JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 180.75.253.150

180.75.253.150 was found in our database!

This IP was reported 8 times. Confidence of Abuse is 8%: ?

ISP	UNIFI-HOME
Usage Type	Fixed Line ISP
ASN	AS4788
Domain Name	unifi5g.my
Country	🇲🇾 Malaysia
City	Ipoh, Perak

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 180.75.253.150

Whois 180.75.253.150

IP Abuse Reports for 180.75.253.150:

This IP address has been reported a total of 8 times from 8 distinct sources. 180.75.253.150 was first reported on June 1st 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Zkillu	2026-08-19 22:29:29 (1 month ago)	UDP flood (DDoS) vs AS215599: 1080 pkts / 1.54 MB to UDP 80/8443 across 460 dst IP(s), 2026-08-19 21 ... show more UDP flood (DDoS) vs AS215599: 1080 pkts / 1.54 MB to UDP 80/8443 across 460 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇫🇷 dmallet	2026-08-19 22:29:29 (1 month ago)	UDP flood (DDoS) vs AS215599: 1080 pkts / 1.54 MB to UDP 80/8443 across 460 dst IP(s), 2026-08-19 21 ... show more UDP flood (DDoS) vs AS215599: 1080 pkts / 1.54 MB to UDP 80/8443 across 460 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
Anonymous	2026-05-15 07:06:13 (4 months ago)	Blocked: Reason='Vulnerability probing — PHP scan detected (17/60 min)'; Requests=17	Port Scan
🇨🇦 Paulo Henrique dos Santos Nichio	2026-05-12 17:22:11 (4 months ago)	(ls_brute) LiteSpeed Brute Force Attack 180.75.253.150 (MY/Malaysia/-): 3 in the last 600 secs; Port ... show more (ls_brute) LiteSpeed Brute Force Attack 180.75.253.150 (MY/Malaysia/-): 3 in the last 600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 2026-05-12 14:21:40.903962 [WARN] [2134872] [T0] [180.75.253.150:25337-30#APVH_www.saudeauditivacampinas.com.br:443] Brute force detected for IP [180.75.253.150], throttle. 2026-05-12 14:21:51.926422 [WARN] [2134872] [T0] [180.75.253.150:25337-31#APVH_www.saudeauditivacampinas.com.br:443] Brute force detected for IP [180.75.253.150], throttle. 2026-05-12 14:22:01.915759 [WARN] [2134872] [T0] [180.75.253.150:25337-32#APVH_www.saudeauditivacampinas.com.br:443] Brute force detected for IP [180.75.253.150], throttle. show less	Port Scan
🇺🇸 TPI-Abuse	2026-05-12 12:50:09 (4 months ago)	(mod_security) mod_security (id:240335) triggered by 180.75.253.150 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 180.75.253.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 12 08:49:59.962928 2026] [security2:error] [pid 5837:tid 5837] [client 180.75.253.150:47870] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 180.75.253.150 (+1 hits since last alert)\|transcapitalsolutions.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "transcapitalsolutions.com"] [uri "/xmlrpc.php"] [unique_id "agMh9zfCpRJVk3Vm_l49WQAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 integrantservices.com	2026-05-09 23:32:09 (4 months ago)	(wordpress) Failed wordpress login from 180.75.253.150 (MY/Malaysia/-)	Brute-Force
🇨🇭 backslash	2026-02-21 09:21:00 (6 months ago)	block ruleset Badbot using very old user-agents 5CF3CDB778C7D82564405B86B9242E612F378C68	Bad Web Bot
🇮🇹 VHosting	2025-06-01 07:55:07 (1 year ago)	Detected attack by Imunify360	Brute-Force Web App Attack

Showing 1 to 8 of 8 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 218.72.151.225

🇺🇸 192.210.174.11

🇧🇷 187.110.238.50

🇺🇸 147.185.132.178

🇺🇸 146.88.240.108

🇺🇸 144.225.6.182

🇺🇸 137.184.183.105

🇰🇷 110.35.12.8

🇫🇷 51.38.224.114

🇺🇸 34.11.212.144

🇺🇸 24.199.118.168

🇮🇳 223.181.78.160

🇵🇱 193.34.212.54

🇯🇴 188.247.90.83

🇳🇱 185.218.86.26

🇧🇷 170.238.115.52

🇺🇸 162.216.149.128

🇰🇪 102.210.125.66

🇨🇦 85.217.149.73

🇺🇸 85.208.96.209