AbuseIPDB » 160.30.113.142

160.30.113.142 was found in our database!

This IP was reported 39 times. Confidence of Abuse is 52%: ?

52%

ISP	MAY CHU MANG TECHNOLOGY JOINT STOCK COMPANY
Usage Type	Data Center/Web Hosting/Transit
ASN	AS45538
Domain Name	maychumang.vn
Country	Viet Nam
City	Ho Chi Minh City, Ho Chi Minh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 160.30.113.142

Whois 160.30.113.142

IP Abuse Reports for 160.30.113.142:

This IP address has been reported a total of 39 times from 16 distinct sources. 160.30.113.142 was first reported on December 5th 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Anonymous	2024-12-27 21:17:35 (2 weeks ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-12-26 19:45:49 (2 weeks ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
wnbhosting.dk	2024-12-26 11:49:07 (2 weeks ago)	WP xmlrpc [2024-12-26T12:49:07+01:00]	Hacking Web App Attack
selahattinalan	2024-12-26 08:47:26 (2 weeks ago)	160.30.113.142 - - [26/Dec/2024:11:47:25 +0300] "POST /xmlrpc.php HTTP/1.1" 200 3984 "-" "Mozilla/5. ... show more160.30.113.142 - - [26/Dec/2024:11:47:25 +0300] "POST /xmlrpc.php HTTP/1.1" 200 3984 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.186 Safari/537.36" show less	Brute-Force
TPI-Abuse	2024-12-25 01:43:34 (2 weeks ago)	(mod_security) mod_security (id:225170) triggered by 160.30.113.142 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:225170) triggered by 160.30.113.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 24 20:43:23.914925 2024] [security2:error] [pid 13267:tid 13267] [client 160.30.113.142:48660] [client 160.30.113.142] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|exhaustthelimits.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "exhaustthelimits.org"] [uri "/wp-json/wp/v2/users"] [unique_id "Z2tjO6l7eBhi6cbnKqLKegAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-12-24 13:33:36 (2 weeks ago)	(mod_security) mod_security (id:225170) triggered by 160.30.113.142 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:225170) triggered by 160.30.113.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 24 08:33:28.013364 2024] [security2:error] [pid 20648:tid 20648] [client 160.30.113.142:59676] [client 160.30.113.142] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.alsetsystems.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.alsetsystems.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z2q4KLO8pu0-y0D9vtRyMQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-12-22 21:21:53 (3 weeks ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-12-21 07:24:09 (3 weeks ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
tecnicorioja	2024-12-20 23:00:21 (3 weeks ago)	POST /xmlrpc.php [20/Dec/2024:04:41:26	Brute-Force Web App Attack
polycoda	2024-12-20 12:40:52 (3 weeks ago)	🔑 Wordpress login brute force attempt	Hacking Web App Attack
nationaleventpros.com	2024-12-20 02:24:56 (3 weeks ago)	WordPress login attempt	Brute-Force
wnbhosting.dk	2024-12-19 10:31:18 (3 weeks ago)	WP xmlrpc [2024-12-19T11:31:18+01:00]	Hacking Web App Attack
Anonymous	2024-12-19 10:27:13 (3 weeks ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
MAGIC	2024-12-19 01:00:16 (3 weeks ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
nationaleventpros.com	2024-12-18 07:03:36 (3 weeks ago)	WordPress login attempt	Brute-Force