171.133

🇮🇹 185.197.9.8

🇺🇸 163.41.112.89

🇹🇭 118.173.231.53