AbuseIPDB » 45.142.179.50

45.142.179.50 was found in our database!

This IP was reported 118 times. Confidence of Abuse is 100%: ?

100%

ISP	netcup GmbH
Usage Type	Data Center/Web Hosting/Transit
Hostname(s)	nobody.yourvserver.net
Domain Name	netcup.de
Country	Germany
City	Nuremberg, Bayern

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 45.142.179.50

Whois 45.142.179.50

IP Abuse Reports for 45.142.179.50:

This IP address has been reported a total of 118 times from 78 distinct sources. 45.142.179.50 was first reported on July 27th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Steptoe	2024-08-30 23:28:10 (2 weeks ago)	GET /_fragment _path=_controller%3Dphpinfo%26what%3D-1%26return_value%3Dnull&_hash=ezYTiUnTdWoRdwDl9 ... show moreGET /_fragment _path=_controller%3Dphpinfo%26what%3D-1%26return_value%3Dnull&_hash=ezYTiUnTdWoRdwDl9X0LdT50P0zAF7mu2nXCPLhOXK4%3D Decoded: GET /_fragment _path=_controller=phpinfo&what=-1&return_value=null&_hash=ezYTiUnTdWoRdwDl9X0LdT50P0zAF7mu2nXCPLhOXK4= Hostname: nobody.yourvserver.net UAs: Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/605.1.15+(KHTML,+like+Gecko)+Version/17.3+Safari/605.1.52 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/97.0.4692.71+Safari/537.36+Edg/97.0.1072.55 show less	Web App Attack
lavnet.net	2024-08-28 03:36:29 (2 weeks ago)	[Wed Aug 28 02:28:32.110650 2024] [authz_core:error] [pid 2289584:tid 2289584] [client 45.142.179.50 ... show more[Wed Aug 28 02:28:32.110650 2024] [authz_core:error] [pid 2289584:tid 2289584] [client 45.142.179.50:50216] AH01630: client denied by server configuration: /var/www/a0a0.org/web/index.php [Wed Aug 28 02:28:32.113010 2024] [authz_core:error] [pid 2289584:tid 2289584] [client 45.142.179.50:50216] AH01630: client denied by server configuration: /var/www/a0a0.org/web/index.php [Wed Aug 28 03:36:28.917498 2024] [authz_core:error] [pid 2289584:tid 2289584] [client 45.142.179.50:49160] AH01630: client denied by server configuration: /var/www/a0a0.org/web/index.php ... show less	Brute-Force
IRISIO	2024-08-27 14:20:16 (2 weeks ago)	scans/SQL injection/spam posts : 278 queries	SQL Injection Web App Attack
Anonymous	2024-08-27 07:02:09 (2 weeks ago)	[27/Aug/2024:15:30:23 +1000] "GET /_fragment?_path=_controller%3Dphpinfo%26what%3D-1%26return_value% ... show more[27/Aug/2024:15:30:23 +1000] "GET /_fragment?_path=_controller%3Dphpinfo%26what%3D-1%26return_value%3Dnull&_hash=heXKDqbXRhXFZ0T%2FMu3zQRTp3rsGzPDuwJdDzRhI9Tg%3D HTTP/1.1" 404 196 [27/Aug/2024:17:02:07 +1000] "GET /_fragment?_path=_controller%3Dphpinfo%26what%3D-1%26return_value%3Dnull&_hash=heXKDqbXRhXFZ0T%2FMu3zQRTp3rsGzPDuwJdDzRhI9Tg%3D HTTP/1.1" 404 196 show less	Hacking Web App Attack
Anonymous	2024-08-27 06:19:41 (2 weeks ago)	45.142.179.50 - - [27/Aug/2024:06:59:35 +0200] "GET /_fragment?_path=_controller%3Dphpinfo%26what%3D ... show more45.142.179.50 - - [27/Aug/2024:06:59:35 +0200] "GET /_fragment?_path=_controller%3Dphpinfo%26what%3D-1%26return_value%3Dnull&_hash=oWwiWm%2BRxgDPRWZBPvaLFd8VB1aFWiPCz5e1BiWwaR0%3D HTTP/1.1" 404 3754 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_16) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3 Safari/605.1.15 Reeder/4.2.8" 45.142.179.50 - - [27/Aug/2024:08:11:38 +0200] "GET /_fragment?_path=_controller%3Dphpinfo%26what%3D-1%26return_value%3Dnull&_hash=cO7ofrBCY0nVqaXXzP1x83h9trp%2BX8nPU21XW8TdAUY%3D HTTP/1.1" 404 3758 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.142.179.50 - - [27/Aug/2024:08:19:40 +0200] "GET /_fragment?_path=_controller%3Dphpinfo%26what%3D-1%26return_value%3Dnull&_hash=oWwiWm%2BRxgDPRWZBPvaLFd8VB1aFWiPCz5e1BiWwaR0%3D HTTP/1.1" 404 3754 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/78.0" ... show less	Web App Attack
findlab	2024-08-27 06:00:01 (2 weeks ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
anon333	2024-08-26 19:34:58 (2 weeks ago)	Hacker syslog review 1724700898	Hacking
urmarcht	2024-08-26 18:40:07 (2 weeks ago)	Bot attack detected : webscan vurnerability	Web App Attack
Kiwi Bloke	2024-08-26 18:21:28 (2 weeks ago)	Unauthorized connection attempt(s) from IP address 45.142.179.50	Brute-Force Web App Attack
EinfxchFinn	2024-08-26 16:19:11 (2 weeks ago)	Unauthorized connection attempt to port 443 from 45.142.179.50	Port Scan
Smel	2024-08-26 16:18:03 (2 weeks ago)	Unauthorized Probe/Connection, Hack -	Port Scan Hacking
Anonymous	2024-08-26 14:30:32 (2 weeks ago)	Automatic report - Vulnerability scan /	Web App Attack
Anonymous	2024-08-26 08:46:42 (2 weeks ago)	fail2ban apache-modsecurity [msg "Restricted access based on geolocation rules."] [uri "/_fragment"]	Web App Attack
Anonymous	2024-08-26 07:33:21 (2 weeks ago)	fail2ban apache-modsecurity [msg "Request Missing an Accept Header"] [uri "/"]	Web App Attack
LTM	2024-08-26 06:20:01 (2 weeks ago)	WebServer - Attempts to exploit	Hacking Brute-Force Web App Attack