JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 43.245.117.49

43.245.117.49 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 0%: ?

ISP	trafficforce, UAB
Usage Type	Commercial
ASN	AS133944
Domain Name	trafficforce.lt
Country	🇹🇷 Turkey
City	Istanbul, Istanbul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 43.245.117.49

Whois 43.245.117.49

IP Abuse Reports for 43.245.117.49:

This IP address has been reported a total of 10 times from 6 distinct sources. 43.245.117.49 was first reported on August 31st 2023, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-04-04 04:37:03 (2 months ago)	Malicious activity detected	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-01-17 07:48:53 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 43.245.117.49 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 43.245.117.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 17 02:48:43.152923 2026] [security2:error] [pid 15359:tid 15359] [client 43.245.117.49:32977] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.nbcnewsradio.com"] [uri "/wp-config.php-backup"] [unique_id "aWs-28D8uh0cZCe-SqhVbAAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 17:45:32 (5 months ago)	(mod_security) mod_security (id:210580) triggered by 43.245.117.49 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210580) triggered by 43.245.117.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 12:43:02.163547 2025] [security2:error] [pid 27849:tid 28220] [client 43.245.117.49:54457] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "etc/passwd" at ARGS:file. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt\|\|www.kettlehill.net\|F\|2"] [data "Matched Data: etc/passwd found within ARGS:file: ../../../../../etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.kettlehill.net"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aVK9plQ7a22kNO2lY86vBAAAANQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-13 10:13:06 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 43.245.117.49 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 43.245.117.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 13 05:12:59.693731 2025] [security2:error] [pid 21336:tid 21336] [client 43.245.117.49:34933] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|ftp.nbcnewsradio.com\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ftp.nbcnewsradio.com"] [uri "/application/logs/application.log"] [unique_id "aRWvK0JyPJcEmTtj93aasAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-07-27 00:30:37 (10 months ago)	(mod_security) mod_security (id:226830) triggered by 43.245.117.49 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:226830) triggered by 43.245.117.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 26 20:30:29.530715 2025] [security2:error] [pid 172226:tid 172447] [client 43.245.117.49:51747] ModSecurity: Access denied with code 403 (phase 1). Operator GE matched 1 at ARGS_GET. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/27_Apps_WPPlugin.conf"] [line "6392"] [id "226830"] [rev "2"] [msg "COMODO WAF: Open redirect vulnerability in the Redirect function in the StageShow plugin before 5.0.9 for WordPress (CVE-2015-5461)\|\|cpanel.kettlehill.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "cpanel.kettlehill.net"] [uri "/wp-content/plugins/stageshow/stageshow_redirect.php"] [unique_id "aIVzJX6EtJKYjh039GtIJwAAAIg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-06-23 13:13:24 (11 months ago)	Ports: 2077,2078,2082,2083,2086,2087,2095,2096; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
🇺🇸 TPI-Abuse	2025-05-29 16:22:25 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 43.245.117.49 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 43.245.117.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 29 12:22:19.116001 2025] [security2:error] [pid 2964156:tid 2964156] [client 43.245.117.49:49631] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ftp.farmers123.com"] [uri "/wp-config.php~"] [unique_id "aDiJu5AYZPYkj6PPdQ2EHQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-01-15 08:31:37 (1 year ago)	\| A web attack returned code 200 (success).	Hacking SQL Injection Web App Attack
🇦🇺 oncord	2023-09-01 18:20:08 (2 years ago)	Form spam	Web Spam
🇺🇸 nowyouknow	2023-08-31 04:05:19 (2 years ago)	(From [email protected]) JP Corsi with Exit Node Corp. I hope that you are having a good day. ... show more (From [email protected]) JP Corsi with Exit Node Corp. I hope that you are having a good day. I am doing a bit of outreach to owner of companies similar to yours as we are seeing increased sales with a number of our clients in the past few months. We have a core focus in helping companies increase online inbound and outreach sales and sell out capacity with incredibly effective and economical strategies. Let me know if increasing online sales is a priority right now and if I can get on your calendar for a short introduction in the next week or two? --- JP Corsi +1 954-833-5563 https://exitnode.co 2339 Glades Pkwy, Weston FL show less	Phishing Web Spam

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 171.243.150.62

🇨🇳 114.217.10.60

🇲🇦 102.53.15.180

🇺🇸 65.49.1.166

🇳🇱 45.148.10.157

🇬🇧 2a06:4880:c000::f9

🇺🇸 162.216.150.148

🇫🇮 147.185.133.57

🇧🇷 131.161.226.7

🇨🇳 116.179.32.208

🇸🇬 101.47.156.170

🇫🇮 66.102.9.203

🇺🇸 65.49.1.172

🇨🇳 58.220.39.200

🇸🇬 47.79.207.45

🇦🇷 167.249.55.166

🇨🇳 118.186.7.10

🇦🇱 109.236.47.250

🇫🇷 80.119.18.81

🇧🇪 35.241.172.173