JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.240.207.0

103.240.207.0 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 44%: ?

44%

ISP	Gtpl Broadband Pvt. Ltd.
Usage Type	Fixed Line ISP
ASN	AS45916
Domain Name	gtpl.net
Country	🇮🇳 India
City	Vadodara, Gujarat

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.240.207.0

Whois 103.240.207.0

IP Abuse Reports for 103.240.207.0:

This IP address has been reported a total of 12 times from 10 distinct sources. 103.240.207.0 was first reported on April 1st 2021, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-25 17:25:50 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 103.240.207.0 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 103.240.207.0 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 13:25:43.993574 2026] [security2:error] [pid 1579309:tid 1579309] [client 103.240.207.0:27717] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.240.207.0 (+1 hits since last alert)\|techoutletec.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "techoutletec.com"] [uri "/xmlrpc.php"] [unique_id "amTxl0NtBlateABAp59k6QAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-25 14:27:04 (2 days ago)	Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1	Hacking Web App Attack
🇩🇪 rh24	2026-07-25 12:55:30 (3 days ago)	(wordpress) Failed wordpress login from 103.240.207.0 (IN/India/-): (CF_ENABLE)	Brute-Force
🇺🇸 TPI-Abuse	2026-07-25 12:26:27 (3 days ago)	(mod_security) mod_security (id:240335) triggered by 103.240.207.0 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 103.240.207.0 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 08:26:20.051417 2026] [security2:error] [pid 2319706:tid 2319706] [client 103.240.207.0:28224] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.240.207.0 (+1 hits since last alert)\|loriarsenault.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "loriarsenault.com"] [uri "/xmlrpc.php"] [unique_id "amSrbNPC55DpQqMWjS1ZNwAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-25 10:21:33 (3 days ago)	[redacted] 103.240.207.0 - - [25/Jul/2026:12:20:51 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "J ... show more [redacted] 103.240.207.0 - - [25/Jul/2026:12:20:51 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.4)" [redacted] 103.240.207.0 - - [25/Jul/2026:12:21:00 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack/12.0; WordPress/6.3; http://site13173122.com" [redacted] 103.240.207.0 - - [25/Jul/2026:12:21:11 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack by WordPress.com" [redacted] 103.240.207.0 - - [25/Jul/2026:12:21:21 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack/12.5; WordPress/6.4; http://site42889822.com" [redacted] 103.240.207.0 - - [25/Jul/2026:12:21:32 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack/12.5; WordPress/6.1; http://site10861045.com" ... show less	Hacking Web App Attack
🇪🇸 alferez	2026-07-25 09:21:34 (3 days ago)	xmlrpc.php attack DOS	Hacking Exploited Host Web App Attack
🇺🇸 kosada.com	2026-07-20 10:25:05 (1 week ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇪🇸 el-brujo	2026-06-02 03:50:01 (1 month ago)	Cloudflare WAF: Request Path: /profile/ Request Query: ?PHPSESSID=vgqcrqu35sfv2emtctq1qh6jpb&area=su ... show more Cloudflare WAF: Request Path: /profile/ Request Query: ?PHPSESSID=vgqcrqu35sfv2emtctq1qh6jpb&area=summary&u=360127 Host: forum.elhacker.net userAgent: Mozilla/5.0 (compatible; MSIE 6.0; Windows NT 5.01; Trident/4.1) Action: log Source: firewallManaged ASN Description: Gujarat Telelink Pvt Ltd Country: IN Method: GET Timestamp: 2026-06-02T03:50:01Z ruleId: 017d4edd6754438087991348543c4667. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
Anonymous	2024-04-25 04:53:23 (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-04-23 04:08:58 (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇩🇪 IP Analyzer	2021-04-04 14:30:24 (5 years ago)	Unauthorized connection attempt from IP address 103.240.207.0 on Port 445(SMB)	Port Scan
🇩🇪 Invisiblemen	2021-04-01 22:15:28 (5 years ago)	Unauthorized connection attempt from IP address 103.240.207.0 on Port 445(SMB)	Port Scan

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 120.48.111.71

🇮🇳 59.179.31.237

🇨🇳 221.14.127.142

🇺🇸 192.169.232.63

🇺🇦 185.218.138.33

🇫🇷 185.210.204.81

🇺🇸 107.175.183.32

🇩🇪 64.89.163.188

🇺🇸 44.251.171.30

🇺🇦 37.25.99.104

🇬🇧 35.203.211.233

🇺🇸 35.174.253.85

🇦🇺 15.135.237.147

🇨🇳 218.59.175.217

🇧🇪 207.175.10.180

🇹🇭 203.154.158.195

🇧🇷 190.89.137.123

🇸🇬 129.212.237.153

🇮🇳 124.123.125.62

🇨🇳 115.55.129.112