JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 197.39.81.103

197.39.81.103 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 59%: ?

59%

ISP	TE Data
Usage Type	Fixed Line ISP
ASN	AS8452
Domain Name	tedata.net
Country	🇪🇬 Egypt
City	Giza, Giza

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 197.39.81.103

Whois 197.39.81.103

IP Abuse Reports for 197.39.81.103:

This IP address has been reported a total of 15 times from 9 distinct sources. 197.39.81.103 was first reported on August 19th 2026, and the most recent report was 12 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 rh24	2026-08-21 09:16:53 (12 hours ago)	(wordpress) Failed wordpress login from 197.39.81.103 (EG/Egypt/-): (CF_ENABLE)	Brute-Force
🇺🇸 TPI-Abuse	2026-08-21 07:18:20 (13 hours ago)	(mod_security) mod_security (id:240335) triggered by 197.39.81.103 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 197.39.81.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 03:18:12.257106 2026] [security2:error] [pid 4753:tid 4796] [client 197.39.81.103:60792] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 197.39.81.103 (+1 hits since last alert)\|chelseyrae.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "chelseyrae.com"] [uri "/xmlrpc.php"] [unique_id "aof7tD3MrDZHM9V5kuwlSQAAAYo"] show less	Brute-Force Bad Web Bot Web App Attack
🇲🇾 Rizzy	2026-08-21 05:21:30 (15 hours ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇫🇷 Kenshin869	2026-08-21 03:44:17 (17 hours ago)	Wordpress unauthorized access attempt	Brute-Force
Anonymous	2026-08-21 03:09:23 (18 hours ago)	[redacted] 197.39.81.103 - - [21/Aug/2026:05:08:30 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "J ... show more [redacted] 197.39.81.103 - - [21/Aug/2026:05:08:30 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.3)" [redacted] 197.39.81.103 - - [21/Aug/2026:05:08:43 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.1; WordPress/6.1; http://site92694779.com" [redacted] 197.39.81.103 - - [21/Aug/2026:05:08:57 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 197.39.81.103 - - [21/Aug/2026:05:09:09 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 197.39.81.103 - - [21/Aug/2026:05:09:22 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.1; WordPress/6.4; http://site96052158.com" ... show less	Hacking Web App Attack
🇺🇸 IndigoRidge	2026-08-21 01:37:45 (19 hours ago)	197.39.81.103 - - [20/Aug/2026:21:35:41 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5744 "-" "WordPress.c ... show more 197.39.81.103 - - [20/Aug/2026:21:35:41 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5744 "-" "WordPress.com; https://wordpress.com" 197.39.81.103 - - [20/Aug/2026:21:36:20 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5760 "-" "WordPress.com; https://wordpress.com" 197.39.81.103 - - [20/Aug/2026:21:36:33 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5744 "-" "WordPress.com; https://wordpress.com" 197.39.81.103 - - [20/Aug/2026:21:37:33 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5728 "-" "WordPress.com; https://wordpress.com" 197.39.81.103 - - [20/Aug/2026:21:37:45 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5744 "-" "WordPress.com; https://wordpress.com" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-08-20 21:48:51 (23 hours ago)	(mod_security) mod_security (id:240335) triggered by 197.39.81.103 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 197.39.81.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 20 17:48:44.972559 2026] [security2:error] [pid 2576:tid 2576] [client 197.39.81.103:64933] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 197.39.81.103 (+1 hits since last alert)\|amywoodruff.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "amywoodruff.com"] [uri "/xmlrpc.php"] [unique_id "aod2PFpejdQ5d54N33pNlgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-20 18:04:01 (1 day ago)	[redacted] 197.39.81.103 - - [20/Aug/2026:20:03:17 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "J ... show more [redacted] 197.39.81.103 - - [20/Aug/2026:20:03:17 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 197.39.81.103 - - [20/Aug/2026:20:03:27 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.2)" [redacted] 197.39.81.103 - - [20/Aug/2026:20:03:38 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.2)" [redacted] 197.39.81.103 - - [20/Aug/2026:20:03:49 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 197.39.81.103 - - [20/Aug/2026:20:04:00 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.4)" ... show less	Hacking Web App Attack
