This IP address has been reported a total of
11
times from
9 distinct
sources.
118.45.231.12 was first reported on
May 16th 2026 , and the most recent report was
10 hours ago India
with 2
reports;
Canada
with 1
report;
Italy
with 1
report.
The most common categories in these recent reports were:
SSH
4
times;
Brute-Force
4
times;
Web App Attack
1
time;
Port Scan
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇮🇳
Parth Maniar
2026-10-02 08:23:56
(10 hours ago)
This IP address carried out 7 port scanning attempts on 01-10-2026. For more information or to repor ...
show more
This IP address carried out 7 port scanning attempts on 01-10-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
Port Scan
SSH
🇮🇳
Parth Maniar
2026-10-02 07:14:16
(11 hours ago)
This IP address carried out 1 SSH credential attack (attempts) on 01-10-2026. For more information o ...
show more
This IP address carried out 1 SSH credential attack (attempts) on 01-10-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
Brute-Force
SSH
🇺🇸
cwytech
2026-10-02 00:15:50
(18 hours ago)
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/tpot-ssh-high.
Brute-Force
SSH
🇳🇱
majo-it.nl
2026-09-17 23:09:48
(2 weeks ago)
Sep 17 23:09:46 fail2ban sshd[21293]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ...
show more
Sep 17 23:09:46 fail2ban sshd[21293]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.45.231.12
Sep 17 23:09:47 fail2ban sshd[21293]: Failed password for invalid user user from 118.45.231.12 port 33990 ssh2
...
show less
Brute-Force
SSH
🇮🇹
CoreTech srl
2026-09-17 01:07:32
(2 weeks ago)
"SMTP Login failed": count(IP)=12.0mail3-dc1 03:02:23.462 [39.144.229.49] SMTP Login failed: User [r ...
show more
"SMTP Login failed": count(IP)=12.0mail3-dc1 03:02:23.462 [39.144.229.49] SMTP Login failed: User [ruslanka-kovach] not foundmail3-dc1 03:02:23.462 [39.144.229.49] SMTP Login failed: Username or password is incorrect.MX1-DC2 03:02:44.618 [14.49.137.43] SMTP Login failed: Username or password is incorrect.MX1-DC2 03:02:44.618 [14.49.137.43] SMTP Login failed: Domain [arighies.it] not foundMX1-DC2 03:02:46.375 [14.49.137.43] SMTP Login failed: Incorrect email address [a.natale]MX1-DC2 03:02:46.375 [14.49.137.43] SMTP Login failed: Username or password is incorrect.MX1-DC2 03:04:37.099 [118.45.231.12] SMTP Login failed: Username or password is incorrect.MX1-DC2 03:04:37.099 [118.45.231.12] SMTP Login failed: Domain [olimaint.it] not foundMX1-DC2 03:04:38.777 [118.45.231.12] SMTP Login failed: Username or password is incorrect.
show less
Brute-Force
🇨🇦
DRI
2026-09-12 03:20:51
(2 weeks ago)
Web attack/Malicious activity detected
Web App Attack
🇺🇸
TPI-Abuse
2026-07-25 11:48:34
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 118.45.231.12 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 118.45.231.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 07:48:29.126649 2026] [security2:error] [pid 3969222:tid 3969222] [client 118.45.231.12:58322] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hodlmoser.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hodlmoser.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "amSijRWXTDOeRpBbvB1iMQAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-07-19 23:27:00
(2 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
2026-06-19 16:21:24
(3 months ago)
2026-06-19T18:21:24.033487+02:00 soli-gate cyrus/imaps[2597153]: badlogin: [118.45.231.12] plaintext ...
show more
2026-06-19T18:21:24.033487+02:00 soli-gate cyrus/imaps[2597153]: badlogin: [118.45.231.12] plaintext ([email protected] ) [SASL(-13): authentication failure: checkpass failed]
...
show less
Brute-Force
🇷🇺
DZBOT
2026-06-11 04:56:44
(3 months ago)
DZBOT: Brute-force users IMAP/POP3
Brute-Force
🇨🇭
backslash
2026-05-16 06:18:00
(4 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
Showing 1 to
11
of 11 reports
