🇺🇸
TPI-Abuse
2026-06-25 13:14:42
(2 weeks ago)
(mod_security) mod_security (id:240335) triggered by 103.175.180.106 (dynamic.nextgenbroadband.in): ...
show more
(mod_security) mod_security (id:240335) triggered by 103.175.180.106 (dynamic.nextgenbroadband.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 09:14:39.004973 2026] [security2:error] [pid 3792:tid 3792] [client 103.175.180.106:64769] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 103.175.180.106 (+1 hits since last alert)|lumentravel.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "lumentravel.com"] [uri "/xmlrpc.php"] [unique_id "aj0pv0dbnAtRpKzaE11XxgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-25 11:57:05
(2 weeks ago)
Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1
Hacking
Web App Attack
🇪🇸
masterguru
2026-06-25 11:56:58
(2 weeks ago)
(xmlrpc) Failed xmlrpc access from 103.175.180.106 (IN/India/dynamic.nextgenbroadband.in): 5 in the ...
show more
(xmlrpc) Failed xmlrpc access from 103.175.180.106 (IN/India/dynamic.nextgenbroadband.in): 5 in the last 3600 secs (0-122)
show less
Hacking
🇺🇸
integrantservices.com
2026-06-25 08:49:02
(2 weeks ago)
(wordpress) Failed wordpress login from 103.175.180.106 (IN/India/dynamic.nextgenbroadband.in)
Brute-Force
🇺🇸
TPI-Abuse
2026-06-25 08:24:35
(2 weeks ago)
(mod_security) mod_security (id:240335) triggered by 103.175.180.106 (dynamic.nextgenbroadband.in): ...
show more
(mod_security) mod_security (id:240335) triggered by 103.175.180.106 (dynamic.nextgenbroadband.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 04:24:30.354648 2026] [security2:error] [pid 855:tid 855] [client 103.175.180.106:63592] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 103.175.180.106 (+1 hits since last alert)|dymesich.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "dymesich.com"] [uri "/xmlrpc.php"] [unique_id "ajzlvmzioaBV9XKpWaJgwAAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-25 07:23:25
(2 weeks ago)
(mod_security) mod_security (id:240335) triggered by 103.175.180.106 (dynamic.nextgenbroadband.in): ...
show more
(mod_security) mod_security (id:240335) triggered by 103.175.180.106 (dynamic.nextgenbroadband.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 03:23:20.043201 2026] [security2:error] [pid 31265:tid 31290] [client 103.175.180.106:25601] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 103.175.180.106 (+1 hits since last alert)|sallykimmel.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "sallykimmel.com"] [uri "/xmlrpc.php"] [unique_id "ajzXaAHoHcDGrQDKH4EwFwAAARc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-25 05:46:01
(2 weeks ago)
(mod_security) mod_security (id:240335) triggered by 103.175.180.106 (dynamic.nextgenbroadband.in): ...
show more
(mod_security) mod_security (id:240335) triggered by 103.175.180.106 (dynamic.nextgenbroadband.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 01:45:53.412858 2026] [security2:error] [pid 19522:tid 19522] [client 103.175.180.106:5325] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 103.175.180.106 (+1 hits since last alert)|crep-psych.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "crep-psych.org"] [uri "/xmlrpc.php"] [unique_id "ajzAkTOyIC7rrsS3NHtcjAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
bigwavedave
2026-06-25 05:04:19
(2 weeks ago)
Wordpress Attack
Web App Attack
🇫🇷
dynamix
2026-06-25 03:31:02
(2 weeks ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
🇺🇸
MPL
2025-06-05 08:21:15
(1 year ago)
tcp/8080
Port Scan
🇺🇸
MPL
2025-04-26 02:04:12
(1 year ago)
tcp/52869 (6 or more attempts)
Port Scan
🇫🇷
Soncraft
2025-04-25 21:00:02
(1 year ago)
Blocked by UFW on Jellyfin [8443/tcp]
Source port: 46408
TTL: 51
Packet length: 60
TOS: 0x08
This r ...
show more
Blocked by UFW on Jellyfin [8443/tcp]
Source port: 46408
TTL: 51
Packet length: 60
TOS: 0x08
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇦🇹
urnilxfgbez
2025-04-24 22:45:00
(1 year ago)
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
2025-04-24 13:01:32
(1 year ago)
Unauthorized connection attempt on Port 23
Port Scan
Hacking
Exploited Host
2025-04-24 12:03:07
(1 year ago)
Unauthorized connection attempt
Port Scan
Hacking
Exploited Host