JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.249.59.221

45.249.59.221 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 3%: ?

ISP	code200 UAB
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13332
Domain Name	code200.global
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.249.59.221

Whois 45.249.59.221

IP Abuse Reports for 45.249.59.221:

This IP address has been reported a total of 11 times from 2 distinct sources. 45.249.59.221 was first reported on May 30th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-01 02:59:06 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 45.249.59.221 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 45.249.59.221 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 22:58:59.081626 2026] [security2:error] [pid 7572:tid 7670] [client 45.249.59.221:50703] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.staging.kettlehill.com\|F\|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "staging.kettlehill.com"] [uri "/ssl/localhost.key"] [unique_id "ahz1c4dYk5YR-blX3soZJAAAAJM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-01 14:41:05 (2 months ago)	(mod_security) mod_security (id:211190) triggered by 45.249.59.221 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:211190) triggered by 45.249.59.221 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 01 10:29:10.157358 2026] [security2:error] [pid 2321:tid 2330] [client 45.249.59.221:45861] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt\|\|ftp.kettlehill.com\|F\|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /wp-content/plugins/wechat-broadcast/wechat/Image.php?url=../../../../../../../../../../etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ftp.kettlehill.com"] [uri "/wp-content/plugins/wechat-broadcast/wechat/Image.php"] [unique_id "ac0rtpBjIV1ktBHL_gxg1QAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-01 12:26:10 (4 months ago)	(mod_security) mod_security (id:210730) triggered by 45.249.59.221 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 45.249.59.221 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 01 07:26:04.594886 2026] [security2:error] [pid 12299:tid 12322] [client 45.249.59.221:35273] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|ftp.kettlehill.net\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ftp.kettlehill.net"] [uri "/log.log"] [unique_id "aX9GXM_CAppeKcdveJ3aqQAAAIQ"], referer: http://ftp.kettlehill.net/log.log show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-01 06:39:13 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 45.249.59.221 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 45.249.59.221 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 01 01:39:08.532982 2025] [security2:error] [pid 5083:tid 5095] [client 45.249.59.221:36027] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.kettlehill.net"] [uri "/api/.env"] [unique_id "aS04DLlODMhtlQGnj5dCVQAAAEk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-12 17:11:29 (7 months ago)	(mod_security) mod_security (id:210730) triggered by 45.249.59.221 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 45.249.59.221 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 12 12:11:22.618065 2025] [security2:error] [pid 21727:tid 21727] [client 45.249.59.221:49811] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|ftp.nbcnewsradio.com\|F\|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ftp.nbcnewsradio.com"] [uri "/\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\windows\\\\win.ini"] [unique_id "aRS_uqXDu6DE5FJithAnogAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-10-01 16:22:17 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 45.249.59.221 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 45.249.59.221 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 01 12:22:12.364710 2025] [security2:error] [pid 30110:tid 30154] [client 45.249.59.221:60031] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.staging.kettlehill.com"] [uri "/.env.kettlehill"] [unique_id "aN1VNMkWrLLgoGKIU582fgAAAck"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-22 21:53:40 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 45.249.59.221 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 45.249.59.221 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 22 17:53:33.571199 2025] [security2:error] [pid 9001:tid 9001] [client 45.249.59.221:50773] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.deandobkin.com"] [uri "/.svn/entries"] [unique_id "aNHFXXnIomA-Gh535LAZmQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-09-09 16:30:03 (9 months ago)	\| Common web attack.	Hacking SQL Injection Web App Attack
🇺🇸 TPI-Abuse	2025-08-01 07:08:18 (10 months ago)	(mod_security) mod_security (id:210730) triggered by 45.249.59.221 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 45.249.59.221 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 01 03:08:13.571416 2025] [security2:error] [pid 3705323:tid 3705358] [client 45.249.59.221:45223] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|mail.kettlehill.com\|F\|2"] [data ".kettlehill.com.key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.kettlehill.com"] [uri "/ssl/mail.kettlehill.com.key"] [unique_id "aIxn3VSqWoxQtnj67bcE0QAAAFM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-06-01 05:34:25 (1 year ago)	(mod_security) mod_security (id:210580) triggered by 45.249.59.221 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210580) triggered by 45.249.59.221 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 01 01:33:44.443654 2025] [security2:error] [pid 2256136:tid 2256211] [client 45.249.59.221:46539] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "etc/passwd" at ARGS:file. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt\|\|ftp.kettlehill.net\|F\|2"] [data "Matched Data: etc/passwd found within ARGS:file: ../../../../../etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "ftp.kettlehill.net"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aDvmOLVUnYIqO9hNDIS59wAAAIc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-05-30 19:46:31 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 45.249.59.221 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 45.249.59.221 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 30 15:46:23.806952 2025] [security2:error] [pid 596873:tid 596873] [client 45.249.59.221:45603] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|nbcnewsradio.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "nbcnewsradio.com"] [uri "/.db"] [unique_id "aDoLD62ajDnLtI-GUX8D7gAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 194.85.235.99

🇺🇸 185.226.196.20

🇿🇦 102.64.43.186

🇻🇪 190.142.97.50

🇺🇸 185.226.196.18

🇺🇸 137.184.13.100

🇨🇳 124.220.61.209

🇮🇩 103.132.236.30

🇺🇸 47.251.75.100

🇧🇷 45.172.182.180

🇬🇧 35.203.211.73

🇭🇰 34.150.30.62

🇺🇸 2602:80d:1008::9a

🇩🇪 213.209.159.56

🇬🇧 167.99.199.1

🇺🇸 165.154.36.91

🇻🇳 118.70.182.193

🇸🇬 103.191.50.20

🇷🇴 80.94.92.168

🇺🇸 20.221.66.246