JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 198.46.251.236

198.46.251.236 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 33%: ?

33%

ISP	HostPapa
Usage Type	Data Center/Web Hosting/Transit
ASN	AS36352
Hostname(s)	198-46-251-236-host.colocrossing.com
Domain Name	colocrossing.com
Country	🇺🇸 United States of America
City	Marietta, Georgia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 198.46.251.236

Whois 198.46.251.236

IP Abuse Reports for 198.46.251.236:

This IP address has been reported a total of 18 times from 5 distinct sources. 198.46.251.236 was first reported on September 4th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-16 12:06:20 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 198.46.251.236 (198-46-251-236-host.colocrossin ... show more (mod_security) mod_security (id:210492) triggered by 198.46.251.236 (198-46-251-236-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 08:06:14.756247 2026] [security2:error] [pid 22947:tid 22947] [client 198.46.251.236:55112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.coinbracelet.com"] [uri "/.git/HEAD"] [unique_id "aqqGNp7vHIk7U22A3NTGtwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-14 22:31:49 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 198.46.251.236 (198-46-251-236-host.colocrossin ... show more (mod_security) mod_security (id:210492) triggered by 198.46.251.236 (198-46-251-236-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 18:31:40.848931 2026] [security2:error] [pid 25154:tid 25154] [client 198.46.251.236:58590] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.papapizza.pizza"] [uri "/.git/HEAD"] [unique_id "aqh1zOezhKnuXcNj3atNsgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-14 18:53:07 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 198.46.251.236 (198-46-251-236-host.colocrossin ... show more (mod_security) mod_security (id:210492) triggered by 198.46.251.236 (198-46-251-236-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 14:53:00.123217 2026] [security2:error] [pid 30684:tid 30684] [client 198.46.251.236:59597] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.acupressbooks.com"] [uri "/.git/HEAD"] [unique_id "aqhCjOvYQ_qfeaqjyXlajwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-14 14:16:43 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 198.46.251.236 (198-46-251-236-host.colocrossin ... show more (mod_security) mod_security (id:210492) triggered by 198.46.251.236 (198-46-251-236-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 10:16:38.181186 2026] [security2:error] [pid 22546:tid 22546] [client 198.46.251.236:34800] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.homebuilt.org"] [uri "/.git/HEAD"] [unique_id "aqgBxudOdk_kbA3JjfsjqwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-14 01:41:39 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 198.46.251.236 (198-46-251-236-host.colocrossin ... show more (mod_security) mod_security (id:210492) triggered by 198.46.251.236 (198-46-251-236-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 13 21:41:29.564090 2026] [security2:error] [pid 6821:tid 6821] [client 198.46.251.236:37060] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.famagustacyprus.eu"] [uri "/.git/HEAD"] [unique_id "aqdQyQwDbzGiRZuXKggOvwAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇴 jad-abuse	2026-09-13 05:01:43 (4 days ago)	ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_expos ... show more ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_exposure. Observed by 1 sensor(s); 1 hits. show less	Web App Attack
🇺🇸 TPI-Abuse	2026-09-12 22:37:40 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 198.46.251.236 (198-46-251-236-host.colocrossin ... show more (mod_security) mod_security (id:210492) triggered by 198.46.251.236 (198-46-251-236-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 18:37:34.185290 2026] [security2:error] [pid 31444:tid 31444] [client 198.46.251.236:37056] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.accordionstars.com"] [uri "/.git/HEAD"] [unique_id "aqXULsfjc7ePwKDbwiT5oQAAAJM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-12 18:20:32 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 198.46.251.236 (198-46-251-236-host.colocrossin ... show more (mod_security) mod_security (id:210492) triggered by 198.46.251.236 (198-46-251-236-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 14:20:23.275704 2026] [security2:error] [pid 12405:tid 12405] [client 198.46.251.236:46950] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mcdonald-moore-shooting-sports.effectivefirearms.com"] [uri "/.git/HEAD"] [unique_id "aqWX51ZT5SRv3viZCB-UQgAAADI"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2026-09-12 02:12:01 (5 days ago)	block ruleset 3D3AFA921A373ECE19B6BA285C2D722163304638	Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-09 15:11:52 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 198.46.251.236 (198-46-251-236-host.colocrossin ... show more (mod_security) mod_security (id:210492) triggered by 198.46.251.236 (198-46-251-236-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 09 11:11:49.332475 2026] [security2:error] [pid 10489:tid 10489] [client 198.46.251.236:36622] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.suffe.cool"] [uri "/.git/HEAD"] [unique_id "aqF3NWa9q0ikAc1Cjw4rbQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-09 12:04:16 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 198.46.251.236 (198-46-251-236-host.colocrossin ... show more (mod_security) mod_security (id:210492) triggered by 198.46.251.236 (198-46-251-236-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 09 08:04:05.233196 2026] [security2:error] [pid 11830:tid 11830] [client 198.46.251.236:59740] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.kritaka.ai"] [uri "/.git/HEAD"] [unique_id "aqFLNS4dpAhLeJVyKBeGpwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-09 02:17:59 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 198.46.251.236 (198-46-251-236-host.colocrossin ... show more (mod_security) mod_security (id:210492) triggered by 198.46.251.236 (198-46-251-236-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 22:17:39.068433 2026] [security2:error] [pid 15437:tid 15437] [client 198.46.251.236:39995] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kangen-agua.com.player-care.com"] [uri "/.git/HEAD"] [unique_id "aqDBw9Vk0faKwnv206ZVzAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-08 12:49:07 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 198.46.251.236 (198-46-251-236-host.colocrossin ... show more (mod_security) mod_security (id:210492) triggered by 198.46.251.236 (198-46-251-236-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 08:48:59.640616 2026] [security2:error] [pid 14596:tid 14631] [client 198.46.251.236:41773] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sgs.schoprint.com"] [uri "/.git/HEAD"] [unique_id "aqAEOznf1LItbvbtvZXz-QAAAVM"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-09-05 22:00:35 (1 week ago)	Auto-ban: >3000 req/min op 2026-09-05	Web App Attack SSH Hacking
🇮🇹 CoreTech srl	2026-09-05 01:03:57 (1 week ago)	cloudlinux2 fail2ban: 2026-09-05 02:59:10,311 fail2ban.filter [1594]: INFO [plesk-wordpre ... show more cloudlinux2 fail2ban: 2026-09-05 02:59:10,311 fail2ban.filter [1594]: INFO [plesk-wordpress] Found 216.24.219.147 - 2026-09-05 02:59:10cloudlinux2 fail2ban: 2026-09-05 02:59:21,214 fail2ban.filter [1594]: INFO [plesk-modsecurity] Found 198.46.251.236 - 2026-09-05 02:59:21cloudlinux2 fail2ban: 2026-09-05 02:59:43,872 fail2ban.filter [1594]: INFO [plesk-wordpress] Found 136.144.43.135 - 2026-09-05 02:59:43cloudlinux2 fail2ban: 2026-09-05 03:02:27,477 fail2ban.filter [1594]: INFO [plesk-wordpress] Found 45.146.55.217 - 2026-09-05 03:02:26cloudlinux2 fail2ban: 2026-09-05 03:02:27,484 fail2ban.filter [1594]: INFO [plesk-wordpress] Found 45.146.55.178 - 2026-09-05 03:02:26cloudlinux2 fail2ban: 2026-09-05 03:02:37,853 fail2ban.filter [1594]: INFO [plesk-proftpd] Found 45.252.191.33 - 2026-09-05 03:02:37cloudlinux2 fail2ban: 2026-09-05 03:02:31,638 fail2ban.filter [1594]: INFO [plesk-wordpress] Found 45.146.55.178 - 2026-09-05 03:02:31cloudl show less	FTP Brute-Force Web App Attack

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇴 190.145.123.18

🇸🇬 47.128.52.180

🇫🇷 162.159.124.50

🇳🇱 89.21.67.132

🇺🇸 40.124.172.8

🇺🇸 35.243.137.208

🇮🇩 163.7.4.169

🇺🇸 162.216.149.13

🇫🇷 158.220.105.179

🇻🇳 115.146.121.179

🇮🇩 103.191.14.243

🇺🇸 70.183.235.24

🇺🇸 64.181.216.111

🇺🇸 54.158.151.182

🇮🇳 2401:4900:b582:7cdc:a117:ba43:3cdc:8f8a

🇦🇹 213.225.7.95

🇰🇬 212.112.108.122

🇮🇩 210.87.97.90

🇫🇮 147.185.133.41

🇮🇳 113.192.5.81