JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.39.247.130

103.39.247.130 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 49%: ?

49%

ISP	Zess Networks Private Limited
Usage Type	Fixed Line ISP
ASN	AS133720
Hostname(s)	103.39.247.130.zessnetworks.com
Domain Name	zessnetworks.com
Country	🇮🇳 India
City	Thane, Maharashtra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.39.247.130

Whois 103.39.247.130

IP Abuse Reports for 103.39.247.130:

This IP address has been reported a total of 22 times from 17 distinct sources. 103.39.247.130 was first reported on March 27th 2023, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 dbmwebdesign	2026-07-27 11:40:14 (1 day ago)	WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail	Brute-Force Web App Attack
🇱🇻 garmtech.com	2026-07-27 11:29:31 (1 day ago)	IM360 WAF: Rate limit exceeded for XMLRPC DoS (fault code)	Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 10:39:55 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 103.39.247.130 (103.39.247.130.zessnetworks.com ... show more (mod_security) mod_security (id:240335) triggered by 103.39.247.130 (103.39.247.130.zessnetworks.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 06:39:47.627697 2026] [security2:error] [pid 4098492:tid 4098492] [client 103.39.247.130:61866] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.39.247.130 (+1 hits since last alert)\|susanoneill.us\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "susanoneill.us"] [uri "/xmlrpc.php"] [unique_id "amc1c_igVM-ypQmGZ7Fa0wAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-07-27 06:11:59 (1 day ago)	CrowdSec: lrob/wp-xmlrpc-bf \| req: /xmlrpc.php \| UA: Jetpack by WordPress.com (Jetpack 12.5; WordPre ... show more CrowdSec: lrob/wp-xmlrpc-bf \| req: /xmlrpc.php \| UA: Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.4) show less	Brute-Force Web App Attack
Anonymous	2026-07-27 05:37:02 (1 day ago)	Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1, GET /wp-sitemap-users-1.xml HTTP/ ... show more Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1, GET /wp-sitemap-users-1.xml HTTP/1.1, GET /wp-json/wp/v2/users?ver=0.09602418257804396 HTTP/1.1, GET /wp-json/wp/v2/users?ver=0.11828591909892655 HTTP/1.1, GET /feed/ HTTP/1.1, GET /wp-json/wp/v2/users?ver=0.7700066788202214 HTTP/1.1 show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-22 12:13:19 (6 days ago)	(mod_security) mod_security (id:240335) triggered by 103.39.247.130 (103.39.247.130.zessnetworks.com ... show more (mod_security) mod_security (id:240335) triggered by 103.39.247.130 (103.39.247.130.zessnetworks.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 08:13:11.668214 2026] [security2:error] [pid 725748:tid 725748] [client 103.39.247.130:53770] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.39.247.130 (+1 hits since last alert)\|qed-consulting.co\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "qed-consulting.co"] [uri "/xmlrpc.php"] [unique_id "amCz1yiXNXqldRCLVGkoxAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-22 11:12:03 (6 days ago)	[redacted] 103.39.247.130 - - [22/Jul/2026:13:11:20 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" " ... show more [redacted] 103.39.247.130 - - [22/Jul/2026:13:11:20 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 103.39.247.130 - - [22/Jul/2026:13:11:30 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 103.39.247.130 - - [22/Jul/2026:13:11:40 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.1; WordPress/6.2; http://site66479340.com" [redacted] 103.39.247.130 - - [22/Jul/2026:13:11:51 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.4)" [redacted] 103.39.247.130 - - [22/Jul/2026:13:12:02 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" ... show less	Hacking Web App Attack
🇩🇪 LRob	2026-07-22 10:10:08 (6 days ago)	CrowdSec: crowdsecurity/http-bf-wordpress_bf_xmlrpc \| req: /xmlrpc.php \| UA: Jetpack by WordPress.co ... show more CrowdSec: crowdsecurity/http-bf-wordpress_bf_xmlrpc \| req: /xmlrpc.php \| UA: Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.4) show less	Brute-Force Web App Attack
Anonymous	2026-07-22 09:39:10 (6 days ago)	[redacted] 103.39.247.130 - - [22/Jul/2026:11:38:28 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" " ... show more [redacted] 103.39.247.130 - - [22/Jul/2026:11:38:28 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "WordPress.com; https://wordpress.com" [redacted] 103.39.247.130 - - [22/Jul/2026:11:38:38 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.2)" [redacted] 103.39.247.130 - - [22/Jul/2026:11:38:48 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "WordPress.com; https://wordpress.com" [redacted] 103.39.247.130 - - [22/Jul/2026:11:38:59 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "WordPress.com; https://wordpress.com" [redacted] 103.39.247.130 - - [22/Jul/2026:11:39:10 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.4)" ... show less	Hacking Web App Attack
🇦🇺 screwlooseit.com.au	2026-07-04 05:55:45 (3 weeks ago)	Blocked by CSF 13 firewall - Rule: XMLRPC IN/India/103.39.247.130.zessnetworks.com	Web App Attack
Anonymous	2026-05-31 14:38:13 (1 month ago)	Attac	Brute-Force
Anonymous	2026-05-31 07:48:52 (1 month ago)	[server.tmg.gr] httpd-xmlrpc-post: sites=crisis-management2019.eu; logs=/var/log/httpd/domains/crisi ... show more [server.tmg.gr] httpd-xmlrpc-post: sites=crisis-management2019.eu; logs=/var/log/httpd/domains/crisis-management2019.eu.log; samples=/xmlrpc.php show less	Brute-Force Web App Attack
Anonymous	2026-05-27 13:36:15 (2 months ago)	Attac	Brute-Force
🇦🇺 screwlooseit.com.au	2026-05-14 06:06:23 (2 months ago)	Blocked by CSF 13 firewall - Rule: XMLRPC IN/India/103.39.247.130.softcall.net.in	Web App Attack
🇳🇱 exxos	2025-11-03 11:09:14 (8 months ago)	Attacks with Bad user agents	Hacking

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇱 176.53.159.198

🇨🇦 85.217.149.72

🇧🇸 64.150.246.12

🇺🇸 207.97.158.26

🇺🇸 192.227.176.16

🇺🇸 150.107.38.203

🇿🇦 105.28.108.165

🇨🇳 101.200.243.197

🇺🇸 76.49.199.97

🇺🇸 74.82.47.62

🇵🇱 46.205.211.133

🇩🇪 45.135.141.9

🇺🇸 2607:f8b0:4001:c01::127

🇮🇳 203.200.74.18

🇦🇪 152.32.180.138

🇫🇮 147.185.133.235

🇺🇸 104.28.219.190

🇷🇺 88.205.172.170

🇺🇸 66.132.186.240

🇺🇸 65.49.1.220