JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.166.100.48

45.166.100.48 was found in our database!

This IP was reported 244 times. Confidence of Abuse is 0%: ?

ISP	AG HOLDINGS
Usage Type	Fixed Line ISP
ASN	AS28546
Domain Name	agholdings.mx
Country	🇲🇽 Mexico
City	Mexico City, Mexico City

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.166.100.48

Whois 45.166.100.48

IP Abuse Reports for 45.166.100.48:

This IP address has been reported a total of 244 times from 180 distinct sources. 45.166.100.48 was first reported on April 4th 2024, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 rshict	2025-03-28 10:29:45 (1 year ago)	Hacking, Brute-Force, Web App Attack	Hacking Brute-Force Web App Attack
🇧🇷 Sipo Chutão	2025-03-16 03:00:01 (1 year ago)	/admin/config.php	Hacking
🇨🇳 ThreatBook.io	2025-03-15 00:26:21 (1 year ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/45.166.100.48 2025-03- ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/45.166.100.48 2025-03-14 01:41:19 /admin/config.php show less	Web App Attack
🇪🇸 Gem	2025-03-14 23:27:09 (1 year ago)	Unauthorized web scan.	Web App Attack
🇳🇱 JCB	2025-03-14 09:40:00 (1 year ago)	45.166.100.48 - - [14/Mar/2025:00:02:21 +0200] "GET /admin/config.php HTTP/1.0" 404 196 "-" "xfa1"	Web App Attack
🇩🇪 KPS	2025-03-13 23:02:56 (1 year ago)	PortscanM	Port Scan
Anonymous	2025-03-13 22:53:54 (1 year ago)	Reported from Nginx log analysis 17. Log: 45.166.100.48 - - [13/Mar/2025:xx:xx:xx 0100] "GET /admin ... show more Reported from Nginx log analysis 17. Log: 45.166.100.48 - - [13/Mar/2025:xx:xx:xx 0100] "GET /admin/config.php HTTP/1.0" xxx xxx "-" "xfa1" "-" "MX Mexico Mexico City" "AS28546" "Servnet Mexico, S.A. de C.V." show less	Port Scan Brute-Force SSH
🇳🇱 exxos	2025-03-13 22:24:04 (1 year ago)	http-no-verb	Hacking
🇸🇪 Anonymous	2025-03-13 22:14:11 (1 year ago)	Drop from IP address 45.166.100.48 to tcp-port 443	Port Scan
🇸🇪 sweplox.se	2025-03-13 22:03:38 (1 year ago)	45.166.100.48 - - [13/Mar/2025:21:49:23 +0000] "GET /admin/config.php HTTP/1.0" 301 162 "-" "xfa1" 4 ... show more 45.166.100.48 - - [13/Mar/2025:21:49:23 +0000] "GET /admin/config.php HTTP/1.0" 301 162 "-" "xfa1" 45.166.100.48 - - [13/Mar/2025:21:50:08 +0000] "GET /admin/config.php HTTP/1.0" 301 162 "-" "xfa1" 45.166.100.48 - - [13/Mar/2025:21:54:38 +0000] "GET /admin/config.php HTTP/1.0" 301 162 "-" "xfa1" 45.166.100.48 - - [13/Mar/2025:21:56:27 +0000] "GET /admin/config.php HTTP/1.0" 301 162 "-" "xfa1" 45.166.100.48 - - [13/Mar/2025:21:58:18 +0000] "GET /admin/config.php HTTP/1.0" 301 162 "-" "xfa1" 45.166.100.48 - - [13/Mar/2025:22:03:37 +0000] "GET /admin/config.php HTTP/1.0" 301 162 "-" "xfa1" ... show less	Bad Web Bot SSH
