JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.163.124.139

103.163.124.139 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 56%: ?

56%

ISP	Rapidnet Private Limited
Usage Type	Fixed Line ISP
ASN	AS135799
Hostname(s)	139.124.163.103.broadband.rapidnet.in
Domain Name	rapidnet.in
Country	🇮🇳 India
City	Delhi, Delhi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.163.124.139

Whois 103.163.124.139

IP Abuse Reports for 103.163.124.139:

This IP address has been reported a total of 15 times from 13 distinct sources. 103.163.124.139 was first reported on June 16th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇺 OK	2026-06-25 16:13:22 (1 week ago)	HTTP/HTTPS	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-06-24 13:24:18 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 103.163.124.139 (139.124.163.103.broadband.rapi ... show more (mod_security) mod_security (id:225170) triggered by 103.163.124.139 (139.124.163.103.broadband.rapidnet.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 09:24:11.575006 2026] [security2:error] [pid 31658:tid 31658] [client 103.163.124.139:58042] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|produktives.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "produktives.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajvae4k5S_rt5bXHp6KbwwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TAY	2026-06-24 10:53:15 (1 week ago)	103.163.124.139 - - [24/Jun/2026:18:50:15 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5941 "-" "Mozilla/5 ... show more 103.163.124.139 - - [24/Jun/2026:18:50:15 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5941 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; x86) AppleWebKit/537.36 (KHTML, like Gecko) Edge/80.0.0.0 Safari/537.36" 103.163.124.139 - - [24/Jun/2026:18:52:40 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5941 "-" "Mozilla/5.0 (Linux; Android 10; x86) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/80.0.0.0 Safari/537.36" 103.163.124.139 - - [24/Jun/2026:18:53:14 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5941 "-" "Mozilla/5.0 (Linux; Android 10; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/12.0.0.0 Safari/537.36" ... show less	Brute-Force
Anonymous	2026-06-24 07:27:10 (1 week ago)	[ssd5.kdns.gr] httpd-xmlrpc-post: sites=e-anastasiadis.gr; logs=/var/log/httpd/domains/e-anastasiadi ... show more [ssd5.kdns.gr] httpd-xmlrpc-post: sites=e-anastasiadis.gr; logs=/var/log/httpd/domains/e-anastasiadis.gr.log; samples=/xmlrpc.php show less	Brute-Force Web App Attack
🇺🇸 TAY	2026-06-23 16:06:15 (1 week ago)	103.163.124.139 - - [24/Jun/2026:00:02:49 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5918 "-" "Mozilla/5 ... show more 103.163.124.139 - - [24/Jun/2026:00:02:49 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5918 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Opera/79.0.0.0 Safari/537.36" 103.163.124.139 - - [24/Jun/2026:00:05:45 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5918 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; x86) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/81.0.0.0 Safari/537.36" 103.163.124.139 - - [24/Jun/2026:00:06:14 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5918 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; x86) AppleWebKit/537.36 (KHTML, like Gecko) Edge/99.0.0.0 Safari/537.36" ... show less	Brute-Force
🇺🇸 KitsuneTech	2026-06-23 11:24:38 (1 week ago)	103.163.124.139 - - [23/Jun/2026:06:24:37 -0500] "POST /xmlrpc.php HTTP/1.1" 301 242 "-" "Mozilla/5. ... show more 103.163.124.139 - - [23/Jun/2026:06:24:37 -0500] "POST /xmlrpc.php HTTP/1.1" 301 242 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; x86) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.0.0 Safari/537.36" ... show less	Web App Attack
🇩🇪 LRob	2026-06-23 10:00:05 (1 week ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇳🇱 wlt-blocker	2026-06-23 01:59:47 (1 week ago)	Unauthorized access to webpage admin	Web App Attack
🇺🇸 mccsoft.io	2026-06-22 21:39:12 (1 week ago)	Web application attack / vulnerability scanning against our public nginx web server (TCP 80/443). So ... show more Web application attack / vulnerability scanning against our public nginx web server (TCP 80/443). Source matched a blocked-path security rule (jail nginx-444); server returned HTTP 444 (connection closed without response). TCP three-way handshake completed (full HTTP request received). show less	Bad Web Bot Web App Attack
Anonymous	2026-06-22 20:44:42 (1 week ago)	103.163.124.139 - - [22/Jun/2026:22:41:23 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "Mozilla/5. ... show more 103.163.124.139 - - [22/Jun/2026:22:41:23 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "Mozilla/5.0 (Linux; Android 10; x64) AppleWebKit/537.36 (KHTML, like Gecko) Opera/61.0.0.0 Safari/537.36" 103.163.124.139 - - [22/Jun/2026:22:41:24 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Mozilla/5.0 (Linux; Android 10; x64) AppleWebKit/537.36 (KHTML, like Gecko) Opera/61.0.0.0 Safari/537.36" 103.163.124.139 - - [22/Jun/2026:22:44:06 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "Mozilla/5.0 (Windows NT 10.0; x64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/89.0.0.0 Safari/537.36" 103.163.124.139 - - [22/Jun/2026:22:44:06 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Mozilla/5.0 (Windows NT 10.0; x64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/89.0.0.0 Safari/537.36" 103.163.124.139 - - [22/Jun/2026:22:44:42 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "Mozilla/5.0 (Windows NT 6.2; x64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/10.0.0.0 Safari/537.36" ... show less	Brute-Force Web App Attack
🇩🇪 4server	2026-06-22 16:31:38 (1 week ago)	[MonJun2218:31:33.2278892026][security2:error][pid2175487:tid2175536][client103.163.124.139:0]ModSec ... show more [MonJun2218:31:33.2278892026][security2:error][pid2175487:tid2175536][client103.163.124.139:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"bicycleambulance.ch\"][uri\"/xmlrpc.php\"][unique_id\"ajljZSkt4QmyRXfqxvHRcQAAAEk\"] show less	Port Scan Brute-Force Web App Attack
🇯🇵 ki3	2026-06-21 10:21:49 (1 week ago)	Fail2Ban: Web App Attacks and Forum Spam 103.163.124.139 1782037309.0(JST)	Web Spam Bad Web Bot Web App Attack
🇳🇱 wlt-blocker	2026-06-20 10:12:20 (1 week ago)	Unauthorized access to webpage admin	Web App Attack
🇯🇵 mkaraki	2026-04-13 16:47:52 (2 months ago)	1776098869 # Service_probe # SIGNATURE_SEND # source_ip:103.163.124.139 # dst_port:23 ...	Port Scan
🇩🇪 botreporter	2025-06-16 07:58:52 (1 year ago)	botnet ignoring robots.txt	Bad Web Bot

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇮 147.185.133.113

🇺🇸 147.185.132.152

🇬🇧 45.82.76.116

🇬🇧 35.203.211.124

🇳🇱 204.76.203.49

🇧🇪 198.235.24.253

🇫🇷 194.33.28.32

🇬🇹 190.151.130.5

🇹🇷 176.238.116.5

🇺🇸 162.216.150.227

🇺🇸 162.216.149.66

🇫🇷 150.228.15.117

🇺🇸 136.66.115.57

🇨🇦 85.217.149.22

🇺🇸 64.62.197.73

🇳🇱 45.156.128.149

🇳🇱 45.148.10.147

🇰🇷 1.214.42.172

🇳🇱 185.223.235.17

🇺🇸 138.199.96.78