JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

45.174.238.106

Recent Activity

Abuse Confidence Score

27% Elevated

39 reports

25 reporters · latest 10 hours ago

ISP: Sindelar Serviços de Internet Ltda
Usage Type: Fixed Line ISP
ASN: AS268873
Hostname(s): 45.174.238.106.viutelecom.com.br
Domain Name: viuinternet.com.br
Country: 🇧🇷 Brazil
City: Capao da Canoa, Rio Grande do Sul

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

39 from 25 distinct reporters

First reported

October 19th 2024

Most recent report

10 hours ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 7 🇦🇷 Argentina 1 🇫🇷 France 1

Most common categories Bad Web Bot 8 Web App Attack 3 Brute-Force 2 Hacking 1 DDoS Attack 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇹 Malta	2026-11-15 11:20:54 UTC · (10 hours ago)	45.174.238.106 - - [15/Nov/2026:12:20:54 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/155.0.0.0 Safari/537.36" Brute-force password attempt	Hacking Web App Attack Brute-Force
🇺🇸 TPI-Abuse	2026-11-13 05:06:29 UTC · (2 days ago)	(mod_security) mod_security (id:210350) triggered by 45.174.238.106 (45.174.238.106.viutelecom.com.br): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 00:06:24.378772 2026] [security2:error] [pid 26639:tid 26639 ... show more (mod_security) mod_security (id:210350) triggered by 45.174.238.106 (45.174.238.106.viutelecom.com.br): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 00:06:24.378772 2026] [security2:error] [pid 26639:tid 26639] [client 45.174.238.106:61098] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|periodthreads.com\|F\|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "periodthreads.com"] [uri "/"] [unique_id "avaa0CLw1rZxUvPPkdGgPAAAABE"], referer: https://inthegladefantasydolls.blogspot.com/ show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-10-18 18:25:45 UTC · (4 weeks ago)	apache vulnerability scan	Web App Attack
🇫🇷 Tilellit.PRO	2026-10-07 01:26:13 UTC · (1 month ago)	WooCommerce YITH AJAX Filder product_cat filter flood attempt with taxonomies	DDoS Attack Bad Web Bot
🇺🇸 鬼影233	2026-09-29 11:00:49 UTC · (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36	Bad Web Bot
🇺🇸 鬼影233	2026-09-29 01:06:27 UTC · (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36	Bad Web Bot
🇺🇸 鬼影233	2026-09-24 11:45:19 UTC · (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36	Bad Web Bot
🇺🇸 鬼影233	2026-09-22 08:47:42 UTC · (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0	Bad Web Bot
🇺🇸 鬼影233	2026-09-22 03:03:36 UTC · (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0	Bad Web Bot
🇺🇸 鬼影233	2026-09-20 17:58:07 UTC · (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36	Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-16 21:58:42 UTC · (1 month ago)	(mod_security) mod_security (id:210492) triggered by 45.174.238.106 (45.174.238.106.viutelecom.com.br): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 17:58:23.051282 2026] [security2:error] [pid 28492:tid 28492 ... show more (mod_security) mod_security (id:210492) triggered by 45.174.238.106 (45.174.238.106.viutelecom.com.br): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 17:58:23.051282 2026] [security2:error] [pid 28492:tid 28492] [client 45.174.238.106:34139] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "flugstad.com"] [uri "/wp-config.php.local"] [unique_id "aqsQ_1dZm4-13Q_WsiZX5AAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-09-07 13:13:49 UTC · (2 months ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36	Bad Web Bot
Anonymous	2026-09-04 06:21:17 UTC · (2 months ago)	denied traffic to a honeypot network. destination port 43175.	Port Scan Hacking
🇬🇪 ORDUNET	2026-09-03 20:29:06 UTC · (2 months ago)	Botnet UDP flood (DDoS) against a hosted game server at 185.143.177.x:27004/udp in AS203136 (LLC Ordunet), Georgia. This source sustained more than 150 packets/sec toward that single UDP port and was one of 3229 distinct sources from 1488 autonomous ... show more Botnet UDP flood (DDoS) against a hosted game server at 185.143.177.x:27004/udp in AS203136 (LLC Ordunet), Georgia. This source sustained more than 150 packets/sec toward that single UDP port and was one of 3229 distinct sources from 1488 autonomous systems in 139 countries taking part in a coordinated flood on 2026-09-03/04. Our border router discarded 184 million packets (149 GB) of this attack traffic in 24 hours. Detected on a MikroTik RouterOS router by per-source rate accounting in the raw/prerouting chain (dst-limit 150,50,src-address/10s); the timestamp is the moment this source crossed the threshold, timezone +04:00. This is not a port scan and not a brute-force attempt - it is a packet flood, so the host is almost certainly compromised and part of a botnet. Full packet-level evidence available on request to [email protected]. show less	DDoS Attack Exploited Host
Anonymous	2026-08-15 09:52:08 UTC · (3 months ago)	Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in thread-skip.asp	Exploited Host Bad Web Bot

Showing 1 to 15 of 39 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 216.24.219.65

🇺🇸 170.168.240.86

🇺🇸 161.123.108.57

🇰🇷 106.240.1.44

🇷🇴 92.118.39.63

🇺🇦 46.201.39.224

🇩🇪 194.187.176.53

🇺🇸 104.248.181.118

🇺🇸 89.208.54.73

🇳🇱 86.38.187.28

🇨🇳 60.16.216.211

🇫🇷 45.39.216.2

🇨🇳 27.19.21.58

🇷🇴 2.57.121.112

🇷🇺 213.33.209.197

🇺🇸 162.216.150.126

🇺🇸 159.203.184.84

🇫🇮 147.185.133.54

🇺🇸 45.159.20.86

🇹🇷 5.25.168.233