JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 160.30.109.128

160.30.109.128 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 70%: ?

70%

ISP	LAHORE DIGITAL NETWORK (PVT.) LIMITED
Usage Type	Fixed Line ISP
ASN	AS24499
Domain Name	ldn.com.pk
Country	🇵🇰 Pakistan
City	Lahore, Punjab

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 160.30.109.128

Whois 160.30.109.128

IP Abuse Reports for 160.30.109.128:

This IP address has been reported a total of 26 times from 20 distinct sources. 160.30.109.128 was first reported on September 11th 2025, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-29 20:53:16 (3 days ago)	(mod_security) mod_security (id:240335) triggered by 160.30.109.128 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 160.30.109.128 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 16:53:11.861071 2026] [security2:error] [pid 27159:tid 27159] [client 160.30.109.128:8097] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 160.30.109.128 (+1 hits since last alert)\|phalanxemail.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "phalanxemail.net"] [uri "/xmlrpc.php"] [unique_id "akLbN6yczqJ3uBWohtU7LwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-06-29 16:48:44 (3 days ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇩🇪 dbmwebdesign	2026-06-29 15:50:41 (3 days ago)	WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail	Brute-Force Web App Attack
🇳🇱 Site.eu	2026-06-29 02:18:47 (4 days ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
Anonymous	2026-06-26 18:20:13 (6 days ago)	Attac	Brute-Force
🇺🇸 TPI-Abuse	2026-06-26 17:09:57 (6 days ago)	(mod_security) mod_security (id:240335) triggered by 160.30.109.128 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 160.30.109.128 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 13:09:51.646122 2026] [security2:error] [pid 21958:tid 21958] [client 160.30.109.128:49511] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 160.30.109.128 (+1 hits since last alert)\|glassclublake.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "glassclublake.com"] [uri "/xmlrpc.php"] [unique_id "aj6yX2sxYNDN7zNf5nrVTAAAACE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-26 16:08:13 (6 days ago)	(mod_security) mod_security (id:240335) triggered by 160.30.109.128 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 160.30.109.128 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 12:08:04.639902 2026] [security2:error] [pid 21981:tid 21981] [client 160.30.109.128:53339] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 160.30.109.128 (+1 hits since last alert)\|hiidied.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "hiidied.com"] [uri "/xmlrpc.php"] [unique_id "aj6j5MAavQbMncYdvw8KYgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 cmbplf	2026-06-25 23:39:07 (1 week ago)	2.615 requests with url.path */xmlrpc.php	Brute-Force Bad Web Bot
🇳🇱 Site.eu	2026-06-25 18:37:14 (1 week ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇫🇷 Kenshin869	2026-06-25 00:42:06 (1 week ago)	Wordpress unauthorized access attempt	Brute-Force
🇺🇸 Jason Howell	2026-06-24 20:41:12 (1 week ago)	160.30.109.128 - - [24/Jun/2026:15:32:39 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4747 "-" "Jetpack by ... show more 160.30.109.128 - - [24/Jun/2026:15:32:39 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4747 "-" "Jetpack by WordPress.com" 160.30.109.128 - - [24/Jun/2026:15:34:47 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4747 "-" "WordPress.com; https://wordpress.com" 160.30.109.128 - - [24/Jun/2026:15:36:56 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4748 "-" "Jetpack/13.0; WordPress/6.3; http://site94199369.com" 160.30.109.128 - - [24/Jun/2026:15:39:04 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4747 "-" "Jetpack by WordPress.com" 160.30.109.128 - - [24/Jun/2026:15:41:12 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4747 "-" "WordPress.com; https://wordpress.com" ... show less	Web App Attack
🇺🇸 WeekendWeb	2026-06-24 16:32:54 (1 week ago)	Wordpress Vunerability attack	Web App Attack
🇱🇻 garmtech.com	2026-06-24 16:04:50 (1 week ago)	IM360 WAF: Rate limit exceeded for XMLRPC DoS	Web App Attack
Anonymous	2026-06-23 22:10:09 (1 week ago)	Attac	Brute-Force
🇫🇷 masterguru	2026-06-23 20:36:46 (1 week ago)	xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (88010-201)	Hacking

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇪 2a05:d018:10df:d400:87e2:a49d:c926:8589

🇺🇸 2604:a880:2:d1:0:1:6ab2:8001

🇨🇳 218.202.91.147

🇦🇺 203.185.198.246

🇩🇪 193.124.20.252

🇬🇧 154.16.44.17

🇮🇳 152.32.156.117

🇰🇷 115.160.96.109

🇺🇸 103.143.11.150

🇵🇱 88.156.85.30

🇳🇱 45.14.134.197

🇻🇳 14.225.5.67

🇮🇪 3.252.85.142

🇮🇪 2a05:d018:10df:d402:9147:12a5:dac8:7c38

🇮🇪 2a05:d018:10df:d402:616e:998:79a0:ac81

🇰🇷 211.253.31.30

🇧🇷 209.14.89.107

🇫🇮 178.20.210.152

🇺🇸 103.234.62.22

🇫🇷 92.205.213.181