JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

45.38.94.104

Recent Activity

Abuse confidence score ?

3% Caution

12 reports

9 reporters · latest 22 hours ago

ISP	Subnet Digital LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS50304
Domain Name	subnetdigital.com
Country	🇩🇰 Denmark
City	Copenhagen, Capital Region

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 45.38.94.104

Export CSV

This IP address has been reported a total of 12 times from 9 distinct sources. 45.38.94.104 was first reported on July 13th 2025, and the most recent report was 22 hours ago. In the last 60 days, the only reporter location was: Sweden with 1 report. The only category in these recent reports was: DDoS Attack 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇪 KIDOS	2026-10-20 17:42:47 (22 hours ago)	Suspicious activity detected in ezproxy log (e.g., sqlmap, masscan, python-requests)	DDoS Attack
Anonymous	2026-05-22 13:47:02 (4 months ago)	LH-Watcher: FAKE_ID [Fake Googlebot]	Bad Web Bot
🇮🇪 Jim Keir	2025-10-02 22:56:36 (1 year ago)	2025-10-02 22:56:35 45.38.94.104 File scanning, blocking 45.38.94.104 for 5 minutes	Web App Attack
🇮🇪 Jim Keir	2025-09-04 19:47:46 (1 year ago)	2025-09-04 19:47:45 45.38.94.104 File scanning, blocking 45.38.94.104 for 5 minutes	Web App Attack
🇨🇦 JuicyJ	2025-08-20 16:15:24 (1 year ago)	Excessive crawling/scraping	Web App Attack
🇳🇱 exxos	2025-08-18 02:03:01 (1 year ago)	HTTP1.x attacks	DDoS Attack
🇮🇩 hermawan	2025-08-18 00:51:43 (1 year ago)	[Mon Aug 18 07:50:53.767705 2025] [security2:error] [pid 289026:tid 139953925256896] [client 45.38.9 ... show more [Mon Aug 18 07:50:53.767705 2025] [security2:error] [pid 289026:tid 139953925256896] [client 45.38.94.104:51985] ModSecurity: Access denied with code 403 (phase 1). Match of "ipMatch 103.166.156.58" against "REMOTE_ADDR" required. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "372"] [id "440006"] [msg "Connection Close Header"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: close found within REMOTE_ADDR: 45.38.94.104 request_line = GET /index.php/prakiraan-cuaca-pelabuhan-tanjung-perak-surabaya/83-akar/maritim HTTP/1.1 Request URI RAW = /index.php/prakiraan-cuaca-pelabuhan-tanjung-perak-surabaya/83-akar/maritim Request Basename = maritim"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prakiraan-cuaca-pelabuhan-tanjung-perak-surabaya/83-akar/maritim"] [unique_id "aKJ47V2st9eAavY47H1oHgAAAQw"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[289067] [f6uf ... show less	Hacking Web App Attack
Anonymous	2025-08-17 22:03:18 (1 year ago)	Malicious activity detected	Hacking Web App Attack
Anonymous	2025-08-16 09:42:19 (1 year ago)	Malicious activity detected	Hacking Web App Attack
🇮🇪 Jim Keir	2025-08-05 20:48:25 (1 year ago)	2025-08-05 20:48:24 45.38.94.104 File scanning, blocking 45.38.94.104 for 5 minutes	Web App Attack
🇨🇴 j458rjqwi348fhjq46	2025-08-04 08:43:04 (1 year ago)	Malicious IP detected by WAF with anomaly score 10.0. Attack types: Exposure of environment file (.e ... show more Malicious IP detected by WAF with anomaly score 10.0. Attack types: Exposure of environment file (.env), Timestamp deviates by 1.9 hours, Suspicious URL detected (extended rules). Activity: 46 requests to 2 URLs. Period: 2025-08-04 03:35:38 - 2025-08-04 03:35:38 (America/Bogota). Origin: DK. Source: Automated WAF log analysis. show less	Hacking Web App Attack
🇺🇸 ne1for23	2025-07-13 14:00:28 (1 year ago)	Attempt to access invalid virtual host name (###.###.###.###). Typically used to access "internal" ... show more Attempt to access invalid virtual host name (###.###.###.###). Typically used to access "internal" resources improperly exposed externally and "protected" only by a lack of external DNS resolution. 45.38.94.104 - - [13/Jul/2025:14:00:28 +0000] "GET /.env HTTP/1.1" 403 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" "-" show less	Hacking

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 172.239.10.144

🇺🇸 136.108.17.160

🇳🇴 85.165.104.58

🇬🇧 81.19.219.232

🇿🇦 41.215.235.112

🇺🇸 35.188.177.74

🇺🇸 34.85.177.5

🇺🇸 34.74.233.169

🇺🇸 20.102.235.84

🇨🇳 203.57.238.39

🇹🇼 198.235.24.121

🇹🇳 197.5.145.114

🇲🇽 177.245.231.202

🇺🇸 172.96.182.111

🇺🇸 156.244.157.242

🇺🇸 136.109.76.22

🇮🇳 125.18.219.234

🇻🇳 116.99.175.132

🇨🇳 106.13.107.35

🇧🇩 103.197.250.241