JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.240.207.39

103.240.207.39 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 49%: ?

49%

ISP	Gtpl Broadband Pvt. Ltd.
Usage Type	Fixed Line ISP
ASN	AS45916
Domain Name	gtpl.net
Country	🇮🇳 India
City	Vadodara, Gujarat

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.240.207.39

Whois 103.240.207.39

IP Abuse Reports for 103.240.207.39:

This IP address has been reported a total of 27 times from 16 distinct sources. 103.240.207.39 was first reported on April 3rd 2024, and the most recent report was 20 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 polycoda	2026-08-22 09:02:36 (20 hours ago)	AutoBlock: 🔐 WordPress Login Brute Force (20X or 30X) (Decay-Based)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 05:43:01 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 103.240.207.39 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 103.240.207.39 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 01:42:54.155673 2026] [security2:error] [pid 29261:tid 29261] [client 103.240.207.39:8491] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.240.207.39 (+1 hits since last alert)\|azcrittergetter.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "azcrittergetter.com"] [uri "/xmlrpc.php"] [unique_id "aok23pAwhv3LCKwOq3DK8QAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-22 05:40:09 (1 day ago)	POST /xmlrpc.php HTTP/1.1 ...	Brute-Force
🇫🇷 dynamix	2026-08-21 10:23:20 (1 day ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇳🇱 ConsulHosting	2026-08-14 11:46:03 (1 week ago)	Excessive failed CAPTCHA attempts (CAPTCHA DoS)	Web App Attack
🇩🇪 Marc	2026-08-14 10:56:50 (1 week ago)	103.240.207.39 - - [14/Aug/2026:12:56:28 +0200] "POST /xmlrpc.php HTTP/1.1" 403 4840 "-" "Jetpack/12 ... show more 103.240.207.39 - - [14/Aug/2026:12:56:28 +0200] "POST /xmlrpc.php HTTP/1.1" 403 4840 "-" "Jetpack/12.0; WordPress/6.2; http://site12196433.com" 103.240.207.39 - - [14/Aug/2026:12:56:38 +0200] "POST /xmlrpc.php HTTP/1.1" 403 4841 "-" "WordPress.com; https://wordpress.com" 103.240.207.39 - - [14/Aug/2026:12:56:49 +0200] "POST /xmlrpc.php HTTP/1.1" 403 4840 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.4)" show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-14 09:26:11 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 103.240.207.39 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 103.240.207.39 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 14 05:26:03.741411 2026] [security2:error] [pid 107806:tid 107815] [client 103.240.207.39:11871] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.240.207.39 (+1 hits since last alert)\|quantumgaze.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "quantumgaze.com"] [uri "/xmlrpc.php"] [unique_id "an7fKzSRPg6_A_WrfazlvgAAAMM"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-08-13 12:14:26 (1 week ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇸🇪 konseptit	2026-06-27 17:07:49 (1 month ago)	(wordpress) Failed wordpress login from 103.240.207.39 (IN/India/-)	Brute-Force
🇺🇸 TPI-Abuse	2026-06-27 07:26:17 (1 month ago)	(mod_security) mod_security (id:240335) triggered by 103.240.207.39 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 103.240.207.39 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 03:26:13.124717 2026] [security2:error] [pid 10769:tid 10769] [client 103.240.207.39:46304] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.240.207.39 (+1 hits since last alert)\|rentkase.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "rentkase.com"] [uri "/xmlrpc.php"] [unique_id "aj97FWMz9y8eKKt6Dl68xQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-27 03:48:40 (1 month ago)	Attac	Brute-Force
🇺🇸 TPI-Abuse	2026-06-27 02:37:07 (1 month ago)	(mod_security) mod_security (id:240335) triggered by 103.240.207.39 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 103.240.207.39 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 22:37:01.562766 2026] [security2:error] [pid 31115:tid 31115] [client 103.240.207.39:45937] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.240.207.39 (+1 hits since last alert)\|nearfieldchrist.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "nearfieldchrist.com"] [uri "/xmlrpc.php"] [unique_id "aj83TXt4-r8gRRjLQ4odCgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 oralunal	2026-06-27 02:06:40 (1 month ago)	IP banned by Fail2Ban in jail its-suss access.log mvfnds ...	Bad Web Bot Web App Attack
🇪🇸 masterguru	2026-06-27 00:36:58 (1 month ago)	(xmlrpc) Failed xmlrpc access from 103.240.207.39 (IN/India/-): 5 in the last 3600 secs (0-122)	Hacking
🇺🇸 TPI-Abuse	2026-06-26 22:32:14 (1 month ago)	(mod_security) mod_security (id:240335) triggered by 103.240.207.39 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 103.240.207.39 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 18:32:06.433042 2026] [security2:error] [pid 24375:tid 24375] [client 103.240.207.39:46332] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.240.207.39 (+1 hits since last alert)\|airdriedrivingschool.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "airdriedrivingschool.com"] [uri "/xmlrpc.php"] [unique_id "aj795j7zwmaJBk8t4H8ZOgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇿 213.230.78.89

🇧🇷 205.210.31.237

🇹🇼 198.235.24.67

🇩🇪 194.88.98.118

🇦🇷 186.19.188.77

🇨🇳 182.37.91.195

🇺🇸 172.59.210.239

🇨🇳 117.50.178.180

🇻🇳 116.110.16.226

🇮🇩 103.136.79.33

🇰🇿 95.57.207.100

🇫🇷 85.217.140.36

🇺🇸 67.207.85.122

🇺🇸 48.211.158.211

🇺🇸 45.43.58.68

🇺🇸 2001:470:1:908::9001

🇬🇧 195.206.182.213

🇬🇧 185.216.145.177

🇧🇷 168.227.18.16

🇰🇷 118.43.245.27