JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

45.13.234.250

Recent Activity

Abuse Confidence Score

73% Elevated

16 reports

14 reporters · latest 3 days ago

ISP: Contabo GmbH
Usage Type: Data Center/Web Hosting/Transit
ASN: Unknown
Hostname(s): vmi3735069.contaboserver.net
Domain Name: contabo.com
Country: 🇫🇷 France
City: Lauterbourg, Grand Est

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

16 from 14 distinct reporters

First reported

November 9th 2026

Most recent report

3 days ago

Last 60 days

Top reporter locations 🇨🇿 Czechia 6 🇫🇮 Finland 6 🇩🇪 Germany 1

Most common categories Web App Attack 9 Brute-Force 6 Bad Web Bot 4 Hacking 3 Port Scan 3

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 Burayot	2026-11-12 00:03:15 UTC · (3 days ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 45.13.234.250 (FR/France/vmi3735069.contaboserver.net): 1 in the last 3600 secs	Web App Attack
🇬🇷 setupgr	2026-11-11 09:49:07 UTC · (4 days ago)	(mod_security) mod_security (id:11000011) triggered by 45.13.234.250 (FR/France/Bas-Rhin/Lauterbourg/-/[AS51167 Contabo GmbH]): 1 in the last 86400 secs (CF_ENABLE); Ports: ; Direction: inout; Trigger: LF_MODSEC; Logs: [Wed Nov 11 11:49:03.421152 20 ... show more (mod_security) mod_security (id:11000011) triggered by 45.13.234.250 (FR/France/Bas-Rhin/Lauterbourg/-/[AS51167 Contabo GmbH]): 1 in the last 86400 secs (CF_ENABLE); Ports: ; Direction: inout; Trigger: LF_MODSEC; Logs: [Wed Nov 11 11:49:03.421152 2026] [security2:error] [pid 1705699:tid 1705882] [client 45.13.234.250:47542] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "contaboserver.net" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "140"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: vmi3735069.contaboserver.net"] [severity "CRITICAL"] [hostname "154.57.7.73"] [uri "/"] [unique_id "avQ6D31I8PjcbK5t2GNMxAAAAww"] show less	Port Scan
🇫🇮 sibahota	2026-11-11 06:11:50 UTC · (4 days ago)	45.13.234.250 - - [11/Nov/2026:06:11:31 +0000] 157.180.42.246 "GET / HTTP/1.1" 403 37 0.000 "-" "python-requests/2.34.2" - - - "http://157.180.42.246" 45.13.234.250 - - [11/Nov/2026:06:11:47 +0000] 157.180.42.246 "GET / HTTP/1.1" 403 37 0.000 "-" "py ... show more 45.13.234.250 - - [11/Nov/2026:06:11:31 +0000] 157.180.42.246 "GET / HTTP/1.1" 403 37 0.000 "-" "python-requests/2.34.2" - - - "http://157.180.42.246" 45.13.234.250 - - [11/Nov/2026:06:11:47 +0000] 157.180.42.246 "GET / HTTP/1.1" 403 37 0.000 "-" "python-requests/2.34.2" - - - "http://157.180.42.246" ... show less	Bad Web Bot
🇫🇮 NoaQT	2026-11-11 05:16:19 UTC · (4 days ago)	2026-11-11T05:16:18.882569+00:00 ingress-1 haproxy[68082]: 45.13.234.250:53808 [11/Nov/2026:05:16:18.882] https_in https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 121/121/0/0/0 0/0 "GET /robots.txt HTTP/1.1" 2026-11-11T05:16:18.882929+00:00 ingress-1 ... show more 2026-11-11T05:16:18.882569+00:00 ingress-1 haproxy[68082]: 45.13.234.250:53808 [11/Nov/2026:05:16:18.882] https_in https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 121/121/0/0/0 0/0 "GET /robots.txt HTTP/1.1" 2026-11-11T05:16:18.882929+00:00 ingress-1 haproxy[68082]: 45.13.234.250:53814 [11/Nov/2026:05:16:18.882] https_in https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 122/122/0/0/0 0/0 "GET /login HTTP/1.1" 2026-11-11T05:16:18.883204+00:00 ingress-1 haproxy[68082]: 45.13.234.250:53816 [11/Nov/2026:05:16:18.882] https_in https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 122/122/0/0/0 0/0 "GET /.well-known/security.txt HTTP/1.1" 2026-11-11T05:16:18.919258+00:00 ingress-1 haproxy[68082]: 45.13.234.250:53814 [11/Nov/2026:05:16:18.918] https_in https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 123/123/0/0/0 0/0 "GET /favicon.ico HTTP/1.1" 2026-11-11T05:16:18.937105+00:00 ingress-1 haproxy[68082]: 45.13.234.250:53794 [11/Nov/2026:05:16:18.936] https_in https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- ... show less	DDoS Attack
