JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.115.26.203

45.115.26.203 was found in our database!

This IP was reported 320 times. Confidence of Abuse is 100%: ?

100%

ISP	SolidCore Hosting LTD
Usage Type	Fixed Line ISP
ASN	AS199457
Domain Name	solidserver.io
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.115.26.203

Whois 45.115.26.203

IP Abuse Reports for 45.115.26.203:

This IP address has been reported a total of 320 times from 247 distinct sources. 45.115.26.203 was first reported on February 14th 2026, and the most recent report was 2 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 ruusvuu	2026-09-18 07:58:35 (2 minutes ago)	Automated abuse report: 15 attack/probe requests from SolidCore Hosting LTD / HK. Targeted paths: /a ... show more Automated abuse report: 15 attack/probe requests from SolidCore Hosting LTD / HK. Targeted paths: /actuator/configprops, /i.php, /php-info.php, /.env.old, /.git-credentials. Sample log lines: [helpdesk] 9/18/2026 00:58:34 45.115.26.203 GET /_phpinfo.php 404 151 1.4 ms [helpdesk] 9/18/2026 00:58:34 45.115.26.203 GET /php_info.php 404 151 2.2 ms [helpdesk] 9/18/2026 00:58:34 45.115.26.203 GET /phpinfo.php 404 150 3.4 ms Detected by an automated web-server log monitor. show less	Web App Attack
🇩🇪 janbro	2026-09-18 07:49:19 (11 minutes ago)	Automated attempt to access sensitive configuration files.	Port Scan Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-09-18 07:47:22 (13 minutes ago)	(mod_security) mod_security (id:210492) triggered by 45.115.26.203 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 45.115.26.203 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 03:47:11.547994 2026] [security2:error] [pid 22183:tid 22236] [client 45.115.26.203:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.grandmasgentlesteps.com"] [uri "/src/.env"] [unique_id "aqzsfx4L074JeQDUSY6TAgAAARg"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Prodscape	2026-09-18 07:40:26 (20 minutes ago)	(mod_security) mod_security (id:210492) triggered by 45.115.26.203 (VN/Vietnam/-): 5 in the last 864 ... show more (mod_security) mod_security (id:210492) triggered by 45.115.26.203 (VN/Vietnam/-): 5 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_MODSEC show less	Port Scan
🇵🇱 nakordoni.eu	2026-09-18 07:30:05 (30 minutes ago)	Blocked by nakordoni.eu automated security: nakordoni-probe-gate. Jail: nakordoni-probe-gate, 1 matc ... show more Blocked by nakordoni.eu automated security: nakordoni-probe-gate. Jail: nakordoni-probe-gate, 1 matches. ISP: SolidCore Hosting LTD (HK), Usage: Fixed Line ISP. Prior AbuseIPDB score at ban time: 100/100. show less	Bad Web Bot Web App Attack
🇫🇷 HerrWolf	2026-09-18 07:30:04 (30 minutes ago)	CrowdSec Detection: crowdsecurity/http-sensitive-files	Web App Attack
🇩🇪 hchristo	2026-09-18 07:23:53 (37 minutes ago)	[Fri Sep 18 09:23:52.958729 2026] [authz_core:error] [pid 29212:tid 29313] [client 45.115.26.203:549 ... show more [Fri Sep 18 09:23:52.958729 2026] [authz_core:error] [pid 29212:tid 29313] [client 45.115.26.203:54988] AH01630: client denied by server configuration: /var/www/kd1006/apps/claprocker/.env~, referer: https://www.claprocker.de/.env~ [Fri Sep 18 09:23:52.962366 2026] [authz_core:error] [pid 29212:tid 29293] [client 45.115.26.203:54952] AH01630: client denied by server configuration: /var/www/kd1006/apps/claprocker/.env.old, referer: https://www.claprocker.de/.env.old [Fri Sep 18 09:23:52.962436 2026] [authz_core:error] [pid 29212:tid 29309] [client 45.115.26.203:55274] AH01630: client denied by server configuration: /var/www/kd1006/apps/claprocker/.env.bak, referer: https://www.claprocker.de/.env.bak [Fri Sep 18 09:23:52.963001 2026] [authz_core:error] [pid 29212:tid 29296] [client 45.115.26.203:55120] AH01630: client denied by server configuration: /var/www/kd1006/apps/claprocker/.env.save, referer: https://www.claprocker.de/.env.save [Fri Sep 18 09:23:53.057959 2026] [authz_core:error] ... show less	Brute-Force
