180.72.221.120
ip:180.72.221.120
The entity associated with IP address 180.72.221.120 is involved in activities related to security guard services and fire protection consultancy. It has been flagged for attempting XML-RPC exploits on WordPress platforms, indicating potential security threats. The entity's operations are not clearly linked to a specific company or individual, and no licensing information is available. This IP address is primarily noted for its involvement in security-related incidents.
Analysis Summary
The digital entity associated with IP address 180.72.221.120 holds a trust score of 0 out of 100, which signifies a severe lack of trustworthiness and raises significant concerns about its operations. This low score is primarily due to the entity's involvement in an XML-RPC exploit targeting WordPress platforms, a major red flag indicating malicious activity. The IP address is further blacklisted on renowned RBLs like zen.spamhaus.org and pbl.spamhaus.org, reinforcing its negative reputation. While it does possess valid geolocation data linked to Malaysia, the absence of a reverse DNS (PTR) record and the lack of identifiable company or individual connections exacerbate suspicions. Given these issues, users are strongly advised to exercise extreme caution and avoid interactions with this entity, as it poses potential security threats.
Score Breakdown
The review highlights a significant security concern regarding multiple exploit attempts on the WordPress XML-RPC interface. Specifically, it reports 73 unauthorized access attempts originating from the IP address 180.72.221.120. These attempts, identified as xmlrpc_attacks, were made using POST requests to the xmlrpc.php file, a known target for such exploits. The logs indicate that these requests were made under the guise of legitimate services such as Jetpack by WordPress.com and WordPress.com itself. This situation underscores the critical need for enhanced security measures to protect WordPress sites from potential vulnerabilities associated with XML-RPC attacks.