🇺🇸 Lee Daniel	2026-08-20 17:07:01 (1 day ago)	[20/Aug/2026:13:06:11.132926 --0400] aoc0AtiCLKODsy7UmwSUSAAAAtU 197.39.81.103 36582 127.0.0.1 7081 ... show more [20/Aug/2026:13:06:11.132926 --0400] aoc0AtiCLKODsy7UmwSUSAAAAtU 197.39.81.103 36582 127.0.0.1 7081 [20/Aug/2026:13:06:23.840705 --0400] aoc0D-lH0mb-H2ANOwbZ-AAAA9U 197.39.81.103 60486 127.0.0.1 7081 [20/Aug/2026:13:06:36.555776 --0400] aoc0HLEBgo5NKJTqXQjMgQAAAAc 197.39.81.103 57906 127.0.0.1 7081 [20/Aug/2026:13:06:49.323225 --0400] aoc0KdiCLKODsy7UmwSVPwAAAs4 197.39.81.103 52726 127.0.0.1 7081 [20/Aug/2026:13:07:01.548166 --0400] aoc0NdiCLKODsy7UmwSV4AAAAsA 197.39.81.103 54740 127.0.0.1 7081 ... show less	DDoS Attack Brute-Force
🇺🇸 TPI-Abuse	2026-08-20 16:38:37 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 197.39.81.103 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 197.39.81.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 20 12:38:29.227121 2026] [security2:error] [pid 5420:tid 5420] [client 197.39.81.103:61884] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 197.39.81.103 (+1 hits since last alert)\|aandbnaturalfoods.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "aandbnaturalfoods.com"] [uri "/xmlrpc.php"] [unique_id "aocthQCHEaYuiYuMbn9UfgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-20 15:02:59 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 197.39.81.103 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 197.39.81.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 20 11:02:53.009143 2026] [security2:error] [pid 32266:tid 32266] [client 197.39.81.103:59222] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 197.39.81.103 (+1 hits since last alert)\|tomartsmedia.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "tomartsmedia.org"] [uri "/xmlrpc.php"] [unique_id "aocXHdfuvZuOP1fxw0Z3ewAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-20 14:30:05 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 197.39.81.103 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 197.39.81.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 20 10:29:58.361101 2026] [security2:error] [pid 25099:tid 25099] [client 197.39.81.103:65419] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 197.39.81.103 (+1 hits since last alert)\|partnershipsbydesign.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "partnershipsbydesign.net"] [uri "/xmlrpc.php"] [unique_id "aocPZrZvUPdiKEM2KguCWgAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-20 13:22:30 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 197.39.81.103 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 197.39.81.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 20 09:22:22.680192 2026] [security2:error] [pid 31168:tid 31168] [client 197.39.81.103:54966] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 197.39.81.103 (+1 hits since last alert)\|pcga.golf\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "pcga.golf"] [uri "/xmlrpc.php"] [unique_id "aob_jgfG7wcZAnpBb1rS-wAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 ConsulHosting	2026-08-19 22:06:31 (1 day ago)	Excessive failed CAPTCHA attempts (CAPTCHA DoS)	Web App Attack
🇳🇱 e.fierstra	2026-08-19 20:56:00 (2 days ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇳 197.5.145.102

🇲🇽 189.225.100.160

🇨🇱 181.160.122.102

🇸🇬 35.187.231.181

🇮🇩 210.79.142.230

🇪🇷 196.200.96.18

🇫🇷 185.177.72.68

🇦🇴 154.116.254.157

🇺🇸 147.185.132.40

🇺🇸 66.132.172.123

🇸🇪 171.25.193.77

🇩🇪 167.94.145.31

🇺🇸 143.42.164.97

🇺🇸 71.36.112.76

🇱🇹 62.60.130.201

🇱🇹 213.176.26.133

🇧🇪 198.235.24.171

🇫🇷 85.217.140.35

🇧🇬 78.128.113.74

🇺🇸 50.6.228.111