JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

45.138.249.177

Neutral Activity

Abuse Confidence Score

0% Low Risk

5 reports

4 reporters · latest 2 months ago

ISP: LonConnect Ltd
Usage Type: Data Center/Web Hosting/Transit
ASN: AS212286
Domain Name: lonconnect.co.uk
Country: 🇬🇧 United Kingdom of Great Britain and Northern Ireland
City: London, England

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

45.138.249.177 has been reported 5 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

5 from 4 distinct reporters

First reported

July 19th 2024

Most recent report

2 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob	2026-08-23 00:51:02 UTC · (2 months ago)	L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one or two per address from thousands of addresses, no page assets loaded \| path: /102-velo-route-aero \| query: q=Stock+magasin-Cycling+Cavaillon-Cycling+ ... show more L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one or two per address from thousands of addresses, no page assets loaded \| path: /102-velo-route-aero \| query: q=Stock+magasin-Cycling+Cavaillon-Cycling+H%C3%A9nin%5C-Beaumont-Cycling+Montpellier/Taille-L/Famille-Xelius&order=product.refer show less	DDoS Attack Web App Attack
🇯🇵 Short-legs-Spider	2026-07-23 03:55:21 UTC · (3 months ago)	Disregard of robots.txt -- [23/Jul/2026:12:55:21 +0900] "GET /==9.htm HTTP/2.0" 403 76 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36"	Bad Web Bot
🇮🇩 Hamzah Yakub	2025-08-24 18:10:26 UTC · (1 year ago)	Hacking Attempt /wp-admin/	Hacking Web App Attack
🇺🇸 TPI-Abuse	2025-07-28 04:12:54 UTC · (1 year ago)	(mod_security) mod_security (id:225170) triggered by 45.138.249.177 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 28 00:12:48.818422 2025] [security2:error] [pid 5603:tid 5603] [client 45.138.249.177:63844] M ... show more (mod_security) mod_security (id:225170) triggered by 45.138.249.177 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 28 00:12:48.818422 2025] [security2:error] [pid 5603:tid 5603] [client 45.138.249.177:63844] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.vangentholding.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.vangentholding.com"] [uri "/wp-json/wp/v2/users/8903"] [unique_id "aIb4wMKmA3IdU8k_g-i3VQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-07-19 01:19:15 UTC · (2 years ago)	(mod_security) mod_security (id:225170) triggered by 45.138.249.177 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 18 21:19:10.640485 2024] [security2:error] [pid 2854:tid 2854] [client 45.138.249.177:29586] [ ... show more (mod_security) mod_security (id:225170) triggered by 45.138.249.177 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 18 21:19:10.640485 2024] [security2:error] [pid 2854:tid 2854] [client 45.138.249.177:29586] [client 45.138.249.177] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.vangentholding.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.vangentholding.com"] [uri "/wp-json/wp/v2/users/328250"] [unique_id "Zpm_DnGvS2VkeaSSHWTJqgAAABw"] show less	Brute-Force Bad Web Bot Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 2a10:3c0:5:0:1:24:0:5

🇨🇳 2404:c2c0:8f41:ef02:1943:2d85:a0ad:2f

🇫🇷 64.31.4.41

🇺🇸 40.119.45.41

🇮🇩 36.67.227.241

🇧🇪 198.235.24.168

🇳🇱 192.253.248.121

🇦🇹 185.126.236.44

🇺🇸 172.237.150.22

🇺🇸 158.247.24.139

🇻🇳 123.20.144.243

🇮🇳 103.176.173.168

🇵🇰 103.167.163.173

🇧🇩 103.158.158.210

🇮🇳 103.110.251.218

🇲🇱 41.73.98.21

🇧🇷 2804:25f4:1101:4d01:d0a6:403e:58de:5622

🇹🇼 198.235.24.69

🇹🇳 196.179.143.85

🇳🇱 193.47.62.69