JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 163.61.66.8

163.61.66.8 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 100%: ?

100%

ISP	SATYAJEET COMMUNICATION PRIVATE LIMITED
Usage Type	Fixed Line ISP
ASN	AS135703
Domain Name	Unknown
Country	🇮🇳 India
City	Aurangabad, Maharashtra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 163.61.66.8

Whois 163.61.66.8

IP Abuse Reports for 163.61.66.8:

This IP address has been reported a total of 37 times from 23 distinct sources. 163.61.66.8 was first reported on June 4th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 polycoda	2026-06-20 10:43:48 (1 day ago)	🔥 VERY AGGRESSIVE SCANNER probed over 100 inexistent files and PHP scripts in less than an hour.	Hacking Web App Attack
🇨🇦 polycoda	2026-06-20 10:15:26 (1 day ago)	AutoBlock: 🔐 WordPress Login Brute Force (20X or 30X) (Decay-Based)	Brute-Force Web App Attack
Anonymous	2026-06-19 10:30:19 (2 days ago)	(wordpress) Failed wordpress login from 163.61.66.8 (IN/India/-)	Brute-Force
Anonymous	2026-06-19 10:25:24 (2 days ago)	163.61.66.8 - - [19/Jun/2026:12:24:41 +0200] "POST /xmlrpc.php HTTP/1.1" 503 18956 "-" "Jetpack by W ... show more 163.61.66.8 - - [19/Jun/2026:12:24:41 +0200] "POST /xmlrpc.php HTTP/1.1" 503 18956 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.2)" 163.61.66.8 - - [19/Jun/2026:12:24:54 +0200] "POST /xmlrpc.php HTTP/1.1" 503 18043 "-" "WordPress.com; https://wordpress.com" 163.61.66.8 - - [19/Jun/2026:12:25:02 +0200] "POST /xmlrpc.php HTTP/1.1" 503 18043 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.3)" 163.61.66.8 - - [19/Jun/2026:12:25:12 +0200] "POST /xmlrpc.php HTTP/1.1" 503 18043 "-" "Jetpack/12.1; WordPress/6.1; http://site87932646.com" 163.61.66.8 - - [19/Jun/2026:12:25:23 +0200] "POST /xmlrpc.php HTTP/1.1" 503 18043 "-" "Jetpack by WordPress.com" ... show less	Web App Attack
🇦🇺 screwlooseit.com.au	2026-06-19 09:11:55 (2 days ago)	Blocked by CSF 13 firewall - Rule: XMLRPC -	Web App Attack
🇳🇱 Site.eu	2026-06-18 12:38:19 (2 days ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
Anonymous	2026-06-18 08:02:11 (3 days ago)	[server.tmg.gr] httpd-xmlrpc-post: sites=aidshep2018.gr; logs=/var/log/httpd/domains/aidshep2018.gr. ... show more [server.tmg.gr] httpd-xmlrpc-post: sites=aidshep2018.gr; logs=/var/log/httpd/domains/aidshep2018.gr.log; samples=/xmlrpc.php show less	Brute-Force Web App Attack
🇺🇸 integrantservices.com	2026-06-18 05:28:00 (3 days ago)	(wordpress) Failed wordpress login from 163.61.66.8 (IN/India/-)	Brute-Force
Anonymous	2026-06-17 13:50:04 (3 days ago)	WordPress Brute Force	Brute-Force
Anonymous	2026-06-17 11:07:10 (4 days ago)	Trying to access config files	Web App Attack
🇩🇪 ger-stg-sifi1	2026-06-16 09:49:31 (5 days ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇺🇸 TPI-Abuse	2026-06-16 07:18:36 (5 days ago)	(mod_security) mod_security (id:240335) triggered by 163.61.66.8 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:240335) triggered by 163.61.66.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 03:18:29.398481 2026] [security2:error] [pid 4088:tid 4088] [client 163.61.66.8:57373] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 163.61.66.8 (+1 hits since last alert)\|vintageamptubes.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "vintageamptubes.com"] [uri "/xmlrpc.php"] [unique_id "ajD4xcCPuAY4clxrDgIVQQAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-16 07:06:06 (5 days ago)	Trying to access config files	Web App Attack
🇺🇸 TPI-Abuse	2026-06-16 05:46:48 (5 days ago)	(mod_security) mod_security (id:240335) triggered by 163.61.66.8 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:240335) triggered by 163.61.66.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 01:46:43.966116 2026] [security2:error] [pid 21844:tid 21844] [client 163.61.66.8:58621] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 163.61.66.8 (+1 hits since last alert)\|my-spec.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "my-spec.com"] [uri "/xmlrpc.php"] [unique_id "ajDjQ0L_2Cm4wtBf9o-XAwAAAC0"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 SpaceHost-Server	2026-06-15 22:27:13 (5 days ago)		Brute-Force Web App Attack

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇿 185.4.183.93

🇭🇰 128.1.131.72

🇭🇰 121.202.146.144

🇨🇳 121.43.195.151

🇨🇳 115.190.62.230

🇺🇸 107.172.166.12

🇰🇷 14.55.144.22

🇨🇳 180.102.110.156

🇰🇷 119.195.102.159

🇭🇰 118.193.39.103

🇷🇴 80.94.92.186

🇫🇮 65.109.174.110

🇮🇳 4.224.40.94

🇺🇸 162.216.149.3

🇺🇸 153.66.28.132

🇫🇮 147.185.133.24

🇺🇸 146.70.211.157

🇺🇸 137.184.46.118

🇨🇳 121.229.156.46

🇳🇬 102.88.137.145