JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 198.12.112.240

198.12.112.240 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 0%: ?

ISP	HostPapa
Usage Type	Data Center/Web Hosting/Transit
ASN	AS36352
Hostname(s)	198-12-112-240-host.colocrossing.com
Domain Name	hostpapa.com
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 198.12.112.240

Whois 198.12.112.240

IP Abuse Reports for 198.12.112.240:

This IP address has been reported a total of 10 times from 5 distinct sources. 198.12.112.240 was first reported on March 23rd 2023, and the most recent report was 4 months ago.

Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-02-01 11:26:04 (4 months ago)	(mod_security) mod_security (id:210730) triggered by 198.12.112.240 (198-12-112-240-host.colocrossin ... show more (mod_security) mod_security (id:210730) triggered by 198.12.112.240 (198-12-112-240-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 01 06:25:57.605948 2026] [security2:error] [pid 16722:tid 16905] [client 198.12.112.240:40899] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|ftp.kettlehill.com\|F\|2"] [data ".example.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ftp.kettlehill.com"] [uri "/www.example.com"] [unique_id "aX84RcyMbG6v0xSDvGJVwgAAAtM"], referer: http://ftp.kettlehill.com//www.example.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-03 01:31:09 (6 months ago)	(mod_security) mod_security (id:212620) triggered by 198.12.112.240 (198-12-112-240-host.colocrossin ... show more (mod_security) mod_security (id:212620) triggered by 198.12.112.240 (198-12-112-240-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 20:31:00.144613 2025] [security2:error] [pid 7331:tid 7331] [client 198.12.112.240:45441] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<script\\\\b" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "65"] [id "212620"] [rev "4"] [msg "COMODO WAF: Cross-site Scripting (XSS) Attack\|\|ftp.farmers123.com:80\|F\|2"] [data "Matched Data: <script found within REQUEST_URI: /examples/jsp/snp/snoop.jsp;<script>alert(document.domain)</script>test.jsp"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "ftp.farmers123.com"] [uri "/examples/jsp/snp/snoop.jsp;<script>alert(document.domain)</script>test.jsp"] [unique_id "aS-S1KMFhgW2juXIsHsQPAAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-10-01 15:42:06 (8 months ago)	(mod_security) mod_security (id:210350) triggered by 198.12.112.240 (198-12-112-240-host.colocrossin ... show more (mod_security) mod_security (id:210350) triggered by 198.12.112.240 (198-12-112-240-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 01 11:41:55.048834 2025] [security2:error] [pid 30110:tid 30162] [client 198.12.112.240:42637] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|ftp.kettlehill.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "ftp.kettlehill.com"] [uri "/mcp"] [unique_id "aN1Lw8kWrLLgoGKIU58iCAAAAdE"], referer: http://ftp.kettlehill.com/mcp show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-02-27 14:29:53 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 198.12.112.240 (198-12-112-240-host.colocrossin ... show more (mod_security) mod_security (id:210492) triggered by 198.12.112.240 (198-12-112-240-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 27 09:29:27.471408 2025] [security2:error] [pid 27065:tid 27236] [client 198.12.112.240:38189] [client 198.12.112.240] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.kettlehill.net"] [uri "/wp-content/plugins/wpsite-background-takeover/exports/download.php"] [unique_id "Z8B2xydqMyQKEHyZyujBdwAAAQM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-01-15 07:10:41 (1 year ago)	\| XSS (Cross Site Scripting) attempt.	Hacking SQL Injection Web App Attack
🇺🇸 ChamberofCommerce.com	2023-11-06 02:26:23 (2 years ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226 show less	Bad Web Bot
🇺🇸 ChamberofCommerce.com	2023-11-02 06:37:29 (2 years ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226 show less	Bad Web Bot
🇺🇸 ChamberofCommerce.com	2023-10-30 21:49:04 (2 years ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226 show less	Bad Web Bot
Anonymous	2023-04-29 05:17:13 (3 years ago)	Malicious activity detected	Hacking Brute-Force
Anonymous	2023-03-23 00:03:40 (3 years ago)	Mar 23 03:03:40 avantsb journal: Bitrix WAF: SECURITY_REDIRECT \| s1 \| 198.12.112.240 \| \| /bitrix/re ... show more Mar 23 03:03:40 avantsb journal: Bitrix WAF: SECURITY_REDIRECT \| s1 \| 198.12.112.240 \| \| /bitrix/redirect.php?event1=click_to_call&event2=&event3=&goto=http://geolife.org/bitrix/redirect.php%3Fevent1=&event2=&event3=&goto=https://sec.pn.to/jump.php%3Fhttps://www.camisetasdefutbolbaratas2024.com \| /bitrix/redirect.php \| aHR0cHM6Ly9zZWMucG4udG8vanVtcC5waHA/aHR0cHM6Ly93d3cuY2FtaXNldGFzZGVmdXRib2xiYXJhdGFzMjAyNC5jb20= ... show less	Web App Attack

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2a02:4780:2b:2029:0:22fc:d864:1

🇺🇸 209.97.158.35

🇧🇷 177.30.64.65

🇨🇳 115.56.238.174

🇮🇹 81.57.15.243

🇦🇺 34.40.159.208

🇬🇧 31.14.254.58

🇺🇸 15.204.184.105

🇺🇸 8.230.102.169

🇬🇧 5.226.140.92

🇷🇴 2.57.122.177

🇭🇰 199.45.154.144

🇺🇸 198.74.56.6

🇳🇱 160.119.71.44

🇭🇰 152.32.129.236

🇺🇸 130.131.162.82

🇷🇴 92.118.39.32

🇩🇪 46.101.216.224

🇯🇵 34.97.201.47

🇺🇸 34.44.199.104