JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

45.132.125.251

Neutral Activity

Abuse confidence score ?

0% Low Risk

61 reports

50 reporters · latest 4 years ago

ISP	LUMASERV GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200303
Domain Name	lumaserv.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

45.132.125.251 has been reported 61 times. The most recent report is from 4 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 45.132.125.251

Export CSV

This IP address has been reported a total of 61 times from 50 distinct sources. 45.132.125.251 was first reported on January 13th 2022, and the most recent report was 4 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇬 Samuel K	2022-01-17 14:00:07 (4 years ago)	Web scan/attack	Port Scan Web App Attack
🇰🇪 mnazibo	2022-01-17 02:18:29 (4 years ago)	Time: Mon Jan 17 01:34:31 2022 +0300 IP: 45.132.125.251 (DE/Germany/-) Failures: 5 (mod_ ... show more Time: Mon Jan 17 01:34:31 2022 +0300 IP: 45.132.125.251 (DE/Germany/-) Failures: 5 (mod_security) Interval: 3600 seconds Blocked: Permanent Block [LF_MODSEC] Log entries: [Mon Jan 17 01:00:19.511368 2022] [:error] [pid 3605912:tid 140705435428608] [client 45.132.125.251:37050] [client 45.132.125.251] ModSecurity: Access denied with code 403 (phase 1). Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "31"] [id "960032"] [rev "2"] [msg "Method is not allowed by policy"] [data "CONNECT"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/METHOD_NOT_ALLOWED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A6"] [tag "OWASP_AppSensor/RE1"] [tag "PCI/12.1"] [hostname "45.142.107.17"] [uri "/"] [unique_id "YeSVc20a2Z3LegA_V80wWQAAABM"] [Mon Jan 17 01:08:50.793666 2022] [:error] [pid 3613249:tid 140705544533760] show less	FTP Brute-Force Port Scan Hacking SQL Injection Brute-Force SSH
🇱🇺 snydr	2022-01-16 17:00:49 (4 years ago)	connection attempt port 80 TCP	Port Scan
🇬🇧 myintarweb	2022-01-16 16:57:21 (4 years ago)	45.132.125.251 - - [16/Jan/2022:21:57:19 +0000] 80 "CONNECT 45.142.107.17:4444 HTTP/1.1" 405 1607 "- ... show more 45.132.125.251 - - [16/Jan/2022:21:57:19 +0000] 80 "CONNECT 45.142.107.17:4444 HTTP/1.1" 405 1607 "-" "-" ... show less	Hacking Bad Web Bot Web App Attack
🇫🇷 someone	2022-01-16 16:47:40 (4 years ago)	:80 45.132.125.251 - - [16/Jan/2022:22:47:39 +0100] "CONNECT 45.142.107.17:4444 HTTP/1.1" 301 413 " ... show more :80 45.132.125.251 - - [16/Jan/2022:22:47:39 +0100] "CONNECT 45.142.107.17:4444 HTTP/1.1" 301 413 "-" "-" show less	Web App Attack
🇩🇪 ipcop.net	2022-01-14 05:07:33 (4 years ago)	Jan 14 00:07:21 statusweb1.srvfarm.net sshd[31113]: error: Received disconnect from 45.132.125.251 p ... show more Jan 14 00:07:21 statusweb1.srvfarm.net sshd[31113]: error: Received disconnect from 45.132.125.251 port 53466:3: com.jcraft.jsch.JSchException: Auth fail [preauth] Jan 14 00:07:28 statusweb1.srvfarm.net sshd[31204]: error: Received disconnect from 45.132.125.251 port 55374:3: com.jcraft.jsch.JSchException: Auth fail [preauth] show less	Brute-Force
🇩🇪 ipcop.net	2022-01-14 05:07:33 (4 years ago)	Jan 14 00:07:21 statusweb1.srvfarm.net sshd[31113]: error: Received disconnect from 45.132.125.251 p ... show more Jan 14 00:07:21 statusweb1.srvfarm.net sshd[31113]: error: Received disconnect from 45.132.125.251 port 53466:3: com.jcraft.jsch.JSchException: Auth fail [preauth] Jan 14 00:07:28 statusweb1.srvfarm.net sshd[31204]: error: Received disconnect from 45.132.125.251 port 55374:3: com.jcraft.jsch.JSchException: Auth fail [preauth] show less	Brute-Force
