JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.132.52.247

103.132.52.247 was found in our database!

This IP was reported 48 times. Confidence of Abuse is 27%: ?

27%

ISP	PT. ADEAKSA INDO JAYATAMA
Usage Type	Fixed Line ISP
ASN	AS138123
Domain Name	dexanet.co.id
Country	🇮🇩 Indonesia
City	Kedungwuni, Central Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.132.52.247

Whois 103.132.52.247

IP Abuse Reports for 103.132.52.247:

This IP address has been reported a total of 48 times from 25 distinct sources. 103.132.52.247 was first reported on May 22nd 2025, and the most recent report was 12 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-10 04:57:32 (12 hours ago)	(mod_security) mod_security (id:240335) triggered by 103.132.52.247 (47.sub-52-132-103.dexanet.co.id ... show more (mod_security) mod_security (id:240335) triggered by 103.132.52.247 (47.sub-52-132-103.dexanet.co.id): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 10 00:57:26.939355 2026] [security2:error] [pid 16273:tid 16273] [client 103.132.52.247:50760] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.132.52.247 (+1 hits since last alert)\|sutherlandyogastudio.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "sutherlandyogastudio.com"] [uri "/xmlrpc.php"] [unique_id "alB7trT5L0VXeXjX63NVjQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-09 04:25:07 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 103.132.52.247 (47.sub-52-132-103.dexanet.co.id ... show more (mod_security) mod_security (id:240335) triggered by 103.132.52.247 (47.sub-52-132-103.dexanet.co.id): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 00:24:58.736563 2026] [security2:error] [pid 6804:tid 6804] [client 103.132.52.247:62965] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.132.52.247 (+1 hits since last alert)\|phoboschildren.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "phoboschildren.com"] [uri "/xmlrpc.php"] [unique_id "ak8imuoCa_dHIqRbUx8MNgAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 SpaceHost-Server	2026-07-07 10:34:48 (3 days ago)	103.132.52.247 - - [07/Jul/2026:12:34:28 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6382 "-" "Jetpack by ... show more 103.132.52.247 - - [07/Jul/2026:12:34:28 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6382 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.1)" 103.132.52.247 - - [07/Jul/2026:12:34:36 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6382 "-" "Jetpack by WordPress.com" 103.132.52.247 - - [07/Jul/2026:12:34:47 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6382 "-" "Jetpack by WordPress.com" show less	Hacking Web App Attack
🇫🇷 SpaceHost-Server	2026-07-07 08:46:35 (3 days ago)	103.132.52.247 - - [07/Jul/2026:10:46:13 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6382 "-" "Jetpack by ... show more 103.132.52.247 - - [07/Jul/2026:10:46:13 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6382 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.4)" 103.132.52.247 - - [07/Jul/2026:10:46:23 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6382 "-" "Jetpack by WordPress.com" 103.132.52.247 - - [07/Jul/2026:10:46:34 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6382 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.2)" show less	Hacking Web App Attack
🇫🇷 SpaceHost-Server	2026-07-07 08:31:07 (3 days ago)	103.132.52.247 - - [07/Jul/2026:10:30:45 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6382 "-" "WordPress. ... show more 103.132.52.247 - - [07/Jul/2026:10:30:45 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6382 "-" "WordPress.com; https://wordpress.com" 103.132.52.247 - - [07/Jul/2026:10:30:55 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6382 "-" "WordPress.com; https://wordpress.com" 103.132.52.247 - - [07/Jul/2026:10:31:06 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6382 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.2)" show less	Hacking Web App Attack
🇪🇸 alferez	2026-07-07 04:56:20 (3 days ago)	xmlrpc.php attack DOS	Hacking Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-07-06 05:33:58 (4 days ago)	(mod_security) mod_security (id:240335) triggered by 103.132.52.247 (47.sub-52-132-103.dexanet.co.id ... show more (mod_security) mod_security (id:240335) triggered by 103.132.52.247 (47.sub-52-132-103.dexanet.co.id): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 01:33:49.419753 2026] [security2:error] [pid 31097:tid 31097] [client 103.132.52.247:65064] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.132.52.247 (+1 hits since last alert)\|rwabutazafoundation.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "rwabutazafoundation.org"] [uri "/xmlrpc.php"] [unique_id "aks-Pf3-90n7VbTZJjQmIAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 PeravixGroup	2026-06-10 04:05:15 (1 month ago)	Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aar ... show more Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aaran.cloud show less	Hacking Exploited Host
🇦🇹 urnilxfgbez	2025-12-20 23:45:00 (6 months ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇩🇪 ps-center	2025-12-20 08:14:13 (6 months ago)	C1-W: TCP-Scanner. Port: 23	Port Scan
Anonymous	2025-12-20 07:24:16 (6 months ago)	2025-12-20T08:24:15.316353+01:00 vps kernel: [27955766.859170] [PORTSCAN DETECTED] IN=ens3 OUT= MAC= ... show more 2025-12-20T08:24:15.316353+01:00 vps kernel: [27955766.859170] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=103.132.52.247 DST=54.37.14.118 LEN=60 TOS=0x00 PREC=0x00 TTL=43 ID=33153 DF PROTO=TCP SPT=36124 DPT=23 WINDOW=29040 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
🇩🇪 banankicks	2025-12-20 03:29:47 (6 months ago)	Unauthorized connection attempt detected from IP address 103.132.52.247 to port 23 (banankicks-serve ... show more Unauthorized connection attempt detected from IP address 103.132.52.247 to port 23 (banankicks-server) [w] show less	Brute-Force Exploited Host
🇳🇱 rmvanderspek	2025-12-20 03:10:03 (6 months ago)	Telnet Brute-force (IoT Botnet scan) detected.	Brute-Force IoT Targeted
🇫🇷 security.rdmc.fr	2025-12-20 02:27:55 (6 months ago)	Port Scan Attack proto:TCP src:49342 dst:23	Port Scan
🇹🇷 rtbh.com.tr	2025-12-19 20:10:32 (6 months ago)	list.rtbh.com.tr report: tcp/23	Brute-Force

Showing 1 to 15 of 48 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 182.95.101.182

🇩🇪 165.154.138.3

🇩🇪 134.122.93.100

🇬🇧 45.82.76.103

🇨🇳 36.110.172.218

🇰🇿 2.134.15.12

🇺🇸 162.216.150.160

🇻🇳 113.177.27.200

🇸🇬 101.47.156.21

🇸🇬 47.84.102.158

🇺🇸 45.194.67.8

🇰🇪 41.90.137.221

🇸🇦 37.242.84.255

🇺🇸 20.65.194.117

🇩🇪 213.209.159.242

🇰🇷 210.206.24.237

🇳🇱 185.223.235.4

🇵🇱 176.53.159.197

🇨🇳 123.185.245.110

🇳🇱 45.198.224.244