JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.12.2.139

45.12.2.139 was found in our database!

This IP was reported 59 times. Confidence of Abuse is 0%: ?

ISP	Virtual Systems LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS6698
Hostname(s)	vcncd.IntoTech.com
Domain Name	vsys.host
Country	🇺🇦 Ukraine
City	Kyiv, Kyiv City

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.12.2.139

Whois 45.12.2.139

IP Abuse Reports for 45.12.2.139:

This IP address has been reported a total of 59 times from 46 distinct sources. 45.12.2.139 was first reported on April 13th 2026, and the most recent report was 4 months ago.

Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 sid3windr	2026-05-11 08:56:08 (4 months ago)	GET /.env (Tarpitted for 1d15h8m32s, wasted 8.06MB)	Web App Attack
🇺🇸 oralunal	2026-05-11 03:55:51 (4 months ago)	IP banned by Fail2Ban in jail suss access.log ah-app-1 ...	Bad Web Bot Web App Attack
🇺🇸 Starburst SysOp Team	2026-05-10 06:51:57 (4 months ago)	(mod_security-custom) mod_security (id:210492) triggered by 45.12.2.139 (UA/Ukraine/Kyiv City/Kyiv/v ... show more (mod_security-custom) mod_security (id:210492) triggered by 45.12.2.139 (UA/Ukraine/Kyiv City/Kyiv/vcncd.IntoTech.com/[AS6698 VIRTUALSYSTEMS]): 1 in the last 3600 secs (0-srv1) show less	Hacking
🇫🇷 solution.it	2026-05-10 05:51:37 (4 months ago)	[Sun May 10 07:51:36.878961 2026] [php7:error] [pid 2321768:tid 2321768] [client 45.12.2.139:52640] ... show more [Sun May 10 07:51:36.878961 2026] [php7:error] [pid 2321768:tid 2321768] [client 45.12.2.139:52640] script '/var/www/html/blog.solution.it/phpinfo.php' not found or unable to stat show less	Web App Attack
Anonymous	2026-05-09 22:15:15 (4 months ago)	"GET /admin/phpinfo HTTP/1.1"	Hacking Web App Attack
🇺🇸 chrisj	2026-05-09 18:23:31 (4 months ago)	[Sat May 09 18:23:28.969854 2026] [proxy_fcgi:error] [pid 238573:tid 238573] [client 45.12.2.139:555 ... show more [Sat May 09 18:23:28.969854 2026] [proxy_fcgi:error] [pid 238573:tid 238573] [client 45.12.2.139:55580] AH01071: Got error 'Primary script unknown' [Sat May 09 18:23:30.667195 2026] [proxy_fcgi:error] [pid 238573:tid 238573] [client 45.12.2.139:55580] AH01071: Got error 'Primary script unknown' [Sat May 09 18:23:30.816983 2026] [proxy_fcgi:error] [pid 238573:tid 238573] [client 45.12.2.139:55580] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force
🇧🇷 ufn.edu.br	2026-05-09 18:00:48 (4 months ago)	[Sat May 09 14:50:48.087293 2026] [access_compat:error] [pid 28852] [client 45.12.2.139:47556] AH017 ... show more [Sat May 09 14:50:48.087293 2026] [access_compat:error] [pid 28852] [client 45.12.2.139:47556] AH01797: client denied by server configuration: /var/www/html/phpinfo.php [Sat May 09 14:50:48.358226 2026] [access_compat:error] [pid 28852] [client 45.12.2.139:47556] AH01797: client denied by server configuration: /var/www/html/info.php [Sat May 09 14:50:48.629149 2026] [access_compat:error] [pid 28852] [client 45.12.2.139:47556] AH01797: client denied by server configuration: /var/www/html/.phpinfo.php ... show less	Exploited Host Web App Attack