🇩🇪 RJ	2026-09-18 07:10:04 (50 minutes ago)	fail2ban: wiederholte missbraeuchliche Zugriffe auf greatconflict.com (HTTP rate-limit abuse) - auto ... show more fail2ban: wiederholte missbraeuchliche Zugriffe auf greatconflict.com (HTTP rate-limit abuse) - automatische Meldung. show less	Bad Web Bot Web App Attack
🇨🇿 Prcek	2026-09-18 07:08:30 (52 minutes ago)	PortScan:HOST=45.115.26.203,DPORTS=443	Port Scan
🇩🇪 srtzero	2026-09-18 07:06:10 (54 minutes ago)	45.115.26.203 - - [18/Sep/2026:09:06:10 +0200] "GET /.env.development HTTP/1.1" 404 1905 "-" "Mozill ... show more 45.115.26.203 - - [18/Sep/2026:09:06:10 +0200] "GET /.env.development HTTP/1.1" 404 1905 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]" 45.115.26.203 - - [18/Sep/2026:09:06:10 +0200] "GET /.env.local HTTP/1.1" 404 1905 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]" 45.115.26.203 - - [18/Sep/2026:09:06:10 +0200] "GET /.env.dev HTTP/1.1" 404 1905 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]" ... show less	Port Scan Bad Web Bot Web App Attack
🇦🇺 Klaverstyn	2026-09-18 07:02:23 (58 minutes ago)	Persistent attacker, repeat offender	Hacking
🇸🇪 peterh	2026-09-18 07:01:00 (59 minutes ago)		Phishing Hacking
🇫🇮 xyz.rip	2026-09-18 06:54:51 (1 hour ago)	WAF Violation ...	Hacking Web App Attack
🇺🇸 kadour	2026-09-18 06:40:04 (1 hour ago)	[Fri Sep 18 01:40:03.638791 2026] [proxy_fcgi:error] [pid 6449:tid 6481] [client 45.115.26.203:41554 ... show more [Fri Sep 18 01:40:03.638791 2026] [proxy_fcgi:error] [pid 6449:tid 6481] [client 45.115.26.203:41554] AH01071: Got error 'Primary script unknown' [Fri Sep 18 01:40:03.649634 2026] [proxy_fcgi:error] [pid 983:tid 1157] [client 45.115.26.203:41640] AH01071: Got error 'Primary script unknown' [Fri Sep 18 01:40:03.671340 2026] [proxy_fcgi:error] [pid 6449:tid 6480] [client 45.115.26.203:41704] AH01071: Got error 'Primary script unknown' [Fri Sep 18 01:40:03.672623 2026] [proxy_fcgi:error] [pid 980:tid 1087] [client 45.115.26.203:41688] AH01071: Got error 'Primary script unknown' [Fri Sep 18 01:40:03.673293 2026] [proxy_fcgi:error] [pid 1022:tid 1184] [client 45.115.26.203:41582] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇯🇵 tttomomi	2026-09-18 06:38:54 (1 hour ago)	Repeated probing for credential and configuration files, and for known webshell and remote-code-exec ... show more Repeated probing for credential and configuration files, and for known webshell and remote-code-execution endpoints, on our web server. Every request was refused with a 4xx status; none returned content. Paths probed: /.env.bak, /backend/.env, /.env.save. show less	Web App Attack

Showing 1 to 15 of 320 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 200.39.44.141

🇵🇦 190.141.123.197

🇨🇱 181.224.66.73

🇳🇱 146.70.175.78

🇺🇸 97.107.141.150

🇱🇹 88.135.24.132

🇩🇪 69.5.169.231

🇱🇹 62.60.130.253

🇨🇳 47.109.134.2

🇬🇧 37.120.159.134

🇨🇳 27.115.2.170

🇻🇳 203.162.198.187

🇺🇸 198.98.62.211

🇵🇭 180.191.138.189

🇨🇱 179.60.77.180

🇮🇳 141.148.207.84

🇫🇷 95.182.83.99

🇫🇷 85.217.140.50

🇫🇷 85.217.140.36

🇺🇸 71.6.233.150