JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 145.82.66.188

145.82.66.188 was found in our database!

This IP was reported 5 times. Confidence of Abuse is 22%: ?

22%

ISP	Saudi Telecom Company JSC
Usage Type	Mobile ISP
ASN	AS25019
Domain Name	stc.com.sa
Country	🇸🇦 Saudi Arabia
City	Riyadh, Riyadh Region

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 145.82.66.188

Whois 145.82.66.188

IP Abuse Reports for 145.82.66.188:

This IP address has been reported a total of 5 times from 3 distinct sources. 145.82.66.188 was first reported on June 23rd 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 pscriptos	2026-06-26 11:16:51 (2 days ago)	{"ClientAddr":"145.82.66.188:62892","ClientHost":"145.82.66.188","ClientPort":"62892","ClientUsernam ... show more {"ClientAddr":"145.82.66.188:62892","ClientHost":"145.82.66.188","ClientPort":"62892","ClientUsername":"-","DownstreamContentSize":418,"DownstreamStatus":403,"Duration":404961729,"OriginContentSize":418,"OriginDuration":400581753,"OriginStatus":403,"Overhead":4379976,"RequestAddr":"www.cleveradmin.de","RequestContentSize":710,"RequestCount":1505167,"RequestHost":"www.cleveradmin.de","RequestMethod":"POST","RequestPath":"/xmlrpc.php","RequestPort":"-","RequestProtocol":"HTTP/1.1","RequestScheme":"https","RetryAttempts":0,"RouterName":"cleveradmin-www-websecure@file","ServiceAddr":"172.16.80.10:80","ServiceName":"cleveradmin-www@file","ServiceURL":"http://172.16.80.10:80","StartLocal":"2026-06-26T13:16:30.058129035+02:00","StartUTC":"2026-06-26T11:16:30.058129035Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"websecure","level":"info","msg":"","time":"2026-06-26T13:16:30+02:00"} {"ClientAddr":"145.82.66.188:62892","ClientHost":"145.82.66.188","ClientPort":"62 ... show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-23 21:07:08 (4 days ago)	(mod_security) mod_security (id:240335) triggered by 145.82.66.188 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 145.82.66.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 17:07:02.918660 2026] [security2:error] [pid 32228:tid 32228] [client 145.82.66.188:62597] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 145.82.66.188 (+1 hits since last alert)\|boaredraven.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "boaredraven.com"] [uri "/xmlrpc.php"] [unique_id "ajr1dgyEG3Hsw9--Mdw2qwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-23 20:06:04 (4 days ago)	(mod_security) mod_security (id:240335) triggered by 145.82.66.188 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 145.82.66.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 16:05:57.835098 2026] [security2:error] [pid 2585:tid 2585] [client 145.82.66.188:58304] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 145.82.66.188 (+1 hits since last alert)\|virtualmediamasters.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "virtualmediamasters.net"] [uri "/xmlrpc.php"] [unique_id "ajrnJVJoKxV6ODhG945bHAAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-23 19:01:07 (4 days ago)	(mod_security) mod_security (id:240335) triggered by 145.82.66.188 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 145.82.66.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 15:01:02.753416 2026] [security2:error] [pid 29697:tid 29697] [client 145.82.66.188:59646] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 145.82.66.188 (+1 hits since last alert)\|aseguratuauto.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "aseguratuauto.com"] [uri "/xmlrpc.php"] [unique_id "ajrX7s40T5UjiklXuzjjHAAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-06-23 08:58:51 (5 days ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack

Showing 1 to 5 of 5 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 122.185.101.50

🇮🇩 103.172.20.218

🇮🇩 103.165.139.145

🇺🇸 66.132.172.33

🇺🇸 44.76.228.17

🇨🇱 186.104.151.9

🇵🇰 182.190.197.172

🇳🇱 176.65.149.178

🇨🇳 111.9.42.36

🇮🇳 110.235.219.80

🇺🇸 71.6.165.200

🇺🇸 66.175.212.77

🇺🇸 44.184.117.154

🇺🇸 35.199.48.206

🇺🇸 20.14.79.82

🇳🇱 185.242.226.103

🇻🇳 171.231.183.138

🇪🇬 154.236.187.231

🇺🇸 107.20.25.33

🇲🇼 105.234.154.72