๐บ๐ธ
cwytech
2026-06-28 00:39:11
(1 day ago)
Fleet-wide ban from the Ghostfleet ๐ป. Triggered by scenario: cwy/wp-us-login-only-high.
Bad Web Bot
Web App Attack
๐ฉ๐ช
Hazzard
2026-06-28 00:34:27
(1 day ago)
(wordpress) Failed wordpress login from 103.142.80.122 (BD/Bangladesh/Sylhet Division/Sylhet/-/[reda ...
show more
(wordpress) Failed wordpress login from 103.142.80.122 (BD/Bangladesh/Sylhet Division/Sylhet/-/[redacted]): (CF_ENABLE)
show less
Brute-Force
๐บ๐ธ
TPI-Abuse
2026-06-26 23:50:00
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 103.142.80.122 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 103.142.80.122 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 19:49:57.443789 2026] [security2:error] [pid 23427:tid 23427] [client 103.142.80.122:55989] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||assheton.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "assheton.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aj8QJcPM-4iKPLYUu5GpVgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐น
VHosting
2026-03-01 13:50:46
(3 months ago)
Detected mail brute force attack from 4 different servers
Brute-Force
๐บ๐ธ
TPI-Abuse
2026-01-21 13:20:21
(5 months ago)
(mod_security) mod_security (id:210730) triggered by 103.142.80.122 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 103.142.80.122 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 21 08:20:15.072095 2026] [security2:error] [pid 8386:tid 8430] [client 103.142.80.122:59516] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||mail.iaccesos.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.iaccesos.com"] [uri "/igedac.com"] [unique_id "aXDSj0oayFV83sNFsgAt9AAAAI4"], referer: http://mail.iaccesos.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ฆ
polycoda
2025-12-10 14:10:02
(6 months ago)
๐ฅถ Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27
DDoS Attack
๐ซ๐ท
bigorre.org
2025-11-30 02:19:29
(6 months ago)
Unidentified crawling: not a self-announced bot in user-agent
Bad Web Bot
๐บ๐ธ
xmission.com
2025-11-28 04:20:32
(7 months ago)
Blocked by UFW (TCP on 54508)
Source port: 59106
TTL: 104
Packet length: 52
TOS: 0x08
This report ( ...
show more
Blocked by UFW (TCP on 54508)
Source port: 59106
TTL: 104
Packet length: 52
TOS: 0x08
This report (for 103.142.80.122) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Anonymous
2025-11-25 10:39:18
(7 months ago)
scanning http requests from known botnet
Web App Attack
Anonymous
2025-11-21 09:59:45
(7 months ago)
scanning http requests from known botnet
Web App Attack
๐จ๐ณ
ThreatBook.io
2025-10-11 23:54:12
(8 months ago)
ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/103.142.80.122
2 ...
show more
ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/103.142.80.122
2025-10-11 14:49:15 /cc.gif
show less
Web App Attack
๐ธ๐ฌ
mypatricks
2025-10-07 14:02:09
(8 months ago)
103.142.80.122 | Port: 53764 | DNS: 103.142.80.122 2025-10-07T22:02:08+08:00 Asia/Dhaka | Bad Behavi ...
show more
103.142.80.122 | Port: 53764 | DNS: 103.142.80.122 2025-10-07T22:02:08+08:00 Asia/Dhaka | Bad Behavior Activity | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0 HTTP/1.1 443 GET | URL: /customer-self-service/navigating-cakedeliver-pages-using-a-keyboard-shortcuts/?7c193917577a5180177bba3317dd8a5f3=zh-cn&code=zh-cn | Ref: - | Country: BD/Bangladesh/+06:00 IP City: Sylhet 98adef3cb449bc21-DAC/Dhaka, Bangladesh 1 hits/0 secs Robots 3
show less
Web Spam
Blog Spam
Brute-Force
Exploited Host
Web App Attack
๐ฆ๐บ
MAGIC
2025-10-03 02:17:43
(8 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
๐ฉ๐ช
pressler.pro
2025-09-23 00:52:41
(9 months ago)
Fail2ban - DDoS attack on woocommerce shop
...
DDoS Attack
๐จ๐ญ
ALPHANET
2025-09-21 09:02:45
(9 months ago)
Botnet or web spider not respecting robots.txt
DDoS Attack
Exploited Host