JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

172.98.32.123

Activity Trending Down

Abuse Confidence Score

62% Elevated

155 reports

86 reporters · latest 1 week ago

ISP: Prefixx, Inc.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS206092
Domain Name: prefixx.net
Country: 🇺🇸 United States of America
City: Washington, District of Columbia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

155 from 86 distinct reporters

First reported

July 28th 2022

Most recent report

1 week ago

Last 60 days

Top reporter locations 🇩🇪 Germany 8 🇫🇷 France 5 🇺🇸 United States of America 5

Most common categories Web App Attack 21 Bad Web Bot 6 Brute-Force 3 Hacking 2 Exploited Host 1

Old reports The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 dynamix	2026-10-27 01:23:48 (1 week ago)	Multiple WAF Violations	Web App Attack
🇳🇱 Site.eu	2026-10-25 20:43:32 (1 week ago)	Excessive multi-domain requests	Brute-Force
🇮🇹 CoreTech srl	2026-10-25 07:48:58 (1 week ago)	cloudlinux2 fail2ban: 2026-10-25 08:44:02,433 fail2ban.filter [1922]: INFO [plesk-wordpress] Found 45.146.55.194 - 2026-10-25 08:44:01cloudlinux2 fail2ban: 2026-10-25 08:44:06,954 fail2ban.filter [1922]: INFO [plesk-wordpress] F ... show more cloudlinux2 fail2ban: 2026-10-25 08:44:02,433 fail2ban.filter [1922]: INFO [plesk-wordpress] Found 45.146.55.194 - 2026-10-25 08:44:01cloudlinux2 fail2ban: 2026-10-25 08:44:06,954 fail2ban.filter [1922]: INFO [plesk-wordpress] Found 45.146.55.194 - 2026-10-25 08:44:06cloudlinux2 fail2ban: 2026-10-25 08:44:23,350 fail2ban.filter [1922]: INFO [plesk-wordpress] Found 45.184.21.195 - 2026-10-25 08:44:22cloudlinux2 fail2ban: 2026-10-25 08:45:20,187 fail2ban.filter [1922]: INFO [plesk-wordpress] Found 45.146.55.220 - 2026-10-25 08:45:18cloudlinux2 fail2ban: 2026-10-25 08:45:33,497 fail2ban.actions [1922]: NOTICE [plesk-wordpress] Unban 172.98.32.111cloudlinux2 fail2ban: 2026-10-25 08:45:42,777 fail2ban.filter [1922]: INFO [plesk-wordpress] Found 181.26.220.197 - 2026-10-25 08:45:41cloudlinux2 fail2ban: 2026-10-25 08:46:45,158 fail2ban.filter [1922]: INFO [plesk-wordpress] Found 172.98.32.123 - 2026-10-25 08:46:44cloudlinux2 fail2ban: 2026-10- show less	Web App Attack
🇩🇪 neckaralb-admin.de	2026-10-22 18:26:58 (1 week ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇳🇱 Site.eu	2026-10-22 07:27:55 (1 week ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 Ben Schoolland	2026-10-21 16:11:22 (1 week ago)	Requested known WordPress backdoor/scanner-only paths. No legitimate use.	Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-10-21 10:20:01 (1 week ago)	Multiple WAF Violations	Web App Attack
🇮🇹 CoreTech srl	2026-10-18 08:13:55 (2 weeks ago)	cloudlinux2 fail2ban: 2026-10-18 10:08:46,629 fail2ban.filter [2057]: INFO [plesk-wordpress] Found 172.98.32.123 - 2026-10-18 10:08:46cloudlinux2 fail2ban: 2026-10-18 10:09:26,717 fail2ban.filter [2057]: INFO [plesk-wordpress] F ... show more cloudlinux2 fail2ban: 2026-10-18 10:08:46,629 fail2ban.filter [2057]: INFO [plesk-wordpress] Found 172.98.32.123 - 2026-10-18 10:08:46cloudlinux2 fail2ban: 2026-10-18 10:09:26,717 fail2ban.filter [2057]: INFO [plesk-wordpress] Found 116.178.30.73 - 2026-10-18 10:09:26cloudlinux2 fail2ban: 2026-10-18 10:09:32,486 fail2ban.filter [2057]: INFO [plesk-modsecurity] Found 34.21.109.199 - 2026-10-18 10:09:32cloudlinux2 fail2ban: 2026-10-18 10:09:32,514 fail2ban.filter [2057]: INFO [plesk-modsecurity] Found 34.21.109.199 - 2026-10-18 10:09:32cloudlinux2 fail2ban: 2026-10-18 10:09:32,529 fail2ban.filter [2057]: INFO [plesk-modsecurity] Found 34.21.109.199 - 2026-10-18 10:09:32cloudlinux2 fail2ban: 2026-10-18 10:09:32,501 fail2ban.filter [2057]: INFO [plesk-modsecurity] Found 34.21.109.199 - 2026-10-18 10:09:32cloudlinux2 fail2ban: 2026-10-18 10:09:32,541 fail2ban.filter [2057]: INFO [plesk-modsecurity] Found 34.21.109.199 - 2026-10-18 10:09:3 show less	Web App Attack
