JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

45.168.91.173

Activity Trending Down

Abuse Confidence Score

43% Elevated

76 reports

48 reporters · latest 1 month ago

ISP: LEXCOM TELECOM
Usage Type: Fixed Line ISP
ASN: AS268056
Domain Name: lexcom.net.br
Country: 🇧🇷 Brazil
City: Camacari, Bahia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

76 from 48 distinct reporters

First reported

March 18th 2025

Most recent report

1 month ago

Last 60 days

Top reporter locations 🇩🇪 Germany 15 🇫🇷 France 8 🇳🇱 Netherlands 8

Most common categories Web App Attack 39 Brute-Force 35 Bad Web Bot 7 Hacking 7 SSH 4

Old reports The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 鬼影233	2026-09-21 05:08:01 (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36	Bad Web Bot
🇳🇱 Site.eu	2026-09-18 14:52:30 (1 month ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇩🇪 rh24	2026-09-18 13:45:01 (1 month ago)	(xmlrpc_405) XMLRPC-Bot 405 45.168.91.173 (BR/Brazil/-)	Hacking
🇩🇪 IVski.com	2026-09-17 20:02:07 (1 month ago)	IVski WAF \| Sensitive file probe detected - looking for .git	Hacking Brute-Force Web App Attack
🇧🇪 madeit	2026-09-17 05:31:46 (1 month ago)		Web App Attack
🇳🇱 tmiland	2026-09-16 19:37:25 (1 month ago)	(wordpress_xmlrpc) WordPress XMLPRC Attack 45.168.91.173 (BR/Brazil/-): 3 in the last 3600 secs; IP: 45.168.91.173; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 45.168.91.173 - - [16/Sep/2026:21:36:56 +0200] "POST /xmlrpc.php HTTP/1.1 ... show more (wordpress_xmlrpc) WordPress XMLPRC Attack 45.168.91.173 (BR/Brazil/-): 3 in the last 3600 secs; IP: 45.168.91.173; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 45.168.91.173 - - [16/Sep/2026:21:36:56 +0200] "POST /xmlrpc.php HTTP/1.1" 403 3050 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.4)" 45.168.91.173 - - [16/Sep/2026:21:37:09 +0200] "POST /xmlrpc.php HTTP/1.1" 403 3050 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.4)" 45.168.91.173 - - [16/Sep/2026:21:37:22 +0200] "POST /xmlrpc.php HTTP/1.1" 403 3050 "-" "Jetpack by WordPress.com" show less	Brute-Force
🇫🇮 YF	2026-09-16 10:01:05 (1 month ago)	xmlrpc.php Potential DDoS or brute force	DDoS Attack Brute-Force
🇳🇱 e.fierstra	2026-09-16 04:47:53 (1 month ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇩🇪 rh24	2026-09-15 12:37:51 (1 month ago)	(xmlrpc_405) XMLRPC-Bot 405 45.168.91.173 (BR/Brazil/-)	Hacking
🇦🇺 A.i.D.A.N.N	2026-09-15 11:21:50 (1 month ago)	A.i.D.A.N.N: Anomaly Detected - Signature match Web Service - Web vulnerability scanning detected	Web App Attack
🇲🇾 Rizzy	2026-09-15 02:29:18 (1 month ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇺🇸 WeekendWeb	2026-09-15 00:46:16 (1 month ago)	Wordpress Vunerability attack	Web App Attack
🇵🇱 gandaflux	2026-09-14 13:15:31 (1 month ago)	45.168.91.173 [redacted-domain] - [14/Sep/2026:15:14:34 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "Jetpack/12.0; WordPress/6.4; [redacted-url]" 45.168.91.173 [redacted-domain] - [14/Sep/2026:15:14:48 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "- ... show more 45.168.91.173 [redacted-domain] - [14/Sep/2026:15:14:34 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "Jetpack/12.0; WordPress/6.4; [redacted-url]" 45.168.91.173 [redacted-domain] - [14/Sep/2026:15:14:48 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "Jetpack/13.0; WordPress/6.1; [redacted-url]" 45.168.91.173 [redacted-domain] - [14/Sep/2026:15:15:02 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "Jetpack by WordPress.com" 45.168.91.173 [redacted-domain] - [14/Sep/2026:15:15:16 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "Jetpack by WordPress.com" 45.168.91.173 [redacted-domain] - [14/Sep/2026:15:15:31 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "Jetpack/12.1; WordPress/6.3; [redacted-url]" show less	Brute-Force Web App Attack
🇦🇺 A.i.D.A.N.N	2026-09-14 05:51:35 (1 month ago)	A.i.D.A.N.N: Anomaly Detected - Signature match Web Service - Web vulnerability scanning detected	Web App Attack
🇺🇸 cwytech	2026-09-14 01:19:17 (1 month ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/wp-us-login-only-high.	Bad Web Bot Web App Attack

Showing 1 to 15 of 76 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇵🇰 182.188.24.243

🇨🇱 179.56.110.243

🇨🇳 111.79.98.197

🇩🇪 34.185.152.112

🇵🇱 194.180.48.241

🇵🇪 190.119.63.98

🇨🇴 186.33.52.222

🇨🇭 179.43.153.18

🇭🇺 178.48.181.3

🇸🇬 128.199.209.169

🇨🇳 115.190.240.193

🇩🇪 109.91.4.177

🇳🇬 102.88.137.80

🇸🇦 93.112.210.60

🇫🇷 91.231.89.93

🇳🇱 77.239.124.38

🇺🇸 75.90.87.244

🇺🇸 66.27.173.108

🇺🇸 63.135.161.12

🇺🇸 45.132.187.161