JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 168.194.160.72

168.194.160.72 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 71%: ?

71%

ISP	Ligga Telecomunicações S.A.
Usage Type	Fixed Line ISP
ASN	AS14868
Hostname(s)	72.160.194.168.rfc6598.dynamic.copelfibra.com.br
Domain Name	liggavc.com.br
Country	🇧🇷 Brazil
City	Curitiba, Parana

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 168.194.160.72

Whois 168.194.160.72

IP Abuse Reports for 168.194.160.72:

This IP address has been reported a total of 26 times from 13 distinct sources. 168.194.160.72 was first reported on June 27th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-01 01:12:41 (3 days ago)	(mod_security) mod_security (id:240335) triggered by 168.194.160.72 (72.160.194.168.rfc6598.dynamic. ... show more (mod_security) mod_security (id:240335) triggered by 168.194.160.72 (72.160.194.168.rfc6598.dynamic.copelfibra.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 21:12:34.182908 2026] [security2:error] [pid 24229:tid 24326] [client 168.194.160.72:9384] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 168.194.160.72 (+1 hits since last alert)\|tradersofficepark.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "tradersofficepark.com"] [uri "/xmlrpc.php"] [unique_id "akRpgpqHIIY_0M71O3ysawAAAE0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-01 00:30:14 (3 days ago)	(mod_security) mod_security (id:225170) triggered by 168.194.160.72 (72.160.194.168.rfc6598.dynamic. ... show more (mod_security) mod_security (id:225170) triggered by 168.194.160.72 (72.160.194.168.rfc6598.dynamic.copelfibra.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 20:30:07.867161 2026] [security2:error] [pid 31111:tid 31111] [client 168.194.160.72:12080] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|takeapawsboston.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "takeapawsboston.com"] [uri "/wp-json/wp/v2/users"] [unique_id "akRfj395Lr_UQ86He9ysuwAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-30 12:45:05 (3 days ago)	(mod_security) mod_security (id:240335) triggered by 168.194.160.72 (72.160.194.168.rfc6598.dynamic. ... show more (mod_security) mod_security (id:240335) triggered by 168.194.160.72 (72.160.194.168.rfc6598.dynamic.copelfibra.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 08:44:56.411572 2026] [security2:error] [pid 28891:tid 28964] [client 168.194.160.72:11145] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 168.194.160.72 (+1 hits since last alert)\|hooknpatch.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "hooknpatch.com"] [uri "/xmlrpc.php"] [unique_id "akO6SB2xRSI_MGduUoEMeQAAAQc"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 NewWavesApp	2026-06-30 10:10:35 (3 days ago)	(wordpress) Failed wordpress login from 168.194.160.72 (BR/Brazil/72.160.194.168.rfc6598.dynamic.cop ... show more (wordpress) Failed wordpress login from 168.194.160.72 (BR/Brazil/72.160.194.168.rfc6598.dynamic.copelfibra.com.br): (CF_ENABLE) show less	Brute-Force
🇲🇾 Rizzy	2026-06-30 07:36:30 (4 days ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-30 05:34:56 (4 days ago)	(mod_security) mod_security (id:240335) triggered by 168.194.160.72 (72.160.194.168.rfc6598.dynamic. ... show more (mod_security) mod_security (id:240335) triggered by 168.194.160.72 (72.160.194.168.rfc6598.dynamic.copelfibra.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 01:34:50.798337 2026] [security2:error] [pid 16663:tid 16663] [client 168.194.160.72:12218] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 168.194.160.72 (+1 hits since last alert)\|prostar.industries\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "prostar.industries"] [uri "/xmlrpc.php"] [unique_id "akNVehdIUzq7DY5YbxZ4xgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Kenshin869	2026-06-30 00:55:44 (4 days ago)	Wordpress unauthorized access attempt	Brute-Force
🇫🇷 dynamix	2026-06-29 23:55:32 (4 days ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
Anonymous	2026-06-29 17:26:11 (4 days ago)	(wordpress) Failed wordpress login from 168.194.160.72 (BR/Brazil/72.160.194.168.rfc6598.dynamic.cop ... show more (wordpress) Failed wordpress login from 168.194.160.72 (BR/Brazil/72.160.194.168.rfc6598.dynamic.copelfibra.com.br) show less	Brute-Force
