JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

45.135.162.252

Neutral Activity

Abuse Confidence Score

0% Low Risk

97 reports

75 reporters · latest 4 months ago

ISP: IPXO LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS142036
Hostname(s): vps29485539.hosteons.net
Domain Name: ipxo.com
Country: 🇺🇸 United States of America
City: Los Angeles, California

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

45.135.162.252 has been reported 97 times. The most recent report is from 4 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

97 from 75 distinct reporters

First reported

April 16th 2026

Most recent report

4 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 Diskominfo Lumajang	2026-06-20 10:15:03 UTC · (4 months ago)	Security Event Detected by SOC Diskominfo Lumajang: event=alert, hits=4	Brute-Force
🇮🇩 Diskominfo Lumajang	2026-06-18 10:15:02 UTC · (4 months ago)	Security Event Detected by SOC Diskominfo Lumajang: event=alert, hits=4	Brute-Force
Anonymous	2026-06-16 16:06:23 UTC · (4 months ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
🇫🇷 Cuteminded	2026-06-16 13:13:24 UTC · (4 months ago)	Blocked for probing SSH accounts	Brute-Force SSH
🇩🇪 genclikfederasyonu.org	2026-06-16 12:31:43 UTC · (4 months ago)	fail2banned (ssh brute)	Brute-Force SSH
🇺🇸 MPL	2026-06-16 12:24:10 UTC · (4 months ago)	tcp/23 (4 or more attempts)	Port Scan
🇸🇬 tommygod.ddns.net	2026-06-16 12:15:20 UTC · (4 months ago)	2026-06-16T12:14:12.503773+00:00 mailtommygod sshd[505664]: Invalid user orangepi from 45.135.162.252 port 47052 2026-06-16T12:14:12.510565+00:00 mailtommygod sshd[505664]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ru ... show more 2026-06-16T12:14:12.503773+00:00 mailtommygod sshd[505664]: Invalid user orangepi from 45.135.162.252 port 47052 2026-06-16T12:14:12.510565+00:00 mailtommygod sshd[505664]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.135.162.252 2026-06-16T12:14:14.831908+00:00 mailtommygod sshd[505664]: Failed password for invalid user orangepi from 45.135.162.252 port 47052 ssh2 2026-06-16T12:15:17.149209+00:00 mailtommygod sshd[505871]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.135.162.252 user=root 2026-06-16T12:15:19.395902+00:00 mailtommygod sshd[505871]: Failed password for root from 45.135.162.252 port 36406 ssh2 show less	Brute-Force SSH
🇺🇸 cwytech	2026-06-16 11:59:02 UTC · (4 months ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: crowdsecurity/http-cve-2021-41773.	Bad Web Bot Web App Attack
🇩🇪 itsolon	2026-06-16 11:27:28 UTC · (4 months ago)	[16/Jun/2026:13:27:25 +0200] 178160924550.937220 45.135.162.252 52660 217.154.7.177 80 [16/Jun/2026:13:27:26 +0200] 178160924634.474484 45.135.162.252 52660 217.154.7.177 80 [16/Jun/2026:13:27:26 +0200] 178160924662.075540 45.135.162.252 52660 217.15 ... show more [16/Jun/2026:13:27:25 +0200] 178160924550.937220 45.135.162.252 52660 217.154.7.177 80 [16/Jun/2026:13:27:26 +0200] 178160924634.474484 45.135.162.252 52660 217.154.7.177 80 [16/Jun/2026:13:27:26 +0200] 178160924662.075540 45.135.162.252 52660 217.154.7.177 80 [16/Jun/2026:13:27:27 +0200] 178160924778.773976 45.135.162.252 52660 217.154.7.177 80 [16/Jun/2026:13:27:28 +0200] 178160924841.994042 45.135.162.252 52660 217.154.7.177 80 ... show less	Port Scan Hacking Brute-Force Web App Attack
