JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.232.152.2

45.232.152.2 was found in our database!

This IP was reported 146 times. Confidence of Abuse is 22%: ?

22%

ISP	VICENTE CLAUDIO ORLANDO
Usage Type	Fixed Line ISP
ASN	AS266761
Domain Name	airnett.com.ar
Country	🇦🇷 Argentina
City	Pampa del Infierno, Chaco

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.232.152.2

Whois 45.232.152.2

IP Abuse Reports for 45.232.152.2:

This IP address has been reported a total of 146 times from 36 distinct sources. 45.232.152.2 was first reported on January 19th 2021, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇴 Fn4ticHz	2026-05-29 02:47:26 (1 week ago)	DDoS blocked via ZeroGuard.ID	DDoS Attack Exploited Host
🇮🇹 VHosting	2026-05-27 11:33:33 (1 week ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇫🇷 MatStef132	2026-05-22 14:04:51 (2 weeks ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot
🇷🇴 Fn4ticHz	2026-05-09 14:13:09 (1 month ago)	Repeated DDoS targeted -- ZeroGuard X ManagedSRV	DDoS Attack Exploited Host
🇺🇦 Hanashiko	2026-05-01 06:24:47 (1 month ago)	DDoS attack traffic detected	DDoS Attack
🇮🇹 VHosting	2026-04-26 08:32:28 (1 month ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇮🇹 VHosting	2026-04-10 05:17:25 (1 month ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇩🇪 NoaQT	2026-04-05 22:06:00 (2 months ago)	45.232.152.2 - - [05/Apr/2026:16:41:45 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.zone53.in ... show more 45.232.152.2 - - [05/Apr/2026:16:41:45 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.zone53.info/home" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 45.232.152.2 - - [05/Apr/2026:16:44:00 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.linkedin.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 45.232.152.2 - - [05/Apr/2026:16:46:35 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 45.232.152.2 - - [05/Apr/2026:16:47:04 +0200] "GET /web/login HTTP/1.1" 499 0 "https://app.prime-prime.com/home" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 45.232.152.2 - - [05/Apr/2026:16:44:00 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.linkedin.com/" "Mozilla/5 ... show less	DDoS Attack
🇩🇪 NoaQT	2026-04-05 14:47:10 (2 months ago)	45.232.152.2 - - [05/Apr/2026:16:41:45 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.zone53.in ... show more 45.232.152.2 - - [05/Apr/2026:16:41:45 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.zone53.info/home" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 45.232.152.2 - - [05/Apr/2026:16:44:00 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.linkedin.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 45.232.152.2 - - [05/Apr/2026:16:44:00 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.linkedin.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 45.232.152.2 - - [05/Apr/2026:16:46:35 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 45.232.152.2 - - [05/Apr/2026:16:46:35 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0 ... show less	DDoS Attack
🇺🇸 COMPLEX	2026-01-26 01:07:25 (4 months ago)	Triggered Cloudflare WAF (l7ddos) from AR. Action taken: BLOCK ASN: undefined (undefined) Protocol: ... show more Triggered Cloudflare WAF (l7ddos) from AR. Action taken: BLOCK ASN: undefined (undefined) Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:146.0) Gecko/20100101 Firefox/146.0 show less	DDoS Attack Bad Web Bot
🇨🇭 Modules	2026-01-20 13:18:03 (4 months ago)	Open proxy http://45.232.152.2:8080 (RT:24390ms,Loc:Argentina,ASN:AS266761)	Open Proxy
🇺🇸 SuperEvilLuke	2025-12-13 12:16:07 (5 months ago)	Malicious activity detected from 266761 VICENTE CLAUDIO ORLANDO towards host panel.embotic.xyz (GET ... show more Malicious activity detected from 266761 VICENTE CLAUDIO ORLANDO towards host panel.embotic.xyz (GET HTTP/2) @ 2025-12-13T12:16:07Z (13 occurrences) show less	DDoS Attack Exploited Host
🇸🇬 Vano Ganzzz	2025-12-12 05:52:43 (5 months ago)	Triggered Cloudflare WAF (l7ddos) from AR. Action taken: BLOCK ASN: 266761 (VICENTE CLAUDIO ORLANDO) ... show more Triggered Cloudflare WAF (l7ddos) from AR. Action taken: BLOCK ASN: 266761 (VICENTE CLAUDIO ORLANDO) Protocol: HTTP/2 (GET method) Endpoint: / Timestamp: 2025-12-12T05:52:43Z Ray ID: 9acaf5118e82dea3 UA: Empty string show less	DDoS Attack Bad Web Bot
🇺🇸 COMPLEX	2025-12-09 18:19:29 (6 months ago)	Triggered Cloudflare WAF (l7ddos) from AR. Action taken: BLOCK ASN: 266761 (VICENTE CLAUDIO ORLANDO) ... show more Triggered Cloudflare WAF (l7ddos) from AR. Action taken: BLOCK ASN: 266761 (VICENTE CLAUDIO ORLANDO) Protocol: HTTP/2 (GET method) Endpoint: / show less	DDoS Attack Bad Web Bot
🇮🇳 Bharat Datacenter	2025-12-08 13:36:23 (6 months ago)	2: date=2025-12-08 time=19:03:22 eventtime=1765200802522555070 tz="+0530" logid="0720018432" type="u ... show more 2: date=2025-12-08 time=19:03:22 eventtime=1765200802522555070 tz="+0530" logid="0720018432" type="utm" subtype="anomaly" eventtype="anomaly" level="alert" vd="root" severity="critical" srcip=45.232.152.2 srccountry="Argentina" dstip=157.254.189.1 dstcountry="India" srcintf="x2" srcintfrole="wan" sessionid=0 action="clear_session" proto=6 service="DNS" count=478523 attack="tcp_syn_flood" srcport=51392 dstport=53 attackid=100663396 policyid=1 policytype="DoS-policy" ref="http://www.fortinet.com/ids/VID100663396" msg="anomaly: tcp_syn_flood, 18837 > threshold 2000, repeats 478523 times since last log, pps 19025 of prior second" crscore=50 craction=4096 crlevel="critical" show less	Brute-Force

Showing 1 to 15 of 146 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 195.206.182.215

🇬🇧 195.140.214.28

🇭🇰 185.239.85.154

🇳🇱 176.65.139.130

🇧🇷 138.185.40.167

🇷🇴 80.94.92.182

🇺🇸 192.178.115.209

🇳🇱 185.107.80.93

🇺🇸 172.104.11.4

🇧🇼 168.167.72.132

🇺🇸 162.216.150.210

🇵🇪 149.34.48.186

🇺🇸 144.172.94.169

🇺🇬 129.205.2.18

🇻🇳 103.61.123.132

🇩🇪 69.5.169.50

🇺🇸 66.132.186.186

🇰🇷 58.229.141.26

🇺🇸 50.114.172.201

🇬🇧 35.203.210.125