JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.161.132.139

45.161.132.139 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 39%: ?

39%

ISP	ERCOM SRL
Usage Type	Fixed Line ISP
ASN	AS27983
Domain Name	colonred.com
Country	🇦🇷 Argentina
City	Colon, Entre Rios

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.161.132.139

Whois 45.161.132.139

IP Abuse Reports for 45.161.132.139:

This IP address has been reported a total of 21 times from 17 distinct sources. 45.161.132.139 was first reported on June 3rd 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 MPL	2026-08-20 10:10:51 (1 week ago)	tcp/22 (3 or more attempts)	Port Scan
🇫🇷 vtchost.com	2026-08-20 09:50:44 (1 week ago)	2026-08-20T11:50:43.209541+02:00 vmi3491693 kernel: [75698.902766] PORTSCAN: IN=eth0 OUT= MAC=00:50: ... show more 2026-08-20T11:50:43.209541+02:00 vmi3491693 kernel: [75698.902766] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:66:3e:63:c0:69:11:b3:a9:ed:08:00 SRC=45.161.132.139 DST=169.58.138.2 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=20394 DF PROTO=TCP SPT=54146 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 TPI-Abuse	2026-08-19 23:59:12 (1 week ago)	(mod_security) mod_security (id:220150) triggered by 45.161.132.139 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:220150) triggered by 45.161.132.139 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 19:59:06.307631 2026] [security2:error] [pid 26911:tid 26911] [client 45.161.132.139:50402] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:union(?:\\\\/\\\\.{0,399}\\\\\\\\/)?select)" at ARGS:sorttype. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5662"] [id "220150"] [rev "5"] [msg "COMODO WAF: SQL injection vulnerability in Ginkgo CMS 5.0 (CVE-2013-5318)\|\|www.oualierealty.com\|F\|2"] [data "')//and//('lpaiaq'='lpaiaq'//union//all//select//'exzfmwgfisqaanaklsnbqtwjnkcnufpf'--/*/qhsiix"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.oualierealty.com"] [uri "/index.php"] [unique_id "aoZDSmE6M9wiDHWafWEIGQAAAJM"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Zkillu	2026-08-19 21:35:06 (1 week ago)	UDP flood (DDoS) vs AS215599: 4394 pkts / 6.28 MB to UDP 80/8443 across 261 dst IP(s), 2026-08-19 21 ... show more UDP flood (DDoS) vs AS215599: 4394 pkts / 6.28 MB to UDP 80/8443 across 261 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇫🇷 dmallet	2026-08-19 21:35:06 (1 week ago)	UDP flood (DDoS) vs AS215599: 4394 pkts / 6.28 MB to UDP 80/8443 across 261 dst IP(s), 2026-08-19 21 ... show more UDP flood (DDoS) vs AS215599: 4394 pkts / 6.28 MB to UDP 80/8443 across 261 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
Anonymous	2026-08-14 11:59:06 (2 weeks ago)	denied traffic to a honeypot network. destination port 22.	Port Scan Hacking
🇷🇸 Scan	2026-08-14 10:34:41 (2 weeks ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇺🇸 MPL	2026-08-11 19:45:31 (3 weeks ago)	tcp/22 (3 or more attempts)	Port Scan
🇺🇸 kosada.com	2026-07-31 22:43:45 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-07-11 11:56:04 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-06-26 04:30:09 (2 months ago)	Large-scale coordinated botnet (200+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) ... show more Large-scale coordinated botnet (200+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) \| Attack Signature Blocked: /wishlist/index/add/product/9054/form_key/tORgXzJGc6VlheHJ/ \| UA: Mozilla/5.0 (Windows NT 5.01) AppleWebKit/534.1 (KHTML, like Gecko) Chrome/59.0.856.0 Safari/534.1 \| (Magento Site) show less	Hacking Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-06-25 19:40:29 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 cybsecaoccol	2026-05-26 19:49:00 (3 months ago)	unauthorized connection or malicious port scan attempted on tcp port - corp	Port Scan Hacking
🇬🇧 PeravixGroup	2026-05-24 03:05:12 (3 months ago)	Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: ME ... show more Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Brute-Force
🇺🇸 MPL	2026-05-11 13:19:54 (3 months ago)	tcp/23	Port Scan

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 187.192.86.212

🇧🇬 79.124.58.198

🇪🇨 45.224.97.244

🇺🇸 40.67.162.172

🇺🇸 20.80.102.0

🇺🇸 20.3.231.120

🇮🇹 2a00:1450:4025:1805::125

🇺🇸 207.90.244.22

🇺🇸 172.202.118.31

🇸🇬 165.154.29.93

🇺🇸 137.184.75.136

🇨🇳 121.61.216.228

🇫🇷 91.196.152.186

🇺🇸 66.94.105.27

🇧🇪 35.240.77.129

🇬🇧 35.203.211.254

🇯🇵 8.216.9.251

🇬🇧 2.57.17.195

🇰🇷 1.222.42.237

🇺🇸 2a06:98c0:3600::103:0