JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

45.149.204.45

Neutral Activity

Abuse confidence score ?

0% Low Risk

18 reports

15 reporters · latest 2 years ago

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi2369498.contaboserver.net
Domain Name	contabo.com
Country	🇩🇪 Germany
City	Karlsruhe, Baden-Wurttemberg

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

45.149.204.45 has been reported 18 times. The most recent report is from 2 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 45.149.204.45

Export CSV

This IP address has been reported a total of 18 times from 15 distinct sources. 45.149.204.45 was first reported on July 20th 2024, and the most recent report was 2 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 netfactotum	2024-07-28 08:12:59 (2 years ago)		Hacking Web App Attack
🇺🇸 Starburst SysOp Team	2024-07-28 04:55:00 (2 years ago)	[Sun Jul 28 04:55:34.379511 2024] [:error] [pid 1761497:tid 1761511] [client 45.149.204.45:53388] [c ... show more [Sun Jul 28 04:55:34.379511 2024] [:error] [pid 1761497:tid 1761511] [client 45.149.204.45:53388] [client 45.149.204.45] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|-\|F\|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "-"] [uri "/config/php.ini"] [unique_id "ZqXPRuk1_HmXXcIW2SCGPQAAAEQ"] show less	Hacking Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2024-07-23 07:01:26 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 45.149.204.45 (vmi1985140.contaboserver.net): 1 ... show more (mod_security) mod_security (id:210492) triggered by 45.149.204.45 (vmi1985140.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 23 03:01:20.565869 2024] [security2:error] [pid 28016:tid 28016] [client 45.149.204.45:51036] [client 45.149.204.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "homeland-realestate.com"] [uri "/.env"] [unique_id "Zp9VQJwtfSwPgloFoBXMKQAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 Burayot	2024-07-23 05:52:19 (2 years ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 45.149.204.45 (DE/Germany/vmi1985140 ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 45.149.204.45 (DE/Germany/vmi1985140.contaboserver.net): 2 in the last 3600 secs show less	Web App Attack
🇺🇸 dpinse	2024-07-22 17:12:48 (2 years ago)	teler detected Directory Bruteforce against resource /.git/config from 45.149.204.45	Bad Web Bot
Anonymous	2024-07-22 14:29:00 (2 years ago)	/.git/config	Port Scan Hacking Bad Web Bot Web App Attack
🇯🇵 polido	2024-07-22 13:49:04 (2 years ago)	Unauthorized connection attempt to port 443 from 45.149.204.45	Port Scan
🇺🇸 FireballDWF	2024-07-22 12:10:07 (2 years ago)	404 NOT FOUND	Web App Attack
🇺🇸 ne1for23	2024-07-22 11:21:45 (2 years ago)	Attempting to probe for sensitive information accidently exposed via git config. 45.149.204.45 - - ... show more Attempting to probe for sensitive information accidently exposed via git config. 45.149.204.45 - - [22/Jul/2024:11:21:45 +0000] "GET /.git/config HTTP/1.1" 403 555 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.103 Safari/537.36" show less	Hacking
🇺🇸 mnsf	2024-07-21 23:01:31 (2 years ago)	Too many Status 50X (83)	Brute-Force Web App Attack
🇯🇵 polido	2024-07-21 20:04:36 (2 years ago)	Unauthorized connection attempt to port 80 from 45.149.204.45	Port Scan
🇮🇩 Burayot	2024-07-21 11:37:30 (2 years ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 45.149.204.45 (DE/Germany/vmi1985140 ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 45.149.204.45 (DE/Germany/vmi1985140.contaboserver.net): 2 in the last 3600 secs show less	Web App Attack
🇮🇩 Burayot	2024-07-21 10:19:50 (2 years ago)	LF_APACHE_403: 45.149.204.45 (DE/Germany/vmi1985140.contaboserver.net), more than 20 Apache 403 hits ... show more LF_APACHE_403: 45.149.204.45 (DE/Germany/vmi1985140.contaboserver.net), more than 20 Apache 403 hits in the last 3600 secs show less	Web App Attack
🇫🇷 mgarofano80	2024-07-21 05:49:47 (2 years ago)		Brute-Force Web App Attack
🇺🇸 PlexLads	2024-07-21 02:53:08 (2 years ago)	45.149.204.45 - - [20/Jul/2024:19:53:05 -0700] "GET /config/php.ini HTTP/1.1" 404 397 "-" "Mozilla/5 ... show more 45.149.204.45 - - [20/Jul/2024:19:53:05 -0700] "GET /config/php.ini HTTP/1.1" 404 397 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.149.204.45 - - [20/Jul/2024:19:53:05 -0700] "GET /admin/config HTTP/1.1" 404 397 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.149.204.45 - - [20/Jul/2024:19:53:06 -0700] "GET /phpinfo.php HTTP/1.1" 404 397 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.149.204.45 - - [20/Jul/2024:19:53:06 -0700] "GET /test.php HTTP/1.1" 404 397 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.149.204.45 - - [20/Jul/2024:19:53:07 -0700] "GET /config.properties HTTP/1.1" 404 397 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.149.204.45 - - ... show less	Hacking Web App Attack

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 195.96.139.114

🇳🇱 185.136.15.55

🇻🇳 171.228.90.164

🇩🇴 131.108.237.110

🇮🇳 125.23.220.130

🇻🇳 103.172.236.15

🇫🇮 45.154.244.146

🇺🇸 40.119.31.2

🇬🇧 35.203.211.164

🇺🇸 104.28.205.121

🇸🇪 95.215.19.225

🇨🇿 95.82.185.218

🇫🇷 91.231.89.190

🇨🇦 89.251.0.235

🇨🇦 85.217.149.13

🇳🇱 77.91.71.90

🇱🇹 62.60.130.242

🇭🇰 45.249.246.196

🇳🇱 34.6.239.110

🇺🇸 135.237.122.43