103.133.215.169

Classification: Malicious

103.133.215.169 is a malicious IP address in Dadri, IN. 353 sightings from 3 threat sources (DDoS Attacker, HTTP Attacker), last seen 2026-10-06.

Current activity

  • Known attacker — Seen launching attacks over the Internet.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
DDoS Attacker Blocklist.net.ua 2026-01-07 07:22:54 2026-10-06 16:47:40 attacker malicious-activity
Empty reason Blocklist.net.ua 2026-09-04 16:40:49 2026-09-11 16:40:22 attacker malicious-activity
Suspicious Host AbuseIPDB 2024-09-16 01:12:42 2026-03-17 04:44:10 anomalous-activity
Malicious Host AbuseIPDB 2026-01-06 23:01:07 2026-02-18 06:30:05 compromised malicious-activity
HTTP Attacker Blocklist.de 2026-01-07 02:13:02 2026-01-22 03:13:46 malicious-activity
Bruteforce login attacker Blocklist.de 2026-01-07 02:55:16 2026-01-21 08:12:50 malicious-activity
HTTP Attacker AbuseIPDB 2026-01-05 15:44:12 2026-01-15 09:24:20 malicious-activity
HTTP Scrapper AbuseIPDB 2026-01-05 17:05:15 2026-01-15 08:23:41 anomalous-activity
Hacking AbuseIPDB 2026-01-05 15:45:21 2026-01-14 18:38:08 malicious-activity
Bruteforce AbuseIPDB 2026-01-05 15:44:12 2026-01-14 01:44:13 malicious-activity
Port Scanner AbuseIPDB 2026-01-06 11:33:36 2026-01-13 16:29:13 anomalous-activity
SSH Attacker AbuseIPDB 2026-01-05 20:46:12 2026-01-13 00:31:06 malicious-activity
DDoS Attacker AbuseIPDB 2026-01-05 18:31:33 2026-01-05 18:31:33 malicious-activity
Mail Spammer AbuseIPDB 2025-11-19 22:59:18 2025-11-19 22:59:18 malicious-activity
Parasite traffic on site marta-dent.if.ua. Blocklist.net.ua 2024-07-05 15:34:57 2024-07-05 15:34:57 malicious-activity

Tags

abuse apache ddos rfi attacker login bruteforce bot joomla wordpress

Whois information

AS name
AS133643 Ewebguru
AS registry
apnic
AS date
2019-01-30 00:00:00
AS CIDR
103.133.215.0/24
CIDR
103.133.214.0/23
Registrant
Ewebguru
Address
G12 First Floor, Sector 63,NOIDA,Uttar Pradesh-201301
City
Dadri
Postal code
203207
Country
IN — India 🇮🇳
Contact email
[email protected], [email protected], [email protected]
First indexed
2024-07-05 15:34:57
Last updated
2026-10-06 16:49:51

Malicious IPs in the same CIDR

103.133.215.169