🇯🇵 mkaraki	2026-06-16 11:11:33 UTC · (4 months ago)	1781608292 # Service_probe # SIGNATURE_SEND # source_ip:45.135.162.252 # dst_port:23 ...	Port Scan
Anonymous	2026-06-16 11:11:00 UTC · (4 months ago)	2026-06-16T11:04:40.262640+00:00 rs2 sshd[576689]: Invalid user admin from 45.135.162.252 port 50828 2026-06-16T11:05:26.229100+00:00 rs2 sshd[576696]: Invalid user orangepi from 45.135.162.252 port 45370 2026-06-16T11:10:59.167532+00:00 rs2 sshd[576 ... show more 2026-06-16T11:04:40.262640+00:00 rs2 sshd[576689]: Invalid user admin from 45.135.162.252 port 50828 2026-06-16T11:05:26.229100+00:00 rs2 sshd[576696]: Invalid user orangepi from 45.135.162.252 port 45370 2026-06-16T11:10:59.167532+00:00 rs2 sshd[576740]: Invalid user test from 45.135.162.252 port 36042 ... show less	Brute-Force SSH
🇵🇱 Wepted	2026-06-16 10:27:22 UTC · (4 months ago)	2026-06-16T12:22:00.962675+02:00 axisverse sshd-session[1065528]: Invalid user admin from 45.135.162.252 port 36780 2026-06-16T12:22:41.265886+02:00 axisverse sshd-session[1067780]: Invalid user orangepi from 45.135.162.252 port 37102 2026-06-16T12:2 ... show more 2026-06-16T12:22:00.962675+02:00 axisverse sshd-session[1065528]: Invalid user admin from 45.135.162.252 port 36780 2026-06-16T12:22:41.265886+02:00 axisverse sshd-session[1067780]: Invalid user orangepi from 45.135.162.252 port 37102 2026-06-16T12:27:21.102087+02:00 axisverse sshd-session[1083304]: Invalid user test from 45.135.162.252 port 34120 ... show less	Brute-Force SSH
🇮🇩 Diskominfo Lumajang	2026-06-16 10:15:02 UTC · (4 months ago)	Security Event Detected by SOC Diskominfo Lumajang: event=alert, hits=4	Brute-Force
🇺🇸 TPI-Abuse	2026-06-16 10:03:37 UTC · (4 months ago)	(mod_security) mod_security (id:218420) triggered by 45.135.162.252 (vps29485539.hosteons.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 06:03:30.236015 2026] [security2:error] [pid 8872:tid 8872] [client ... show more (mod_security) mod_security (id:218420) triggered by 45.135.162.252 (vps29485539.hosteons.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 06:03:30.236015 2026] [security2:error] [pid 8872:tid 8872] [client 45.135.162.252:37166] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in\|out\|err)\|(in\|out)put\|fd\|memory\|temp\|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found\|\|192.64.150.170:80\|F\|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "192.64.150.170"] [uri "/hello.world"] [unique_id "ajEfcjcbVeaO2j7_892LgwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-16 09:51:55 UTC · (4 months ago)	Repeated SSH brute force and user enumeration attempts against a secured server. Multiple failed authentication attempts from this IP across an extended period.	Brute-Force SSH

Showing 1 to 15 of 97 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇭🇰 220.246.40.63

🇺🇸 216.180.246.115

🇺🇸 205.210.31.98

🇧🇷 190.115.84.25

🇧🇷 189.8.124.152

🇮🇳 103.89.59.220

🇺🇸 91.230.168.71

🇷🇴 80.94.95.116

🇺🇸 66.132.172.43

🇧🇷 2804:1b1:a940:9047:70f2:24dd:949d:2ba4

🇺🇸 201.14.252.139

🇩🇪 167.94.145.24

🇯🇵 153.174.228.24

🇺🇸 147.185.132.135

🇵🇭 143.44.192.176

🇮🇳 124.123.68.73

🇮🇳 117.253.4.14

🇺🇸 97.81.64.66

🇸🇪 78.68.69.14

🇺🇸 69.164.218.47