JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.194.93.30

103.194.93.30 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 40%: ?

40%

ISP	Kurta Gali (Private) Limited
Usage Type	Fixed Line ISP
ASN	AS141342
Domain Name	kurtagali.com
Country	🇵🇰 Pakistan
City	Karachi, Sindh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.194.93.30

Whois 103.194.93.30

IP Abuse Reports for 103.194.93.30:

This IP address has been reported a total of 13 times from 9 distinct sources. 103.194.93.30 was first reported on January 11th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-07 14:13:01 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 103.194.93.30 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 103.194.93.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 10:12:56.961160 2026] [security2:error] [pid 3122:tid 3122] [client 103.194.93.30:46703] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.194.93.30 (+1 hits since last alert)\|nuewines.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "nuewines.com"] [uri "/xmlrpc.php"] [unique_id "ak0JaKxNvgfDGR44KSNIWwAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-06-29 14:01:55 (1 week ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-06-24 05:52:10 (2 weeks ago)	Attac	Brute-Force
🇦🇺 screwlooseit.com.au	2026-06-23 12:23:32 (2 weeks ago)	Blocked by CSF 13 firewall - Rule: XMLRPC PK/Pakistan/-	Web App Attack
🇺🇸 TPI-Abuse	2026-06-23 08:40:16 (2 weeks ago)	(mod_security) mod_security (id:240335) triggered by 103.194.93.30 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 103.194.93.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 04:40:08.404109 2026] [security2:error] [pid 17151:tid 17289] [client 103.194.93.30:31637] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.194.93.30 (+1 hits since last alert)\|bortec-corp.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "bortec-corp.com"] [uri "/xmlrpc.php"] [unique_id "ajpGaCQEmtwUszB7RQM3WAAAAIA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-23 04:17:17 (2 weeks ago)	(mod_security) mod_security (id:240335) triggered by 103.194.93.30 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 103.194.93.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 00:17:09.747563 2026] [security2:error] [pid 21818:tid 21818] [client 103.194.93.30:31573] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.194.93.30 (+1 hits since last alert)\|tracytappan.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "tracytappan.net"] [uri "/xmlrpc.php"] [unique_id "ajoIxeS9yLebNGHhRb-d6wAAACs"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-06-23 04:13:58 (2 weeks ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
Anonymous	2026-06-13 15:26:05 (3 weeks ago)	Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1	Hacking Web App Attack
🇦🇺 screwlooseit.com.au	2026-06-13 14:45:01 (3 weeks ago)	Blocked by CSF 13 firewall - Rule: XMLRPC PK/Pakistan/-	Web App Attack
🇺🇸 TPI-Abuse	2026-06-13 13:12:25 (3 weeks ago)	(mod_security) mod_security (id:240335) triggered by 103.194.93.30 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 103.194.93.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 09:12:17.895053 2026] [security2:error] [pid 18384:tid 18453] [client 103.194.93.30:9889] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.194.93.30 (+1 hits since last alert)\|maryschalkdesign.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "maryschalkdesign.com"] [uri "/xmlrpc.php"] [unique_id "ai1XMVwjcR90wjNB6tN9kwAAAMs"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-13 13:06:28 (3 weeks ago)	(wordpress) Failed wordpress login from 103.194.93.30 (PK/Pakistan/-)	Brute-Force
🇫🇷 SpaceHost-Server	2026-06-13 13:05:19 (3 weeks ago)	103.194.93.30 - - [13/Jun/2026:15:04:56 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6476 "-" "Jetpack by ... show more 103.194.93.30 - - [13/Jun/2026:15:04:56 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6476 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.1)" 103.194.93.30 - - [13/Jun/2026:15:05:05 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6476 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.1)" 103.194.93.30 - - [13/Jun/2026:15:05:15 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6476 "-" "Jetpack/12.5; WordPress/6.4; http://site83216487.com" show less	Hacking Web App Attack
Anonymous	2026-01-11 11:00:59 (5 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 180.254.111.127

🇺🇸 165.154.163.112

🇸🇪 155.4.244.107

🇬🇵 90.15.196.16

🇸🇪 81.236.211.54

🇺🇸 64.62.197.92

🇺🇸 64.62.197.67

🇮🇳 45.40.57.172

🇺🇸 195.184.76.96

🇳🇱 185.223.235.37

🇮🇳 182.79.218.164

🇧🇩 182.48.69.63

🇫🇮 109.172.54.96

🇹🇷 89.252.146.72

🇫🇷 5.189.131.104

🇭🇰 199.45.154.186

🇬🇧 193.32.209.246

🇲🇽 187.190.39.92

🇺🇸 154.83.197.200

🇺🇸 154.83.197.9