JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.128.121.94

45.128.121.94 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 45%: ?

45%

ISP	Bawabet Al Manama Company for General Trading and Supply and Install Camera Systems, Internet and Communication Services Ltd.
Usage Type	Fixed Line ISP
ASN	AS197421
Domain Name	almanamatele.com
Country	🇮🇶 Iraq
City	Ramadi, Anbar

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.128.121.94

Whois 45.128.121.94

IP Abuse Reports for 45.128.121.94:

This IP address has been reported a total of 17 times from 10 distinct sources. 45.128.121.94 was first reported on January 9th 2026, and the most recent report was 10 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 dynamix	2026-07-08 23:03:29 (10 hours ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-08 21:34:07 (11 hours ago)	(mod_security) mod_security (id:240335) triggered by 45.128.121.94 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 45.128.121.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 17:33:59.576893 2026] [security2:error] [pid 26630:tid 26630] [client 45.128.121.94:22542] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 45.128.121.94 (+1 hits since last alert)\|greenmountainfeeds.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "greenmountainfeeds.com"] [uri "/xmlrpc.php"] [unique_id "ak7CR4yKHf-yu5lUh9vfngAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-08 18:49:56 (14 hours ago)	[ns31.kdns.gr] httpd-xmlrpc-post: sites=www.ceramics-menegis.gr; logs=/var/log/httpd/domains/ceramic ... show more [ns31.kdns.gr] httpd-xmlrpc-post: sites=www.ceramics-menegis.gr; logs=/var/log/httpd/domains/ceramics-menegis.gr.log; samples=/xmlrpc.php show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-08 15:13:40 (18 hours ago)	(mod_security) mod_security (id:240335) triggered by 45.128.121.94 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 45.128.121.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 11:13:34.780506 2026] [security2:error] [pid 3242:tid 3242] [client 45.128.121.94:64986] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 45.128.121.94 (+1 hits since last alert)\|medusakenya.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "medusakenya.com"] [uri "/xmlrpc.php"] [unique_id "ak5pHobBVw0RCPBNe1ZqQgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-08 13:06:43 (20 hours ago)	(mod_security) mod_security (id:240335) triggered by 45.128.121.94 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 45.128.121.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 09:06:37.805843 2026] [security2:error] [pid 7636:tid 7636] [client 45.128.121.94:61007] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 45.128.121.94 (+1 hits since last alert)\|orcastrong.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "orcastrong.com"] [uri "/xmlrpc.php"] [unique_id "ak5LXX-RAT6gK0b2zld9xwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-07-08 10:59:16 (22 hours ago)	xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (88010-201)	Hacking
🇺🇸 TPI-Abuse	2026-07-08 07:16:49 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 45.128.121.94 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 45.128.121.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 03:16:45.592864 2026] [security2:error] [pid 4910:tid 4910] [client 45.128.121.94:47211] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 45.128.121.94 (+1 hits since last alert)\|capriexpress.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "capriexpress.com"] [uri "/xmlrpc.php"] [unique_id "ak35XdD740NfnZKIqVj7swAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 gui-ying233	2026-07-02 00:04:32 (1 week ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-06-29 13:18:49 (1 week ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇮🇹 A000Z	2026-05-18 15:03:57 (1 month ago)	Fail2Ban: 45.128.121.94 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5. ... show more Fail2Ban: 45.128.121.94 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
Anonymous	2026-05-13 10:20:48 (1 month ago)	Failed Wordpress Logins	Web App Attack
Anonymous	2026-05-09 17:48:29 (1 month ago)	Unauthorized connection attempt on Port 2323	Port Scan Hacking Exploited Host
Anonymous	2026-04-28 06:48:55 (2 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇮🇹 A000Z	2026-04-10 07:39:01 (2 months ago)	Fail2Ban: 45.128.121.94 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5. ... show more Fail2Ban: 45.128.121.94 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-02-05 16:22:44 (5 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 222.98.122.37

🇲🇾 219.92.8.225

🇦🇷 186.38.26.5

🇭🇰 165.154.6.75

🇺🇸 162.240.222.44

🇺🇸 147.182.176.157

🇮🇩 103.83.93.93

🇩🇪 93.152.221.91

🇮🇷 78.109.200.147

🇱🇹 77.90.185.20

🇰🇷 49.247.37.22

🇭🇰 45.196.236.141

🇺🇸 20.228.193.165

🇭🇰 8.218.84.155

🇻🇳 1.53.36.82

🇰🇷 211.251.245.88

🇺🇸 209.85.215.200

🇹🇭 203.154.158.195

🇸🇬 203.116.129.55

🇧🇷 200.153.86.250