JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

45.141.215.190

Neutral Activity

Abuse Confidence Score

0% Low Risk

99 reports

66 reporters · latest 1 year ago

ISP: 1337 Services GmbH
Usage Type: Data Center/Web Hosting/Transit
ASN: AS210558
Domain Name: as210558.net
Country: 🇵🇱 Poland
City: Warsaw, Mazovia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

45.141.215.190 has been reported 99 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

99 from 66 distinct reporters

First reported

July 23rd 2023

Most recent report

1 year ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 Gem	2025-10-18 08:34:50 (1 year ago)	Unauthorized web scan.	Web App Attack
🇺🇸 thefoofighter	2025-10-14 05:34:38 (1 year ago)	[Tue Oct 14 05:34:38.102723 2025] [:error] [pid 2758536] [client 45.141.215.190:53115] [client 45.141.215.190] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQU ... show more [Tue Oct 14 05:34:38.102723 2025] [:error] [pid 2758536] [client 45.141.215.190:53115] [client 45.141.215.190] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.sourcemodding.com"] [uri "/.env"] [unique_id "aO3g7q0v-MmYAHQ1QmccAQAAAAM"] [Tue Oct 14 05:34:38.603479 2025] [:error] [pid 2758479] [client 45.141.215.190:53582] [client 45.141.215.190] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_ ... show less	Bad Web Bot Web App Attack
🇩🇪 todix	2025-10-14 05:02:36 (1 year ago)	WebAttack or semilar from 45.141.215.190	Web App Attack
🇺🇸 dtorrer	2025-10-14 05:00:54 (1 year ago)	General vulnerability scan.	Port Scan
🇳🇱 BlueWire Hosting	2025-10-14 04:10:19 (1 year ago)	Scanning for Laravel vulnerabilities	Web App Attack
🇺🇸 TPI-Abuse	2025-10-14 03:48:10 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 45.141.215.190 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 13 23:48:05.373050 2025] [security2:error] [pid 7302:tid 7302] [client 45.141.215.190:0] ModSe ... show more (mod_security) mod_security (id:210492) triggered by 45.141.215.190 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 13 23:48:05.373050 2025] [security2:error] [pid 7302:tid 7302] [client 45.141.215.190:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "antitribu.com"] [uri "/.env"] [unique_id "aO3H9Qa3FN91Vq790oeFtgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-10-14 02:04:34 (1 year ago)	Bot / scanning and/or hacking attempts: GET /.env HTTP/1.1	Hacking Web App Attack
🇬🇧 [email protected]	2025-10-14 00:59:41 (1 year ago)	...	Brute-Force SSH
🇫🇷 tr1n	2025-10-13 23:57:37 (1 year ago)	Triggered Cloudflare WAF (firewallCustom) from PL. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /.env UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64)	Bad Web Bot
Anonymous	2025-10-13 23:42:37 (1 year ago)	Restricted File Access Requests	Hacking Brute-Force
Anonymous	2025-10-13 22:51:32 (1 year ago)	Attempted access to sensitive endpoint (/.env) detected. Automated scan or unauthorized probing.	Web App Attack
Anonymous	2025-10-13 22:04:37 (1 year ago)	/.env	Web App Attack
🇩🇪 LRob	2025-10-13 21:48:31 (1 year ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
🇦🇹 Pingger Shikkoken	2025-10-13 20:42:49 (1 year ago)	2025-10-13T20:42:49+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=45.141.215.190 DST=10.1.1.2 LEN=52 TOS=0x02 PREC=0x40 TTL=117 ID=56292 DF PROTO=TCP SPT=55313 DPT=443 W ... show more 2025-10-13T20:42:49+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=45.141.215.190 DST=10.1.1.2 LEN=52 TOS=0x02 PREC=0x40 TTL=117 ID=56292 DF PROTO=TCP SPT=55313 DPT=443 WINDOW=64240 RES=0x00 CWR ECE SYN URGP=0 2025-10-13T20:42:50+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=45.141.215.190 DST=10.1.1.2 LEN=52 TOS=0x02 PREC=0x40 TTL=117 ID=56293 DF PROTO=TCP SPT=55313 DPT=443 WINDOW=64240 RES=0x00 CWR ECE SYN URGP=0 2025-10-13T20:42:52+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=45.141.215.190 DST=10.1.1.2 LEN=52 TOS=0x00 PREC=0x40 TTL=117 ID=56294 DF PROTO=TCP SPT=55313 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Hacking Bad Web Bot
🇩🇪 conseilgouz	2025-10-13 20:11:29 (1 year ago)	sle-17 : Block hidden directories=>/.env(/)	Hacking

Showing 1 to 15 of 99 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 204.8.96.156

🇬🇧 193.163.125.99

🇧🇷 177.152.30.234

🇬🇧 165.154.129.201

🇬🇧 129.121.94.183

🇺🇸 104.223.83.226

🇺🇸 103.143.239.201

🇫🇷 84.247.137.26

🇭🇰 52.128.227.50

🇺🇸 40.124.113.85

🇨🇳 8.138.216.10

🇰🇷 220.116.117.213

🇺🇸 216.180.246.153

🇳🇱 195.178.110.247

🇳🇱 195.178.110.217

🇵🇰 182.188.24.243

🇭🇰 165.154.67.144

🇺🇸 134.122.116.40

🇯🇵 132.145.122.251

🇰🇷 125.246.95.152