JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.126.187.4

45.126.187.4

Neutral Activity

41 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Biznet Networks

Usage Type

Fixed Line ISP

ASN

AS17451

Domain Name

biznetnetworks.com

Country

🇮🇩 Indonesia

City

Medan, North Sumatra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

45.126.187.4 has been reported 41 times. The most recent report is from 7 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 45.126.187.4:

This IP address has been reported a total of 41 times from 24 distinct sources. 45.126.187.4 was first reported on July 8th 2022, and the most recent report was 7 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 raxo	2026-01-24 12:34:00 (7 months ago)	SYN Scan	Port Scan Hacking Web App Attack
🇮🇩 sockominfo	2026-01-22 13:00:06 (7 months ago)	Suspicious user agent detected python-requests/2.32.5. Threat Score: 4.1/10 (MEDIUM). CVSS: 2.7/10 ( ... show more Suspicious user agent detected python-requests/2.32.5. Threat Score: 4.1/10 (MEDIUM). CVSS: 2.7/10 (Low). Bayesian: 57%. MITRE: T1016. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-01-22 11:00:02 (7 months ago)	Suspicious user agent detected python-requests/2.32.5. Threat Score: 4/10 (MEDIUM). CVSS: 2.7/10 (Lo ... show more Suspicious user agent detected python-requests/2.32.5. Threat Score: 4/10 (MEDIUM). CVSS: 2.7/10 (Low). Bayesian: 54%. MITRE: T1016. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-01-22 09:00:03 (7 months ago)	Suspicious user agent detected python-requests/2.32.5. Threat Score: 3.9/10 (LOW). CVSS: 2.7/10 (Low ... show more Suspicious user agent detected python-requests/2.32.5. Threat Score: 3.9/10 (LOW). CVSS: 2.7/10 (Low). Bayesian: 47%. MITRE: T1016. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-01-22 07:00:03 (7 months ago)	Suspicious user agent detected python-requests/2.32.5. Threat Score: 3.9/10 (LOW). CVSS: 2.7/10 (Low ... show more Suspicious user agent detected python-requests/2.32.5. Threat Score: 3.9/10 (LOW). CVSS: 2.7/10 (Low). Bayesian: 43%. MITRE: T1016. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-01-22 06:00:21 (7 months ago)	Suspicious user agent detected python-requests/2.32.5. Threat Score: 0/10 (INFORMATIONAL). Reported ... show more Suspicious user agent detected python-requests/2.32.5. Threat Score: 0/10 (INFORMATIONAL). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇺🇸 xmission.com	2025-11-10 00:11:53 (10 months ago)	Blocked by UFW (TCP on 19794) Source port: 57728 TTL: 52 Packet length: 64 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 19794) Source port: 57728 TTL: 52 Packet length: 64 TOS: 0x00 This report (for 45.126.187.4) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇮🇩 hermawan	2025-09-17 16:21:43 (1 year ago)	[Wed Sep 17 23:19:22.689385 2025] [security2:error] [pid 201488:tid 140235860436672] [client 45.126. ... show more [Wed Sep 17 23:19:22.689385 2025] [security2:error] [pid 201488:tid 140235860436672] [client 45.126.187.4:56406] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "164"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-malang.info request_line = GET /index.php/profil/arsip-artikel?catid=473&id=1067%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-12-18-juli-2016&start=90 HTTP/2.0 Request URI RAW = /index.php/profil/arsip-artikel?catid=473&id=1067%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-12-18-juli-2016&start=90 Request..."] [hostname "staklim-malang.info"] [uri "/index.php/profil/arsip-artikel"] [unique_id "aMrfimLZoIizRj ... show less	Hacking Web App Attack
🇫🇷 dynamix	2025-09-17 06:16:00 (1 year ago)	Multiple WAF Violations	Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-09-16 00:06:39 (1 year ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇮🇩 hermawan	2025-02-24 08:35:19 (1 year ago)	[Mon Feb 24 15:33:31.706026 2025] [security2:error] [pid 114969:tid 139634013517504] [client 45.126. ... show more [Mon Feb 24 15:33:31.706026 2025] [security2:error] [pid 114969:tid 139634013517504] [client 45.126.187.4:16661] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "zh" at REQUEST_HEADERS:Accept-Language. [file "/etc/modsecurity/coreruleset-4.10.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "189"] [id "440001"] [msg "Seperti Ddos bahasa Rusia ada di ip vietnam 2.59.0.188 "] [data "Matched Data: zh found within REQUEST_HEADERS:Accept-Language: id-ID,id;q=0.9,en-GB;q=0.8,en;q=0.7,ko-KR;q=0.6,ko;q=0.5,zh-HK;q=0.4,zh;q=0.3,en-US;q=0.2,jv;q=0.1 request_line = GET /images/Klimatologi/Prakiraan/03-Prakiraan-Bulanan/Prakiraan_Daerah_Potensi_Banjir_Bulanan/Prakiraan_Daerah_Potensi_Banjir_Bulan_Provinsi_Jawa_Timur/2024/01_Januari_2024/01_Prakiraan_Bulanan_Daerah_Potensi_Banjir_di_Provinsi_Jawa_Timur_FEBRUARI_Tahun_2024_update_10_Januari_2024.jpg HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/images/Klimatologi/Prakiraan/03-Prakiraan-Bulanan/Pr ... show less	Hacking Web App Attack
Anonymous	2024-12-30 09:46:54 (1 year ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇦🇺 MAGIC	2024-12-14 01:01:12 (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇨🇿 lp	2024-10-20 16:55:28 (1 year ago)	Email account brute force: 2 attempts were recorded from 45.126.187.4 2024-10-20T17:33:37+02:00 warn ... show more Email account brute force: 2 attempts were recorded from 45.126.187.4 2024-10-20T17:33:37+02:00 warning: unknown[45.126.187.4]: SASL LOGIN authentication failed: authentication failure, [email protected] 2024-10-20T17:33:39+02:00 warning: unknown[45.126.187.4]: SASL PLAIN authentication failed: authentication failure, [email protected] show less	Brute-Force
Anonymous	2024-10-20 14:50:36 (1 year ago)	postfix-sasl	Brute-Force Web App Attack

Showing 1 to 15 of 41 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2604:a880:400:d1:0:5:29f:f001

🇷🇺 194.226.49.237

🇺🇸 162.216.149.110

🇰🇷 121.142.87.218

🇰🇷 118.37.255.140

🇨🇳 116.179.33.139

🇻🇳 103.118.28.222

🇨🇳 101.96.195.253

🇺🇸 68.10.53.26

🇫🇮 65.109.162.228

🇮🇳 65.20.76.129

🇸🇬 47.82.201.244

🇺🇸 35.230.57.221

🇮🇹 34.154.127.78

🇺🇸 20.65.145.240

🇮🇳 2409:40c4:11e6:c92d:193f:45e8:77f:1137

🇨🇳 223.221.38.226

🇷🇺 212.104.88.237

192.168.200.171

🇧🇷 187.49.63.41