JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 175.101.99.42

175.101.99.42 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 39%: ?

39%

ISP	Excell Media Pvt Ltd
Usage Type	Fixed Line ISP
ASN	AS17754
Domain Name	excellmedia.net
Country	🇮🇳 India
City	Palakollu, Andhra Pradesh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 175.101.99.42

Whois 175.101.99.42

IP Abuse Reports for 175.101.99.42:

This IP address has been reported a total of 15 times from 11 distinct sources. 175.101.99.42 was first reported on August 20th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 Apache	2026-07-13 12:36:47 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 175.101.99.42 (IN/India/-): 5 in the last 300 s ... show more (mod_security) mod_security (id:240335) triggered by 175.101.99.42 (IN/India/-): 5 in the last 300 secs show less	Brute-Force Web App Attack
🇩🇪 LRob	2026-07-13 05:56:07 (1 day ago)	CrowdSec: crowdsecurity/http-bf-wordpress_bf_xmlrpc \| req: ["/xmlrpc.php"] \| UA: ["Jetpack by WordPr ... show more CrowdSec: crowdsecurity/http-bf-wordpress_bf_xmlrpc \| req: ["/xmlrpc.php"] \| UA: ["Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.1)","Jetpack/12.1; WordPress/6.4; http://site81884659.com","Jetpack/12.0; WordPress/6.1; http:// show less	Brute-Force Web App Attack
Anonymous	2026-07-13 04:42:15 (1 day ago)	(wordpress) Failed wordpress login from 175.101.99.42 (IN/India/Andhra Pradesh/Vijayawada/-/[redacte ... show more (wordpress) Failed wordpress login from 175.101.99.42 (IN/India/Andhra Pradesh/Vijayawada/-/[redacted]) show less	Brute-Force
Anonymous	2026-06-19 15:07:52 (3 weeks ago)	[redacted] 175.101.99.42 - - [19/Jun/2026:17:07:06 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "W ... show more [redacted] 175.101.99.42 - - [19/Jun/2026:17:07:06 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 175.101.99.42 - - [19/Jun/2026:17:07:17 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.2)" [redacted] 175.101.99.42 - - [19/Jun/2026:17:07:27 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.1)" [redacted] 175.101.99.42 - - [19/Jun/2026:17:07:38 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.4)" [redacted] 175.101.99.42 - - [19/Jun/2026:17:07:48 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" ... show less	Hacking Web App Attack
🇪🇸 masterguru	2026-06-19 08:27:26 (3 weeks ago)	(xmlrpc) Failed xmlrpc access from 175.101.99.42 (IN/India/-): 5 in the last 3600 secs (0-122)	Hacking
🇺🇸 TPI-Abuse	2026-06-19 07:12:17 (3 weeks ago)	(mod_security) mod_security (id:240335) triggered by 175.101.99.42 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 175.101.99.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 03:12:10.041987 2026] [security2:error] [pid 15265:tid 15265] [client 175.101.99.42:51082] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 175.101.99.42 (+1 hits since last alert)\|theroyalhouseofelohim.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "theroyalhouseofelohim.org"] [uri "/xmlrpc.php"] [unique_id "ajTrynclMpLwG4bpZkXunAAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-19 06:42:39 (3 weeks ago)	(mod_security) mod_security (id:240335) triggered by 175.101.99.42 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 175.101.99.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 02:42:33.028306 2026] [security2:error] [pid 20215:tid 20215] [client 175.101.99.42:23593] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 175.101.99.42 (+1 hits since last alert)\|egelfitness.nl\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "egelfitness.nl"] [uri "/xmlrpc.php"] [unique_id "ajTk2eXHZ4P7j-_PcjwreAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-19 04:05:10 (3 weeks ago)	(mod_security) mod_security (id:240335) triggered by 175.101.99.42 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 175.101.99.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 00:05:06.905973 2026] [security2:error] [pid 12362:tid 12426] [client 175.101.99.42:55565] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 175.101.99.42 (+1 hits since last alert)\|dbestcarting.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "dbestcarting.com"] [uri "/xmlrpc.php"] [unique_id "ajS_8ojX89FIpFH4DYYP-AAAAFc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-05-28 11:57:13 (1 month ago)	Web vulnerability probing: /xmlrpc.php	Web App Attack
🇺🇸 TPI-Abuse	2026-05-28 07:45:53 (1 month ago)	(mod_security) mod_security (id:240335) triggered by 175.101.99.42 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 175.101.99.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 28 03:45:47.090062 2026] [security2:error] [pid 22381:tid 22381] [client 175.101.99.42:58490] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 175.101.99.42 (+1 hits since last alert)\|midcityrotary.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "midcityrotary.org"] [uri "/xmlrpc.php"] [unique_id "ahfyqwxDeg7UhjMz8nzy_wAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-05-28 06:13:14 (1 month ago)	Attac	Brute-Force
🇺🇸 TPI-Abuse	2026-05-28 05:45:05 (1 month ago)	(mod_security) mod_security (id:240335) triggered by 175.101.99.42 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 175.101.99.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 28 01:45:00.382224 2026] [security2:error] [pid 11398:tid 11398] [client 175.101.99.42:23496] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 175.101.99.42 (+1 hits since last alert)\|xyncom.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "xyncom.com"] [uri "/xmlrpc.php"] [unique_id "ahfWXPUMkRpJSXRWfbjawgAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇪 Johan Finn	2025-12-02 05:22:43 (7 months ago)	malicious activity	Web App Attack
🇳🇱 exxos	2025-08-20 12:03:01 (10 months ago)	http-no-verb	Hacking
🇺🇸 Zandro	2025-08-20 07:37:03 (10 months ago)	alicloud harvester	Bad Web Bot

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 185.242.226.97

🇨🇳 42.123.126.29

🇧🇪 34.62.157.133

🇩🇪 2a09:bac1:1e40:12d8::1d6:181

🇰🇷 211.240.117.71

🇩🇪 169.58.8.121

🇸🇪 155.4.244.107

🇯🇵 153.126.163.225

🇮🇳 144.16.30.111

🇺🇸 104.152.52.224

🇮🇷 80.191.173.58

🇺🇸 66.132.172.232

🇳🇱 45.198.224.5

🇮🇩 36.75.57.193

🇭🇰 199.45.154.187

🇸🇬 185.200.116.76

🇹🇭 122.154.235.21

🇨🇳 115.191.23.138

🇫🇷 109.234.166.151

🇺🇸 104.152.52.228