JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.161.132.142

45.161.132.142 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 48%: ?

48%

ISP	ERCOM SRL
Usage Type	Fixed Line ISP
ASN	AS27983
Domain Name	colonred.com
Country	🇦🇷 Argentina
City	Colon, Entre Rios

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.161.132.142

Whois 45.161.132.142

IP Abuse Reports for 45.161.132.142:

This IP address has been reported a total of 21 times from 19 distinct sources. 45.161.132.142 was first reported on February 14th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-20 08:34:50 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 45.161.132.142 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 45.161.132.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 20 04:34:44.193745 2026] [security2:error] [pid 31545:tid 31545] [client 45.161.132.142:37083] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|med-engineering.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "med-engineering.com"] [uri "/celebrex.com"] [unique_id "aoa8JC-TDvpILB3ngZiuswAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Zkillu	2026-08-19 22:08:54 (1 week ago)	UDP flood (DDoS) vs AS215599: 3242 pkts / 4.64 MB to UDP 80/8443 across 370 dst IP(s), 2026-08-19 21 ... show more UDP flood (DDoS) vs AS215599: 3242 pkts / 4.64 MB to UDP 80/8443 across 370 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇫🇷 dmallet	2026-08-19 22:08:54 (1 week ago)	UDP flood (DDoS) vs AS215599: 3242 pkts / 4.64 MB to UDP 80/8443 across 370 dst IP(s), 2026-08-19 21 ... show more UDP flood (DDoS) vs AS215599: 3242 pkts / 4.64 MB to UDP 80/8443 across 370 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇩🇪 ValtonTahiri	2026-08-17 19:40:13 (1 week ago)	UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ... show more UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=45.161.132.142; proto=TCP; source_port=54886; target_port=23; flags=SYN show less	Port Scan
🇻🇳 trung.fun	2026-08-16 19:14:56 (1 week ago)	DDoS, Hack, Brute Force, Web Attack ...	DDoS Attack Web Spam Hacking Brute-Force Web App Attack
Anonymous	2026-08-16 09:43:02 (1 week ago)	denied traffic to a honeypot network. destination port 22.	Port Scan Hacking
🇫🇷 wiredalter	2026-08-12 08:33:03 (2 weeks ago)	Blocked by fail2ban on o2VPS [22/tcp] Source Port: 60660 TTL: 44 Packet Length: 60 TOS: 0x00 Analyz ... show more Blocked by fail2ban on o2VPS [22/tcp] Source Port: 60660 TTL: 44 Packet Length: 60 TOS: 0x00 Analyzed by https://ip.wiredalter.com show less	Brute-Force SSH
🇺🇸 wbsouza	2026-08-11 03:28:42 (2 weeks ago)	CrowdSec: infra/ssh22-probe — automated firewall drops on self-hosted IDS sensor	SSH Brute-Force
🇩🇪 zupan	2026-08-08 14:08:14 (2 weeks ago)	Blocked by UFW on vps [23/tcp] \| SPT: 42574 \| TTL: 53 \| LEN: 60 \| TOS: 0x00 • Reported by: github.co ... show more Blocked by UFW on vps [23/tcp] \| SPT: 42574 \| TTL: 53 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan IoT Targeted
🇺🇸 kosada.com	2026-07-13 00:55:24 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇮🇹 A000Z	2026-07-11 00:37:15 (1 month ago)	Fail2Ban: 45.161.132.142 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5 ... show more Fail2Ban: 45.161.132.142 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇩🇪 EGP Abuse Dept	2026-06-30 04:54:05 (1 month ago)	Scraping webshop URLs (creall.com), likely botnet drone	Bad Web Bot Exploited Host
🇩🇪 Vegascosmetics	2026-06-07 17:58:53 (2 months ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated encoding. Vegas Security	DDoS Attack Hacking Bad Web Bot
Anonymous	2026-05-29 02:06:22 (2 months ago)	Unauthorized VPN login attempts	Hacking Brute-Force
🇧🇪 dbelm	2026-04-19 08:18:23 (4 months ago)	RdpGuard detected brute-force attempt on IMAP	Brute-Force

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.136

🇳🇱 192.178.116.22

🇧🇷 189.90.55.243

🇨🇱 186.104.135.48

🇲🇦 160.177.203.176

🇨🇦 148.113.194.93

🇨🇳 117.187.180.251

🇮🇳 103.176.160.146

🇺🇸 67.205.191.21

🇫🇷 5.39.23.182

🇰🇷 210.104.221.252

🇺🇸 209.40.213.1

🇮🇩 202.152.201.166

🇬🇪 185.99.6.165

🇵🇰 175.107.16.92

🇺🇸 172.174.17.234

🇸🇪 171.25.158.80

🇺🇸 170.23.31.168

🇯🇵 153.121.33.156

🇫🇷 89.234.182.25