🇫🇷 security.yc3a.com	2025-03-13 21:44:49 (1 year ago)	45.166.100.48 - - [13/Mar/2025:21:44:48 +0000] "GET /admin/config.php HTTP/1.0" 404 146 "-" "xfa1"	Brute-Force Web App Attack
🇦🇹 nomzamo	2025-03-13 21:33:36 (1 year ago)	Fail2Ban reported: nginx-noscript	Brute-Force Bad Web Bot
🇫🇷 security.yc3a.com	2025-03-13 21:25:43 (1 year ago)	45.166.100.48 - - [13/Mar/2025:21:25:42 +0000] "\x16\x03\x01\x01\xAA\x01\x00\x01\xA6\x03\x03\x83\xAE ... show more 45.166.100.48 - - [13/Mar/2025:21:25:42 +0000] "\x16\x03\x01\x01\xAA\x01\x00\x01\xA6\x03\x03\x83\xAE\xE3 \xC9~\xFD\x89\xE9\xB0\xE2\x97DH\x00\xC2\xC2\xCDa5\xA5\xFC\x94o&e\x9D%\x89p=\xCC \xA1\x16Y\x1A\x97\xC5\x94\x97<\x15\xA1N\xA2\xB8\xF2-\xEAg\x89/\xA7b\x1C1\xADlQWo\x89\xAC\x9F\x00\xC8\x13\x01\x13\x02\x13\x03\x13\x04\x13\x05\xC0,\xC00\x00\xA3\x00\x9F\xCC\xA9\xCC\xA8\xCC\xAA\xC0\xAF\xC0\xAD\xC0\xA3\xC0\x9F\xC0]\xC0a\xC0W\xC0S\x00\xA7\xC0+\xC0/\x00\xA2\x00\x9E\xC0\xAE\xC0\xAC\xC0\xA2\xC0\x9E\xC0\x5C\xC0`\xC0V\xC0R\x00\xA6\xC0$\xC0(\x00k\x00j\xC0s\xC0w\x00\xC4\x00\xC3\x00m\x00\xC5\xC0#\xC0'\x00g\x00@\xC0r\xC0v\x00\xBE\x00\xBD\x00l\x00\xBF\xC0" 400 150 "-" "-" show less	Brute-Force Web App Attack
🇹🇷 rtbh.com.tr	2025-03-13 20:48:58 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 Starburst SysOp Team	2025-03-13 18:25:00 (1 year ago)	[Thu Mar 13 18:06:12.015636 2025] [security2:error] [pid 1170138:tid 1170208] [client 45.166.100.48: ... show more [Thu Mar 13 18:06:12.015636 2025] [security2:error] [pid 1170138:tid 1170208] [client 45.166.100.48:61043] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?:^([\\\\d.]+\|\\\\[[\\\\da-f:]+\\\\]\|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/usr/local/apache/modsecurity-owasp-latest/coreruleset-4.12.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "711"] [id "920350"] [msg "Host header is a numeric IP address"] [data "0.0.0.0"] [severity "WARNING"] [ver "OWASP_CRS/4.12.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "0.0.0.0"] [uri "/admin/config.php"] [unique_id "Z9MelB8XVyBFz6o0x2ozvgAAAFU"] show less	Hacking Brute-Force Web App Attack

Showing 1 to 15 of 244 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇴 193.32.162.84

🇮🇳 183.82.111.224

🇨🇳 171.37.46.251

🇨🇦 167.99.176.178

🇳🇱 45.148.10.151

🇺🇸 216.73.217.73

🇺🇸 172.253.214.27

🇻🇳 171.244.61.237

🇨🇳 171.213.247.117

🇨🇳 171.37.46.241

🇳🇱 160.119.71.92

🇨🇳 121.41.169.123

🇭🇰 118.193.47.212

🇱🇹 62.60.130.219

🇭🇰 47.238.112.123

🇳🇱 45.153.34.186

🇩🇪 45.3.55.168

🇨🇳 171.120.70.254

🇪🇨 170.82.159.221

🇩🇪 167.94.145.20