JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 180.72.198.243

180.72.198.243 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 35%: ?

35%

ISP	UNIFI-HOME
Usage Type	Fixed Line ISP
ASN	AS4788
Domain Name	unifi5g.my
Country	🇲🇾 Malaysia
City	Kampung Baru Balakong, Selangor

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 180.72.198.243

Whois 180.72.198.243

IP Abuse Reports for 180.72.198.243:

This IP address has been reported a total of 12 times from 6 distinct sources. 180.72.198.243 was first reported on July 2nd 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-03 23:16:06 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 180.72.198.243 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 180.72.198.243 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 19:15:57.476513 2026] [security2:error] [pid 8139:tid 8139] [client 180.72.198.243:51416] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 180.72.198.243 (+1 hits since last alert)\|lysedzija.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "lysedzija.com"] [uri "/xmlrpc.php"] [unique_id "akhCrQUw0h3oxjvzy98yxgAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-07-03 20:57:47 (1 week ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 08:00:54 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 180.72.198.243 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 180.72.198.243 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 04:00:40.651757 2026] [security2:error] [pid 4308:tid 4308] [client 180.72.198.243:60365] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 180.72.198.243 (+1 hits since last alert)\|clayrivers.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "clayrivers.com"] [uri "/xmlrpc.php"] [unique_id "akdsKIsbhrotQawEJfq5VQAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 06:11:21 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 180.72.198.243 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 180.72.198.243 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 02:11:07.039939 2026] [security2:error] [pid 8306:tid 8306] [client 180.72.198.243:50254] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 180.72.198.243 (+1 hits since last alert)\|technesa.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "technesa.com"] [uri "/xmlrpc.php"] [unique_id "akdSe0GOoXWyIRVWVPQ0ZgAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 middelkoopcc	2026-07-03 04:20:05 (1 week ago)	2026-07-03 06:12:23 WordPress login error from 180.72.198.243: incorrect_password && 2026-07-03 06:1 ... show more 2026-07-03 06:12:23 WordPress login error from 180.72.198.243: incorrect_password && 2026-07-03 06:12:33 WordPress login error from 180.72.198.243: incorrect_password && 2026-07-03 06:13:05 WordPress login error from 180.72.198.243: incorrect_password && 22 more within 20 minutes show less	Brute-Force
🇫🇷 masterguru	2026-07-03 02:22:11 (1 week ago)	xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (88010-201)	Hacking
🇫🇷 bazter.pro	2026-07-02 21:44:58 (1 week ago)	Fail2Ban: plesk-bot-aggressive - 15 failures	Port Scan Bad Web Bot Web App Attack
🇨🇦 Dunham Support	2026-07-02 17:58:44 (1 week ago)	(wordpress) Failed wordpress login from 180.72.198.243 (MY/Malaysia/-)	Brute-Force
🇺🇸 TPI-Abuse	2026-07-02 05:06:52 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 180.72.198.243 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 180.72.198.243 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 01:06:39.366268 2026] [security2:error] [pid 4101:tid 4101] [client 180.72.198.243:60413] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 180.72.198.243 (+1 hits since last alert)\|edgecomix.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "edgecomix.com"] [uri "/xmlrpc.php"] [unique_id "akXx3zbFPbRss1CJ-VvznwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 04:34:13 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 180.72.198.243 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 180.72.198.243 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 00:34:01.568347 2026] [security2:error] [pid 32466:tid 32466] [client 180.72.198.243:62220] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 180.72.198.243 (+1 hits since last alert)\|opticasprisma.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "opticasprisma.com"] [uri "/xmlrpc.php"] [unique_id "akXqOafVB7nKthZ6mAY-7QAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 masterguru	2026-07-02 04:01:51 (1 week ago)	(xmlrpc) Failed xmlrpc access from 180.72.198.243 (MY/Malaysia/-): 5 in the last 3600 secs (0-122)	Hacking
🇫🇷 dynamix	2026-07-02 02:59:37 (1 week ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇷 94.154.43.36

🇧🇩 202.125.68.251

🇵🇾 201.217.12.57

🇹🇼 198.235.24.124

🇬🇧 193.163.125.83

🇮🇳 183.82.111.224

🇺🇸 172.70.115.239

🇺🇸 147.185.132.222

🇬🇧 143.110.163.85

🇨🇳 112.94.252.245

🇫🇷 103.110.163.204

🇨🇳 101.76.248.214

🇫🇷 91.196.152.198

🇩🇪 69.5.169.208

🇮🇩 45.126.43.90

🇧🇪 35.195.161.222

🇸🇬 8.219.72.129

🇬🇧 2.57.17.86

🇨🇳 220.202.112.8

🇺🇸 195.184.76.222