JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

45.148.124.179

Neutral Activity

Abuse confidence score ?

0% Low Risk

27 reports

19 reporters · latest 2 months ago

ISP	TrafficTransitSolution LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	traffictransitsolution.us
Country	🇺🇸 United States of America
City	New York City, New York

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

45.148.124.179 has been reported 27 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 45.148.124.179

This IP address has been reported a total of 27 times from 19 distinct sources. 45.148.124.179 was first reported on June 18th 2022, and the most recent report was 2 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob	2026-07-02 10:01:07 (2 months ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇦🇺 paulshipley.com.au	2026-06-26 01:42:18 (3 months ago)	[Fri Jun 26 11:42:17.504589 2026] [security2:error] [pid 605199] [client 45.148.124.179:17151] [clie ... show more [Fri Jun 26 11:42:17.504589 2026] [security2:error] [pid 605199] [client 45.148.124.179:17151] [client 45.148.124.179] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/xmlrpc.php"] [unique_id "aj3Y-QpDEqZsynRx_s_aWAAAAAQ"] ... show less	Web App Attack
🇺🇸 mnsf	2026-06-07 23:05:16 (3 months ago)	Too many Status 40X (11)	Brute-Force Web App Attack
Anonymous	2026-06-07 17:24:53 (3 months ago)	Multiple web server 400 error codes from same source ip	Web App Attack
🇦🇺 aranguren.org	2026-06-07 02:03:26 (3 months ago)	45.148.124.179 - - [07/Jun/2026:12:03:24 +1000] "GET /.github/workflows/deploy.yml HTTP/1.1" 404 999 ... show more 45.148.124.179 - - [07/Jun/2026:12:03:24 +1000] "GET /.github/workflows/deploy.yml HTTP/1.1" 404 999 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" 45.148.124.179 - - [07/Jun/2026:12:03:24 +1000] "GET /.github/workflows/ci.yml HTTP/1.1" 404 999 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" 45.148.124.179 - - [07/Jun/2026:12:03:25 +1000] "GET /.env HTTP/1.1" 404 999 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" 45.148.124.179 - - [07/Jun/2026:12:03:25 +1000] "GET /.env.local HTTP/1.1" 404 999 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" 45.148.124.179 - - [07/Jun/2026:12:03:26 +1000] "GET /.env.production HTTP/1.1" 404 999 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" 45.148.124.179 - - [07/Jun/2026:12:03:26 +1000] "GET /config/sec ... show less	Bad Web Bot
🇪🇸 Francisco Vallejo	2026-06-06 17:25:17 (3 months ago)	[Sat Jun 06 19:25:17.001183 2026] [core:info] [pid 1507531:tid 130567452485312] [client 45.148.124.1 ... show more [Sat Jun 06 19:25:17.001183 2026] [core:info] [pid 1507531:tid 130567452485312] [client 45.148.124.179:52083] AH00128: File does not exist: /var/www/franvallejo/.github/workflows/ci.yml [Sat Jun 06 19:25:17.108497 2026] [core:info] [pid 1507531:tid 130566661859008] [client 45.148.124.179:52083] AH00128: File does not exist: /var/www/franvallejo/.env [Sat Jun 06 19:25:17.215219 2026] [core:info] [pid 1507531:tid 130566653466304] [client 45.148.124.179:52083] AH00128: File does not exist: /var/www/franvallejo/.env.local [Sat Jun 06 19:25:17.321871 2026] [core:info] [pid 1507531:tid 130566032701120] [client 45.148.124.179:52083] AH00128: File does not exist: /var/www/franvallejo/.env.production [Sat Jun 06 19:25:17.429034 2026] [core:info] [pid 1507531:tid 130567072904896] [client 45.148.124.179:52083] AH00128: File does not exist: /var/www/franvallejo/config/secrets.yml ... show less	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-06-04 12:42:09 (3 months ago)	(mod_security) mod_security (id:225170) triggered by 45.148.124.179 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 45.148.124.179 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 08:42:05.407246 2026] [security2:error] [pid 1726:tid 1726] [client 45.148.124.179:33025] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|iahksa.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "iahksa.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiFynR4W0GemUesTN2lvvwAAAAY"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-02 12:26:30 (3 months ago)	(mod_security) mod_security (id:225170) triggered by 45.148.124.179 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 45.148.124.179 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 08:26:23.459124 2026] [security2:error] [pid 21784:tid 21784] [client 45.148.124.179:63781] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|curryfirm.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "curryfirm.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ah7L76TmQyEujxxg_pLW_QAAABA"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-25 12:01:44 (4 months ago)	(mod_security) mod_security (id:225170) triggered by 45.148.124.179 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 45.148.124.179 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 25 08:01:37.745352 2026] [security2:error] [pid 23354:tid 23354] [client 45.148.124.179:31019] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|jessmay.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jessmay.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahQ6Ifms_BZE75nBaFT3SgAAABU"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-22 17:02:22 (4 months ago)	(mod_security) mod_security (id:225170) triggered by 45.148.124.179 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 45.148.124.179 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 22 13:02:16.681872 2026] [security2:error] [pid 23928:tid 23928] [client 45.148.124.179:58345] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|gisur.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gisur.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahCMGBmT-oF4ACKoku7a3gAAAAM"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇳🇿 Antinson	2026-05-22 03:05:00 (4 months ago)	Scraping with a high error ratio and request rate	Bad Web Bot
🇩🇪 4server	2026-05-19 16:04:46 (4 months ago)	[TueMay1918:04:40.6828112026][security2:error][pid3109772:tid3109797][client45.148.124.179:0]ModSecu ... show more [TueMay1918:04:40.6828112026][security2:error][pid3109772:tid3109797][client45.148.124.179:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"www.restaurantgandria.ch\"][uri\"/xmlrpc.php\"][unique_id\"agyKGCcaGGcqPYPzpP7kWgAAAAs\"] show less	Port Scan Brute-Force Web App Attack
🇫🇮 inlink.ltd	2026-05-18 07:11:50 (4 months ago)	Known malicious PHP file or CMS probe	Web App Attack
🇮🇩 Kencang.ID	2026-05-05 13:32:38 (4 months ago)	Failed Login Attempt 2026-05-05 13:32:38 \| 45.148.124.179 \| Desktop \| Mozilla Firefox \| New York, Ne ... show more Failed Login Attempt 2026-05-05 13:32:38 \| 45.148.124.179 \| Desktop \| Mozilla Firefox \| New York, New York, United States \| PureVoltage Hosting Inc. \| Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:127.0) Gecko/20100101 Firefox/127.0 show less	Brute-Force FTP Brute-Force
🇺🇸 rafled	2026-04-19 19:46:48 (5 months ago)	Attempt to login to Wordpress Admin	Web App Attack

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 213.166.84.49

🇰🇷 211.228.86.83

🇺🇸 192.177.152.44

🇺🇸 172.174.104.140

🇪🇸 139.28.190.34

🇵🇱 109.205.211.23

🇧🇪 104.155.60.84

🇺🇸 98.168.100.72

🇳🇱 94.154.43.234

🇩🇪 65.111.22.239

🇧🇪 35.189.213.181

🇭🇰 2602:80d:1003::2f

🇪🇨 200.7.210.19

🇷🇼 196.216.81.126

🇲🇽 187.230.45.102

🇰🇷 121.189.103.212

🇺🇸 104.196.13.24

🇫🇷 91.231.89.205

🇸🇬 85.203.23.128

🇧🇬 82.147.142.205