JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 182.184.163.93

182.184.163.93 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 76%: ?

76%

ISP	USF DSLAM North
Usage Type	Fixed Line ISP
ASN	AS17557
Domain Name	ptcl.net.pk
Country	🇵🇰 Pakistan
City	Abbottabad, Khyber Pakhtunkhwa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 182.184.163.93

Whois 182.184.163.93

IP Abuse Reports for 182.184.163.93:

This IP address has been reported a total of 20 times from 13 distinct sources. 182.184.163.93 was first reported on July 20th 2026, and the most recent report was 17 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-23 15:52:40 (17 hours ago)	(mod_security) mod_security (id:240335) triggered by 182.184.163.93 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 182.184.163.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 11:52:36.673809 2026] [security2:error] [pid 2798240:tid 2798240] [client 182.184.163.93:60396] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 182.184.163.93 (+1 hits since last alert)\|capriexpress.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "capriexpress.com"] [uri "/xmlrpc.php"] [unique_id "amI4xNsCI13_r1zcH_ekCAAAACE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-23 15:22:05 (17 hours ago)	(mod_security) mod_security (id:240335) triggered by 182.184.163.93 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 182.184.163.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 11:22:01.642274 2026] [security2:error] [pid 2426240:tid 2426240] [client 182.184.163.93:59380] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 182.184.163.93 (+1 hits since last alert)\|drjasonkolber.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "drjasonkolber.com"] [uri "/xmlrpc.php"] [unique_id "amIxmUymYnkz8ogWMkhcFgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-23 13:49:29 (19 hours ago)	(mod_security) mod_security (id:240335) triggered by 182.184.163.93 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 182.184.163.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 09:49:23.942686 2026] [security2:error] [pid 423325:tid 423325] [client 182.184.163.93:61696] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 182.184.163.93 (+1 hits since last alert)\|indoorsfinishing.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "indoorsfinishing.com"] [uri "/xmlrpc.php"] [unique_id "amIb47pVH26ffM32nhJwygAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-07-23 09:44:28 (23 hours ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇩🇪 konseptit	2026-07-23 08:00:48 (1 day ago)	(wordpress) Failed wordpress login from 182.184.163.93 (PK/Pakistan/-)	Brute-Force
🇺🇸 TPI-Abuse	2026-07-23 07:00:03 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 182.184.163.93 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 182.184.163.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 02:59:57.244907 2026] [security2:error] [pid 22812:tid 22812] [client 182.184.163.93:57509] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 182.184.163.93 (+1 hits since last alert)\|souldata.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "souldata.com"] [uri "/xmlrpc.php"] [unique_id "amG77QjrQlkt43bQn78hMQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-22 16:25:21 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 182.184.163.93 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 182.184.163.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 12:25:13.342074 2026] [security2:error] [pid 23891:tid 23891] [client 182.184.163.93:50545] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 182.184.163.93 (+1 hits since last alert)\|savingspools.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "savingspools.com"] [uri "/xmlrpc.php"] [unique_id "amDu6ReZq5S8SuScA0v35wAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-22 15:12:21 (1 day ago)	[da.kdns.gr] httpd-xmlrpc-post: sites=www.pikoulis.gr; logs=/var/log/httpd/domains/pikoulis.gr.log; ... show more [da.kdns.gr] httpd-xmlrpc-post: sites=www.pikoulis.gr; logs=/var/log/httpd/domains/pikoulis.gr.log; samples=/xmlrpc.php show less	Brute-Force Web App Attack
🇺🇸 bigwavedave	2026-07-22 12:38:12 (1 day ago)	Wordpress Attack	Web App Attack
🇩🇪 Marc	2026-07-22 10:34:56 (1 day ago)	182.184.163.93 - - [22/Jul/2026:12:34:34 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4666 "-" "Jetpack by ... show more 182.184.163.93 - - [22/Jul/2026:12:34:34 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4666 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.3)" 182.184.163.93 - - [22/Jul/2026:12:34:44 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4666 "-" "Jetpack by WordPress.com" 182.184.163.93 - - [22/Jul/2026:12:34:55 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4667 "-" "Jetpack by WordPress.com" show less	Brute-Force Web App Attack
🇦🇺 screwlooseit.com.au	2026-07-22 10:04:30 (1 day ago)	Blocked by CSF 13 firewall - Rule: XMLRPC PK/Pakistan/-	Web App Attack
🇹🇷 ycoskun41	2026-07-22 10:03:33 (1 day ago)	fail2ban: plesk-modsecurity jail on genckocaeli.com	Web App Attack
🇺🇸 TPI-Abuse	2026-07-22 08:05:08 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 182.184.163.93 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 182.184.163.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 04:05:04.979376 2026] [security2:error] [pid 518967:tid 518967] [client 182.184.163.93:56359] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 182.184.163.93 (+1 hits since last alert)\|myomni.us\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "myomni.us"] [uri "/xmlrpc.php"] [unique_id "amB5sErvg6A4gCmBtaDSpwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 rubixstudios	2026-07-22 07:49:03 (2 days ago)	Excessive HTTP requests consistent with automated attack behaviour detected by Imunify360	DDoS Attack Brute-Force Web App Attack
Anonymous	2026-07-22 07:32:17 (2 days ago)	Fail2Ban WordPress login brute-force detected	Brute-Force Web App Attack

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇱 176.53.159.198

🇺🇸 162.216.150.218

🇺🇸 147.185.132.235

🇺🇸 91.230.168.157

🇸🇬 47.128.20.5

🇩🇪 213.209.159.26

🇳🇱 195.178.110.217

🇳🇱 193.110.157.47

🇳🇱 188.166.29.85

🇨🇳 171.37.192.199

🇺🇸 162.216.149.123

🇮🇩 157.15.40.16

🇫🇮 147.185.133.90

🇺🇿 144.124.199.171

🇮🇳 122.173.26.149

🇺🇸 91.230.168.136

🇫🇷 91.196.152.120

🇭🇺 84.225.51.158

🇵🇱 74.248.121.109

🇺🇸 45.74.252.182