JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.250.252.184

45.250.252.184 was found in our database!

This IP was reported 41 times. Confidence of Abuse is 18%: ?

18%

ISP	Latitude.sh
Usage Type	Content Delivery Network
ASN	AS396356
Domain Name	latitude.sh
Country	🇨🇱 Chile
City	Santiago, Santiago Metropolitan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.250.252.184

Whois 45.250.252.184

IP Abuse Reports for 45.250.252.184:

This IP address has been reported a total of 41 times from 29 distinct sources. 45.250.252.184 was first reported on July 13th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 librebit	2026-07-14 20:37:58 (1 week ago)	Brute force	Brute-Force
🇺🇸 TPI-Abuse	2026-07-02 04:20:57 (2 weeks ago)	(mod_security) mod_security (id:240335) triggered by 45.250.252.184 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 45.250.252.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 00:20:42.728395 2026] [security2:error] [pid 32031:tid 32031] [client 45.250.252.184:61540] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 45.250.252.184 (+1 hits since last alert)\|thesalonx.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "thesalonx.com"] [uri "/xmlrpc.php"] [unique_id "akXnGq39m6rFmZCXzmebhgAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 threatintelligence_bvc	2026-06-29 15:38:40 (3 weeks ago)		Brute-Force
🇺🇸 TPI-Abuse	2026-06-10 08:20:26 (1 month ago)	(mod_security) mod_security (id:240335) triggered by 45.250.252.184 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 45.250.252.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 04:20:08.864838 2026] [security2:error] [pid 11105:tid 11105] [client 45.250.252.184:60439] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 45.250.252.184 (+1 hits since last alert)\|odysseydogasporlari.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "odysseydogasporlari.com"] [uri "/xmlrpc.php"] [unique_id "aikeOB8a3knw36cDdA01agAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-10 04:20:35 (1 month ago)	(mod_security) mod_security (id:240335) triggered by 45.250.252.184 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 45.250.252.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 00:20:22.047033 2026] [security2:error] [pid 16426:tid 16426] [client 45.250.252.184:57755] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 45.250.252.184 (+1 hits since last alert)\|thesalonx.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "thesalonx.com"] [uri "/xmlrpc.php"] [unique_id "aijmBgWPVpPScLmoqTfrZQAAACw"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 sshtmp	2026-05-17 21:00:05 (2 months ago)	[AbuseIPDB auto-report] Attack: WordPress XML-RPC brute-force Hits: 10 \| First: 2026-05-17T22:44:52+ ... show more [AbuseIPDB auto-report] Attack: WordPress XML-RPC brute-force Hits: 10 \| First: 2026-05-17T22:44:52+02:00 \| Last: 2026-05-17T23:00:05+02:00 Samples: POST /xmlrpc.php [200] show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-05-17 20:51:37 (2 months ago)	(mod_security) mod_security (id:240335) triggered by 45.250.252.184 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 45.250.252.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 17 16:51:22.970057 2026] [security2:error] [pid 4730:tid 4730] [client 45.250.252.184:54292] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 45.250.252.184 (+1 hits since last alert)\|thesalonx.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "thesalonx.com"] [uri "/xmlrpc.php"] [unique_id "agoqSnmMFQ1EJfJlJPPM7gAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 threatintelligence_bvc	2026-04-29 17:24:29 (2 months ago)		Brute-Force
