JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.165.115.233

103.165.115.233 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 74%: ?

74%

ISP	ABHISHEK CABLES PRIVATE LIMITED
Usage Type	Fixed Line ISP
ASN	AS135872
Hostname(s)	233-115.165.103.static.gtplkcbpl.in
Domain Name	gtplkcbpl.com
Country	🇮🇳 India
City	Kolkata, West Bengal

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.165.115.233

Whois 103.165.115.233

IP Abuse Reports for 103.165.115.233:

This IP address has been reported a total of 20 times from 13 distinct sources. 103.165.115.233 was first reported on December 9th 2025, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 masterguru	2026-07-15 12:20:39 (9 hours ago)	(xmlrpc) Failed xmlrpc access from 103.165.115.233 (IN/India/233-115.165.103.static.gtplkcbpl.in): 5 ... show more (xmlrpc) Failed xmlrpc access from 103.165.115.233 (IN/India/233-115.165.103.static.gtplkcbpl.in): 5 in the last 3600 secs (0-122) show less	Hacking
🇺🇸 TAY	2026-07-15 10:54:45 (11 hours ago)	103.165.115.233 - - [15/Jul/2026:18:54:24 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5979 "-" "Jetpack b ... show more 103.165.115.233 - - [15/Jul/2026:18:54:24 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5979 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.4)" 103.165.115.233 - - [15/Jul/2026:18:54:34 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5979 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.1)" 103.165.115.233 - - [15/Jul/2026:18:54:44 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5979 "-" "WordPress.com; https://wordpress.com" ... show less	Brute-Force
🇩🇪 konseptit	2026-07-15 10:25:29 (11 hours ago)	(wordpress) Failed wordpress login from 103.165.115.233 (IN/India/233-115.165.103.static.gtplkcbpl.i ... show more (wordpress) Failed wordpress login from 103.165.115.233 (IN/India/233-115.165.103.static.gtplkcbpl.in) show less	Brute-Force
🇩🇪 Marc	2026-07-15 07:50:22 (14 hours ago)	103.165.115.233 - - [15/Jul/2026:09:50:00 +0200] "POST /xmlrpc.php HTTP/1.1" 403 4842 "-" "WordPress ... show more 103.165.115.233 - - [15/Jul/2026:09:50:00 +0200] "POST /xmlrpc.php HTTP/1.1" 403 4842 "-" "WordPress.com; https://wordpress.com" 103.165.115.233 - - [15/Jul/2026:09:50:10 +0200] "POST /xmlrpc.php HTTP/1.1" 403 4842 "-" "WordPress.com; https://wordpress.com" 103.165.115.233 - - [15/Jul/2026:09:50:21 +0200] "POST /xmlrpc.php HTTP/1.1" 403 4842 "-" "Jetpack by WordPress.com" show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-15 06:20:39 (15 hours ago)	(mod_security) mod_security (id:240335) triggered by 103.165.115.233 (233-115.165.103.static.gtplkcb ... show more (mod_security) mod_security (id:240335) triggered by 103.165.115.233 (233-115.165.103.static.gtplkcbpl.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 02:20:34.729359 2026] [security2:error] [pid 31878:tid 31878] [client 103.165.115.233:39362] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.165.115.233 (+1 hits since last alert)\|avvmarchetticollini.it\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "avvmarchetticollini.it"] [uri "/xmlrpc.php"] [unique_id "alcmsrL1pCxP9i3UMGMwZgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-07-14 10:45:58 (1 day ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇩🇪 ghostwarriors	2026-07-14 10:20:41 (1 day ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-14 10:17:41 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 103.165.115.233 (233-115.165.103.static.gtplkcb ... show more (mod_security) mod_security (id:240335) triggered by 103.165.115.233 (233-115.165.103.static.gtplkcbpl.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 06:17:33.553461 2026] [security2:error] [pid 29078:tid 29078] [client 103.165.115.233:37764] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.165.115.233 (+1 hits since last alert)\|celebritybikinigossip.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "celebritybikinigossip.com"] [uri "/xmlrpc.php"] [unique_id "alYMvR8I9v9G8o25ErpBEQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-14 10:14:58 (1 day ago)	Fail2Ban: WordPress XML-RPC brute-force attack detected.	Bad Web Bot Web App Attack
🇺🇸 cwytech	2026-07-14 08:33:57 (1 day ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/wordpress-geofence-sus.	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-14 07:44:04 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 103.165.115.233 (233-115.165.103.static.gtplkcb ... show more (mod_security) mod_security (id:240335) triggered by 103.165.115.233 (233-115.165.103.static.gtplkcbpl.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 03:43:59.977891 2026] [security2:error] [pid 3071095:tid 3071095] [client 103.165.115.233:39064] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.165.115.233 (+1 hits since last alert)\|technesa.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "technesa.com"] [uri "/xmlrpc.php"] [unique_id "alXov0ck9Vn1_4uAS7ucDQAAACU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-14 04:41:05 (1 day ago)	Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1	Hacking Web App Attack
🇪🇸 masterguru	2026-07-14 04:27:35 (1 day ago)	(xmlrpc) Failed xmlrpc access from 103.165.115.233 (IN/India/233-115.165.103.static.gtplkcbpl.in): 5 ... show more (xmlrpc) Failed xmlrpc access from 103.165.115.233 (IN/India/233-115.165.103.static.gtplkcbpl.in): 5 in the last 3600 secs (0-122) show less	Hacking
🇺🇸 TPI-Abuse	2026-07-13 13:22:41 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 103.165.115.233 (233-115.165.103.static.gtplkcb ... show more (mod_security) mod_security (id:240335) triggered by 103.165.115.233 (233-115.165.103.static.gtplkcbpl.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 09:22:36.804403 2026] [security2:error] [pid 24899:tid 24899] [client 103.165.115.233:37636] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.165.115.233 (+1 hits since last alert)\|incrp.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "incrp.org"] [uri "/xmlrpc.php"] [unique_id "alTmnGZ47x6ekttAGD9iRAAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-13 12:22:10 (2 days ago)	[ssd1.kdns.gr] httpd-xmlrpc-post: sites=www.filoixenofontos.gr; logs=/var/log/httpd/domains/filoixen ... show more [ssd1.kdns.gr] httpd-xmlrpc-post: sites=www.filoixenofontos.gr; logs=/var/log/httpd/domains/filoixenofontos.gr.log; samples=/xmlrpc.php show less	Brute-Force Web App Attack

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 222.75.225.206

🇧🇪 198.235.24.203

🇬🇧 185.247.137.67

🇳🇱 185.226.197.50

🇳🇱 185.226.197.48

🇳🇱 185.226.197.47

🇯🇵 153.120.120.109

🇨🇦 85.217.149.69

🇺🇸 74.7.241.145

🇳🇱 45.8.17.82

🇸🇬 4.193.175.44

🇨🇳 223.214.136.99

🇨🇳 223.108.82.26

🇳🇱 195.178.110.137

🇭🇺 193.39.15.98

🇺🇸 156.146.39.23

🇩🇪 138.226.237.41

🇹🇭 119.42.105.111

🇹🇼 111.70.32.8

🇳🇱 85.11.167.7