🇩🇪 Erpelstolz	2026-11-11 03:10:33 UTC · (4 days ago)	external host: 45.13.234.250 - - [11/Nov/2026:04:10:31 +0100] "GET /?bsrjdmia=%3Cscript%3Ealert%28%22XSS%22%29%3B%3C%2Fscript%3E&qbqhmcmy=UNION+SELECT+ALL+FROM+information_schema+AND+%22+or+SLEEP%285%29+or+%22&wuzenhnz=..%2F..%2Fetc%2Fpasswd HTTP/1.1 ... show more external host: 45.13.234.250 - - [11/Nov/2026:04:10:31 +0100] "GET /?bsrjdmia=%3Cscript%3Ealert%28%22XSS%22%29%3B%3C%2Fscript%3E&qbqhmcmy=UNION+SELECT+ALL+FROM+information_schema+AND+%22+or+SLEEP%285%29+or+%22&wuzenhnz=..%2F..%2Fetc%2Fpasswd HTTP/1.1" 200 1057 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:130.0) Gecko/20100101 Firefox/130.0" CF-Ray:- CF-IP:- show less	Web App Attack
🇫🇮 mnazibo	2026-11-11 02:00:13 UTC · (4 days ago)	Date: Nov 11 04:53:34 2026 EAT \| Reported IP: 45.13.234.250 mod_security \| id: 920350 930100 930110 930120 932160 941100 941110 941160 941390 942100 942140 942160 942190 942270 949110 920280 \| DE/usernameab.my_domain/- \| Connections: 1 \| Blocked: Per ... show more Date: Nov 11 04:53:34 2026 EAT \| Reported IP: 45.13.234.250 mod_security \| id: 920350 930100 930110 930120 932160 941100 941110 941160 941390 942100 942140 942160 942190 942270 949110 920280 \| DE/usernameab.my_domain/- \| Connections: 1 \| Blocked: Permanent Block: [LF_MODSEC] \| Logs: ; Host header is a numeric IP address; Host header is a numeric IP address; Host header is a numeric IP address; Path Traversal Attack (/../) or (/.../); Path Traversal Attack (/../) or (/.../); Path Traversal Attack (/../) or (/.../); Path Traversal Attack (/../) or (/.../); OS File Access Attempt; Remote Command Execution: Unix Shell Code Found; XSS Attack Detected via libinjection; XSS Filter - Category 1: Script Tag Vector; NoScript XSS InjectionChecker: HTML Injection; Javascript method detected; SQL Injection Attack Detected via libinjection; SQL Injection Attack: Common DB Names Detected; Detects blind sqli tests using sleep() or benchmark(); Detects show less	SQL Injection Brute-Force Bad Web Bot
🇫🇮 stinpriza	2026-11-11 00:01:54 UTC · (4 days ago)	Web App Attack	Web App Attack
🇫🇮 xela_uvas	2026-11-10 23:26:01 UTC · (4 days ago)	SSH attack	Brute-Force SSH
🇫🇮 kumiko	2026-11-10 22:53:40 UTC · (4 days ago)	[2026-11-11 00:53:40] Probing for exploits [1 requests] "\x16\x03\x01\x05\xee\x01" 302	Brute-Force Bad Web Bot Web App Attack
🇩🇰 RhQM	2026-11-10 12:40:06 UTC · (5 days ago)		Bad Web Bot Exploited Host Web App Attack
Anonymous	2026-11-10 07:12:31 UTC · (5 days ago)	IP matched detection query more than 2 hosts and only bad rq long ban.	Brute-Force Web App Attack Hacking
🇨🇿 UltimWeb	2026-11-10 06:42:46 UTC · (5 days ago)	Fail2ban_apache-auth	Brute-Force Web App Attack
Anonymous	2026-11-10 06:35:41 UTC · (5 days ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
🇨🇿 Countryman	2026-11-10 05:07:44 UTC · (5 days ago)	repeated unauthorized connection attempts, host sweep, port scan	Port Scan
🇨🇿 Countryman	2026-11-10 05:07:44 UTC · (5 days ago)	repeated unauthorized connection attempts, host sweep, port scan	Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 138.2.225.106

🇺🇸 47.156.180.104

🇧🇷 200.152.6.236

🇫🇮 147.185.133.140

🇫🇮 147.185.133.8

🇨🇳 117.133.29.2

🇺🇸 104.248.211.249

🇺🇸 40.124.187.33

🇺🇸 216.25.90.34

🇺🇸 98.60.42.117

🇸🇪 83.209.249.224

🇺🇸 34.227.156.153

🇳🇱 193.47.62.69

🇳🇱 185.242.226.11

🇫🇷 163.5.241.108

🇺🇸 157.230.84.5

🇻🇺 138.226.239.233

🇺🇸 136.108.239.77

🇺🇸 104.197.19.69

🇧🇩 103.143.126.175