🇺🇸 threatintelligence_bvc	2026-01-11 20:59:10 (6 months ago)		Brute-Force
🇨🇿 unhfree.net	2025-06-26 06:30:44 (1 year ago)	Jun 26 08:30:01 canopus postfix/smtpd[2592411]: NOQUEUE: reject: RCPT from unknown[45.250.252.184]: ... show more Jun 26 08:30:01 canopus postfix/smtpd[2592411]: NOQUEUE: reject: RCPT from unknown[45.250.252.184]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[192.168.132.157]> Jun 26 08:30:01 canopus postfix/smtpd[2593192]: NOQUEUE: reject: RCPT from unknown[45.250.252.184]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[192.168.132.157]> Jun 26 08:30:01 canopus postfix/smtpd[2593195]: NOQUEUE: reject: RCPT from unknown[45.250.252.184]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[192.168.132.157]> Jun 26 08:30:44 canopus postfix/smtpd[2593196]: NOQUEUE: reject: RCPT from unknown[45 ... show less	Brute-Force Exploited Host
🇺🇸 bigscoots.com	2024-12-10 14:09:26 (1 year ago)	(smtpauth) Failed SMTP AUTH login from 45.250.252.184 (CL/Chile/-): 5 in the last 3600 secs; Ports: ... show more (smtpauth) Failed SMTP AUTH login from 45.250.252.184 (CL/Chile/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2024-12-10 09:07:57 dovecot_login authenticator failed for (OSN1bT6ke) [45.250.252.184]:12009: 535 Incorrect authentication data ([email protected]) 2024-12-10 09:08:17 dovecot_login authenticator failed for (LKRcGg) [45.250.252.184]:18830: 535 Incorrect authentication data ([email protected]) 2024-12-10 09:08:40 dovecot_login authenticator failed for (ZsEgfJs) [45.250.252.184]:28436: 535 Incorrect authentication data ([email protected]) 2024-12-10 09:09:07 dovecot_login authenticator failed for (LmoecSi) [45.250.252.184]:39150: 535 Incorrect authentication data ([email protected]) 2024-12-10 09:09:25 dovecot_login authenticator failed for (sVhlmF) [45.250.252.184]:51942: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
Anonymous	2024-12-10 13:56:09 (1 year ago)	Ports: 25,110,143,993,995; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇩🇪 samba.org	2024-12-10 13:54:25 (1 year ago)	spam (f2b h2)	Brute-Force
🇺🇸 bigscoots.com	2024-12-10 13:53:57 (1 year ago)	(smtpauth) Failed SMTP AUTH login from 45.250.252.184 (CL/Chile/-): 5 in the last 3600 secs; Ports: ... show more (smtpauth) Failed SMTP AUTH login from 45.250.252.184 (CL/Chile/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2024-12-10 08:53:03 dovecot_login authenticator failed for (gKCnlh1) [45.250.252.184]:40822: 535 Incorrect authentication data ([email protected]) 2024-12-10 08:53:09 dovecot_login authenticator failed for (NcFzSX2YBG) [45.250.252.184]:40965: 535 Incorrect authentication data ([email protected]) 2024-12-10 08:53:26 dovecot_login authenticator failed for (y0aw249U) [45.250.252.184]:49834: 535 Incorrect authentication data ([email protected]) 2024-12-10 08:53:31 dovecot_login authenticator failed for (fBGMgcH9) [45.250.252.184]:46700: 535 Incorrect authentication data ([email protected]) 2024-12-10 08:53:52 dovecot_login authenticator failed for (ijihuuH) [45.250.252.184]:57902: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
🇸🇪 JCB	2024-10-30 09:08:00 (1 year ago)	spam	Email Spam

Showing 1 to 15 of 41 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 220.92.117.221

🇺🇸 203.161.38.233

🇺🇸 162.216.149.164

🇱🇾 154.127.69.4

🇨🇳 116.181.16.138

🇮🇳 66.116.224.33

🇺🇸 52.176.211.73

🇺🇸 2607:f8b0:4003:c41::121

🇺🇸 137.184.201.32

🇹🇭 118.173.48.112

🇱🇹 94.244.77.5

🇷🇴 92.118.39.234

🇬🇧 87.236.176.237

🇱🇹 77.90.185.203

🇬🇧 35.203.211.187

🇺🇸 20.55.229.206

🇰🇷 218.150.184.241

🇺🇸 216.73.217.86

🇲🇽 200.68.173.141

🇧🇴 200.58.84.213