🇺🇸 TPI-Abuse	2026-06-29 13:54:04 (4 days ago)	(mod_security) mod_security (id:240335) triggered by 168.194.160.72 (72.160.194.168.rfc6598.dynamic. ... show more (mod_security) mod_security (id:240335) triggered by 168.194.160.72 (72.160.194.168.rfc6598.dynamic.copelfibra.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 09:54:00.023026 2026] [security2:error] [pid 13024:tid 13024] [client 168.194.160.72:12095] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 168.194.160.72 (+1 hits since last alert)\|mainefirst.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "mainefirst.org"] [uri "/xmlrpc.php"] [unique_id "akJ4-JGrnwjtJpznH9pQswAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-29 10:19:18 (4 days ago)	(mod_security) mod_security (id:240335) triggered by 168.194.160.72 (72.160.194.168.rfc6598.dynamic. ... show more (mod_security) mod_security (id:240335) triggered by 168.194.160.72 (72.160.194.168.rfc6598.dynamic.copelfibra.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 06:19:14.343314 2026] [security2:error] [pid 30628:tid 30628] [client 168.194.160.72:11458] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 168.194.160.72 (+1 hits since last alert)\|fusteriafontane.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "fusteriafontane.com"] [uri "/xmlrpc.php"] [unique_id "akJGooLZPqCzxMscWN4ZwwAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-29 06:45:17 (5 days ago)	(mod_security) mod_security (id:240335) triggered by 168.194.160.72 (72.160.194.168.rfc6598.dynamic. ... show more (mod_security) mod_security (id:240335) triggered by 168.194.160.72 (72.160.194.168.rfc6598.dynamic.copelfibra.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 02:45:06.671286 2026] [security2:error] [pid 12787:tid 12787] [client 168.194.160.72:11082] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 168.194.160.72 (+1 hits since last alert)\|agworldmissions.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "agworldmissions.org"] [uri "/xmlrpc.php"] [unique_id "akIUcq8-6xbmz17bFLjzWQAAADo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-29 05:41:31 (5 days ago)	(mod_security) mod_security (id:240335) triggered by 168.194.160.72 (72.160.194.168.rfc6598.dynamic. ... show more (mod_security) mod_security (id:240335) triggered by 168.194.160.72 (72.160.194.168.rfc6598.dynamic.copelfibra.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 01:41:23.374977 2026] [security2:error] [pid 13664:tid 13664] [client 168.194.160.72:11816] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 168.194.160.72 (+1 hits since last alert)\|kavahawaii.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "kavahawaii.com"] [uri "/xmlrpc.php"] [unique_id "akIFg7juQ5qjYr_0P1WwMgAAAD0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-28 17:01:58 (5 days ago)	(mod_security) mod_security (id:240335) triggered by 168.194.160.72 (72.160.194.168.rfc6598.dynamic. ... show more (mod_security) mod_security (id:240335) triggered by 168.194.160.72 (72.160.194.168.rfc6598.dynamic.copelfibra.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 13:01:52.314014 2026] [security2:error] [pid 13215:tid 13235] [client 168.194.160.72:15255] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 168.194.160.72 (+1 hits since last alert)\|nabsci.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "nabsci.com"] [uri "/xmlrpc.php"] [unique_id "akFTgE715eF8WysdBAwuywAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-28 12:25:58 (5 days ago)	(mod_security) mod_security (id:240335) triggered by 168.194.160.72 (72.160.194.168.rfc6598.dynamic. ... show more (mod_security) mod_security (id:240335) triggered by 168.194.160.72 (72.160.194.168.rfc6598.dynamic.copelfibra.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 08:25:52.402215 2026] [security2:error] [pid 28247:tid 28247] [client 168.194.160.72:11297] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 168.194.160.72 (+1 hits since last alert)\|barecreationsaz.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "barecreationsaz.com"] [uri "/xmlrpc.php"] [unique_id "akES0PVPp-coHl9Y_3d4hQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇴 191.97.12.90

🇺🇸 162.216.149.138

🇬🇧 154.16.44.218

🇬🇭 102.223.92.101

🇨🇳 223.85.102.135

🇸🇬 178.128.212.46

🇬🇧 159.65.84.96

🇺🇸 137.184.85.85

🇨🇳 124.160.173.22

🇺🇸 64.94.153.244

🇺🇸 50.110.74.254

🇪🇸 46.24.47.94

🇺🇸 43.130.90.166

🇺🇸 13.57.29.225

🇺🇸 216.25.89.82

🇩🇪 213.209.159.108

🇲🇽 189.190.244.176

🇭🇰 172.253.5.16

🇻🇳 171.231.193.246

🇫🇮 147.185.133.138