JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.207.103.115

103.207.103.115 was found in our database!

This IP was reported 89 times. Confidence of Abuse is 84%: ?

84%

ISP	Subbid Sistem Jaringan dan Infrastruktur
Usage Type	Data Center/Web Hosting/Transit
ASN	AS133796
Domain Name	kemendag.go.id
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.207.103.115

Whois 103.207.103.115

IP Abuse Reports for 103.207.103.115:

This IP address has been reported a total of 89 times from 39 distinct sources. 103.207.103.115 was first reported on December 17th 2024, and the most recent report was 10 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇿 huginet	2026-06-24 00:58:34 (10 hours ago)	103.207.103.115 - - [24/Jun/2026:02:58:23 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Jetpack by ... show more 103.207.103.115 - - [24/Jun/2026:02:58:23 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.4)" 103.207.103.115 - - [24/Jun/2026:02:58:33 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Jetpack by WordPress.com" ... show less	Web Spam Blog Spam Hacking Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-06-23 07:18:40 (1 day ago)	xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (88010-201)	Hacking
🇫🇷 sasbau	2026-06-23 06:25:29 (1 day ago)	103.207.103.115 - - [23/Jun/2026:08:25:08 +0200] "POST /xmlrpc.php HTTP/1.1" 403 146 "-" "Jetpack by ... show more 103.207.103.115 - - [23/Jun/2026:08:25:08 +0200] "POST /xmlrpc.php HTTP/1.1" 403 146 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.3)" 103.207.103.115 - - [23/Jun/2026:08:25:17 +0200] "POST /xmlrpc.php HTTP/1.1" 403 146 "-" "Jetpack/13.0; WordPress/6.1; http://site66592827.com" 103.207.103.115 - - [23/Jun/2026:08:25:28 +0200] "POST /xmlrpc.php HTTP/1.1" 403 146 "-" "Jetpack/12.1; WordPress/6.3; http://site35494073.com" show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-23 02:56:31 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 103.207.103.115 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 103.207.103.115 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 22:56:27.196898 2026] [security2:error] [pid 3664:tid 3664] [client 103.207.103.115:56690] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.207.103.115 (+1 hits since last alert)\|jesussotoca.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "jesussotoca.com"] [uri "/xmlrpc.php"] [unique_id "ajn12zuM-iGQ3nXSw4FIigAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Lunix	2026-06-23 02:01:09 (1 day ago)		Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-23 01:57:16 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 103.207.103.115 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 103.207.103.115 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 21:57:10.028662 2026] [security2:error] [pid 11545:tid 11545] [client 103.207.103.115:61319] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.207.103.115 (+1 hits since last alert)\|drbolen.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "drbolen.com"] [uri "/xmlrpc.php"] [unique_id "ajnn9v-2iAp9wAsn-E9qEgAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 ipoac.nl	2026-06-23 01:19:51 (1 day ago)	2026-06-23T03:19:50.664468+02:00 ipoac.nl wordpress(-)-: XML-RPC authentication failure for-from 103 ... show more 2026-06-23T03:19:50.664468+02:00 ipoac.nl wordpress(-)-: XML-RPC authentication failure for-from 103.207.103.115 show less	Web App Attack
🇩🇪 yvoictra	2026-06-22 08:05:58 (2 days ago)	103.207.103.115 - - [22/Jun/2026:10:05:06 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Jetpack by ... show more 103.207.103.115 - - [22/Jun/2026:10:05:06 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.2)" 103.207.103.115 - - [22/Jun/2026:10:05:15 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "WordPress.com; https://wordpress.com" 103.207.103.115 - - [22/Jun/2026:10:05:26 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.1)" 103.207.103.115 - - [22/Jun/2026:10:05:36 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "WordPress.com; https://wordpress.com" 103.207.103.115 - - [22/Jun/2026:10:05:47 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Jetpack by WordPress.com" 103.207.103.115 - - [22/Jun/2026:10:05:57 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Jetpack/13.0; WordPress/6.4; http://site21352989.com" ... show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-22 03:28:34 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 103.207.103.115 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 103.207.103.115 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 23:28:28.758453 2026] [security2:error] [pid 26069:tid 26069] [client 103.207.103.115:59758] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.207.103.115 (+1 hits since last alert)\|edgecomix.