JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.171.247.230

103.171.247.230 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 56%: ?

56%

ISP	GTPL KCBPL BROADBAND PVT LTD
Usage Type	Fixed Line ISP
ASN	AS135872
Hostname(s)	230-247.171.103.static.gtplkcbpl.in
Domain Name	gtplkcbpl.com
Country	🇮🇳 India
City	Mumbai, Maharashtra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.171.247.230

Whois 103.171.247.230

IP Abuse Reports for 103.171.247.230:

This IP address has been reported a total of 28 times from 13 distinct sources. 103.171.247.230 was first reported on May 5th 2023, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-14 15:43:51 (1 week ago)	103.171.247.230 - - [14/Jul/2026:17:43:38 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 103.171.247.230 ... show more 103.171.247.230 - - [14/Jul/2026:17:43:38 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 103.171.247.230 - - [14/Jul/2026:17:43:49 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 ... show less	Brute-Force Bad Web Bot
🇫🇷 dynamix	2026-07-14 14:56:52 (1 week ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-14 14:03:12 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 103.171.247.230 (230-247.171.103.static.gtplkcb ... show more (mod_security) mod_security (id:240335) triggered by 103.171.247.230 (230-247.171.103.static.gtplkcbpl.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 10:03:05.832217 2026] [security2:error] [pid 5571:tid 5571] [client 103.171.247.230:56900] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.171.247.230 (+1 hits since last alert)\|415test.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "415test.com"] [uri "/xmlrpc.php"] [unique_id "alZBmReqN_CqN49dss_5AwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-14 13:31:43 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 103.171.247.230 (230-247.171.103.static.gtplkcb ... show more (mod_security) mod_security (id:240335) triggered by 103.171.247.230 (230-247.171.103.static.gtplkcbpl.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 09:31:36.949556 2026] [security2:error] [pid 18779:tid 18779] [client 103.171.247.230:55955] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.171.247.230 (+1 hits since last alert)\|mfleetservice.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "mfleetservice.com"] [uri "/xmlrpc.php"] [unique_id "alY6OB-VW79fArf8EhdCkwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-07-14 12:28:30 (1 week ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-07-14 12:00:55 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 103.171.247.230 (230-247.171.103.static.gtplkcb ... show more (mod_security) mod_security (id:240335) triggered by 103.171.247.230 (230-247.171.103.static.gtplkcbpl.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 08:00:30.004696 2026] [security2:error] [pid 627:tid 627] [client 103.171.247.230:56025] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.171.247.230 (+1 hits since last alert)\|yogawithbubba.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "yogawithbubba.com"] [uri "/xmlrpc.php"] [unique_id "alYk3S_G65BDQ4YpxsGEpQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 integrantservices.com	2026-07-14 11:57:01 (1 week ago)	(wordpress) Failed wordpress login from 103.171.247.230 (IN/India/230-247.171.103.static.gtplkcbpl.i ... show more (wordpress) Failed wordpress login from 103.171.247.230 (IN/India/230-247.171.103.static.gtplkcbpl.in) show less	Brute-Force
🇺🇸 TPI-Abuse	2026-07-14 09:36:23 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 103.171.247.230 (230-247.171.103.static.gtplkcb ... show more (mod_security) mod_security (id:240335) triggered by 103.171.247.230 (230-247.171.103.static.gtplkcbpl.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 05:36:18.403886 2026] [security2:error] [pid 851:tid 851] [client 103.171.247.230:57057] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.171.247.230 (+1 hits since last alert)\|bfpsamoa.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "bfpsamoa.com"] [uri "/xmlrpc.php"] [unique_id "alYDEgdXP8EfTul_NEumHgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-14 08:32:08 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 103.171.247.230 (230-247.171.103.static.gtplkcb ... show more (mod_security) mod_security (id:240335) triggered by 103.171.247.230 (230-247.171.103.static.gtplkcbpl.