JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.66.198.212

45.66.198.212 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 15%: ?

15%

ISP	A. Judicko individuali imone
Usage Type	Fixed Line ISP
ASN	AS35441
Hostname(s)	45.66.198.212.aji.lt
Domain Name	aji.lt
Country	🇱🇹 Lithuania
City	Rokiskis, Panevezys

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.66.198.212

Whois 45.66.198.212

IP Abuse Reports for 45.66.198.212:

This IP address has been reported a total of 29 times from 22 distinct sources. 45.66.198.212 was first reported on March 8th 2026, and the most recent report was 17 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-11 18:57:38 (17 hours ago)	45.66.198.212 - - [11/Jun/2026:20:57:15 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "WordPress.co ... show more 45.66.198.212 - - [11/Jun/2026:20:57:15 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "WordPress.com; https://wordpress.com" 45.66.198.212 - - [11/Jun/2026:20:57:17 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "WordPress.com; https://wordpress.com" 45.66.198.212 - - [11/Jun/2026:20:57:26 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "Jetpack by WordPress.com" 45.66.198.212 - - [11/Jun/2026:20:57:27 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Jetpack by WordPress.com" 45.66.198.212 - - [11/Jun/2026:20:57:37 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "Jetpack by WordPress.com" ... show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-11 18:32:36 (17 hours ago)	(mod_security) mod_security (id:240335) triggered by 45.66.198.212 (45.66.198.212.aji.lt): 1 in the ... show more (mod_security) mod_security (id:240335) triggered by 45.66.198.212 (45.66.198.212.aji.lt): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 14:32:30.240027 2026] [security2:error] [pid 30416:tid 30416] [client 45.66.198.212:61755] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 45.66.198.212 (+1 hits since last alert)\|consolidatedoperationsgroup.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "consolidatedoperationsgroup.com"] [uri "/xmlrpc.php"] [unique_id "air_PljrLMlwuLs3eR09EwAAAC0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-11 17:59:24 (18 hours ago)	(mod_security) mod_security (id:240335) triggered by 45.66.198.212 (45.66.198.212.aji.lt): 1 in the ... show more (mod_security) mod_security (id:240335) triggered by 45.66.198.212 (45.66.198.212.aji.lt): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 13:59:18.829023 2026] [security2:error] [pid 6016:tid 6041] [client 45.66.198.212:63956] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 45.66.198.212 (+1 hits since last alert)\|tkfay.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "tkfay.com"] [uri "/xmlrpc.php"] [unique_id "air3do61geZij1-Jo0MhmAAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-04-11 13:09:05 (2 months ago)	45.66.198.212 - - [11/Apr/2026:15:09:04 +0200] "POST / HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Lin ... show more 45.66.198.212 - - [11/Apr/2026:15:09:04 +0200] "POST / HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/15.0.0.0 Safari/537.36" show less	Web App Attack
🇺🇸 integrantservices.com	2026-04-11 11:27:38 (2 months ago)	(wordpress) Failed wordpress login from 45.66.198.212 (LT/Lithuania/45.66.198.212.aji.lt)	Brute-Force
🇳🇱 wlt-blocker	2026-04-08 18:50:34 (2 months ago)	Unauthorized access to webpage admin	Web App Attack
🇬🇧 venus.launch.bz	2026-04-04 18:13:17 (2 months ago)	(wpscan) WordPress probe detected from 45.66.198.212 (LT/Lithuania/45.66.198.212.aji.lt)	Hacking
🇩🇪 Bedios GmbH	2026-04-04 15:08:17 (2 months ago)	Wordpress hacking attempt	Web App Attack
🇳🇱 wlt-blocker	2026-04-04 13:31:09 (2 months ago)	Unauthorized access to webpage admin	Web App Attack
🇹🇷 rtbh.com.tr	2026-03-27 20:12:17 (2 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2026-03-26 20:12:16 (2 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇫🇷 SpaceHost-Server	2026-03-25 23:34:28 (2 months ago)		Brute-Force Web App Attack
🇸🇪 EmK530	2026-03-25 18:49:01 (2 months ago)	URL flagged by RegEx: /xmlrpc.php	Web App Attack
🇩🇪 stinpriza	2026-03-24 17:42:18 (2 months ago)	Web App Attack	Web App Attack
🇫🇷 Kenshin869	2026-03-20 17:55:57 (2 months ago)	Wordpress unauthorized access attempt	Brute-Force

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.167.169.245

🇺🇸 172.56.112.147

🇹🇼 165.154.227.8

🇺🇸 154.51.242.138

🇨🇳 120.246.78.204

🇨🇳 120.48.17.184

🇷🇺 87.226.190.225

🇰🇷 14.206.12.13

🇺🇸 2602:fb54:1400::1b0

🇸🇬 188.166.246.68

🇨🇳 171.114.229.239

🇺🇸 139.144.239.98

🇨🇳 120.225.86.46

🇺🇸 104.243.133.18

🇩🇪 69.5.169.211

🇩🇪 47.245.139.220

🇪🇸 34.175.118.185

🇨🇳 14.29.212.239

🇷🇴 2.57.121.25

🇺🇸 147.185.132.183