AbuseIPDB » 45.171.68.120
45.171.68.120
This IP was reported 9 times. Confidence of
Abuse
is 12% : ?
ISP
ATIVA TELECOM LTDA
Usage Type
Fixed Line ISP
ASN
AS268188
Hostname(s)
45-171-68-120.ativatelecommg.com.br
Domain Name
ativatelecommg.com.br
Country
🇧🇷
Brazil
City
Contagem, Minas Gerais
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 45.171.68.120 :
This IP address has been reported a total of
9
times from
8 distinct
sources.
45.171.68.120 was first reported on
February 10th 2026 , and the most recent report was
1 day ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-09-17 12:16:31
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 45.171.68.120 (45-171-68-120.ativatelecommg.com ...
show more
(mod_security) mod_security (id:210350) triggered by 45.171.68.120 (45-171-68-120.ativatelecommg.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 08:16:23.971615 2026] [security2:error] [pid 341038:tid 341038] [client 45.171.68.120:15566] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||lobibilisim.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "lobibilisim.com"] [uri "/"] [unique_id "aqvaF9rDX0qyfVDQLXD66QAAAAY"], referer: https://seorankingchecker.space/dir/backlink-outreach-services-124088
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-08-11 08:49:08
(1 month ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇺🇸
kosada.com
2026-07-06 15:54:52
(2 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
2026-06-17 02:08:40
(3 months ago)
Web attack
Bad Web Bot
Web App Attack
🇫🇮
notelseit
2026-06-04 23:06:31
(3 months ago)
2026-06-05T01:06:23.489636+02:00 mail postfix/submission/smtpd[186613]: warning: unknown[45.171.68.1 ...
show more
2026-06-05T01:06:23.489636+02:00 mail postfix/submission/smtpd[186613]: warning: unknown[45.171.68.120]: SASL PLAIN authentication failed: (reason unavailable), [email protected]
2026-06-05T01:06:30.231618+02:00 mail postfix/submission/smtpd[186613]: warning: unknown[45.171.68.120]: SASL LOGIN authentication failed: (reason unavailable), [email protected]
2026-06-05T01:06:30.766364+02:00 mail postfix/submission/smtpd[186613]: disconnect from unknown[45.171.68.120] ehlo=2 starttls=1 auth=0/2 quit=1 commands=4/6
...
show less
Brute-Force
Email Spam
🇨🇭
ALPHANET
2026-05-25 22:05:03
(3 months ago)
Botnet or web spider not respecting robots.txt
DDoS Attack
Exploited Host
🇺🇸
MPL
2026-04-06 21:13:58
(5 months ago)
tcp/5555 (4 or more attempts)
Port Scan
2026-02-27 06:35:29
(6 months ago)
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ...
show more
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in printer-friendly.asp
show less
Exploited Host
Bad Web Bot
🇩🇪
FeG Deutschland
2026-02-10 22:17:21
(7 months ago)
Mail: - login with unknown user - bruteforce
Brute-Force
Showing 1 to
9
of 9 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: