JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.47.52.232

103.47.52.232 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 0%: ?

ISP	trafficforce, UAB
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	trafficforce.lt
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.47.52.232

Whois 103.47.52.232

IP Abuse Reports for 103.47.52.232:

This IP address has been reported a total of 15 times from 5 distinct sources. 103.47.52.232 was first reported on June 3rd 2023, and the most recent report was 5 months ago.

Old Reports: The most recent abuse report for this IP address is from 5 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2025-12-29 17:45:19 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 103.47.52.232 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 103.47.52.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 12:43:33.897690 2025] [security2:error] [pid 30274:tid 30547] [client 103.47.52.232:52679] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kettlehill.net"] [uri "/wp-content/plugins/jsmol2wp/php/jsmol.php"] [unique_id "aVK9xUPUzqrf53yng5WarwAAAIU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 22:36:20 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 103.47.52.232 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 103.47.52.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 17:36:06.827566 2025] [security2:error] [pid 18379:tid 18379] [client 103.47.52.232:56831] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ftp.farmers123.com"] [uri "/.env.ftp"] [unique_id "aS9p1n-fYQ8eashQlPH0GQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-13 14:30:09 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 103.47.52.232 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 103.47.52.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 13 09:30:01.397646 2025] [security2:error] [pid 16339:tid 16339] [client 103.47.52.232:48839] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ftp.nbcnewsradio.com"] [uri "/.env.save"] [unique_id "aRXraWb3dI2sJinLkSclNgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-27 19:54:32 (8 months ago)	(mod_security) mod_security (id:226830) triggered by 103.47.52.232 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:226830) triggered by 103.47.52.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 27 15:54:26.186682 2025] [security2:error] [pid 5184:tid 5184] [client 103.47.52.232:53535] ModSecurity: Access denied with code 403 (phase 1). Operator GE matched 1 at ARGS_GET. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/27_Apps_WPPlugin.conf"] [line "6392"] [id "226830"] [rev "2"] [msg "COMODO WAF: Open redirect vulnerability in the Redirect function in the StageShow plugin before 5.0.9 for WordPress (CVE-2015-5461)\|\|autoconfig.deandobkin.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "autoconfig.deandobkin.com"] [uri "/wp-content/plugins/stageshow/stageshow_redirect.php"] [unique_id "aNhA8niIYlP0wK6igInUAwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-07-27 00:17:45 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 103.47.52.232 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 103.47.52.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 26 20:17:24.689920 2025] [security2:error] [pid 172229:tid 172467] [client 103.47.52.232:40351] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.kettlehill.com"] [uri "/.env.stage"] [unique_id "aIVwFOZd-uShJ73phjvoXQAAAQI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-05-29 16:15:45 (1 year ago)	(mod_security) mod_security (id:211190) triggered by 103.47.52.232 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:211190) triggered by 103.47.52.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 29 12:14:40.761080 2025] [security2:error] [pid 2949431:tid 2949431] [client 103.47.52.232:41501] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt\|\|ftp.farmers123.com\|F\|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /index.php?option=com_projectfork&section=../../../../../../../../etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ftp.farmers123.com"] [uri "/index.php"] [unique_id "aDiH8HleV0o86qXqFPi4KgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-01-15 08:30:40 (1 year ago)	\| Common web attack.	Hacking SQL Injection Web App Attack
🇺🇸 ChamberofCommerce.com	2023-11-02 04:09:03 (2 years ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226 show less	Bad Web Bot
🇺🇸 ChamberofCommerce.com	2023-10-31 04:33:08 (2 years ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:229 show less	Bad Web Bot
🇺🇸 ChamberofCommerce.com	2023-10-31 04:33:07 (2 years ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:228 show less	Bad Web Bot
🇺🇸 ChamberofCommerce.com	2023-10-31 04:33:06 (2 years ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:227 show less	Bad Web Bot
🇺🇸 ChamberofCommerce.com	2023-10-31 04:33:06 (2 years ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226 show less	Bad Web Bot
🇬🇷 Staging	2023-06-11 07:12:57 (2 years ago)	Wordpress abuse of login/register	Hacking Brute-Force Web App Attack
🇮🇪 RoboSOC	2023-06-04 12:55:24 (3 years ago)	HTTP Directory Traversal Request Attempt , PTR: PTR record not found	Hacking
🇮🇪 RoboSOC	2023-06-03 05:49:42 (3 years ago)	HTTP Directory Traversal Request Attempt , PTR: PTR record not found	Hacking

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 193.163.125.148

🇵🇰 182.186.123.147

🇧🇬 162.158.210.82

🇨🇦 66.85.30.4

🇳🇱 34.7.175.72

🇳🇱 204.76.203.15

🇳🇱 185.156.73.233

🇺🇸 52.21.227.35

🇺🇸 34.60.192.89

🇺🇦 193.176.251.229

🇸🇬 101.47.25.139

🇷🇴 92.118.39.62

🇫🇷 51.77.158.34

🇲🇾 47.250.130.94

🇧🇷 45.205.1.246

🇫🇮 35.228.220.203

🇺🇸 34.58.124.191

🇧🇪 34.38.69.67

🇨🇦 34.19.145.184

🇳🇱 5.61.53.19