JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.99.203.146

103.99.203.146 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 47%: ?

47%

ISP	Ometa Net Pvt. Ltd.
Usage Type	Fixed Line ISP
ASN	AS136629
Domain Name	ometanet.com
Country	🇮🇳 India
City	Mohali, Punjab

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.99.203.146

Whois 103.99.203.146

IP Abuse Reports for 103.99.203.146:

This IP address has been reported a total of 27 times from 17 distinct sources. 103.99.203.146 was first reported on March 5th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 4server	2026-07-07 16:10:12 (1 day ago)	[TueJul0718:10:08.7308992026][security2:error][pid452864:tid453038][client103.99.203.146:0]ModSecuri ... show more [TueJul0718:10:08.7308992026][security2:error][pid452864:tid453038][client103.99.203.146:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"368\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"npdesign360.ch\"][uri\"/xmlrpc.php\"][unique_id\"ak0k4E99QOXqD1KbOpeyQAAAAIY\"] show less	Hacking Web App Attack
🇩🇪 ger-stg-sifi1	2026-07-07 15:39:20 (1 day ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇩🇪 4server	2026-07-06 14:25:57 (2 days ago)	[MonJul0616:25:50.3960982026][security2:error][pid108312:tid108407][client103.99.203.146:0]ModSecuri ... show more [MonJul0616:25:50.3960982026][security2:error][pid108312:tid108407][client103.99.203.146:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"alessandrolucchini.ch\"][uri\"/xmlrpc.php\"][unique_id\"aku67gWmkraJYtjweLoJJwAAAMg\"] show less	Port Scan Brute-Force Web App Attack
🇹🇷 ycoskun41	2026-07-02 17:50:46 (6 days ago)	fail2ban: plesk-modsecurity jail on genckocaeli.com	Web App Attack
🇺🇸 Jason Howell	2026-07-01 13:39:32 (1 week ago)	103.99.203.146 - - [01/Jul/2026:13:33:02 +0000] "POST /xmlrpc.php HTTP/1.1" 200 4758 "-" "Mozilla/5. ... show more 103.99.203.146 - - [01/Jul/2026:13:33:02 +0000] "POST /xmlrpc.php HTTP/1.1" 200 4758 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/11.0.0.0 Safari/537.36" 103.99.203.146 - - [01/Jul/2026:13:37:37 +0000] "POST /xmlrpc.php HTTP/1.1" 200 4759 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; x86) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.0.0 Safari/537.36" 103.99.203.146 - - [01/Jul/2026:13:38:21 +0000] "POST /xmlrpc.php HTTP/1.1" 200 4759 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/99.0.0.0 Safari/537.36" 103.99.203.146 - - [01/Jul/2026:13:38:55 +0000] "POST /xmlrpc.php HTTP/1.1" 200 4758 "-" "Mozilla/5.0 (Windows NT 6.2; x86) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/89.0.0.0 Safari/537.36" 103.99.203.146 - - [01/Jul/2026:13:39:31 +0000] "POST /xmlrpc.php HTTP/1.1" 200 4760 "-" "Mozilla/5.0 (Windows NT 10.0; x64) AppleWebKit/537.36 (KHTML, like Gecko) Ch ... show less	Web App Attack
🇨🇭 4server	2026-06-30 13:57:25 (1 week ago)	[TueJun3015:57:19.4749772026][security2:error][pid3094135:tid3094307][client103.99.203.146:0]ModSecu ... show more [TueJun3015:57:19.4749772026][security2:error][pid3094135:tid3094307][client103.99.203.146:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"368\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"fimka-icp.com\"][uri\"/xmlrpc.php\"][unique_id\"akPLP2wpxPoHRyrHifzmagAAAEE\"] show less	Hacking Web App Attack
🇺🇸 mnsf	2026-06-24 02:31:16 (2 weeks ago)	Xmlrpc Caught (7)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-19 15:01:45 (2 weeks ago)	(mod_security) mod_security (id:225170) triggered by 103.99.203.146 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 103.99.203.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 11:01:31.445115 2026] [security2:error] [pid 8443:tid 8443] [client 103.99.203.146:53039] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|cemesur-vision21.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cemesur-vision21.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajVZywwu5VUA2ctvn6qqGAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 rsiddall	2026-06-15 19:33:53 (3 weeks ago)	103.99.203.146 - - [15/Jun/2026:15:33:48 -0400] "POST /xmlrpc.php HTTP/1.1" 301 242 "-" "Mozilla/5.0 ... show more 103.99.203.146 - - [15/Jun/2026:15:33:48 -0400] "POST /xmlrpc.php HTTP/1.1" 301 242 "-" "Mozilla/5.0 (Linux; Android 10; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 103.99.203.146 - - [15/Jun/2026:15:33:52 -0400] "POST /xmlrpc.php HTTP/1.1" 301 242 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/14.0.0.0 Safari/537.36" ... show less	Brute-Force
🇩🇪 4server	2026-06-10 14:38:57 (4 weeks ago)	[WedJun1016:38:53.2908542026][security2:error][pid485851:tid485968][client103.99.203.146:0]ModSecuri ... show more [WedJun1016:38:53.2908542026][security2:error][pid485851:tid485968][client103.99.203.146:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"life-live.ch\"][uri\"/xmlrpc.php\"][unique_id\"ail2_ZDX0aQZCkY7bnQ2gwAAANM\"] show less	Port Scan Brute-Force Web App Attack
🇳🇱 wlt-blocker	2026-06-10 07:09:42 (4 weeks ago)	Unauthorized access to webpage admin	Web App Attack
🇺🇸 TPI-Abuse	2026-06-03 06:32:36 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 103.99.203.146 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 103.99.203.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 02:32:28.537615 2026] [security2:error] [pid 24215:tid 24230] [client 103.99.203.146:60482] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|cynosureinternetservices.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cynosureinternetservices.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ah_KfMpH3rD1R25apjEtZwAAAYg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-03 06:10:03 (1 month ago)	Web App Attack, Hacking	Hacking Web App Attack
🇳🇱 wlt-blocker	2026-06-03 04:38:48 (1 month ago)	Unauthorized access to webpage admin	Web App Attack
🇳🇱 wlt-blocker	2026-05-26 10:45:03 (1 month ago)	Unauthorized access to webpage admin	Web App Attack

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 188.240.59.56

🇫🇮 185.94.32.128

🇬🇧 172.253.82.24

🇩🇪 172.71.148.84

🇳🇵 157.119.70.200

🇪🇬 156.210.170.245

🇺🇸 134.199.210.242

🇩🇪 130.12.180.153

🇨🇳 111.225.214.163

🇫🇷 91.231.89.211

🇳🇱 81.19.216.83

🇺🇸 74.7.227.179

🇺🇸 64.62.156.224

🇷🇺 185.94.33.225

🇫🇷 172.71.126.75

🇫🇷 172.71.118.195

🇺🇸 162.216.149.46

🇷🇴 143.20.185.242

🇺🇸 140.235.168.102

🇨🇳 112.34.110.156