JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

45.168.229.10

Activity Trending Down

Abuse Confidence Score

8% Caution

32 reports

16 reporters · latest 1 month ago

ISP: FRANCONETFIBRA LTDA
Usage Type: Fixed Line ISP
ASN: AS271745
Domain Name: franconetfibra.com.br
Country: 🇧🇷 Brazil
City: Franco da Rocha, Sao Paulo

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

32 from 16 distinct reporters

First reported

January 13th 2025

Most recent report

1 month ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 3

Most common categories Bad Web Bot 3 Brute-Force 1 Web App Attack 1

Old reports The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-04 01:16:29 UTC · (1 month ago)	(mod_security) mod_security (id:210350) triggered by 45.168.229.10 (45-168-229-10.franconetfibra.net.br): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 03 21:16:25.365048 2026] [security2:error] [pid 6543:tid 6543 ... show more (mod_security) mod_security (id:210350) triggered by 45.168.229.10 (45-168-229-10.franconetfibra.net.br): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 03 21:16:25.365048 2026] [security2:error] [pid 6543:tid 6543] [client 45.168.229.10:43923] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|dshvisuals.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dshvisuals.com"] [uri "/"] [unique_id "asGo6fXdD-kodYXSuphhgwAAAAo"], referer: https://dabacklinks.space/dir/google-ranking-backlinks-59423 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-10-01 08:28:56 UTC · (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36	Bad Web Bot
🇺🇸 鬼影233	2026-09-28 21:52:03 UTC · (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36	Bad Web Bot
🇺🇸 鬼影233	2026-08-28 15:11:59 UTC · (2 months ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36	Bad Web Bot
🇺🇸 kosada.com	2026-08-26 13:22:07 UTC · (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇫🇷 Petre 21_ip	2026-08-12 22:52:23 UTC · (3 months ago)	2026-08-13T00:52:23.238117+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=45.168.229.10 DST=155.133.26.57 LEN=51 TOS=0x00 PREC=0x00 TTL=52 ID=35100 DF PROTO=UDP SPT=18053 DPT=42564 LEN=31 ...	Port Scan
Anonymous	2026-07-28 03:30:56 UTC · (3 months ago)	Large-scale coordinated botnet (777+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) \| Attack Signature Blocked: /wishlist/index ... show more Large-scale coordinated botnet (777+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) \| Attack Signature Blocked: /wishlist/index/add/product/2995/form_key/GNXGHX0m6tN2J86d/ \| UA: Opera/9.95.(Windows NT 6.2; vi-VN) Presto/2.9.162 Version/10.00 \| (Magento Site) show less	Hacking Bad Web Bot Web App Attack
Anonymous	2026-05-25 09:48:22 UTC · (5 months ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
🇺🇸 RAP	2026-05-24 18:18:04 UTC · (5 months ago)	2026-05-24 18:18:04 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇫🇷 security.rdmc.fr	2026-05-21 19:44:25 UTC · (5 months ago)	Port Scan Attack proto:TCP src:63401 dst:23	Port Scan
🇫🇷 security.rdmc.fr	2026-05-19 03:20:04 UTC · (5 months ago)	Port Scan Attack proto:TCP src:62805 dst:23	Port Scan
🇺🇸 RAP	2026-05-18 02:21:43 UTC · (5 months ago)	2026-05-18 02:21:43 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇫🇷 security.rdmc.fr	2026-05-18 01:16:28 UTC · (5 months ago)	Port Scan Attack proto:TCP src:63185 dst:23	Port Scan
🇫🇷 security.rdmc.fr	2026-05-15 19:14:21 UTC · (5 months ago)	Port Scan Attack proto:TCP src:62879 dst:23	Port Scan
🇬🇧 PeravixGroup	2026-05-15 17:44:51 UTC · (5 months ago)	Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud	IoT Targeted Brute-Force

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇿🇼 197.155.225.93

🇹🇳 197.17.126.171

🇺🇸 172.190.216.105

🇩🇪 151.243.11.30

🇧🇬 91.191.209.46

🇭🇰 20.205.56.255

🇮🇳 182.75.197.174

🇨🇳 117.29.52.18

🇳🇱 109.160.32.159

🇳🇱 89.21.67.188

🇺🇸 70.187.116.20

🇺🇸 50.6.193.84

🇺🇸 216.25.90.116

🇺🇸 205.210.31.10

🇳🇱 193.176.31.202

🇺🇸 192.64.86.89

🇨🇳 182.119.226.75

🇫🇷 176.143.25.181

🇨🇳 121.18.43.102

🇵🇰 103.113.101.71