JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.81.159.213

103.81.159.213 was found in our database!

This IP was reported 100 times. Confidence of Abuse is 0%: ?

ISP	Digitax India Communications Pvt Ltd.
Usage Type	Fixed Line ISP
ASN	AS135848
Domain Name	mypockets.in
Country	🇮🇳 India
City	Amritsar, Punjab

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.81.159.213

Whois 103.81.159.213

IP Abuse Reports for 103.81.159.213:

This IP address has been reported a total of 100 times from 39 distinct sources. 103.81.159.213 was first reported on February 25th 2021, and the most recent report was 5 months ago.

Old Reports: The most recent abuse report for this IP address is from 5 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇾 lns.bz	2026-01-06 19:21:43 (5 months ago)	Banned for trying to access xmlrpc [BY]	Web App Attack
🇳🇱 Rey	2025-12-14 02:39:01 (5 months ago)	WordPress xmlrpc.php attack [xvxl5uln]	Web App Attack
🇺🇸 TPI-Abuse	2025-12-11 12:49:16 (6 months ago)	(mod_security) mod_security (id:225170) triggered by 103.81.159.213 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 103.81.159.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 11 07:49:07.426949 2025] [security2:error] [pid 13554:tid 13554] [client 103.81.159.213:50433] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|pcga.golf\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "pcga.golf"] [uri "/wp-json/wp/v2/users"] [unique_id "aTq9w4WqTb6T8d7pzQFAUgAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 rh24	2025-11-10 13:42:45 (7 months ago)	(wordpress) Failed wordpress login from 103.81.159.213 (IN/India/-): (CF_ENABLE)	Brute-Force
Anonymous	2025-11-05 07:55:34 (7 months ago)	(wordpress) Failed wordpress login from 103.81.159.213 (IN/India/-)	Brute-Force
🇧🇾 lns.bz	2025-11-01 21:06:29 (7 months ago)	Banned for trying to access xmlrpc [BY]	Web App Attack
🇨🇭 teamsecure	2025-10-31 01:17:18 (7 months ago)	Banned for trying to access xmlrpc	Web App Attack
🇯🇵 Valhalla	2025-10-25 10:53:30 (7 months ago)	/xmlrpc.php	Hacking Web App Attack
🇩🇪 stinpriza	2025-10-24 16:03:57 (7 months ago)	Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2025-10-24 03:50:07 (7 months ago)	(mod_security) mod_security (id:225170) triggered by 103.81.159.213 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 103.81.159.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 23 23:49:57.011950 2025] [security2:error] [pid 11939:tid 11939] [client 103.81.159.213:65512] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|applemaccomputerconsulting.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "applemaccomputerconsulting.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aPr3ZRSf8_gdlKFl_WDjOQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 jcbriar	2025-10-23 12:15:12 (7 months ago)	Searching for vulnerable scripts	Hacking Web App Attack
Anonymous	2025-10-23 05:55:06 (7 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇸🇪 SkyDancer	2025-10-18 08:35:06 (7 months ago)	Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blo ... show more Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blocked by SkyDancer Ai(web-X). show less	Hacking Brute-Force
🇩🇪 dbmwebdesign	2025-10-18 05:30:18 (7 months ago)	WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-10-15 15:56:25 (7 months ago)	(mod_security) mod_security (id:225170) triggered by 103.81.159.213 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 103.81.159.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 15 11:56:16.123218 2025] [security2:error] [pid 30195:tid 30195] [client 103.81.159.213:49820] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|sharawi-gum.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sharawi-gum.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aO_EIGHB_VZEJ9Iz4ybUEgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 100 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 118.196.64.66

🇸🇬 101.47.159.125

🇺🇸 216.152.252.45

🇺🇸 198.11.178.150

🇧🇩 180.94.20.203

🇺🇸 172.93.212.159

🇺🇸 72.8.215.206

🇬🇧 35.203.210.70

🇺🇸 216.180.246.51

🇩🇪 213.209.159.11

🇮🇶 212.237.123.54

🇺🇸 207.241.173.116

🇺🇸 192.178.113.19

🇨🇳 171.11.19.60

🇷🇺 95.108.213.193

🇬🇧 45.82.76.127

🇸🇳 41.82.174.46

🇮🇳 202.141.42.26

🇫🇷 185.41.28.3

🇲🇾 180.74.84.64