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "edgecomix.com"] [uri "/xmlrpc.php"] [unique_id "ajir3MJqWrErj6tytZcoUQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-18 06:06:02 (6 days ago)	[da.kdns.gr] httpd-xmlrpc-post: sites=onar-pension.gr; logs=/var/log/httpd/domains/onar-pension.gr.l ... show more [da.kdns.gr] httpd-xmlrpc-post: sites=onar-pension.gr; logs=/var/log/httpd/domains/onar-pension.gr.log; samples=/xmlrpc.php show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-18 05:13:48 (6 days ago)	(mod_security) mod_security (id:240335) triggered by 103.207.103.115 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 103.207.103.115 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 01:13:42.286326 2026] [security2:error] [pid 26222:tid 26250] [client 103.207.103.115:62895] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.207.103.115 (+1 hits since last alert)\|coasterdvdsonline.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "coasterdvdsonline.com"] [uri "/xmlrpc.php"] [unique_id "ajN-hluyT_6TVVTeRUaAkwAAAVg"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-06-18 04:35:51 (6 days ago)	xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (88010-201)	Hacking
🇺🇸 TPI-Abuse	2026-06-18 03:42:14 (6 days ago)	(mod_security) mod_security (id:240335) triggered by 103.207.103.115 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 103.207.103.115 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 23:42:06.315587 2026] [security2:error] [pid 27075:tid 27075] [client 103.207.103.115:56163] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.207.103.115 (+1 hits since last alert)\|laura-stone.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "laura-stone.com"] [uri "/xmlrpc.php"] [unique_id "ajNpDsaQl5ACyhRwVe95FwAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-18 02:38:23 (6 days ago)	[redacted] 103.207.103.115 - - [18/Jun/2026:04:37:36 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" ... show more [redacted] 103.207.103.115 - - [18/Jun/2026:04:37:36 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.4)" [redacted] 103.207.103.115 - - [18/Jun/2026:04:37:47 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 103.207.103.115 - - [18/Jun/2026:04:38:00 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.0; WordPress/6.4; http://site71239965.com" [redacted] 103.207.103.115 - - [18/Jun/2026:04:38:14 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.4)" [redacted] 103.207.103.115 - - [18/Jun/2026:04:38:22 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.5; WordPress/6.4; http://site43053581.com" ... show less	Hacking Web App Attack
🇫🇷 SpaceHost-Server	2026-06-17 09:59:49 (1 week ago)	103.207.103.115 - - [17/Jun/2026:11:59:28 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4908 "-" "Jetpack/1 ... show more 103.207.103.115 - - [17/Jun/2026:11:59:28 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4908 "-" "Jetpack/12.5; WordPress/6.2; http://site38430123.com" 103.207.103.115 - - [17/Jun/2026:11:59:37 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4908 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.2)" 103.207.103.115 - - [17/Jun/2026:11:59:48 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4908 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.4)" show less	Hacking Web App Attack

Showing 1 to 15 of 89 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 152.32.183.236

🇰🇷 119.198.191.180

🇩🇪 46.101.216.224

🇺🇸 45.156.129.115

🇺🇸 34.173.141.69

🇺🇸 20.29.19.243

🇧🇬 5.188.206.30

🇩🇪 207.154.246.19

🇪🇬 154.183.246.1

🇵🇱 109.205.211.247

🇭🇰 101.36.117.234

🇱🇹 62.60.130.219

🇳🇱 45.148.10.157

🇺🇸 23.27.244.95

🇻🇳 14.191.8.11

🇷🇴 2.57.121.112

🇬🇧 193.176.29.11

🇩🇪 185.242.3.195

🇺🇸 172.212.174.123

🇬🇧 163.116.162.121