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 04:32:00.682723 2026] [security2:error] [pid 25749:tid 25749] [client 103.171.247.230:55751] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.171.247.230 (+1 hits since last alert)\|ucommsi.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "ucommsi.com"] [uri "/xmlrpc.php"] [unique_id "alX0AJda8IhjSe-jmpMRWAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-14 05:29:06 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 103.171.247.230 (230-247.171.103.static.gtplkcb ... show more (mod_security) mod_security (id:240335) triggered by 103.171.247.230 (230-247.171.103.static.gtplkcbpl.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 01:29:02.450534 2026] [security2:error] [pid 14572:tid 14572] [client 103.171.247.230:56365] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.171.247.230 (+1 hits since last alert)\|karenbernsteinlaw.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "karenbernsteinlaw.com"] [uri "/xmlrpc.php"] [unique_id "alXJHpWfk1TRiylR2vGA9QAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Marc	2026-07-13 17:17:35 (1 week ago)	103.171.247.230 - - [13/Jul/2026:19:17:12 +0200] "POST /xmlrpc.php HTTP/1.1" 403 3465 "-" "Jetpack b ... show more 103.171.247.230 - - [13/Jul/2026:19:17:12 +0200] "POST /xmlrpc.php HTTP/1.1" 403 3465 "-" "Jetpack by WordPress.com" 103.171.247.230 - - [13/Jul/2026:19:17:22 +0200] "POST /xmlrpc.php HTTP/1.1" 403 3467 "-" "Jetpack/12.5; WordPress/6.1; http://site56428157.com" 103.171.247.230 - - [13/Jul/2026:19:17:33 +0200] "POST /xmlrpc.php HTTP/1.1" 403 3467 "-" "Jetpack by WordPress.com" show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-13 14:56:13 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 103.171.247.230 (230-247.171.103.static.gtplkcb ... show more (mod_security) mod_security (id:240335) triggered by 103.171.247.230 (230-247.171.103.static.gtplkcbpl.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 10:56:06.022992 2026] [security2:error] [pid 3343:tid 3343] [client 103.171.247.230:56258] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.171.247.230 (+1 hits since last alert)\|jessicalevant.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "jessicalevant.com"] [uri "/xmlrpc.php"] [unique_id "alT8hlx_MrfkEnFja8z4ngAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-07-13 14:46:36 (1 week ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
Anonymous	2026-07-13 13:15:40 (1 week ago)	[redacted] 103.171.247.230 - - [13/Jul/2026:15:14:59 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" ... show more [redacted] 103.171.247.230 - - [13/Jul/2026:15:14:59 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 103.171.247.230 - - [13/Jul/2026:15:15:08 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 103.171.247.230 - - [13/Jul/2026:15:15:19 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.1; WordPress/6.3; http://site47483026.com" [redacted] 103.171.247.230 - - [13/Jul/2026:15:15:29 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 103.171.247.230 - - [13/Jul/2026:15:15:40 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.0; WordPress/6.1; http://site87989333.com" ... show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-13 07:34:18 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 103.171.247.230 (230-247.171.103.static.gtplkcb ... show more (mod_security) mod_security (id:240335) triggered by 103.171.247.230 (230-247.171.103.static.gtplkcbpl.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 03:34:14.446762 2026] [security2:error] [pid 18980:tid 18984] [client 103.171.247.230:57163] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.171.247.230 (+1 hits since last alert)\|duplexgoldmine.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "duplexgoldmine.com"] [uri "/xmlrpc.php"] [unique_id "alSU9qU0T6XOnK1CtazSWgAAAUA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 187.50.194.182

🇩🇪 178.27.90.142

🇨🇳 60.163.139.198

🇲🇽 200.110.104.226

🇳🇱 195.178.110.137

🇮🇹 188.217.50.205

🇧🇷 186.238.178.6

🇮🇩 163.7.5.147

🇵🇭 136.158.120.27

🇯🇵 118.193.61.170

🇸🇬 47.82.14.101

🇧🇷 190.89.137.69

🇦🇪 94.202.15.23

🇮🇳 20.204.3.211

🇫🇮 212.149.171.9

🇧🇷 205.210.31.133

🇧🇷 191.178.223.110

🇨🇳 118.145.131.27

🇺🇸 107.173.182.188

🇮🇳 103.88.76.27