JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.159.12.129

45.159.12.129 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 58%: ?

58%

ISP	Net Sat AB
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	netsat.se
Country	🇸🇪 Sweden
City	Stockholm, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.159.12.129

Whois 45.159.12.129

IP Abuse Reports for 45.159.12.129:

This IP address has been reported a total of 19 times from 13 distinct sources. 45.159.12.129 was first reported on March 9th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-21 04:31:09 (1 day ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force
🇩🇪 filstal.org	2026-06-20 20:31:06 (1 day ago)	CrowdSec: crowdsecurity/postfix-non-smtp-command	Email Spam Hacking
🇬🇧 poundawebsiteltd	2026-06-19 18:25:17 (2 days ago)	Web App Attack (ModSecurity Block). Evidence: [REDACTED_DOMAIN]:80 45.159.12.129 - - [19/Jun/2026:19 ... show more Web App Attack (ModSecurity Block). Evidence: [REDACTED_DOMAIN]:80 45.159.12.129 - - [19/Jun/2026:19:25:13 +0100] GET /language/en-GB/[REDACTED_DOMAIN]_jce.ini HTTP/1.1 403 158 - Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2934.2 Safari/537.36 show less	Web App Attack
🇺🇸 TPI-Abuse	2026-06-19 15:59:52 (2 days ago)	(mod_security) mod_security (id:210730) triggered by 45.159.12.129 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 45.159.12.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 11:59:45.429946 2026] [security2:error] [pid 12524:tid 12524] [client 45.159.12.129:55908] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|med-engineering.com\|F\|2"] [data ".com_jce.ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "med-engineering.com"] [uri "/language/en-GB/en-GB.com_jce.ini"] [unique_id "ajVncf8O4OzGg38odRDi3wAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇿 lp	2026-06-18 00:21:03 (4 days ago)	Email account brute force: 1 attempts were recorded from 45.159.12.129 2026-06-18T02:09:03+02:00 war ... show more Email account brute force: 1 attempts were recorded from 45.159.12.129 2026-06-18T02:09:03+02:00 warning: unknown[45.159.12.129]: SASL PLAIN authentication failed: authentication failure, [email protected] show less	Brute-Force
🇩🇪 4server	2026-06-17 18:11:34 (4 days ago)	[WedJun1720:11:30.0625432026][security2:error][pid2757563:tid2757618][client45.159.12.129:0]ModSecur ... show more [WedJun1720:11:30.0625432026][security2:error][pid2757563:tid2757618][client45.159.12.129:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"giftech.ch\"][uri\"/index.php\"][unique_id\"ajLjUp9mPifo32Ffn49mUgAAAIk\"] show less	Port Scan Brute-Force Web App Attack
🇩🇪 ecs.ge	2026-06-17 15:28:56 (4 days ago)	Automatic Fail2Ban report from jail plesk-modsecurity: multiple matching events detected.	Web App Attack Hacking
🇮🇩 Burayot	2026-06-17 13:09:24 (4 days ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 45.159.12.129 (SE/Sweden/-): 1 in th ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 45.159.12.129 (SE/Sweden/-): 1 in the last 3600 secs show less	Web App Attack
🇷🇺 punctualsuspension968	2026-05-21 15:58:42 (1 month ago)	blocked by ufw on TCP 6881	Port Scan
🇷🇺 punctualsuspension968	2026-05-20 01:04:21 (1 month ago)	blocked by ufw on TCP 6881	Port Scan
🇷🇺 punctualsuspension968	2026-05-18 12:59:26 (1 month ago)	blocked by ufw on TCP 6881	Port Scan
🇷🇺 punctualsuspension968	2026-05-16 06:44:10 (1 month ago)	blocked by ufw on TCP 6881	Port Scan
🇷🇺 punctualsuspension968	2026-05-15 02:50:03 (1 month ago)	blocked by ufw on TCP 6881	Port Scan
🇧🇪 cmbplf	2026-05-05 08:58:52 (1 month ago)	235 requests with user_agent.original Mozilla/5.0 (iPhone; CPU iPhone OS 15_6_1 like Mac OS X) Appl ... show more 235 requests with user_agent.original Mozilla/5.0 (iPhone; CPU iPhone OS 15_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/19G82 Instagram 306.0.0.20.118 (iPhone12,1; iOS 15_6_1; en_GB; en; scale=2.00; 828x1792; 529083166) NW/3 233 requests with user_agent.original Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Ubuntu Chromium/102.0.5143.178 Chrome/102.0.5143.178 Safari/537.36 227 requests with user_agent.original Mozilla/5.0 (iPhone; CPU iPhone OS 16_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148 [LinkedInApp]/9.28.7586 220 requests with user_agent.original Mozilla/5.0 (Linux; Android 13; SAMSUNG SM-T220) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/23.0 Chrome/115.0.0.0 Mobile Safari/537.36 218 requests with user_agent.original Mozilla/5.0 (Linux; Android 6.0.1; SM-G532MT Build/MMB29T; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/99.0.4844.88 Mobile Safari/537.36 [FB_IAB/FB4A;FBAV/436.0.0.35.101;] 175 requ show less	Brute-Force Bad Web Bot
🇧🇷 chronos	2026-05-05 07:26:39 (1 month ago)	Generic malicious activity: Tentativa de varredura de porta TCP... \| Port: 59601 \| Proto: TCP \| Loca ... show more Generic malicious activity: Tentativa de varredura de porta TCP... \| Port: 59601 \| Proto: TCP \| Location: Sweden, N/A show less	Port Scan Hacking

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 203.55.131.3

🇳🇱 107.189.27.179

🇩🇿 105.101.127.16

🇮🇩 69.5.23.222

🇹🇷 31.145.131.202

🇱🇹 194.165.16.167

🇮🇩 180.249.112.101

🇯🇵 167.179.119.201

🇮🇩 163.7.6.41

🇨🇳 124.174.17.2

🇨🇳 116.63.245.187

🇻🇳 113.183.109.62

🇮🇩 103.172.71.37

🇱🇺 46.151.182.201

🇯🇵 43.133.187.11

🇻🇳 14.229.218.90

🇷🇺 213.242.26.116

🇺🇸 192.3.150.58

🇹🇷 185.139.5.123

🇧🇷 177.92.132.83