JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 109.132.12.113

109.132.12.113 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 61%: ?

61%

ISP	Proximus NV
Usage Type	Fixed Line ISP
ASN	AS5432
Hostname(s)	113.12-132-109.adsl-dyn.isp.belgacom.be
Domain Name	proximus.com
Country	🇧🇪 Belgium
City	Antwerp, Flanders

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 109.132.12.113

Whois 109.132.12.113

IP Abuse Reports for 109.132.12.113:

This IP address has been reported a total of 11 times from 11 distinct sources. 109.132.12.113 was first reported on September 24th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 MM-bot	2026-09-29 11:00:52 (1 day ago)	URL-probe: HTTP/1.1 POST request on /xmlrpc.php (2026-09-29 13:00:52 UTC+2)	Web App Attack Hacking
🇳🇿 Tripwire	2026-09-29 04:46:51 (1 day ago)	Probing for Wordpress - /xmlrpc.php	Brute-Force Web App Attack
🇫🇮 inlink.ltd	2026-09-28 18:30:18 (1 day ago)	Known malicious PHP file or CMS probe	Web App Attack
🇳🇱 Alt255	2026-09-27 23:15:08 (2 days ago)	[ti-12al] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail <name>. Examp ... show more [ti-12al] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail <name>. Example: 109.132.12.113 - - \[28/Sep/2026:01:12:51 +0200\] "POST /xmlrpc.php HTTP/1.1" 301 6474 "-" "Mozilla/5.0 \(Macintosh\; Intel Mac OS X 10_15_7\; x86\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/88.0.0.0 Safari/537.36" 109.132.12.113 - - \[28/Sep/2026:01:14:11 +0200\] "POST /xmlrpc.php HTTP/1.1" 301 6448 "-" "Mozilla/5.0 \(Windows NT 6.3\; x86\) AppleWebKit/537.36 \(KHTML, like Gecko\) Safari/15.0.0.0 Safari/537.36" 109.132.12.113 - - \[28/Sep/2026:01:14:27 +0200\] "POST /xmlrpc.php HTTP/1.1" 301 6469 "-" "Mozilla/5.0 \(Windows NT 10.0\; x86\) AppleWebKit/537.36 \(KHTML, like Gecko\) Edge/93.0.0.0 Safari/537.36" 109.132.12.113 - - \[28/Sep/2026:01:15:01 +0200\] "POST /xmlrpc.php HTTP/1.1" 301 ... show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-27 10:59:56 (3 days ago)		Web App Attack
🇪🇸 robotstxt	2026-09-26 20:07:00 (3 days ago)	109.132.12.113 - - [26/Sep/2026:20:06:29 +0000] "GET /xmlrpc.php HTTP/1.1" 403 69985 "-" "Mozilla/5. ... show more 109.132.12.113 - - [26/Sep/2026:20:06:29 +0000] "GET /xmlrpc.php HTTP/1.1" 403 69985 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.0.0 Safari/537.36" "-" edge="109.132.12.113" 109.132.12.113 - - [26/Sep/2026:20:06:09 +0000] "GET /xmlrpc.php HTTP/1.1" 403 77571 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; x86) AppleWebKit/537.36 (KHTML, like Gecko) Safari/15.0.0.0 Safari/537.36" "-" edge="109.132.12.113" 109.132.12.113 - - [26/Sep/2026:20:06:11 +0000] "GET /xmlrpc.php HTTP/1.1" 403 77569 "-" "Mozilla/5.0 (Windows NT 6.2; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/95.0.0.0 Safari/537.36" "-" edge="109.132.12.113" 109.132.12.113 - - [26/Sep/2026:20:06:21 +0000] "GET /xmlrpc.php HTTP/1.1" 403 77569 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; x86) AppleWebKit/537.36 (KHTML, like Gecko) Opera/69.0.0.0 Safari/537.36" "-" edge="109.132.12.113" 109.132.12.113 - - [26/Sep/2026:20:06:22 +0000] "GET /xmlrpc.php HTTP/1.1" 403 77569 "-" " ... show less	Web App Attack
🇨🇭 4server	2026-09-26 09:22:17 (4 days ago)	[SatSep2611:22:11.9426272026][security2:error][pid629035:tid629207][client109.132.12.113:0]ModSecuri ... show more [SatSep2611:22:11.9426272026][security2:error][pid629035:tid629207][client109.132.12.113:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"714\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"ruberticonsulting.ch\"][uri\"/xmlrpc.php\"][unique_id\"areOwzVo8eBpAHqViYpmLgAAANQ\"] show less	Hacking Web App Attack
🇭🇷 bubausluge	2026-09-26 05:26:40 (4 days ago)	Blocked by https://aegis.hr — WAF: ModSec rule match - (MITRE T1190), 1 attempts, Period: 2026-09-26 ... show more Blocked by https://aegis.hr — WAF: ModSec rule match - (MITRE T1190), 1 attempts, Period: 2026-09-26 04:21:16 to 2026-09-26 04:21:16 show less	Web App Attack Hacking
🇧🇷 Host One	2026-09-26 00:34:19 (4 days ago)	Web vulnerability scanning: WordPress xmlrpc.php abuse. Blocked by firewall on 6 different hosting s ... show more Web vulnerability scanning: WordPress xmlrpc.php abuse. Blocked by firewall on 6 different hosting servers. Protocol TCP, port 80, 443 (HTTP/HTTPS). Automated report. show less	Brute-Force Web App Attack
Anonymous	2026-09-25 19:37:44 (4 days ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
🇺🇦 Olexiy Backend	2026-09-24 20:00:55 (5 days ago)	109.132.12.113 ...	Bad Web Bot Web App Attack

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 220.127.148.6

🇩🇪 213.209.159.242

🇹🇼 198.235.24.76

🇳🇱 176.65.148.205

🇺🇸 170.199.224.233

🇦🇷 160.20.247.97

🇵🇰 154.208.50.73

🇳🇱 95.97.105.98

🇺🇸 43.135.144.70

🇩🇪 207.154.240.16

🇻🇳 119.15.169.38

🇫🇷 109.199.99.250

🇫🇷 91.231.89.208

🇹🇷 88.237.157.241

🇫🇷 85.217.140.54

🇻🇪 38.183.214.214

🇳🇱 34.7.168.93

🇮🇳 2a09:bac1:36c0:1b0::3ef:d1

🇬🇧 2a06:4883:b000::c8

🇹🇼 198.235.24.32