JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.249.59.68

45.249.59.68 was found in our database!

This IP was reported 8 times. Confidence of Abuse is 0%: ?

ISP	code200 UAB
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13332
Domain Name	code200.global
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.249.59.68

Whois 45.249.59.68

IP Abuse Reports for 45.249.59.68:

This IP address has been reported a total of 8 times from 8 distinct sources. 45.249.59.68 was first reported on December 15th 2025, and the most recent report was 4 months ago.

Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-02-02 13:37:27 (4 months ago)	(mod_security) mod_security (id:210730) triggered by 45.249.59.68 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 45.249.59.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 02 08:37:22.946797 2026] [security2:error] [pid 26788:tid 26788] [client 45.249.59.68:46367] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|drbolen.com\|F\|2"] [data ".php\|[email protected]"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "drbolen.com"] [uri "/wp-login.php\|[email protected]"] [unique_id "aYCokv33haHuuPZjb7xxDgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇪 Jim Keir	2026-01-23 15:39:13 (4 months ago)	2026-01-23 15:39:12 45.249.59.68 File scanning, blocking 45.249.59.68 for 5 minutes	Web App Attack
🇺🇸 etu brutus	2026-01-06 01:55:26 (5 months ago)	45.249.59.68 has been banned for [WebApp Attack] ...	Hacking Bad Web Bot Web App Attack
🇺🇸 graphics-muse.org	2026-01-05 21:39:39 (5 months ago)	Mon Jan 05 14:38:48.344123 202645.249.59.68 - - [05/Jan/2026:14:38:48 -0700] "POST /xmlrpc.php HTTP/ ... show more Mon Jan 05 14:38:48.344123 202645.249.59.68 - - [05/Jan/2026:14:38:48 -0700] "POST /xmlrpc.php HTTP/1.1" 200 247 Mon Jan 05 14:38:48.344123 202645.249.59.68 - - [05/Jan/2026:14:38:48 -0700] "POST /xmlrpc.php HTTP/1.1" 200 3427 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13.5; rv:124.0) Gecko/20100101 Firefox/124.0" Mon Jan 05 14:38:57.009279 202645.249.59.68 - - [05/Jan/2026:14:38:56 -0700] "POST /xmlrpc.php HTTP/1.1" 200 247 Mon Jan 05 14:38:57.009279 202645.249.59.68 - - [05/Jan/2026:14:38:56 -0700] "POST /xmlrpc.php HTTP/1.1" 200 3425 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" Mon Jan 05 14:39:39.097929 202645.249.59.68 - - [05/Jan/2026:14:39:39 -0700] "POST /xmlrpc.php HTTP/1.1" 200 247 Mon Jan 05 14:39:39.097929 202645.249.59.68 - - [05/Jan/2026:14:39:39 -0700] "POST /xmlrpc.php HTTP/1.1" 200 3426 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0" ... show less	Brute-Force Web App Attack
🇩🇪 big-cloud.nl	2026-01-05 14:15:56 (5 months ago)	Try to access /xmlrpc.php	Web App Attack
🇵🇱 bmino.pl	2026-01-05 02:40:01 (5 months ago)	Autoban IP(2): 45.249.59.68 - Hostname: unknown - City: North Tustin - Region: California - Country: ... show more Autoban IP(2): 45.249.59.68 - Hostname: unknown - City: North Tustin - Region: California - Country: US - Location: 33.7645,-117.7939 - Organization: AS13332 Hype Enterprises - failed attempts. show less	Web App Attack
🇫🇷 dynamix	2026-01-04 16:33:29 (5 months ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇨🇳 ThreatBook.io	2025-12-15 22:33:18 (5 months ago)	ThreatBook Intelligence: Dynamic IP,Spam more details on https://threatbook.io/ip/45.249.59.68 2025- ... show more ThreatBook Intelligence: Dynamic IP,Spam more details on https://threatbook.io/ip/45.249.59.68 2025-12-15 22:34:46 /,{"body":"0x%5B%5D=androxgh0st","content_type":"application/x-www-form-urlencoded","header":{"Accept":["/"],"Accept-Encoding":["gzip"],"Connection":["close"],"Content-Length":["20"],"Content-Type":["application/x-www-form-urlencoded"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36"]},"host":"44.243.95.195","method":"POST","proto":"HTTP/1.1","remote_addr":"45.249.59.68:55979","status_code":200,"url":"/","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36"} 2025-12-15 22:34:45 /.env show less	Web App Attack

Showing 1 to 8 of 8 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇩 103.153.110.190

🇺🇸 64.62.156.191

🇮🇳 223.181.49.133

🇨🇳 183.134.40.84

🇧🇼 168.167.72.132

🇺🇸 151.240.67.87

🇷🇴 89.37.117.103

🇨🇳 8.134.159.4

🇩🇪 138.197.187.72

🇨🇳 123.163.55.147

🇨🇳 112.94.9.223

🇨🇳 101.96.202.189

🇺🇸 98.90.93.233

🇬🇧 35.203.211.101

🇺🇸 3.128.168.107

🇩🇪 213.209.159.236

🇰🇭 202.79.29.108

🇺🇸 173.239.240.103

🇺🇸 172.253.244.147

🇳🇱 160.119.78.102