JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 145.239.74.160

145.239.74.160 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 100%: ?

100%

ISP	OVH SAS
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16276
Hostname(s)	vps-f1447f30.vps.ovh.net
Domain Name	ovh.net
Country	🇫🇷 France
City	Dunkirk, Hauts-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 145.239.74.160

Whois 145.239.74.160

IP Abuse Reports for 145.239.74.160:

This IP address has been reported a total of 30 times from 24 distinct sources. 145.239.74.160 was first reported on July 24th 2026, and the most recent report was 15 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Kreapptivo	2026-07-25 21:26:16 (15 hours ago)	[25/Jul/2026:23:26:13 +0200] Web-Request: "GET //wp-includes/wlwmanifest.xml", User-Agent: "Mozilla/ ... show more [25/Jul/2026:23:26:13 +0200] Web-Request: "GET //wp-includes/wlwmanifest.xml", User-Agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" show less	Bad Web Bot Web App Attack
🇨🇭 zynex	2026-07-25 21:14:23 (15 hours ago)	URL Probing: /xmlrpc.php	Web App Attack
🇳🇿 billyborsht	2026-07-25 18:12:50 (18 hours ago)	2026-07-26T06:12:49.842618+12:00 southern wordpress(abrahamic.nz)[42840]: Authentication attempt for ... show more 2026-07-26T06:12:49.842618+12:00 southern wordpress(abrahamic.nz)[42840]: Authentication attempt for unknown user mitchell from 145.239.74.160 ... show less	Hacking Web App Attack
🇺🇸 Lee Daniel	2026-07-25 16:59:56 (19 hours ago)	145.239.74.160 - - [25/Jul/2026:12:59:54 -0400] "GET //website/wp-includes/wlwmanifest.xml HTTP/1.1" ... show more 145.239.74.160 - - [25/Jul/2026:12:59:54 -0400] "GET //website/wp-includes/wlwmanifest.xml HTTP/1.1" 404 21120 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 145.239.74.160 - - [25/Jul/2026:12:59:54 -0400] "GET //wp/wp-includes/wlwmanifest.xml HTTP/1.1" 404 21120 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 145.239.74.160 - - [25/Jul/2026:12:59:55 -0400] "GET //news/wp-includes/wlwmanifest.xml HTTP/1.1" 404 21120 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 145.239.74.160 - - [25/Jul/2026:12:59:55 -0400] "GET //2020/wp-includes/wlwmanifest.xml HTTP/1.1" 404 21120 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 145.239.74.160 - - [25/Jul/2026:12:59:55 -0400] "GET //2019/wp-includes/wlwmani ... show less	DDoS Attack Web Spam Email Spam Port Scan Brute-Force Bad Web Bot Web App Attack
🇫🇷 Baking333	2026-07-25 15:09:18 (21 hours ago)	[redacted] 145.239.74.160 - - [25/Jul/2026:16:09:16 +0100] "GET //wp-includes/[redacted] HTTP/1.1" 3 ... show more [redacted] 145.239.74.160 - - [25/Jul/2026:16:09:16 +0100] "GET //wp-includes/[redacted] HTTP/1.1" 302 6773 0/40236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" [redacted] 145.239.74.160 - - [25/Jul/2026:16:09:16 +0100] "GET //[redacted]?rsd HTTP/1.1" 302 1554 0/47256 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" show less	Bad Web Bot Web App Attack
Anonymous	2026-07-25 13:35:12 (23 hours ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
🇩🇪 Vegascosmetics	2026-07-25 11:40:35 (1 day ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after PHP/CMS/webshell exploit probe (possi ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after PHP/CMS/webshell exploit probe (possible exploited host). Evidence: AttackPattern: \.php($\|\?) (Match: .php?) show less	Hacking Exploited Host Web App Attack
🇫🇷 masterguru	2026-07-25 11:26:20 (1 day ago)	(wordpress) Apache: Failed WordPress login from 145.239.74.160 (FR/France/vps-f1447f30.vps.ovh.net): ... show more (wordpress) Apache: Failed WordPress login from 145.239.74.160 (FR/France/vps-f1447f30.vps.ovh.net): 10 in the last 3600 secs (0-193) show less	Hacking
🇺🇸 kosada.com	2026-07-25 09:38:19 (1 day ago)	Web vulnerability probing: //xmlrpc.php	Web App Attack
Anonymous	2026-07-25 08:56:54 (1 day ago)	[Sat Jul 25 10:56:53.599982 2026] [authz_core:error] [pid 18967] [client 145.239.74.160:64946] AH016 ... show more [Sat Jul 25 10:56:53.599982 2026] [authz_core:error] [pid 18967] [client 145.239.74.160:64946] AH01630: client denied by server configuration: /etc/httpd/htdocs [Sat Jul 25 10:56:53.613859 2026] [authz_core:error] [pid 18967] [client 145.239.74.160:64946] AH01630: client denied by server configuration: /etc/httpd/htdocs [Sat Jul 25 10:56:53.627744 2026] [authz_core:error] [pid 18967] [client 145.239.74.160:64946] AH01630: client denied by server configuration: /etc/httpd/htdocs ... show less	Web App Attack
🇳🇱 maxxsense	2026-07-25 08:49:30 (1 day ago)	(wordpress) Failed wordpress login from 145.239.74.160 (FR/France/vps-f1447f30.vps.ovh.net)	Brute-Force
🇪🇸 antivoid.xyz	2026-07-25 08:42:32 (1 day ago)		Brute-Force Web App Attack
Anonymous	2026-07-25 08:05:26 (1 day ago)	Blocked: Reason='Vulnerability probing — PHP scan detected (16/60 min)'; Requests=16	Port Scan
🇺🇸 TPI-Abuse	2026-07-25 08:04:33 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 145.239.74.160 (vps-f1447f30.vps.ovh.net): 1 in ... show more (mod_security) mod_security (id:240335) triggered by 145.239.74.160 (vps-f1447f30.vps.ovh.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 04:04:27.668250 2026] [security2:error] [pid 1020544:tid 1020544] [client 145.239.74.160:53066] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 145.239.74.160 (+1 hits since last alert)\|portalvasco.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "portalvasco.com"] [uri "/blog/xmlrpc.php"] [unique_id "amRuC0Dh-Chb0PRng6lhBgAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-25 07:37:12 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 145.239.74.160 (vps-f1447f30.vps.ovh.net): 1 in ... show more (mod_security) mod_security (id:225170) triggered by 145.239.74.160 (vps-f1447f30.vps.ovh.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 03:37:03.707567 2026] [security2:error] [pid 7579:tid 7579] [client 145.239.74.160:59732] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.abilityengraving.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.abilityengraving.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "amRnnw-PKsm2tDYlIuNJVAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 218.74.68.103

🇦🇷 190.107.216.33

🇳🇱 185.93.89.147

🇳🇱 172.211.56.214

🇺🇸 162.216.150.149

🇮🇩 128.14.233.253

🇺🇸 69.12.80.254

🇬🇧 35.203.210.149

🇺🇸 20.64.104.5

🇺🇸 3.129.187.38

🇦🇲 195.250.79.2

🇺🇸 192.174.81.42

🇺🇸 162.216.149.100

🇺🇸 148.153.56.170

🇺🇸 134.199.238.65

🇨🇳 113.226.201.57

🇨🇳 106.12.74.119

🇫🇷 91.231.89.59

🇳🇱 91.92.40.48

🇳🇱 45.156.87.93