JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.175.168.231

103.175.168.231 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 36%: ?

36%

ISP	GTPL KCBPL BROADBAND PVT LTD
Usage Type	Fixed Line ISP
ASN	AS135872
Hostname(s)	231-168.175.103.static.gtplkcbpl.in
Domain Name	gtplkcbpl.com
Country	🇮🇳 India
City	Lalgola, West Bengal

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.175.168.231

Whois 103.175.168.231

IP Abuse Reports for 103.175.168.231:

This IP address has been reported a total of 11 times from 7 distinct sources. 103.175.168.231 was first reported on May 15th 2026, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 dynamix	2026-07-05 04:14:07 (6 days ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇫🇷 SpaceHost-Server	2026-07-04 22:25:21 (6 days ago)		Brute-Force Web App Attack
🇪🇸 masterguru	2026-07-04 13:48:42 (6 days ago)	(xmlrpc) Failed xmlrpc access from 103.175.168.231 (IN/India/231-168.175.103.static.gtplkcbpl.in): 5 ... show more (xmlrpc) Failed xmlrpc access from 103.175.168.231 (IN/India/231-168.175.103.static.gtplkcbpl.in): 5 in the last 3600 secs (0-122) show less	Hacking
🇺🇸 TPI-Abuse	2026-07-04 05:41:26 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 103.175.168.231 (231-168.175.103.static.gtplkcb ... show more (mod_security) mod_security (id:240335) triggered by 103.175.168.231 (231-168.175.103.static.gtplkcbpl.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 01:41:20.399234 2026] [security2:error] [pid 13158:tid 13158] [client 103.175.168.231:10898] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.175.168.231 (+1 hits since last alert)\|budgetbyron.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "budgetbyron.com"] [uri "/xmlrpc.php"] [unique_id "akidAB1foCNUcpFHUS-ixQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 14:40:41 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 103.175.168.231 (231-168.175.103.static.gtplkcb ... show more (mod_security) mod_security (id:240335) triggered by 103.175.168.231 (231-168.175.103.static.gtplkcbpl.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 10:40:36.729388 2026] [security2:error] [pid 11887:tid 11914] [client 103.175.168.231:10514] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.175.168.231 (+1 hits since last alert)\|thecraftsycat.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "thecraftsycat.com"] [uri "/xmlrpc.php"] [unique_id "akfJ5C-FXNXxzR9DgLG3vgAAAZg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 16:42:36 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 103.175.168.231 (231-168.175.103.static.gtplkcb ... show more (mod_security) mod_security (id:240335) triggered by 103.175.168.231 (231-168.175.103.static.gtplkcbpl.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 12:42:31.082216 2026] [security2:error] [pid 13072:tid 13072] [client 103.175.168.231:10525] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.175.168.231 (+1 hits since last alert)\|futuresgrowhere.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "futuresgrowhere.com"] [uri "/xmlrpc.php"] [unique_id "akaU9-N7ipkH2p0i3jh2KAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-01 07:14:20 (1 week ago)	(wordpress) Failed wordpress login from 103.175.168.231 (IN/India/231-168.175.103.static.gtplkcbpl.i ... show more (wordpress) Failed wordpress login from 103.175.168.231 (IN/India/231-168.175.103.static.gtplkcbpl.in) show less	Brute-Force
🇩🇪 konseptit	2026-05-15 11:48:05 (1 month ago)	(wordpress) Failed wordpress login from 103.175.168.231 (IN/India/231-168.175.103.static.gtplkcbpl.i ... show more (wordpress) Failed wordpress login from 103.175.168.231 (IN/India/231-168.175.103.static.gtplkcbpl.in) show less	Brute-Force
🇺🇸 TPI-Abuse	2026-05-15 09:46:54 (1 month ago)	(mod_security) mod_security (id:240335) triggered by 103.175.168.231 (231-168.175.103.static.gtplkcb ... show more (mod_security) mod_security (id:240335) triggered by 103.175.168.231 (231-168.175.103.static.gtplkcbpl.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 05:46:48.095134 2026] [security2:error] [pid 15776:tid 15776] [client 103.175.168.231:35751] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.175.168.231 (+1 hits since last alert)\|brushmileage.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "brushmileage.org"] [uri "/xmlrpc.php"] [unique_id "agbriMT221ETk379ARr0ugAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 cmbplf	2026-05-15 09:36:44 (1 month ago)	3.854 requests with url.path */xmlrpc.php	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2026-05-15 07:11:57 (1 month ago)	(mod_security) mod_security (id:240335) triggered by 103.175.168.231 (231-168.175.103.static.gtplkcb ... show more (mod_security) mod_security (id:240335) triggered by 103.175.168.231 (231-168.175.103.static.gtplkcbpl.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 03:11:50.739413 2026] [security2:error] [pid 24134:tid 24141] [client 103.175.168.231:36094] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.175.168.231 (+1 hits since last alert)\|duplexgoldmine.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "duplexgoldmine.com"] [uri "/xmlrpc.php"] [unique_id "agbHNh6tmpaNdjQs3Sw_uAAAAEU"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2604:a880:400:d1:0:4:6c79:7001

🇧🇷 200.175.61.207

🇷🇺 176.77.9.196

🇮🇳 159.65.148.158

🇮🇳 49.205.151.132

🇷🇴 2.57.122.209

🇺🇸 162.217.100.196

🇺🇸 136.144.35.190

🇹🇷 88.255.41.28

🇳🇱 45.43.157.113

🇲🇾 202.184.151.147

🇺🇸 192.186.151.175

🇺🇸 147.182.183.153

🇺🇸 136.144.35.207

🇳🇱 91.148.244.131

🇬🇧 35.203.211.140

🇩🇪 217.79.181.38

🇯🇵 212.32.76.66

🇩🇪 209.50.186.160

🇱🇹 158.173.79.8