JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.126.185.186

45.126.185.186 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 4%: ?

ISP	Biznet Networks
Usage Type	Fixed Line ISP
ASN	AS17451
Domain Name	biznetnetworks.com
Country	🇮🇩 Indonesia
City	Medan, North Sumatra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.126.185.186

Whois 45.126.185.186

IP Abuse Reports for 45.126.185.186:

This IP address has been reported a total of 24 times from 21 distinct sources. 45.126.185.186 was first reported on January 30th 2024, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 HandyTreff.de	2026-06-30 11:18:22 (2 days ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -63.084 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -63.084 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chr show less	Web App Attack Bad Web Bot
Anonymous	2026-03-04 21:05:39 (3 months ago)	Web attack	Bad Web Bot Web App Attack
🇳🇱 Savvii	2026-03-04 18:03:58 (3 months ago)	20 attempts against mh-misbehave-ban on melon	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-04 17:00:17 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 45.126.185.186 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.126.185.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 04 12:00:02.579796 2026] [security2:error] [pid 23818:tid 23838] [client 45.126.185.186:47430] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "appraisalteam.net"] [uri "/.config/sftp-config.json"] [unique_id "aahlEvzHjF4hZUcVisXGVwAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-16 13:20:17 (7 months ago)	scanning http requests from known botnet	Web App Attack
🇮🇩 hermawan	2025-10-07 06:40:41 (8 months ago)	[Tue Oct 07 13:38:42.194885 2025] [security2:error] [pid 140260:tid 139671477016256] [client 45.126. ... show more [Tue Oct 07 13:38:42.194885 2025] [security2:error] [pid 140260:tid 139671477016256] [client 45.126.185.186:15463] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i),.?[\\"'\\\\)0-9`-f][\\"'`](?:[\\"'`].?[\\"'`]\|(?:\\\\r?\\\\n)?\\\\z\|[^\\"'`]+)\|[^0-9A-Z_a-z]select.+[^0-9A-Z_a-z]?from\|(?:alter\|(?:(?:cre\|trunc\|upd)at\|renam)e\|d(?:e(?:lete\|sc)\|rop)\|(?:inser\|selec)t\|load)[\\\\s\\\\x0b]?\\\\([\\\\s\\\\x0b]?space[\\\\s\\\\x0b]?\\\\(" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "2129"] [id "942200"] [msg "Detects MySQL comment-/space-obfuscated injections and backtick termination"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: , like Gecko) Version/4.0 Chrome/140.0.7339.208 Mobile Safari/537.36 OcIdWebView ({\\x22os\\x22:\\x22Android\\x22, found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 14; 2310FP ... show less	Hacking Web App Attack
🇫🇷 dynamix	2025-09-28 23:21:32 (9 months ago)	Multiple WAF Violations	Web App Attack
🇫🇷 ᴀʀᴛ	2025-07-26 04:48:25 (11 months ago)	Triggered Cloudflare WAF (l7ddos) from ID. ASN: 17451 (BIZNET-AS-AP BIZNET NETWORKS) Protocol: HTTP/ ... show more Triggered Cloudflare WAF (l7ddos) from ID. ASN: 17451 (BIZNET-AS-AP BIZNET NETWORKS) Protocol: HTTP/2 (GET method) UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	DDoS Attack Bad Web Bot
Anonymous	2025-07-13 13:28:42 (11 months ago)	Ports: 143,993; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
🇦🇺 MAGIC	2025-06-19 17:09:05 (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2025-06-19 13:17:22 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇩🇪 stalker.to	2025-05-23 09:54:29 (1 year ago)	Datacenter Proxy	Web Spam
Anonymous	2025-05-14 18:29:26 (1 year ago)	Malicious activity detected	Hacking Web App Attack
🇩🇪 Ad0lar	2025-03-27 17:21:06 (1 year ago)	ports, 445/24H:1/7D:1	Port Scan
🇮🇪 RoboSOC	2025-02-02 08:05:04 (1 year ago)	SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found	Port Scan

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 164.92.114.247

🇰🇷 125.132.16.67

🇹🇷 94.154.43.230

🇺🇸 20.245.71.147

🇮🇩 182.253.156.173

🇩🇰 181.214.32.254

🇬🇧 87.106.65.126

🇷🇴 80.94.92.234

🇺🇸 192.169.197.250

🇧🇴 190.181.27.37

🇻🇳 171.244.52.130

🇻🇳 171.233.111.183

🇵🇰 137.59.230.200

🇰🇷 121.66.63.186

🇨🇳 115.231.78.10

🇺🇸 107.150.105.5

🇨🇦 85.217.149.48

🇨🇳 60.15.201.67

🇿🇦 41.181.156.205

🇬🇧 2.57.17.145