🇩🇪 ipcop.net	2022-01-14 05:07:33 (4 years ago)	Jan 14 00:07:21 statusweb1.srvfarm.net sshd[31113]: error: Received disconnect from 45.132.125.251 p ... show more Jan 14 00:07:21 statusweb1.srvfarm.net sshd[31113]: error: Received disconnect from 45.132.125.251 port 53466:3: com.jcraft.jsch.JSchException: Auth fail [preauth] Jan 14 00:07:28 statusweb1.srvfarm.net sshd[31204]: error: Received disconnect from 45.132.125.251 port 55374:3: com.jcraft.jsch.JSchException: Auth fail [preauth] show less	Brute-Force
🇩🇪 ipcop.net	2022-01-14 05:07:33 (4 years ago)	Jan 14 00:07:21 statusweb1.srvfarm.net sshd[31113]: error: Received disconnect from 45.132.125.251 p ... show more Jan 14 00:07:21 statusweb1.srvfarm.net sshd[31113]: error: Received disconnect from 45.132.125.251 port 53466:3: com.jcraft.jsch.JSchException: Auth fail [preauth] Jan 14 00:07:28 statusweb1.srvfarm.net sshd[31204]: error: Received disconnect from 45.132.125.251 port 55374:3: com.jcraft.jsch.JSchException: Auth fail [preauth] show less	Brute-Force
🇩🇪 ipcop.net	2022-01-14 05:07:33 (4 years ago)	Jan 14 00:07:21 statusweb1.srvfarm.net sshd[31113]: error: Received disconnect from 45.132.125.251 p ... show more Jan 14 00:07:21 statusweb1.srvfarm.net sshd[31113]: error: Received disconnect from 45.132.125.251 port 53466:3: com.jcraft.jsch.JSchException: Auth fail [preauth] Jan 14 00:07:28 statusweb1.srvfarm.net sshd[31204]: error: Received disconnect from 45.132.125.251 port 55374:3: com.jcraft.jsch.JSchException: Auth fail [preauth] show less	Brute-Force
🇩🇪 ipcop.net	2022-01-14 05:07:33 (4 years ago)	Jan 14 00:07:21 statusweb1.srvfarm.net sshd[31113]: error: Received disconnect from 45.132.125.251 p ... show more Jan 14 00:07:21 statusweb1.srvfarm.net sshd[31113]: error: Received disconnect from 45.132.125.251 port 53466:3: com.jcraft.jsch.JSchException: Auth fail [preauth] Jan 14 00:07:28 statusweb1.srvfarm.net sshd[31204]: error: Received disconnect from 45.132.125.251 port 55374:3: com.jcraft.jsch.JSchException: Auth fail [preauth] show less	Brute-Force
🇩🇪 formality	2022-01-14 02:59:38 (4 years ago)	Invalid user admin from 45.132.125.251 port 60704	Brute-Force SSH
Anonymous	2022-01-13 21:30:59 (4 years ago)	Invalid user admin from 45.132.125.251 port 43838	Brute-Force SSH
Anonymous	2022-01-13 21:30:59 (4 years ago)	Invalid user admin from 45.132.125.251 port 43838	Brute-Force SSH
🇩🇪 zeitschel.net	2022-01-13 18:29:58 (4 years ago)	Jan 14 00:29:57 hosting sshd[340917]: Failed password for invalid user ubnt from 45.132.125.251 port ... show more Jan 14 00:29:57 hosting sshd[340917]: Failed password for invalid user ubnt from 45.132.125.251 port 60920 ssh2 Jan 14 00:29:55 hosting sshd[340917]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.132.125.251 Jan 14 00:29:55 hosting sshd[340917]: Invalid user ubnt from 45.132.125.251 port 60920 Jan 14 00:29:57 hosting sshd[340917]: Failed password for invalid user ubnt from 45.132.125.251 port 60920 ssh2 Jan 14 00:29:57 hosting sshd[340917]: error: Received disconnect from 45.132.125.251 port 60920:3: com.jcraft.jsch.JSchException: Auth fail [preauth] ... show less	Brute-Force SSH

Showing 1 to 15 of 61 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.206

🇻🇳 116.99.173.68

🇷🇺 81.1.255.186

🇨🇳 58.211.152.4

🇺🇸 34.123.144.72

🇬🇧 2.101.72.125

🇨🇳 1.117.68.141

🇪🇸 212.30.33.97

🇳🇱 195.178.110.26

🇸🇬 193.37.32.78

🇺🇸 192.207.105.196

🇸🇬 172.236.130.34

🇧🇷 131.72.93.76

🇻🇳 116.110.14.209

🇺🇸 104.22.210.37

🇺🇸 104.22.195.121

🇻🇳 103.131.71.224

🇫🇷 85.217.140.37

🇺🇿 84.54.71.1

🇺🇸 43.159.168.131