JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.159.12.190

45.159.12.190 was found in our database!

This IP was reported 44 times. Confidence of Abuse is 90%: ?

90%

ISP	Net Sat AB
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	netsat.se
Country	🇸🇪 Sweden
City	Stockholm, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.159.12.190

Whois 45.159.12.190

IP Abuse Reports for 45.159.12.190:

This IP address has been reported a total of 44 times from 19 distinct sources. 45.159.12.190 was first reported on March 9th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Savvii	2026-06-20 19:28:22 (1 hour ago)	20 attempts against mh-misbehave-ban on ceres	Brute-Force Bad Web Bot Web App Attack
🇨🇭 SOC [GOLINE SA]	2026-06-20 19:01:24 (2 hours ago)	FortiGate detected IPS attack from IPv4 address 45.159.12.190	Hacking
🇺🇸 TPI-Abuse	2026-06-20 15:53:13 (5 hours ago)	(mod_security) mod_security (id:210730) triggered by 45.159.12.190 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 45.159.12.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 11:53:10.072499 2026] [security2:error] [pid 5465:tid 5465] [client 45.159.12.190:60776] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|edensgroup.com\|F\|2"] [data ".astroid.ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "edensgroup.com"] [uri "/language/en-GB/en-GB.astroid.ini"] [unique_id "aja3ZmFhotluOaMaNDil1gAAAAM"], referer: http://edensgroup.com/media/astroid/css/debug.css show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 dzpk	2026-06-20 14:04:18 (7 hours ago)	[20/Jun/2026:16:04:17 +0200] 178196425798.911669 45.159.12.190 50472 HOST 80 [20/Jun/2026:16:04:18 + ... show more [20/Jun/2026:16:04:17 +0200] 178196425798.911669 45.159.12.190 50472 HOST 80 [20/Jun/2026:16:04:18 +0200] 178196425883.017573 45.159.12.190 42262 HOST 443 [20/Jun/2026:16:04:18 +0200] 178196425862.979280 45.159.12.190 42262 HOST 443 show less	Web App Attack
🇩🇪 conseilgouz	2026-06-20 13:30:50 (7 hours ago)	sle-Joomla Admin : try to force the door...	Hacking
🇩🇪 4server	2026-06-20 12:55:52 (8 hours ago)	[SatJun2014:55:48.4827812026][security2:error][pid3543778:tid3543804][client45.159.12.190:0]ModSecur ... show more [SatJun2014:55:48.4827812026][security2:error][pid3543778:tid3543804][client45.159.12.190:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"dsfiduciaria.ch\"][uri\"/\"][unique_id\"ajaN1FbCdbEcg1NhMLTG4QAAANc\"] show less	Port Scan Brute-Force Web App Attack
🇩🇪 conseilgouz	2026-06-20 12:40:51 (8 hours ago)	mae-Joomla Admin : try to force the door...	Hacking
🇺🇸 TPI-Abuse	2026-06-20 12:36:37 (8 hours ago)	(mod_security) mod_security (id:210730) triggered by 45.159.12.190 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 45.159.12.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 08:36:32.417016 2026] [security2:error] [pid 21375:tid 21379] [client 45.159.12.190:59310] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|drronaldhecker.com\|F\|2"] [data ".astroid.ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "drronaldhecker.com"] [uri "/language/en-GB/en-GB.astroid.ini"] [unique_id "ajaJUErF-EN0BTpSQYombAAAAEI"], referer: http://drronaldhecker.com/media/astroid/css/debug.css show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Savvii	2026-06-20 11:49:38 (9 hours ago)	20 attempts against mh-misbehave-ban on ec102967	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Didier Lagaert	2026-06-20 10:30:46 (10 hours ago)	lie-7 : Trying access unauthorized files/dir=>/tmp/795795.phtm	Hacking
Anonymous	2026-06-20 05:00:20 (16 hours ago)	BruteForce IMAP/POP3/SMTP	Brute-Force
🇨🇿 lp	2026-06-20 04:52:29 (16 hours ago)	Email account brute force: 1 attempts were recorded from 45.159.12.190 2026-06-20T05:26:56+02:00 war ... show more Email account brute force: 1 attempts were recorded from 45.159.12.190 2026-06-20T05:26:56+02:00 warning: unknown[45.159.12.190]: SASL PLAIN authentication failed: authentication failure, [email protected] show less	Brute-Force
🇩🇪 ecs.ge	2026-06-20 02:20:47 (19 hours ago)	Automatic Fail2Ban report from jail plesk-modsecurity: multiple matching events detected.	Web App Attack Hacking
🇩🇪 conseilgouz	2026-06-20 01:55:53 (19 hours ago)	lae-Joomla Admin : try to force the door...	Hacking
🇳🇱 Savvii	2026-06-20 00:38:40 (20 hours ago)	20 attempts against mh_ha-misbehave-ban on ec102967	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 44 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 204.76.203.36

🇺🇸 118.193.77.58

🇷🇺 95.108.213.191

🇷🇺 95.108.213.141

🇺🇸 66.132.172.113

🇺🇸 47.254.39.233

🇪🇨 205.235.2.176

🇺🇸 117.55.229.156

🇧🇬 93.94.141.115

🇬🇧 86.138.210.169

🇨🇳 39.152.240.15

🇩🇪 157.90.172.93

🇺🇸 152.32.205.153

🇺🇸 135.237.126.195

🇯🇵 128.1.49.46

🇭🇰 118.193.32.92

🇺🇸 65.49.20.97

🇧🇷 45.205.1.42

🇺🇸 102.129.152.142

🇷🇴 80.94.92.65