JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

45.126.125.37

Neutral Activity

Abuse confidence score ?

0% Low Risk

26 reports

21 reporters · latest 2 years ago

ISP	CloudWebManage Platform
Usage Type	Data Center/Web Hosting/Transit
ASN	AS64022
Domain Name	cloudwm.com
Country	🇭🇰 Hong Kong
City	Hong Kong

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

45.126.125.37 has been reported 26 times. The most recent report is from 2 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 45.126.125.37

Export CSV

This IP address has been reported a total of 26 times from 21 distinct sources. 45.126.125.37 was first reported on October 3rd 2023, and the most recent report was 2 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇪 teskedsgumman.se	2024-02-04 11:36:51 (2 years ago)	/inputs.php	Hacking
🇳🇱 i-turnradio.nl	2024-02-04 06:23:49 (2 years ago)	2024-02-04 @ 07:23:49 (CET) ~ Blocked for trying to access: /admin.php?520=1	Web App Attack
🇷🇴 INTEQ	2024-02-04 04:38:12 (2 years ago)	Web attack from 45.126.125.37	Web App Attack
🇺🇸 TPI-Abuse	2024-02-03 23:10:32 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 45.126.125.37 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 45.126.125.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 03 18:10:25.941347 2024] [security2:error] [pid 8057:tid 47014722414336] [client 45.126.125.37:38858] [client 45.126.125.37] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|saludmyg.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "saludmyg.com"] [uri "/home/neoliam/saludmyg.com"] [unique_id "Zb7H4YnJz1Q1ld9-Y2pmcAAAAFg"], referer: saludmyg.com show less	Brute-Force Bad Web Bot Web App Attack
🇭🇺 HoneyPotEu	2024-02-03 18:18:51 (2 years ago)	45.126.125.37 [redacted] (64022-Kamatera, Inc. Hong Kong Central) - - [03/Feb/2024:19:17:52 +0100] " ... show more 45.126.125.37 [redacted] (64022-Kamatera, Inc. Hong Kong Central) - - [03/Feb/2024:19:17:52 +0100] "GET /admin.php?520=1 HTTP/1.1" 404 548 "[redacted]" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) Ap ... show less	Bad Web Bot Web App Attack
Anonymous	2024-02-03 17:52:02 (2 years ago)	Bot / scanning and/or hacking attempts: GET /about.php?520=1 HTTP/1.1, GET /admin.php?520=1 HTTP/1.1	Hacking Web App Attack
🇳🇿 Tripwire	2024-02-03 05:40:33 (2 years ago)	Unauthorized admin access - /admin/pages	Brute-Force Web App Attack
🇦🇺 weblite	2024-02-03 01:32:33 (2 years ago)	WP_EXPLOIT_PROBE WP_MALWARE_PROBE	Hacking Web App Attack
🇦🇺 MAGIC	2024-02-03 00:16:36 (2 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇩🇪 iNetWorker	2024-02-01 09:50:30 (2 years ago)	trolling for resource vulnerabilities	Web App Attack
🇳🇱 ipoac.nl	2024-01-30 10:30:29 (2 years ago)	5fm.nu:443 45.126.125.37 - - [30/Jan/2024:11:30:28 +0100] 5fm.nu "GET /wp-admin/samll.php?2800 HTTP/ ... show more 5fm.nu:443 45.126.125.37 - - [30/Jan/2024:11:30:28 +0100] 5fm.nu "GET /wp-admin/samll.php?2800 HTTP/1.1" 403 4214 "5fm.nu" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/242.02.8301.120 Safari/537.36" show less	Bad Web Bot
🇨🇭 Mario Bretscher	2024-01-30 09:47:20 (2 years ago)	[Tue Jan 30 10:40:58.433670 2024] [php:error] [pid 117067] [client 45.126.125.37:42604] script '/var ... show more [Tue Jan 30 10:40:58.433670 2024] [php:error] [pid 117067] [client 45.126.125.37:42604] script '/var/www/html/c.php' not found or unable to stat, referer: reichenbacharchitekten.ch [Tue Jan 30 10:45:02.097002 2024] [php:error] [pid 119104] [client 45.126.125.37:44146] script '/var/www/html/wp-config-sample.php' not found or unable to stat, referer: reichenbacharchitekten.ch [Tue Jan 30 10:47:19.207330 2024] [php:error] [pid 118697] [client 45.126.125.37:60184] script '/var/www/html/skills.php' not found or unable to stat, referer: reichenbacharchitekten.ch ... show less	Web App Attack
🇱🇹 Evag Touf	2024-01-30 08:13:36 (2 years ago)	(mod_security) mod_security triggered on hostname [redacted] 45.126.125.37 (HK/Hong Kong/-)	SQL Injection
🇺🇸 TPI-Abuse	2024-01-30 03:15:00 (2 years ago)	(mod_security) mod_security (id:225080) triggered by 45.126.125.37 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225080) triggered by 45.126.125.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 29 22:14:55.955642 2024] [security2:error] [pid 30883] [client 45.126.125.37:53212] [client 45.126.125.37] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^[\\\\d\\\\.ab]+$" against "ARGS_GET:2825" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "143"] [id "225080"] [rev "1"] [msg "COMODO WAF: XSS vulnerability in Plupload before 2.1.9 or MediaElement.js before 2.21.0, as used in WordPress before 4.5.2 (CVE-2016-4566 & CVE-2016-4567)\|\|www.fatcavestudios.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.fatcavestudios.com"] [uri "/wp-includes/js/tinymce/plugins/wpeditimage/"] [unique_id "Zbhpr4K_H0s34kwdfuUIcAAAAAs"], referer: fatcavestudios.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-01-30 00:48:05 (2 years ago)	(mod_security) mod_security (id:225080) triggered by 45.126.125.37 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225080) triggered by 45.126.125.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 29 19:48:00.939906 2024] [security2:error] [pid 753:tid 47569484084992] [client 45.126.125.37:46284] [client 45.126.125.37] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^[\\\\d\\\\.ab]+$" against "ARGS_GET:2825" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "143"] [id "225080"] [rev "1"] [msg "COMODO WAF: XSS vulnerability in Plupload before 2.1.9 or MediaElement.js before 2.21.0, as used in WordPress before 4.5.2 (CVE-2016-4566 & CVE-2016-4567)\|\|www.worldecom.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.worldecom.org"] [uri "/wp-includes/js/tinymce/plugins/wpautoresize/"] [unique_id "ZbhHQFby0gqljbhtjsW5uAAAAEE"], referer: worldecom.org show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 200.138.46.78

🇭🇺 195.228.79.114

🇸🇬 47.82.10.34

🇨🇳 1.83.125.160

🇧🇪 207.175.29.240

🇲🇽 177.229.197.38

🇨🇳 175.30.48.164

🇺🇸 172.208.8.27

🇨🇳 119.117.76.82

🇳🇱 109.160.32.48

🇺🇸 91.230.168.231

🇰🇷 61.76.38.54

🇰🇷 59.29.136.96

🇸🇬 49.0.202.115

🇺🇸 47.251.105.167

🇰🇪 41.60.238.233

🇺🇸 16.216.88.153

🇺🇸 2.57.168.5

🇻🇳 221.133.26.3

🇸🇪 213.132.126.45