JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 191.180.8.43

191.180.8.43 was found in our database!

This IP was reported 70 times. Confidence of Abuse is 0%: ?

ISP	Claro NXT Telecomunicacoes Ltda
Usage Type	Fixed Line ISP
ASN	AS28573
Hostname(s)	bfb4082b.virtua.com.br
Domain Name	claro.com.br
Country	🇧🇷 Brazil
City	Sao Paulo, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 191.180.8.43

Whois 191.180.8.43

IP Abuse Reports for 191.180.8.43:

This IP address has been reported a total of 70 times from 41 distinct sources. 191.180.8.43 was first reported on April 3rd 2026, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-15 01:43:16 (2 months ago)	[redacted] 191.180.8.43 - - [15/Jul/2026:03:42:33 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Je ... show more [redacted] 191.180.8.43 - - [15/Jul/2026:03:42:33 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.3)" [redacted] 191.180.8.43 - - [15/Jul/2026:03:42:43 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.3)" [redacted] 191.180.8.43 - - [15/Jul/2026:03:42:54 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 191.180.8.43 - - [15/Jul/2026:03:43:04 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.3)" [redacted] 191.180.8.43 - - [15/Jul/2026:03:43:15 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" ... show less	Hacking Web App Attack
🇩🇪 Marc	2026-07-15 01:42:47 (2 months ago)	191.180.8.43 - - [15/Jul/2026:03:42:26 +0200] "POST /xmlrpc.php HTTP/1.1" 403 4841 "-" "Jetpack/12.0 ... show more 191.180.8.43 - - [15/Jul/2026:03:42:26 +0200] "POST /xmlrpc.php HTTP/1.1" 403 4841 "-" "Jetpack/12.0; WordPress/6.3; http://site25349172.com" 191.180.8.43 - - [15/Jul/2026:03:42:35 +0200] "POST /xmlrpc.php HTTP/1.1" 403 4842 "-" "Jetpack by WordPress.com" 191.180.8.43 - - [15/Jul/2026:03:42:46 +0200] "POST /xmlrpc.php HTTP/1.1" 403 4840 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.1)" show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-15 01:16:08 (2 months ago)	(mod_security) mod_security (id:240335) triggered by 191.180.8.43 (bfb4082b.virtua.com.br): 1 in the ... show more (mod_security) mod_security (id:240335) triggered by 191.180.8.43 (bfb4082b.virtua.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 21:16:00.875221 2026] [security2:error] [pid 14183:tid 14183] [client 191.180.8.43:50652] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 191.180.8.43 (+1 hits since last alert)\|londongroup.info\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "londongroup.info"] [uri "/xmlrpc.php"] [unique_id "albfUPM2NfYqDQcxyHIAbQAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 rh24	2026-07-13 04:16:03 (2 months ago)	(wordpress) Failed wordpress login from 191.180.8.43 (BR/Brazil/bfb4082b.virtua.com.br): (CF_ENABLE ... show more (wordpress) Failed wordpress login from 191.180.8.43 (BR/Brazil/bfb4082b.virtua.com.br): (CF_ENABLE) show less	Brute-Force
Anonymous	2026-07-13 01:00:40 (2 months ago)	[redacted] 191.180.8.43 - - [13/Jul/2026:02:59:46 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Je ... show more [redacted] 191.180.8.43 - - [13/Jul/2026:02:59:46 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.3)" [redacted] 191.180.8.43 - - [13/Jul/2026:02:59:57 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "WordPress.com; https://wordpress.com" [redacted] 191.180.8.43 - - [13/Jul/2026:03:00:04 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Jetpack/12.1; WordPress/6.4; http://site69793257.com" [redacted] 191.180.8.43 - - [13/Jul/2026:03:00:07 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Jetpack/12.5; WordPress/6.4; http://site18411849.com" [redacted] 191.180.8.43 - - [13/Jul/2026:03:00:15 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.3)" [redacted] 191.180.8.43 - - [13/Jul/2026:03:00:18 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "WordPress.com; https://wordpress.com" [redacted] 191.180.8.43 - - [13/J ... show less	Hacking Web App Attack
Anonymous	2026-07-12 22:26:57 (2 months ago)	[redacted] 191.180.8.43 - - [13/Jul/2026:00:26:15 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Je ... show more [redacted] 191.180.8.43 - - [13/Jul/2026:00:26:15 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.3)" [redacted] 191.180.8.43 - - [13/Jul/2026:00:26:24 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 191.180.8.43 - - [13/Jul/2026:00:26:35 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/13.0; WordPress/6.2; http://site92860988.com" [redacted] 191.180.8.43 - - [13/Jul/2026:00:26:46 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.5; WordPress/6.3; http://site70620930.com" [redacted] 191.180.8.43 - - [13/Jul/2026:00:26:56 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.3)" ... show less	Hacking Web App Attack
🇦🇺 screwlooseit.com.au	2026-07-10 00:23:05 (2 months ago)	Blocked by CSF 13 firewall - Rule: XMLRPC BR/Brazil/bfb4082b.virtua.com.br	Web App Attack
🇫🇷 dynamix	2026-07-07 05:36:30 (2 months ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
Anonymous	2026-07-04 03:41:45 (2 months ago)	191.180.8.43 - - [04/Jul/2026:05:41:32 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 191.180.8.43 - - [ ... show more 191.180.8.43 - - [04/Jul/2026:05:41:32 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 191.180.8.43 - - [04/Jul/2026:05:41:43 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 ... show less	Brute-Force Bad Web Bot
🇨🇦 polycoda	2026-07-04 03:14:23 (2 months ago)	AutoBlock: 🔐 WordPress Login Brute Force (20X or 30X) (Decay-Based)	Brute-Force Web App Attack
🇳🇱 Site.eu	2026-07-03 19:25:37 (2 months ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇱🇻 garmtech.com	2026-07-03 03:18:38 (2 months ago)	IM360 WAF: Rate limit exceeded for XMLRPC DoS	Web App Attack
🇫🇷 tecnicorioja	2026-07-02 22:01:23 (2 months ago)	POST /xmlrpc.php [02/Jul/2026:03:18:29	Web App Attack Brute-Force
🇺🇸 WeekendWeb	2026-06-30 22:29:09 (2 months ago)	Wordpress Vunerability attack	Web App Attack
🇺🇸 TPI-Abuse	2026-06-30 20:59:03 (2 months ago)	(mod_security) mod_security (id:240335) triggered by 191.180.8.43 (bfb4082b.virtua.com.br): 1 in the ... show more (mod_security) mod_security (id:240335) triggered by 191.180.8.43 (bfb4082b.virtua.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 16:58:56.338705 2026] [security2:error] [pid 27625:tid 27633] [client 191.180.8.43:57375] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 191.180.8.43 (+1 hits since last alert)\|illianapartyrentals.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "illianapartyrentals.com"] [uri "/xmlrpc.php"] [unique_id "akQuEBT1Hew1PixbSfwJGQAAAcI"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 70 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.249

🇭🇰 165.154.70.139

🇺🇸 154.222.107.60

🇫🇮 147.185.133.221

🇨🇳 124.88.174.143

🇰🇷 115.91.48.140

🇺🇸 104.207.42.107

🇺🇸 104.207.38.25

🇺🇸 104.207.36.117

🇿🇦 102.208.217.175

🇺🇸 66.132.224.18

🇰🇷 59.15.58.148

🇳🇱 45.148.10.151

🇰🇷 14.46.87.209

🇰🇷 211.62.96.42

🇺🇸 205.210.31.37

🇦🇪 193.123.77.3

🇷🇺 155.212.17.174

🇺🇸 147.185.132.42

🇺🇸 147.185.132.19