JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.81.13.20

103.81.13.20 was found in our database!

This IP was reported 43 times. Confidence of Abuse is 0%: ?

ISP	Syswall Telecom Pvt. Ltd.
Usage Type	Fixed Line ISP
ASN	AS135792
Domain Name	syswall.in
Country	🇮🇳 India
City	Bhiwadi, Rajasthan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.81.13.20

Whois 103.81.13.20

IP Abuse Reports for 103.81.13.20:

This IP address has been reported a total of 43 times from 19 distinct sources. 103.81.13.20 was first reported on March 12th 2024, and the most recent report was 8 months ago.

Old Reports: The most recent abuse report for this IP address is from 8 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 VHosting	2025-11-16 01:46:28 (8 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇩🇪 neckaralb-admin.de	2025-10-09 14:56:52 (9 months ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇳🇱 EGP Abuse Dept	2025-09-17 08:32:42 (9 months ago)	Unauthorized connection to proxy port 3128	Port Scan Hacking
🇺🇸 TPI-Abuse	2025-09-15 01:03:25 (10 months ago)	(mod_security) mod_security (id:225170) triggered by 103.81.13.20 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 103.81.13.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 14 21:03:19.888323 2025] [security2:error] [pid 25678:tid 25678] [client 103.81.13.20:55118] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|dwightbrown.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dwightbrown.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aMdl19vToExN2ZYIbsZrUwAAAAM"], referer: https://dwightbrown.com/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nowyouknow	2025-09-04 21:45:07 (10 months ago)	(From [email protected])	Phishing Web Spam
🇺🇸 nowyouknow	2025-09-04 11:31:23 (10 months ago)	(From [email protected])	Phishing Web Spam
🇳🇱 antikirra	2025-09-01 19:46:16 (10 months ago)	Proxy Port Scanning	Port Scan
🇺🇸 nowyouknow	2025-09-01 18:42:12 (10 months ago)	(From [email protected])	Phishing Web Spam
Anonymous	2025-08-25 11:41:04 (10 months ago)	APTUDE WEBFORM SPAM 103.81.13.20 (103.81.13.20)	Web Spam
🇺🇸 TPI-Abuse	2025-08-13 08:54:11 (11 months ago)	(mod_security) mod_security (id:225170) triggered by 103.81.13.20 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 103.81.13.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 13 04:54:06.352908 2025] [security2:error] [pid 23798:tid 23798] [client 103.81.13.20:55577] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|engineeringarts.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "engineeringarts.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aJxSrvkUPjNIA613EWGTBgAAAA0"], referer: https://engineeringarts.com/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-08-11 16:13:00 (11 months ago)	(mod_security) mod_security (id:225170) triggered by 103.81.13.20 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 103.81.13.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 11 12:12:57.341778 2025] [security2:error] [pid 24668:tid 24668] [client 103.81.13.20:48527] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|jolankagroup.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jolankagroup.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aJoWiUJYn4ctCrfLdqLE2AAAAA0"], referer: https://jolankagroup.com/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nowyouknow	2025-08-03 23:01:50 (11 months ago)	(From [email protected])	Phishing Web Spam
🇳🇱 pixelXp	2025-07-31 23:38:09 (11 months ago)	https://ZICHTTOP.NL/contact	Web Spam
Anonymous	2025-07-30 11:48:52 (11 months ago)	Ports: 25,465,587; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
🇺🇸 nowyouknow	2025-07-26 23:05:31 (11 months ago)	(From [email protected])	Phishing Web Spam

Showing 1 to 15 of 43 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇴 186.29.84.8

🇸🇦 151.255.34.230

🇨🇴 130.250.228.136

🇹🇭 125.27.12.122

🇰🇷 112.164.211.192

🇬🇧 90.197.146.31

🇺🇸 71.57.253.221

🇺🇸 34.197.70.90

🇺🇸 20.83.167.27

🇸🇬 8.222.221.13

🇸🇬 8.222.135.58

🇦🇪 3.28.44.14

🇳🇱 2.59.20.94

🇳🇱 2a00:1450:4013:c1a::127

🇧🇷 201.76.120.30

🇸🇪 171.25.158.68

🇺🇸 162.216.150.89

🇨🇳 120.27.198.177

🇵🇹 89.154.227.168

🇨🇦 85.217.149.26