JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.242.199.245

103.242.199.245 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 100%: ?

100%

ISP	Alliance Broadband Services Pvt. Ltd.
Usage Type	Fixed Line ISP
ASN	AS23860
Hostname(s)	node-103-242-199-245.alliancebroadband.in
Domain Name	alliancekolkata.com
Country	🇮🇳 India
City	Kolkata, West Bengal

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.242.199.245

Whois 103.242.199.245

IP Abuse Reports for 103.242.199.245:

This IP address has been reported a total of 30 times from 22 distinct sources. 103.242.199.245 was first reported on October 7th 2024, and the most recent report was 4 seconds ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 SpaceHost-Server	2026-07-26 04:39:39 (4 seconds ago)	103.242.199.245 - - [26/Jul/2026:06:39:17 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6398 "-" "Jetpack b ... show more 103.242.199.245 - - [26/Jul/2026:06:39:17 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6398 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.1)" 103.242.199.245 - - [26/Jul/2026:06:39:27 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6398 "-" "Jetpack/12.0; WordPress/6.2; http://site91334834.com" 103.242.199.245 - - [26/Jul/2026:06:39:38 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6398 "-" "Jetpack by WordPress.com" show less	Hacking Web App Attack
🇫🇷 SpaceHost-Server	2026-07-26 04:24:11 (15 minutes ago)	103.242.199.245 - - [26/Jul/2026:06:23:49 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6398 "-" "WordPress ... show more 103.242.199.245 - - [26/Jul/2026:06:23:49 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6398 "-" "WordPress.com; https://wordpress.com" 103.242.199.245 - - [26/Jul/2026:06:23:59 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6398 "-" "Jetpack by WordPress.com" 103.242.199.245 - - [26/Jul/2026:06:24:10 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6398 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.4)" show less	Hacking Web App Attack
Anonymous	2026-07-25 22:35:31 (6 hours ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇮🇹 CoreTech srl	2026-07-25 18:43:57 (9 hours ago)	cloudlinux2 fail2ban: 2026-07-25 20:39:01,305 fail2ban.filter [1816]: INFO [plesk-wordpre ... show more cloudlinux2 fail2ban: 2026-07-25 20:39:01,305 fail2ban.filter [1816]: INFO [plesk-wordpress] Found 192.250.234.71 - 2026-07-25 20:39:01cloudlinux2 fail2ban: 2026-07-25 20:40:04,329 fail2ban.filter [1816]: INFO [plesk-modsecurity] Found 103.242.199.245 - 2026-07-25 20:40:04cloudlinux2 fail2ban: 2026-07-25 20:40:00,406 fail2ban.filter [1816]: INFO [plesk-modsecurity] Found 149.102.225.42 - 2026-07-25 20:40:00cloudlinux2 fail2ban: 2026-07-25 20:41:08,032 fail2ban.filter [1816]: INFO [plesk-modsecurity] Found 149.102.225.42 - 2026-07-25 20:41:08cloudlinux2 fail2ban: 2026-07-25 20:41:18,709 fail2ban.actions [1816]: NOTICE [plesk-modsecurity] Ban 103.242.199.245cloudlinux2 fail2ban: 2026-07-25 20:41:18,716 fail2ban.filter [1816]: INFO [recidive] Found 103.242.199.245 - 2026-07-25 20:41:18cloudlinux2 fail2ban: 2026-07-25 20:41:18,625 fail2ban.filter [1816]: INFO [plesk-modsecurity] Found 103.242.199.245 - 2026-07-25 20:41:18cloudlinux2 fail2ba show less	Web App Attack
🇳🇱 Site.eu	2026-07-25 18:21:18 (10 hours ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇩🇪 LRob	2026-07-25 12:42:25 (15 hours ago)	CrowdSec: crowdsecurity/http-bf-wordpress_bf_xmlrpc \| req: /xmlrpc.php \| UA: WordPress.com; https:// ... show more CrowdSec: crowdsecurity/http-bf-wordpress_bf_xmlrpc \| req: /xmlrpc.php \| UA: WordPress.com; https://wordpress.com show less	Brute-Force Web App Attack
🇲🇹 Malta	2026-07-24 19:49:12 (1 day ago)	103.242.199.245 - - [24/Jul/2026:21:49:12 +0200] "POST /xmlrpc.php HTTP/1.1" "Jetpack by WordPress.c ... show more 103.242.199.245 - - [24/Jul/2026:21:49:12 +0200] "POST /xmlrpc.php HTTP/1.1" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.1)" show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 09:05:38 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 103.242.199.245 (node-103-242-199-245.allianceb ... show more (mod_security) mod_security (id:240335) triggered by 103.242.199.245 (node-103-242-199-245.alliancebroadband.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 05:05:30.393408 2026] [security2:error] [pid 426190:tid 426190] [client 103.242.199.245:52907] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.242.199.245 (+1 hits since last alert)\|inverzona.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "inverzona.com"] [uri "/xmlrpc.php"] [unique_id "amMq2lIwZAqM32O986-koQAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 masterguru	2026-07-24 03:57:19 (2 days ago)	(xmlrpc) Failed xmlrpc access from 103.242.199.245 (IN/India/node-103-242-199-245.alliancebroadband. ... show more (xmlrpc) Failed xmlrpc access from 103.242.199.245 (IN/India/node-103-242-199-245.alliancebroadband.in): 5 in the last 3600 secs (0-122) show less	Hacking
🇳🇱 Site.eu	2026-07-24 01:31:57 (2 days ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
Anonymous	2026-07-23 13:56:05 (2 days ago)	Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1	Hacking Web App Attack
Anonymous	2026-07-23 13:53:56 (2 days ago)	[redacted] 103.242.199.245 - - [23/Jul/2026:15:53:12 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" ... show more [redacted] 103.242.199.245 - - [23/Jul/2026:15:53:12 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/13.0; WordPress/6.2; http://site65121122.com" [redacted] 103.242.199.245 - - [23/Jul/2026:15:53:21 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/13.0; WordPress/6.4; http://site37608613.com" [redacted] 103.242.199.245 - - [23/Jul/2026:15:53:32 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 103.242.199.245 - - [23/Jul/2026:15:53:42 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.3)" [redacted] 103.242.199.245 - - [23/Jul/2026:15:53:53 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" ... show less	Hacking Web App Attack
🇱🇻 garmtech.com	2026-07-23 13:48:13 (2 days ago)	IM360 WAF: Rate limit exceeded for XMLRPC DoS	Web App Attack
🇩🇪 ghostwarriors	2026-07-23 10:20:24 (2 days ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇺🇸 integrantservices.com	2026-07-23 09:59:22 (2 days ago)	(wordpress) Failed wordpress login from 103.242.199.245 (IN/India/node-103-242-199-245.alliancebroad ... show more (wordpress) Failed wordpress login from 103.242.199.245 (IN/India/node-103-242-199-245.alliancebroadband.in) show less	Brute-Force

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.149.139

🇧🇷 128.201.58.154

🇩🇰 85.191.90.179

🇧🇷 45.205.1.240

🇺🇸 147.185.132.135

🇺🇸 135.119.74.228

🇫🇷 85.217.140.40

🇺🇸 54.159.49.205

🇸🇬 43.163.90.141

🇬🇧 35.203.211.47

🇷🇴 193.32.162.84

🇩🇪 167.94.146.46

🇮🇩 165.154.48.160

🇺🇸 159.89.239.1

🇺🇸 154.92.23.249

🇺🇸 147.185.132.107

🇨🇭 107.189.31.187

🇺🇸 47.88.0.49

🇧🇷 205.210.31.129

🇩🇪 194.187.176.202