JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 180.194.198.221

180.194.198.221 was found in our database!

This IP was reported 6 times. Confidence of Abuse is 29%: ?

29%

ISP	HOME_DSL
Usage Type	Fixed Line ISP
ASN	AS9299
Domain Name	pldthome.com
Country	🇵🇭 Philippines
City	Alamada, Soccsksargen

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 180.194.198.221

Whois 180.194.198.221

IP Abuse Reports for 180.194.198.221:

This IP address has been reported a total of 6 times from 5 distinct sources. 180.194.198.221 was first reported on January 16th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 dynamix	2026-07-08 09:42:12 (2 days ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-08 05:53:32 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 180.194.198.221 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 180.194.198.221 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 01:53:19.116224 2026] [security2:error] [pid 11642:tid 11642] [client 180.194.198.221:45736] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 180.194.198.221 (+1 hits since last alert)\|montidaunitour.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "montidaunitour.com"] [uri "/xmlrpc.php"] [unique_id "ak3lz9ar_cvzhQ5547a5QAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 cwytech	2026-07-08 03:47:24 (2 days ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/wp-us-login-only-high.	Bad Web Bot Web App Attack
🇲🇾 Rizzy	2026-07-07 23:42:23 (2 days ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-07 14:21:58 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 180.194.198.221 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 180.194.198.221 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 10:21:48.633184 2026] [security2:error] [pid 10374:tid 10374] [client 180.194.198.221:42455] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 180.194.198.221 (+1 hits since last alert)\|mindroothealth.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "mindroothealth.com"] [uri "/xmlrpc.php"] [unique_id "ak0LfLX_1rQuAIqPCVDhcQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 hermawan	2026-01-16 06:53:11 (5 months ago)	[Fri Jan 16 13:53:10.495956 2026] [security2:error] [pid 332798:tid 140201264314048] [client 180.194 ... show more [Fri Jan 16 13:53:10.495956 2026] [security2:error] [pid 332798:tid 140201264314048] [client 180.194.198.221:14987] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.22.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "189"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-malang.info request_line = GET /index.php/profil/arsip-artikel?catid=477&id=572%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-9-15-juni-2015&start=50 HTTP/2.0 Request URI RAW = /index.php/profil/arsip-artikel?catid=477&id=572%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-9-15-juni-2015&start=50 Request Bas..."] [hostname "staklim-malang.info"] [uri "/index.php/profil/arsip-artikel"] [unique_id "aWngVi8Hmk2 ... show less	Hacking Web App Attack

Showing 1 to 6 of 6 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇷 185.201.212.242

🇮🇳 103.146.222.47

🇮🇳 103.127.170.134

🇻🇳 103.90.235.196

🇺🇸 3.31.253.94

🇷🇴 2.57.121.25

🇮🇳 2405:201:d002:191c:404e:a526:515c:f27d

🇳🇱 195.178.110.228

🇺🇿 144.124.199.193

🇻🇳 123.21.88.120

🇨🇳 116.147.65.45

🇬🇷 109.242.190.48

🇳🇱 91.92.40.49

🇫🇷 54.37.252.192

🇨🇴 38.191.219.162

🇺🇸 31.59.40.232

🇨🇳 1.86.233.5

🇮🇳 2401:4900:8f61:129f:a122:fc8c:726c:2093

🇧🇩 202.181.19.233

🇨🇳 180.101.42.222