JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

103.135.47.130

Recent Activity

Abuse confidence score ?

19% Caution

101 reports

42 reporters · latest 22 hours ago

ISP	INFONET COMM ENTERPRISES
Usage Type	Fixed Line ISP
ASN	AS134032
Domain Name	infonetcomm.com
Country	🇮🇳 India
City	Denkanikota, Tamil Nadu

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 103.135.47.130

Export CSV

This IP address has been reported a total of 101 times from 42 distinct sources. 103.135.47.130 was first reported on February 11th 2025, and the most recent report was 22 hours ago. In the last 60 days, the top reporter locations were: Indonesia with 3 reports; Italy with 1 report; Mexico with 1 report. The most common categories in these recent reports were: Web App Attack 4 times; Hacking 3 times; Brute-Force 2 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 Jova	2026-10-22 21:44:10 (22 hours ago)	Part of a distributed password attack on a mail account (SMTP logins from many IPs).	Brute-Force
🇮🇩 sockominfo	2026-09-30 10:00:53 (3 weeks ago)	Email: Login failures from Bad Reputation IP: 103.135.47.130. Threat Score: 6.3/10 (MEDIUM). Confide ... show more Email: Login failures from Bad Reputation IP: 103.135.47.130. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.3/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1566 (Phishing). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-09-23 07:00:53 (1 month ago)	Email: Login failures from Bad Reputation IP: 103.135.47.130. Threat Score: 6.2/10 (MEDIUM). Confide ... show more Email: Login failures from Bad Reputation IP: 103.135.47.130. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.3/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1566 (Phishing). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-09-23 06:00:10 (1 month ago)	Email: Login failures from Bad Reputation IP: 103.135.47.130. Threat Score: 5.7/10 (MEDIUM). Reporte ... show more Email: Login failures from Bad Reputation IP: 103.135.47.130. Threat Score: 5.7/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇹 VHosting	2026-09-16 01:50:03 (1 month ago)	Detected mail brute force attack from different servers	Brute-Force
🇲🇽 octageeks.com	2026-09-04 04:07:45 (1 month ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇺🇸 Jason Howell	2026-07-04 21:29:16 (3 months ago)	103.135.47.130 - - [04/Jul/2026:16:28:06 -0500] "GET /wp-login.php HTTP/1.1" 200 4595 "-" "Mozilla/5 ... show more 103.135.47.130 - - [04/Jul/2026:16:28:06 -0500] "GET /wp-login.php HTTP/1.1" 200 4595 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36 OPR/52.0.2871.99" 103.135.47.130 - - [04/Jul/2026:16:28:08 -0500] "POST /wp-login.php HTTP/1.1" 200 2511 "https://www.wrsdeckdoctors.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36 OPR/52.0.2871.99" 103.135.47.130 - - [04/Jul/2026:16:28:40 -0500] "GET /wp-login.php HTTP/1.1" 200 2337 "https://www.wrsdeckdoctors.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36 OPR/52.0.2871.99" 103.135.47.130 - - [04/Jul/2026:16:28:41 -0500] "POST /wp-login.php HTTP/1.1" 200 2511 "https://www.wrsdeckdoctors.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safa ... show less	Web App Attack
🇺🇸 Jason Howell	2026-06-29 18:50:07 (3 months ago)	103.135.47.130 - - [29/Jun/2026:13:47:54 -0500] "GET /wp-login.php HTTP/1.1" 200 5865 "-" "Mozilla/4 ... show more 103.135.47.130 - - [29/Jun/2026:13:47:54 -0500] "GET /wp-login.php HTTP/1.1" 200 5865 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; InfoPath.2)" 103.135.47.130 - - [29/Jun/2026:13:47:56 -0500] "POST /wp-login.php HTTP/1.1" 200 6003 "https://abstractco.com/wp-login.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; InfoPath.2)" 103.135.47.130 - - [29/Jun/2026:13:48:58 -0500] "GET /wp-login.php HTTP/1.1" 200 5864 "https://abstractco.com/wp-login.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; InfoPath.2)" 103.135.47.130 - - [29/Jun/2026:13:49:00 -0500] "POST /wp-login.php HTTP/1.1" 200 2428 "https://abstractco.com/wp-login.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windo ... show less	Web App Attack
🇮🇹 VHosting	2026-06-29 12:15:48 (3 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇪🇸 librebit	2026-04-25 22:11:56 (5 months ago)	Listed IP in blacklist by postfix/dnsblog	Spoofing
🇪🇸 www.pk25.com	2026-04-21 18:36:18 (6 months ago)	2026-04-21 20:19:11 H=(103.135.47.130) [103.135.47.130] sender verify fail for <[email protected] ... show more 2026-04-21 20:19:11 H=(103.135.47.130) [103.135.47.130] sender verify fail for <[email protected]>: Unrouteable address 2026-04-21 20:19:11 H=(103.135.47.130) [103.135.47.130] F=<[email protected]> rejected RCPT <[email protected]>: Sender verify failed 2026-04-21 20:36:18 H=(103.135.47.130) [103.135.47.130] sender verify fail for <[email protected]>: Unrouteable address ... show less	Brute-Force
🇪🇸 librebit	2026-04-21 14:02:04 (6 months ago)	Listed IP in blacklist by postfix/dnsblog	Spoofing
🇨🇭 Origon	2026-04-16 19:53:08 (6 months ago)	NOQUEUE - IP: 103.135.47.130 - Apr 16 21:53:08 plesk postfix/smtpd[162293]: NOQUEUE: reject: RCPT f ... show more NOQUEUE - IP: 103.135.47.130 - Apr 16 21:53:08 plesk postfix/smtpd[162293]: NOQUEUE: reject: RCPT from unknown[103.135.47.130]: 554 5.7.1 Service unavailable; Client host [103.135.47.130] blocked using dnsbl-1.uceprotect.net; IP 103.135.47.130 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=103.135.47.130; from=<[email protected]> to=<REDACTED@REDACTED> proto=ESMTP helo=<103.135.47.130> show less	Email Spam
🇳🇱 Cloud86 B.V.	2026-04-11 16:52:10 (6 months ago)	categories: Email Spam	Email Spam
Anonymous	2026-04-04 13:27:14 (6 months ago)	Dispatching spam/unsolicited email	Email Spam

Showing 1 to 15 of 101 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 202.158.5.71

🇳🇱 185.130.47.58

🇿🇦 165.165.108.154

🇵🇱 91.199.163.52

🇬🇧 86.38.187.84

🇭🇰 34.150.56.31

🇮🇳 4.240.126.25

🇰🇷 1.213.180.29

🇩🇰 185.129.62.63

🇨🇳 175.12.105.27

🇸🇬 150.109.10.219

🇦🇺 134.199.171.233

🇨🇩 102.223.209.43

🇰🇿 95.58.255.251

🇹🇷 91.151.88.235

🇪🇸 90.168.182.5

🇬🇧 86.38.187.166

🇬🇧 86.38.187.45

🇺🇸 66.132.172.44

🇨🇳 36.138.248.76