45.139.85.122

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
49% Elevated
11 reports
11 reporters · latest 2 weeks ago
ISP
NetCrafters OU
Usage Type
Data Center/Web Hosting/Transit
ASN
AS203273
Domain Name
netcrafters.host
Country
🇺🇸 United States of America
City
Charlotte, North Carolina
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
11 from 11 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 2 🇬🇧 United Kingdom of Great Britain and Northern Ireland 2 🇳🇱 Netherlands 2
Most common categories Brute-Force 6 Web App Attack 4 Bad Web Bot 2 Hacking 1 SSH 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇯🇵 SentinalX by uzumaru
Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: api.higgsfield.ai:443
Open Proxy Port Scan
🇫🇷 tecnicorioja
POST /xmlrpc.php [28/Oct/2026:14:09:44
Web App Attack Brute-Force
🇩🇪 klaus_ph
[Wed Oct 28 19:04:58.481699 2026] [php:error] [pid 1236755] [client 45.139.85.122:40294] script '/var/www/html/xmlrpc.php' not found or unable to stat ...
Brute-Force
🇩🇪 MusicLibrary
Attempted access to non existent wordpress urls
Bad Web Bot
🇧🇷 Host One
Web vulnerability scanning: WordPress xmlrpc.php abuse. Blocked by firewall on 5 different hosting servers. Protocol TCP, port 80, 443 (HTTP/HTTPS). Automated report.
Brute-Force Web App Attack
🇷🇴 iulianh
80,443
Brute-Force SSH
🇳🇱 tmiland
Brute-Force
🇮🇳 dineshskt4all
[Wed Oct 28 12:53:36.304843 2026] [proxy_fcgi:error] [pid 601876:tid 127273755727552] [client 45.139.85.122:0] AH01071: Got error 'Primary script unknown' ...
Brute-Force
🇳🇱 ipoac.nl
ipoac.nl:80 45.139.85.122 - - [28/Oct/2026:13:33:53 +0100] ipoac.nl "POST /xmlrpc.php HTTP/1.1" 302 925 "-" "Mozilla/5.0 (X11; Linux x86_64) pingback-farm/1.0"
Bad Web Bot
Anonymous
Probing for common web apps (e.g. wordpress) or invalid web tech (e.g. Querying for PHP services on a non-PHP site) .php
Web App Attack
🇬🇧 abivia
Abivia WAF trigger: Rule staticSite: Request PHP file on a static site. uri: /xmlrpc.php
Hacking Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇦 216.26.232.116
🇳🇱 200.138.46.248
🇺🇸 136.71.26.239
🇨🇳 124.221.142.205
🇳🇱 86.38.187.214
🇩🇪 64.89.160.21
🇳🇱 45.148.10.152
🇬🇧 35.203.211.211
🇧🇩 103.61.18.229
🇳🇱 89.21.67.181
🇻🇬 85.155.15.144
🇺🇸 50.247.88.58
🇺🇸 35.188.110.61
🇺🇸 34.122.190.145
🇧🇪 34.53.218.24
🇺🇸 3.84.60.238
🇮🇳 223.181.31.69
🇺🇸 136.119.170.23
🇨🇳 111.225.214.179
🇨🇳 111.225.214.176
feedback