JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.184.172.91

45.184.172.91 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 3%: ?

ISP	MARLENE FRISKE SAUERESSIG - EIRELI
Usage Type	Fixed Line ISP
ASN	AS269332
Domain Name	Unknown
Country	🇧🇷 Brazil
City	Ipiranga, Parana

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.184.172.91

Whois 45.184.172.91

IP Abuse Reports for 45.184.172.91:

This IP address has been reported a total of 14 times from 14 distinct sources. 45.184.172.91 was first reported on July 30th 2022, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 hermawan	2026-06-09 14:39:56 (1 week ago)	[Tue Jun 09 21:39:51.450183 2026] [security2:error] [pid 63807:tid 139736430573248] [client 45.184.1 ... show more [Tue Jun 09 21:39:51.450183 2026] [security2:error] [pid 63807:tid 139736430573248] [client 45.184.172.91:34057] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php/prediksi-iklim/prediksi-dasarian/probabilistik-curah-hujan-provinsi-jawa-timur HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-dasarian/probabilistik-curah-hujan-provinsi-jawa-timur"] [unique_id "aigltzfffPiKagG1Kzb0BgAAghg"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[63832] [df1vGdNurxM] [aigltzfffPiKagG1Kzb0BgAAghg] keep_alive=[1] [2026-06-09 21:39:51.450190] [R:aigltzfffPiKagG1Kzb0BgAAghg] UA:' ... show less	Email Spam Hacking
🇩🇪 filstal.org	2026-03-28 11:49:09 (2 months ago)	Brute-force/Enumeration: Multiple login attempts for non-existent mail accounts (Honeytrap).	Email Spam Brute-Force
🇩🇪 FeG Deutschland	2026-03-28 03:22:23 (2 months ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇨🇦 polycoda	2026-03-18 11:34:27 (2 months ago)	🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27	DDoS Attack
🇳🇱 maxxsense	2026-02-23 07:59:45 (3 months ago)	45.184.172.91 (BR/Brazil/-), 12 distributed imapd attacks on account [redacted]	Brute-Force
🇦🇺 MAGIC	2025-12-12 01:12:27 (6 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇫🇷 bigorre.org	2025-12-09 13:16:31 (6 months ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
Anonymous	2025-11-26 07:54:18 (6 months ago)	scanning http requests from known botnet	Web App Attack
Anonymous	2025-09-25 04:06:33 (8 months ago)	DDoS botnet 510.000+ IPs; URL with bing/trustpilot/githubhelp and %C2%A4 or \xc2\xa4. NEW 09/2025: a ... show more DDoS botnet 510.000+ IPs; URL with bing/trustpilot/githubhelp and %C2%A4 or \xc2\xa4. NEW 09/2025: amplification attacks via third-parties e.g. HTTP_USER_AGENT facebookexternalhit/meta-externalagent/meta-externalfetcher or IPs from googleusercontent.com with fake HTTP_REFERER foxnews.com/newsweek.com/upwork.com/activision.com/... Port 443. show less	DDoS Attack Bad Web Bot Web App Attack
🇳🇱 exxos	2025-08-26 04:03:01 (9 months ago)	Attacks with Bad user agents	Hacking
Anonymous	2025-01-25 01:57:24 (1 year ago)	Ports: 2077,2078,2082,2083,2086,2087,2095,2096; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
🇰🇬 dos5n	2023-05-23 11:13:05 (3 years ago)	2023-05-23T17:12:08.001116mail.megaline.kg postfix/smtpd[32242]: NOQUEUE: reject: RCPT from unknown[ ... show more 2023-05-23T17:12:08.001116mail.megaline.kg postfix/smtpd[32242]: NOQUEUE: reject: RCPT from unknown[45.184.172.91]: 550 5.1.1 <[email protected]>: Recipient address rejected: megaline.kg; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[45.184.172.91]> 2023-05-23T17:12:34.806035mail.megaline.kg postfix/smtpd[32242]: NOQUEUE: reject: RCPT from unknown[45.184.172.91]: 550 5.1.1 <[email protected]>: Recipient address rejected: megaline.kg; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[45.184.172.91]> 2023-05-23T17:12:49.416353mail.megaline.kg postfix/smtpd[2144]: NOQUEUE: reject: RCPT from unknown[45.184.172.91]: 550 5.1.1 <[email protected]>: Recipient address rejected: megaline.kg; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[45.184.172.91]> 2023-05-23T17:13:03.421374mail.megaline.kg postfix/smtpd[2144]: NOQUEUE: reject: RCPT from unknown[45.184.172.91]: 550 5.1.1 <[email protected]>: Recipient address rejected: megaline.kg; from=< ... show less	Brute-Force
🇩🇪 Fusl	2023-05-04 13:06:17 (3 years ago)	received unsolicited smtp data stream: From: <[email protected]> To: <[email protected]> Subject: Se h ... show more received unsolicited smtp data stream: From: <[email protected]> To: <[email protected]> Subject: Se han filtrado sus datos personales debido a ciertas actividades en sitios sospechosos. Date: 4 May 2023 05:23:41 -0400 Message-ID: <[email protected]> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0010_01D97E6D.03A73757" X-Mailer: Microsoft Office Outlook 12.0 Thread-Index: Acwf0hca3aw2puwfwf0hca3aw2puwf== Content-Language: en x-cr-hashedpuzzle: 2D4= 0hca 32rj k4e5 4pmh 6r32 rjk4 e54p mh6r 32rj k4e5 4pmh 6r32 rjk4 e54p mh6r;1;32rjk4e54pmh6r32rjk4e54pmh6r32rjk4e54pmh6r32rjk4;Sosha1_v1;7;\{98CBBE1E-5EED-6BFE-ADD8-78388B0D98CB\};ZQB3AGUAZgmh6r32rjk4e54pmh6r32rjk4e54pmh6r32rjk4;4 May 2023 05:23:41 -0400;e54pmh6r32rjk4e5 x-cr-puzzleid: \{98CBBE1E-5EED-6BFE-ADD8-78388B0D98CB\} This is a multi-part message in MIME format. ------=_NextPart_000_0010_01D97E6D.03A73757 Content-Type: text/plain; charset="cp-850" Content-Transfer-Encoding: quoted-printable ¡Ho show less	Email Spam
Anonymous	2022-07-30 12:17:23 (3 years ago)	Jul 30 18:17:21 ns3104219 postfix/smtpd[12832]: NOQUEUE: reject: RCPT from unknown[45.184.172.91]: 4 ... show more Jul 30 18:17:21 ns3104219 postfix/smtpd[12832]: NOQUEUE: reject: RCPT from unknown[45.184.172.91]: 450 4.7.1 Client host rejected: cannot find your reverse hostname, [45.184.172.91]; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[45.184.172.91]> ... show less	Email Spam Web App Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 186.235.35.196

🇻🇳 103.149.86.208

🇸🇬 47.84.203.75

🇳🇱 45.156.128.130

🇺🇸 2607:f8b0:4004:c09::12e

🇨🇭 209.99.191.19

🇮🇳 182.79.51.82

🇺🇸 162.216.149.195

🇸🇪 155.4.245.222

🇺🇸 147.185.132.236

🇨🇳 106.113.16.159

🇬🇧 80.6.194.182

🇵🇱 46.174.73.106

🇺🇸 34.223.7.0

🇦🇺 20.5.130.110

🇮🇳 1.22.196.50

🇻🇪 201.243.138.22

🇩🇪 194.187.176.60

🇸🇪 193.14.205.209

🇲🇽 189.203.106.153