This IP address has been reported a total of
11
times from
7 distinct
sources.
45.147.11.80 was first reported on
August 13th 2025 , and the most recent report was
1 day ago United States of America
with 3
reports;
Canada
with 2
reports;
United Kingdom of Great Britain and Northern Ireland
with 1
report.
The most common categories in these recent reports were:
Port Scan
5
times;
Hacking
3
times;
Brute-Force
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇬🇧
sandra361
2026-09-26 03:11:32
(1 day ago)
Port scan detected: 11 attempts across 1 port (3306). | Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=45. ...
show more
Port scan detected: 11 attempts across 1 port (3306). | Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=45.147.11.80 LEN=40 TOS=0x00 PREC=0x00 TTL=117 ID=35819 DF PROTO=TCP SPT=28423 DPT=3306 WINDOW=42340 RES=0x00 ACK URGP=0
show less
Port Scan
🇺🇸
drewf.ink
2026-09-24 23:35:19
(2 days ago)
[23:35] Connected to MSSQL honeypot
Brute-Force
Hacking
🇨🇦
dpinse
2026-09-23 11:55:57
(3 days ago)
Honeypot [honeypot-ca-sensor1]: Unauthorized traffic on 3306/mysqld
Port Scan
🇺🇸
donarev419
2026-09-23 04:25:05
(3 days ago)
Connection to port 500 with data transfer.
Data preview:
Port Scan
Hacking
🇨🇦
dpinse
2026-09-22 09:39:53
(4 days ago)
Honeypot [honeypot-ca-sensor1]: Unauthorized traffic on 3306/mysqld
Port Scan
🇺🇸
donarev419
2026-09-22 02:23:48
(5 days ago)
Connection to port 500 with data transfer.
Data preview:
Port Scan
Hacking
🇺🇸
TPI-Abuse
2026-04-27 02:54:20
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 45.147.11.80 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 45.147.11.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 26 22:54:13.714163 2026] [security2:error] [pid 5032:tid 5038] [client 45.147.11.80:13031] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||duplexgoldmine.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "duplexgoldmine.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ae7P1UIaieGr9uoOSbKfbQAAAEQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-24 10:36:29
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 45.147.11.80 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 45.147.11.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 24 06:36:23.830162 2026] [security2:error] [pid 22163:tid 22177] [client 45.147.11.80:42549] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||teritemme.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "teritemme.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aetHp3WgbUoZFTCwR1VpiwAAAMc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-24 06:11:13
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 45.147.11.80 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 45.147.11.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 24 02:11:07.784790 2026] [security2:error] [pid 285436:tid 285436] [client 45.147.11.80:57199] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||stantontownship.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "stantontownship.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aesJe76Zry1q7h4u03SvJgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
voormedia
2025-09-13 05:15:28
(1 year ago)
Accessed trap at '/xmlrpc.php'
Web App Attack
2025-08-13 01:47:01
(1 year ago)
WordPress Brute Force
Brute-Force
Showing 1 to
11
of 11 reports