🇮🇹 CoreTech srl	2026-10-18 05:48:56 (2 weeks ago)	cloudlinux2 fail2ban: 2026-10-18 07:44:55,524 fail2ban.filter [2057]: INFO [plesk-wordpress] Found 207.154.255.248 - 2026-10-18 07:44:55cloudlinux2 fail2ban: 2026-10-18 07:45:10,719 fail2ban.filter [2057]: INFO [plesk-wordpress] ... show more cloudlinux2 fail2ban: 2026-10-18 07:44:55,524 fail2ban.filter [2057]: INFO [plesk-wordpress] Found 207.154.255.248 - 2026-10-18 07:44:55cloudlinux2 fail2ban: 2026-10-18 07:45:10,719 fail2ban.filter [2057]: INFO [plesk-wordpress] Found 172.98.32.123 - 2026-10-18 07:45:10cloudlinux2 fail2ban: 2026-10-18 07:45:12,298 fail2ban.filter [2057]: INFO [plesk-wordpress] Found 45.132.227.96 - 2026-10-18 07:45:11cloudlinux2 fail2ban: 2026-10-18 07:46:09,835 fail2ban.filter [2057]: INFO [plesk-wordpress] Found 193.56.116.242 - 2026-10-18 07:46:09cloudlinux2 fail2ban: 2026-10-18 07:46:17,757 fail2ban.filter [2057]: INFO [plesk-wordpress] Found 172.98.32.146 - 2026-10-18 07:46:17cloudlinux2 fail2ban: 2026-10-18 07:46:17,475 fail2ban.filter [2057]: INFO [plesk-wordpress] Found 193.56.116.221 - 2026-10-18 07:46:17cloudlinux2 fail2ban: 2026-10-18 07:46:17,781 fail2ban.filter [2057]: INFO [plesk-wordpress] Found 172.98.32.131 - 2026-10-18 07:46:17cloud show less	Web App Attack
🇺🇦 URAN Publishing Service	2026-10-17 21:46:12 (2 weeks ago)	[18/Oct/2026:00:46:11 +0300] -- 172.98.32.123 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp-content/plugins/seoplugins/ HTTP/1.1	Bad Web Bot Web App Attack
🇩🇪 altenglaner	2026-10-17 00:09:50 (2 weeks ago)	Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.	Hacking Web App Attack
🇫🇷 dynamix	2026-10-16 19:56:10 (2 weeks ago)	Multiple WAF Violations	Web App Attack
🇫🇷 mrcrassi	2026-10-16 06:05:22 (2 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (POST method) Endpoint: /wp-login.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; rv:143.0) Gecko/20100101 Firefox/143.0 This report was generated by: https://git ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (POST method) Endpoint: /wp-login.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; rv:143.0) Gecko/20100101 Firefox/143.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-10-16 05:32:01 (2 weeks ago)	(mod_security) mod_security (id:240000) triggered by 172.98.32.123 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 01:31:57.915406 2026] [security2:error] [pid 24334:tid 24348] [client 172.98.32.123:48615] M ... show more (mod_security) mod_security (id:240000) triggered by 172.98.32.123 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 01:31:57.915406 2026] [security2:error] [pid 24334:tid 24348] [client 172.98.32.123:48615] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|www.wicca-love-spells.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "www.wicca-love-spells.com"] [uri "/images/stories/themes.php"] [unique_id "atG2zTaOSR2YrXW4WVfuJwAAAUw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 IndigoRidge	2026-10-15 22:25:14 (2 weeks ago)	172.98.32.123 - - [15/Oct/2026:18:25:03 -0400] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 404 1253 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.98.32.123 - - [15/Oct/ ... show more 172.98.32.123 - - [15/Oct/2026:18:25:03 -0400] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 404 1253 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 172.98.32.123 - - [15/Oct/2026:18:25:09 -0400] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 404 1253 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 172.98.32.123 - - [15/Oct/2026:18:25:11 -0400] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 404 1253 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.98.32.123 - - [15/Oct/2026:18:25:13 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 404 1253 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 172.98.32.123 - - [15/Oct/2026:18:25:13 -0400] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 404 1253 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/ ... show less	Web App Attack

Showing 1 to 15 of 155 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇸🇦 31.167.92.230

🇧🇷 205.210.31.230

🇺🇸 172.174.72.225

🇻🇳 116.104.210.221

🇱🇹 91.224.92.45

🇩🇪 69.5.169.130

🇺🇸 66.132.224.18

🇳🇱 64.205.72.20

🇨🇳 42.242.238.156

🇺🇸 35.252.100.214

🇬🇧 35.203.210.105

🇺🇸 35.203.132.190

🇵🇱 2a02:26f0:3780:c87::1cc6

🇺🇸 216.25.89.128

🇧🇪 198.235.24.182

🇳🇱 193.176.31.202

🇫🇮 147.185.133.214

🇧🇷 138.97.17.6

🇭🇰 123.58.210.247

🇨🇦 85.217.149.22