🇮🇹 Inartis	2026-05-09 17:06:17 (4 months ago)	45.12.2.139 - - [09/May/2026:19:06:16 +0200] "GET /admin/phpinfo HTTP/1.1" 404 403 "-" "Python/3.9 a ... show more 45.12.2.139 - - [09/May/2026:19:06:16 +0200] "GET /admin/phpinfo HTTP/1.1" 404 403 "-" "Python/3.9 aiohttp/3.13.3" 45.12.2.139 - - [09/May/2026:19:06:16 +0200] "GET /.env HTTP/1.1" 404 403 "-" "Python/3.9 aiohttp/3.13.3" 45.12.2.139 - - [09/May/2026:19:06:16 +0200] "GET /admin/.env HTTP/1.1" 404 403 "-" "Python/3.9 aiohttp/3.13.3" ... show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-05-09 15:57:26 (4 months ago)	Fail2ban Nginx log integration.	Brute-Force SSH Port Scan
Anonymous	2026-05-09 15:49:03 (4 months ago)	Bot / scanning and/or hacking attempts: GET /phpinfo1 HTTP/1.1, GET /backend/.env HTTP/1.1, GET /adm ... show more Bot / scanning and/or hacking attempts: GET /phpinfo1 HTTP/1.1, GET /backend/.env HTTP/1.1, GET /admin/.env HTTP/1.1, GET /private/phpinfo HTTP/1.1, GET /.phpinfo.php HTTP/1.1, GET /.env HTTP/1.1, GET /api/.env HTTP/1.1, GET /staging/.env HTTP/1.1, GET /phpinfo HTTP/1.1, GET /core/.env HTTP/1.1, GET /info HTTP/1.1, GET /?info=1 HTTP/1.1, GET /profile/phpinfo HTTP/1.1, GET /admin/phpinfo HTTP/1.1, GET /backend/phpinfo HTTP/1.1, GET /info.php HTTP/1.1, GET /pi HTTP/1.1, GET /laravel/phpinfo HTTP/1.1, GET /phpinfo.php HTTP/1.1, GET /api/phpinfo HTTP/1.1, GET /index.php?phpinfo=1 HTTP/1.1, GET /?phpinfo=1 HTTP/1.1, GET /_profiler/phpinfo HTTP/1.1 show less	Hacking Web App Attack
🇮🇩 Burayot	2026-05-09 13:56:42 (4 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 45.12.2.139 (UA/Ukraine/vcncd.IntoT ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 45.12.2.139 (UA/Ukraine/vcncd.IntoTech.com): 1 in the last 3600 secs show less	Web App Attack
🇮🇹 madaello	2026-05-09 13:11:59 (4 months ago)	45.12.2.139 - - [09/May/2026:15:11:58 +0200] "GET /phpinfo HTTP/1.1" 301 3324 "-" "Python/3.9 aiohtt ... show more 45.12.2.139 - - [09/May/2026:15:11:58 +0200] "GET /phpinfo HTTP/1.1" 301 3324 "-" "Python/3.9 aiohttp/3.13.3" 45.12.2.139 - - [09/May/2026:15:11:58 +0200] "GET /php-info HTTP/1.1" 301 604 "-" "Python/3.9 aiohttp/3.13.3" 45.12.2.139 - - [09/May/2026:15:11:58 +0200] "GET /info HTTP/1.1" 301 596 "-" "Python/3.9 aiohttp/3.13.3" 45.12.2.139 - - [09/May/2026:15:11:58 +0200] "GET /pi HTTP/1.1" 301 592 "-" "Python/3.9 aiohttp/3.13.3" ... show less	Hacking
🇵🇱 jekob	2026-05-09 11:39:20 (4 months ago)	Automated malicious activity detected (5 events)	Hacking Web App Attack
🇩🇪 sdos.es	2026-05-09 09:32:09 (4 months ago)	"Restricted File Access Attempt - Matched Data: /.env found within REQUEST_FILENAME: /.env"	Web App Attack
🇳🇱 Savvii	2026-05-08 06:31:19 (4 months ago)	15 attempts against mh-modsecurity-ban on byrd	Brute-Force Web App Attack

Showing 1 to 15 of 59 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 45.156.129.54

🇬🇧 217.146.80.123

🇵🇰 154.192.141.138

🇺🇸 108.46.192.222

🇸🇪 81.230.146.243

🇺🇸 75.144.76.68

🇺🇸 66.132.186.240

🇺🇸 64.94.153.227

🇧🇪 35.205.254.119

🇬🇧 35.203.211.130

🇺🇸 34.96.47.128

🇫🇮 34.88.42.62

🇺🇸 205.210.31.89

🇮🇷 185.67.158.64

🇫🇷 172.71.130.122

🇺🇸 66.132.186.141

🇮🇳 34.131.162.210

🇧🇷 16.5.0.215

🇰🇷 218.149.228.175

🇩🇪 207.154.226.178