JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.19.180.6

103.19.180.6 was found in our database!

This IP was reported 103 times. Confidence of Abuse is 88%: ?

88%

ISP	Universitas Ahmad Dahlan
Usage Type	University/College/School
ASN	AS132642
Hostname(s)	in-gw-dc-uad-103-19-180-6.uad.ac.id
Domain Name	uad.ac.id
Country	🇮🇩 Indonesia
City	Yogyakarta, Yogyakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.19.180.6

Whois 103.19.180.6

IP Abuse Reports for 103.19.180.6:

This IP address has been reported a total of 103 times from 37 distinct sources. 103.19.180.6 was first reported on May 12th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-24 20:56:39 (1 week ago)	Attac	Brute-Force
🇺🇸 WeekendWeb	2026-06-24 14:15:48 (1 week ago)	Wordpress Vunerability attack	Web App Attack
🇩🇪 ger-stg-sifi1	2026-06-24 13:13:45 (1 week ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇪🇸 masterguru	2026-06-24 12:16:15 (1 week ago)	(xmlrpc) Failed xmlrpc access from 103.19.180.6 (ID/Indonesia/in-gw-dc-uad-103-19-180-6.uad.ac.id): ... show more (xmlrpc) Failed xmlrpc access from 103.19.180.6 (ID/Indonesia/in-gw-dc-uad-103-19-180-6.uad.ac.id): 5 in the last 3600 secs (0-122) show less	Hacking
🇺🇸 TPI-Abuse	2026-06-24 06:35:44 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 103.19.180.6 (in-gw-dc-uad-103-19-180-6.uad.ac. ... show more (mod_security) mod_security (id:240335) triggered by 103.19.180.6 (in-gw-dc-uad-103-19-180-6.uad.ac.id): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 02:35:36.883901 2026] [security2:error] [pid 16110:tid 16110] [client 103.19.180.6:52018] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.19.180.6 (+1 hits since last alert)\|soonerstone.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "soonerstone.com"] [uri "/xmlrpc.php"] [unique_id "ajt6uF7U01mvDV5wzkc9cwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-06-24 04:29:59 (1 week ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-06-24 03:29:15 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 103.19.180.6 (in-gw-dc-uad-103-19-180-6.uad.ac. ... show more (mod_security) mod_security (id:240335) triggered by 103.19.180.6 (in-gw-dc-uad-103-19-180-6.uad.ac.id): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 23:29:09.034087 2026] [security2:error] [pid 15308:tid 15341] [client 103.19.180.6:63138] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.19.180.6 (+1 hits since last alert)\|whatismetamodern.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "whatismetamodern.com"] [uri "/xmlrpc.php"] [unique_id "ajtPBSuTSQwM9VXsnrsVkgAAAYE"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 alferez	2026-06-24 01:56:20 (1 week ago)	xmlrpc.php attack DOS	Hacking Exploited Host Web App Attack
Anonymous	2026-06-24 01:55:26 (1 week ago)	103.19.180.6 - - [24/Jun/2026:03:55:05 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "Jetpack by Wo ... show more 103.19.180.6 - - [24/Jun/2026:03:55:05 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.3)" 103.19.180.6 - - [24/Jun/2026:03:55:06 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.3)" 103.19.180.6 - - [24/Jun/2026:03:55:14 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "WordPress.com; https://wordpress.com" 103.19.180.6 - - [24/Jun/2026:03:55:15 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "WordPress.com; https://wordpress.com" 103.19.180.6 - - [24/Jun/2026:03:55:25 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.4)" ... show less	Brute-Force Web App Attack
🇩🇪 rh24	2026-06-24 00:54:41 (1 week ago)	(wordpress) Failed wordpress login from 103.19.180.6 (ID/Indonesia/in-gw-dc-uad-103-19-180-6.uad.ac. ... show more (wordpress) Failed wordpress login from 103.19.180.6 (ID/Indonesia/in-gw-dc-uad-103-19-180-6.uad.ac.id): (CF_ENABLE) show less	Brute-Force
🇺🇸 TPI-Abuse	2026-06-24 00:25:12 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 103.19.180.6 (in-gw-dc-uad-103-19-180-6.uad.ac. ... show more (mod_security) mod_security (id:240335) triggered by 103.19.180.6 (in-gw-dc-uad-103-19-180-6.uad.ac.id): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 20:25:07.893841 2026] [security2:error] [pid 27824:tid 27824] [client 103.19.180.6:62464] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.19.180.6 (+1 hits since last alert)\|casadelsolmexico.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "casadelsolmexico.net"] [uri "/xmlrpc.php"] [unique_id "ajsj47il5n8-jp_Dh7DUcwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-23 20:40:59 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 103.19.180.6 (in-gw-dc-uad-103-19-180-6.uad.ac. ... show more (mod_security) mod_security (id:240335) triggered by 103.19.180.6 (in-gw-dc-uad-103-19-180-6.uad.ac.id): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 16:40:55.199837 2026] [security2:error] [pid 8119:tid 8119] [client 103.19.180.6:58836] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.19.180.6 (+1 hits since last alert)\|ardath.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "ardath.net"] [uri "/xmlrpc.php"] [unique_id "ajrvVzTKJFt16pn6P34-ewAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇲🇾 Rizzy	2026-06-23 17:32:56 (1 week ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇩🇪 Marc	2026-06-23 14:28:55 (1 week ago)	103.19.180.6 - - [23/Jun/2026:16:28:35 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3295 "-" "Jetpack/12.0 ... show more 103.19.180.6 - - [23/Jun/2026:16:28:35 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3295 "-" "Jetpack/12.0; WordPress/6.2; http://site13370929.com" 103.19.180.6 - - [23/Jun/2026:16:28:43 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3295 "-" "WordPress.com; https://wordpress.com" 103.19.180.6 - - [23/Jun/2026:16:28:54 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3295 "-" "Jetpack by WordPress.com" show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-23 04:34:31 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 103.19.180.6 (in-gw-dc-uad-103-19-180-6.uad.ac. ... show more (mod_security) mod_security (id:240335) triggered by 103.19.180.6 (in-gw-dc-uad-103-19-180-6.uad.ac.id): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 00:34:24.034497 2026] [security2:error] [pid 1847:tid 1847] [client 103.19.180.6:59178] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.19.180.6 (+1 hits since last alert)\|salernospizza.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "salernospizza.com"] [uri "/xmlrpc.php"] [unique_id "ajoM0PWhS0-HbUkaE3zmmgAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 103 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.88.26.214

🇻🇪 186.14.58.119

🇸🇬 145.223.130.173

🇬🇧 35.203.210.131

🇫🇷 2a02:c207:2326:2040::1

🇱🇻 217.60.3.128

🇧🇷 187.9.247.58

🇺🇸 167.99.231.231

🇺🇸 154.13.196.143

🇺🇸 146.190.41.64

🇩🇪 141.95.54.59

🇧🇷 138.204.105.17

🇨🇳 120.48.199.28

🇺🇸 107.173.173.4

🇳🇱 45.198.224.134

🇹🇭 45.122.49.49

🇭🇰 43.132.141.136

🇫🇷 2001:41d0:404:200::215e

🇵🇱 193.189.73.215

🇺🇸 193.36.224.123