This IP address has been reported a total of
6
times from
6 distinct
sources.
45.180.65.196 was first reported on
October 10th 2025 , and the most recent report was
3 hours ago Spain
with 1
report;
United States of America
with 1
report.
The most common categories in these recent reports were:
Web App Attack
2
times;
SQL Injection
1
time;
Brute-Force
1
time;
Bad Web Bot
1
time;
Hacking
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-09-25 21:18:56
(3 hours ago)
(mod_security) mod_security (id:210350) triggered by 45.180.65.196 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 45.180.65.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 17:18:52.245492 2026] [security2:error] [pid 21079:tid 21202] [client 45.180.65.196:61796] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cheqs.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cheqs.org"] [uri "/"] [unique_id "arblPEkJdWDQDWxviHy0lQAAAks"], referer: https://aafm.us/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
el-brujo
2026-09-11 00:56:41
(2 weeks ago)
Cloudflare WAF: Request Path: /wireless-en-linux/de-backtrack-a-kali/ Request Query: ?PHPSESSID=r6n4 ...
show more
Cloudflare WAF: Request Path: /wireless-en-linux/de-backtrack-a-kali/ Request Query: ?PHPSESSID=r6n49v0ga4sbgiesbodvk7dra7 Host: forum.elhacker.net userAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Action: block Source: firewallCustom ASN Description: planoip telecom Country: BR Method: GET Timestamp: 2026-09-11T00:56:41Z ruleId: 357d2d06344e434581b4adce2b72fceb. Report generated by Cloudflare-WAF-to-AbuseIPDB.
show less
Hacking
SQL Injection
Web App Attack
🇫🇷
dynamix
2026-07-03 18:13:40
(2 months ago)
WordPress wp-login.php Brute Force Attack
Brute-Force
Web App Attack
🇮🇩
hermawan
2026-05-23 01:18:07
(4 months ago)
[Sat May 23 08:18:02.861574 2026] [security2:error] [pid 924139:tid 140471377524416] [client 45.180. ...
show more
[Sat May 23 08:18:02.861574 2026] [security2:error] [pid 924139:tid 140471377524416] [client 45.180.65.196:18957] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "624"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php/analisis-iklim/analisis-musim/perbandingan-musim-kemarau/perbandingan-awal-musim-kemarau-dengan-normalnya HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/analisis-iklim/analisis-musim/perbandingan-musim-kemarau/perbandingan-awal-musim-kemarau-dengan-normalnya"] [unique_id "ahEASu7SDyUH1HuC-HemrAAB0g8"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[924155] [tKKl6rFMgjo] [ahEASu7SDyUH1HuC-HemrAAB0g8] keep_alive=[1] [2026-05-
...
show less
Email Spam
Hacking
🇮🇩
zam
2026-04-14 21:39:41
(5 months ago)
45.180.65.196 - - [14/Apr/2026:21:39:32 +0000] "POST /xmlrpc.php HTTP/1.1" 403 239
Web App Attack
🇳🇱
Study Bitcoin 🤗
2025-10-10 14:28:58
(11 months ago)
Port probe to tcp/443 (https)
[srv125]
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
6
of 6 reports
