JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 219.92.243.39

219.92.243.39 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 73%: ?

73%

ISP	TM TECHNOLOGY SERVICES SDN. BHD.
Usage Type	Mobile ISP
ASN	AS4788
Hostname(s)	kbu-243-39.tm.net.my
Domain Name	tm.com.my
Country	🇲🇾 Malaysia
City	Kuala Lumpur, Kuala Lumpur

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 219.92.243.39

Whois 219.92.243.39

IP Abuse Reports for 219.92.243.39:

This IP address has been reported a total of 29 times from 13 distinct sources. 219.92.243.39 was first reported on June 26th 2026, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 SpaceHost-Server	2026-07-03 22:30:26 (11 hours ago)		Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 09:49:06 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 219.92.243.39 (kbu-243-39.tm.net.my): 1 in the ... show more (mod_security) mod_security (id:240335) triggered by 219.92.243.39 (kbu-243-39.tm.net.my): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 05:49:01.793240 2026] [security2:error] [pid 23361:tid 23361] [client 219.92.243.39:63190] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 219.92.243.39 (+1 hits since last alert)\|kidswow.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "kidswow.com"] [uri "/xmlrpc.php"] [unique_id "akeFjZPH0Oluez-ncS63FQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 SpaceHost-Server	2026-07-02 22:30:25 (1 day ago)		Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 12:53:27 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 219.92.243.39 (kbu-243-39.tm.net.my): 1 in the ... show more (mod_security) mod_security (id:240335) triggered by 219.92.243.39 (kbu-243-39.tm.net.my): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 08:53:19.597438 2026] [security2:error] [pid 19915:tid 19915] [client 219.92.243.39:64695] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 219.92.243.39 (+1 hits since last alert)\|huntingforebears.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "huntingforebears.com"] [uri "/xmlrpc.php"] [unique_id "akZfP4R38oCnS0VDGb4xQwAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-07-02 10:20:25 (1 day ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇸🇪 konseptit	2026-07-02 10:20:18 (1 day ago)	(wordpress) Failed wordpress login from 219.92.243.39 (MY/Malaysia/kbu-243-39.tm.net.my)	Brute-Force
🇺🇸 TPI-Abuse	2026-07-01 17:30:23 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 219.92.243.39 (kbu-243-39.tm.net.my): 1 in the ... show more (mod_security) mod_security (id:240335) triggered by 219.92.243.39 (kbu-243-39.tm.net.my): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 13:30:19.507691 2026] [security2:error] [pid 8791:tid 8791] [client 219.92.243.39:55682] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 219.92.243.39 (+1 hits since last alert)\|oowoah.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "oowoah.com"] [uri "/xmlrpc.php"] [unique_id "akVOq9xbXo3wHLARoFHrwQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 SpaceHost-Server	2026-07-01 14:39:54 (2 days ago)	219.92.243.39 - - [01/Jul/2026:16:39:33 +0200] "POST /xmlrpc.php HTTP/1.1" 200 430 "-" "Jetpack/12.1 ... show more 219.92.243.39 - - [01/Jul/2026:16:39:33 +0200] "POST /xmlrpc.php HTTP/1.1" 200 430 "-" "Jetpack/12.1; WordPress/6.3; http://site81261998.com" 219.92.243.39 - - [01/Jul/2026:16:39:44 +0200] "POST /xmlrpc.php HTTP/1.1" 200 430 "-" "WordPress.com; https://wordpress.com" 219.92.243.39 - - [01/Jul/2026:16:39:54 +0200] "POST /xmlrpc.php HTTP/1.1" 200 430 "-" "Jetpack/12.0; WordPress/6.4; http://site47046274.com" show less	Hacking Web App Attack
🇫🇷 SpaceHost-Server	2026-07-01 14:24:26 (2 days ago)	219.92.243.39 - - [01/Jul/2026:16:24:06 +0200] "POST /xmlrpc.php HTTP/1.1" 200 430 "-" "Jetpack/12.5 ... show more 219.92.243.39 - - [01/Jul/2026:16:24:06 +0200] "POST /xmlrpc.php HTTP/1.1" 200 430 "-" "Jetpack/12.5; WordPress/6.1; http://site39346914.com" 219.92.243.39 - - [01/Jul/2026:16:24:15 +0200] "POST /xmlrpc.php HTTP/1.1" 200 430 "-" "WordPress.com; https://wordpress.com" 219.92.243.39 - - [01/Jul/2026:16:24:25 +0200] "POST /xmlrpc.php HTTP/1.1" 200 430 "-" "Jetpack by WordPress.com" show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-01 09:24:16 (3 days ago)	(mod_security) mod_security (id:240335) triggered by 219.92.243.39 (kbu-243-39.tm.net.my): 1 in the ... show more (mod_security) mod_security (id:240335) triggered by 219.92.243.39 (kbu-243-39.tm.net.my): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 05:24:10.163404 2026] [security2:error] [pid 7830:tid 7830] [client 219.92.243.39:64591] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 219.92.243.39 (+1 hits since last alert)\|mariettacaseyclub.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "mariettacaseyclub.org"] [uri "/xmlrpc.php"] [unique_id "akTcutFkSUriRByDDXtUGQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 screwlooseit.com.au	2026-07-01 02:43:31 (3 days ago)	Blocked by CSF 13 firewall - Rule: XMLRPC MY/Malaysia/kbu-243-39.tm.net.my	Web App Attack
🇺🇸 integrantservices.com	2026-06-29 14:20:51 (4 days ago)	(wordpress) Failed wordpress login from 219.92.243.39 (MY/Malaysia/kbu-243-39.tm.net.my)	Brute-Force
Anonymous	2026-06-28 15:32:01 (5 days ago)	Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-06-28 15:01:56 (5 days ago)	(mod_security) mod_security (id:240335) triggered by 219.92.243.39 (kbu-243-39.tm.net.my): 1 in the ... show more (mod_security) mod_security (id:240335) triggered by 219.92.243.39 (kbu-243-39.tm.net.my): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 11:01:51.120701 2026] [security2:error] [pid 5401:tid 5410] [client 219.92.243.39:58317] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 219.92.243.39 (+1 hits since last alert)\|abusaimeh.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "abusaimeh.com"] [uri "/xmlrpc.php"] [unique_id "akE3X5m8nG0FkiRkYYyheAAAAEU"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 screwlooseit.com.au	2026-06-28 13:48:36 (5 days ago)	Blocked by CSF 13 firewall - Rule: XMLRPC MY/Malaysia/kbu-243-39.tm.net.my	Web App Attack

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 64.62.156.25

🇸🇬 47.84.131.50

🇨🇳 43.247.250.115

🇧🇷 191.253.105.84

🇺🇸 185.8.107.57

🇺🇸 135.237.125.146

🇩🇪 130.12.180.134

🇯🇴 92.253.31.54

🇺🇸 66.132.172.251

🇺🇸 23.23.99.55

🇯🇵 8.216.8.127

🇹🇷 176.239.6.221

🇫🇷 173.249.34.168

🇩🇪 167.94.146.33

🇵🇱 95.214.53.157

🇮🇹 34.17.22.241

🇳🇱 213.124.148.22

🇲🇽 187.140.176.44

🇮🇳 49.15.118.71

🇨🇳 36.134.127.159