JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 198.13.52.240

198.13.52.240 was found in our database!

This IP was reported 31 times. Confidence of Abuse is 0%: ?

ISP	Vultr Holdings, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS20473
Hostname(s)	198.13.52.240.vultrusercontent.com
Domain Name	vultr.com
Country	🇯🇵 Japan
City	Oi, Saitama

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 198.13.52.240

Whois 198.13.52.240

IP Abuse Reports for 198.13.52.240:

This IP address has been reported a total of 31 times from 17 distinct sources. 198.13.52.240 was first reported on June 18th 2024, and the most recent report was 9 months ago.

Old Reports: The most recent abuse report for this IP address is from 9 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Hippoline	2025-08-07 06:33:07 (9 months ago)	Aug 7 08:32:02 local wp(XXXX-B)[24361]: Authentication attempt for unknown user admin from ::ffff:1 ... show more Aug 7 08:32:02 local wp(XXXX-B)[24361]: Authentication attempt for unknown user admin from ::ffff:198.13.52.240 ... show less	Brute-Force Web App Attack
🇫🇷 Hippoline	2025-01-30 02:21:25 (1 year ago)	Jan 30 03:18:47 local wp(XXXX-B)[19223]: Authentication attempt for unknown user admin from ::ffff:1 ... show more Jan 30 03:18:47 local wp(XXXX-B)[19223]: Authentication attempt for unknown user admin from ::ffff:198.13.52.240 ... show less	Brute-Force Web App Attack
🇩🇪 Packets-Decreaser.NET	2024-09-02 19:27:22 (1 year ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇦🇺 MAGIC	2024-07-25 12:02:17 (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇫🇷 Hippoline	2024-07-23 02:27:38 (1 year ago)	Jul 23 04:22:03 local wp(XXXX-B)[20257]: Authentication attempt for unknown user admin from ::ffff:1 ... show more Jul 23 04:22:03 local wp(XXXX-B)[20257]: Authentication attempt for unknown user admin from ::ffff:198.13.52.240 ... show less	Brute-Force Web App Attack
🇦🇺 MAGIC	2024-07-16 09:15:51 (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 octageeks.com	2024-06-30 04:06:06 (1 year ago)	Wordpress malicious attack:[octawp]	Web App Attack
🇺🇸 TPI-Abuse	2024-06-29 04:18:15 (1 year ago)	(mod_security) mod_security (id:240335) triggered by 198.13.52.240 (198.13.52.240.vultrusercontent.c ... show more (mod_security) mod_security (id:240335) triggered by 198.13.52.240 (198.13.52.240.vultrusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 29 00:18:08.968164 2024] [security2:error] [pid 24380] [client 198.13.52.240:51878] [client 198.13.52.240] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 198.13.52.240 (+1 hits since last alert)\|www.anus.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.anus.net"] [uri "/xmlrpc.php"] [unique_id "Zn-LAMCv1J_SxtbHq7mIkgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 octageeks.com	2024-06-29 04:06:06 (1 year ago)	Wordpress malicious attack:[octawp]	Web App Attack
🇲🇹 Malta	2024-06-28 21:03:12 (1 year ago)	198.13.52.240 - - [28/Jun/2024:23:03:12 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Macintosh; ... show more 198.13.52.240 - - [28/Jun/2024:23:03:12 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.60 Safari/537.36" Brute-force password attempt show less	Hacking Brute-Force Web App Attack
🇫🇷 Hippoline	2024-06-28 08:47:02 (1 year ago)	Jun 28 10:47:01 local wp(XXXX-B)[7286]: Authentication attempt for unknown user admin from ::ffff:19 ... show more Jun 28 10:47:01 local wp(XXXX-B)[7286]: Authentication attempt for unknown user admin from ::ffff:198.13.52.240 ... show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2024-06-28 04:36:54 (1 year ago)	(mod_security) mod_security (id:240335) triggered by 198.13.52.240 (198.13.52.240.vultrusercontent.c ... show more (mod_security) mod_security (id:240335) triggered by 198.13.52.240 (198.13.52.240.vultrusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 28 00:36:49.165583 2024] [security2:error] [pid 11025] [client 198.13.52.240:49764] [client 198.13.52.240] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 198.13.52.240 (+1 hits since last alert)\|kildarafarms.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "kildarafarms.com"] [uri "/xmlrpc.php"] [unique_id "Zn494aIZ8X8d-tW5GBCyPAAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 london2038.com	2024-06-27 22:06:25 (1 year ago)	Detected by WP fail2ban 2024-06-28T00:06:24.276989+02:00 wordpress: XML-RPC authentication attempt f ... show more Detected by WP fail2ban 2024-06-28T00:06:24.276989+02:00 wordpress: XML-RPC authentication attempt from 198.13.52.240 show less	Brute-Force Web App Attack
🇺🇸 octageeks.com	2024-06-27 04:06:07 (1 year ago)	Wordpress malicious attack:[octawp]	Web App Attack
🇺🇸 lavnet.net	2024-06-26 23:29:14 (1 year ago)	Jun 26 23:29:14 angela wordpress(thejunkymonkey.com)[1397722]: Blocked authentication attempt for ad ... show more Jun 26 23:29:14 angela wordpress(thejunkymonkey.com)[1397722]: Blocked authentication attempt for admin from 198.13.52.240 ... show less	Hacking Web App Attack

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 185.226.197.60

🇳🇱 185.226.197.57

🇧🇷 170.80.65.140

🇺🇸 135.233.112.103

🇨🇳 118.250.104.218

🇹🇼 118.163.132.212

🇨🇳 115.48.237.244

🇰🇷 112.216.129.27

🇬🇧 213.166.84.62

🇺🇸 184.105.247.235

🇻🇳 103.237.144.204

🇵🇰 103.121.6.3

🇳🇱 45.87.41.224

🇫🇷 31.36.163.95

🇺🇸 20.163.15.247

🇮🇳 172.217.38.27

🇺🇸 104.131.69.242

🇳🇱 64.89.162.78

🇺🇸 64.62.197.92

🇺🇸 43.162.112.238