JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.198.32.249

45.198.32.249 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 58%: ?

58%

ISP	PT Global Media Data Prima
Usage Type	Fixed Line ISP
ASN	AS138089
Domain Name	onlinehostinf.com.tr
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.198.32.249

Whois 45.198.32.249

IP Abuse Reports for 45.198.32.249:

This IP address has been reported a total of 23 times from 19 distinct sources. 45.198.32.249 was first reported on April 5th 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-06-29 22:10:15 (5 hours ago)	Auto-ban: >3000 req/min op 2026-06-29	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-06-29 11:37:56 (16 hours ago)	(mod_security) mod_security (id:210492) triggered by 45.198.32.249 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 45.198.32.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 07:37:49.913504 2026] [security2:error] [pid 6108:tid 6108] [client 45.198.32.249:44594] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aantariaconstructions.com"] [uri "/wp-config.php~"] [unique_id "akJZDdyiL-WwPzxAupo8wgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-29 02:25:08 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 45.198.32.249 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 45.198.32.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 22:25:03.332215 2026] [security2:error] [pid 6623:tid 6623] [client 45.198.32.249:33584] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lahamcustomwoods.com"] [uri "/frontend/.env"] [unique_id "akHXf-1dIQe09OMww8mliwAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Hmorrin	2026-06-28 01:16:57 (2 days ago)		Port Scan
🇩🇪 Vegascosmetics	2026-06-19 18:22:09 (1 week ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after suspicious activity. Vegas Security	DDoS Attack Hacking Exploited Host
🇺🇸 TPI-Abuse	2026-06-19 16:32:52 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 45.198.32.249 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 45.198.32.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 12:32:48.838609 2026] [security2:error] [pid 8786:tid 8786] [client 45.198.32.249:53822] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 45.198.32.249 (+1 hits since last alert)\|innovacionesnimba.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "innovacionesnimba.com"] [uri "/xmlrpc.php"] [unique_id "ajVvMJrA1QraSc3PRQy4TQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-06-19 16:30:55 (1 week ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-19 12:48:38 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 45.198.32.249 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 45.198.32.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 08:48:31.151413 2026] [security2:error] [pid 21406:tid 21406] [client 45.198.32.249:52893] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 45.198.32.249 (+1 hits since last alert)\|visionremota.info\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "visionremota.info"] [uri "/xmlrpc.php"] [unique_id "ajU6n_ve_lKcRl-Cs7qeKwAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-19 11:06:18 (1 week ago)	Blocked: Reason='Vulnerability probing — PHP scan detected (109/60 min)'; Requests=109	Port Scan
🇩🇪 dbmwebdesign	2026-06-19 09:00:03 (1 week ago)	WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail	Brute-Force Web App Attack
🇺🇸 lostswordfish.com	2026-06-19 08:12:03 (1 week ago)	Wordfence waf block on flintlocal432	Web App Attack
🇺🇸 TPI-Abuse	2026-06-15 09:40:16 (2 weeks ago)	(mod_security) mod_security (id:240335) triggered by 45.198.32.249 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 45.198.32.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 05:40:08.359087 2026] [security2:error] [pid 18175:tid 18175] [client 45.198.32.249:60405] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 45.198.32.249 (+1 hits since last alert)\|cathybermanmft.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "cathybermanmft.com"] [uri "/xmlrpc.php"] [unique_id "ai_IeH7LYxDcm1FaLp5n2AAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 windowsforum	2026-06-15 01:37:14 (2 weeks ago)	Spam bot registration: triggers=service_check, username=Abror	Web Spam Bad Web Bot
Anonymous	2026-06-14 14:22:24 (2 weeks ago)	[redacted] 45.198.32.249 - - [14/Jun/2026:16:21:41 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "J ... show more [redacted] 45.198.32.249 - - [14/Jun/2026:16:21:41 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.4)" [redacted] 45.198.32.249 - - [14/Jun/2026:16:21:53 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 45.198.32.249 - - [14/Jun/2026:16:22:02 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 45.198.32.249 - - [14/Jun/2026:16:22:13 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 45.198.32.249 - - [14/Jun/2026:16:22:22 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" ... show less	Hacking Web App Attack
🇫🇷 bigorre.org	2026-05-27 13:32:53 (1 month ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 68.178.160.25

🇸🇬 47.84.109.129

🇺🇸 204.10.172.233

🇺🇸 195.184.76.60

🇺🇸 195.184.76.56

🇧🇬 193.24.211.107

🇺🇸 172.253.2.24

🇬🇧 165.154.129.74

🇺🇸 162.216.150.125

🇺🇸 162.216.149.219

🇫🇮 147.185.133.243

🇺🇸 146.190.166.142

🇯🇵 118.194.228.101

🇮🇩 103.97.101.25

🇬🇪 91.239.206.123

🇺🇸 71.6.134.236

🇩🇪 69.5.169.198

🇺🇸 66.132.172.210

🇺🇸 66.132.172.32

🇳🇱 45.148.10.157