AbuseIPDB » 45.4.252.143
45.4.252.143
This IP was reported 11 times. Confidence of
Abuse
is 29% : ?
ISP
Fernando German Fischer (FIBERNET TELECOM)
Usage Type
Fixed Line ISP
ASN
AS265661
Domain Name
fibernet.net.ar
Country
🇦🇷
Argentina
City
San Antonio, Misiones
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 45.4.252.143 :
This IP address has been reported a total of
11
times from
9 distinct
sources.
45.4.252.143 was first reported on
August 21st 2025 , and the most recent report was
1 day ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇦🇺
paulshipley.com.au
2026-07-07 09:44:41
(1 day ago)
[Tue Jul 07 19:44:41.067156 2026] [security2:error] [pid 227226] [client 45.4.252.143:39189] [client ...
show more
[Tue Jul 07 19:44:41.067156 2026] [security2:error] [pid 227226] [client 45.4.252.143:39189] [client 45.4.252.143] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "valueaddedpromotions.com.au"] [uri "/.wp-config.php.un~"] [unique_id "akzKiVImoaSfWR11l7NIkgAAAAk"]
...
show less
Web App Attack
🇺🇸
kosada.com
2026-07-06 22:18:51
(2 days ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇮🇩
hermawan
2026-06-18 11:07:13
(2 weeks ago)
[Thu Jun 18 18:07:12.978635 2026] [security2:error] [pid 389494:tid 140711233038016] [client 45.4.25 ...
show more
[Thu Jun 18 18:07:12.978635 2026] [security2:error] [pid 389494:tid 140711233038016] [client 45.4.252.143:17164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yahoo.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.yahoo.go.id found within REQUEST_HEADERS:Referer: https://www.yahoo.go.id/ request_line = GET / HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "ajPRYKQ7DtW_FqvSSC0MCAAAhgU"], referer https://www.yahoo.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[389500] [sCOOLYWhVv0] [ajPRYKQ7DtW_FqvSSC0MCAAAhgU] keep_alive=[1] [2026-06-18 18:07:12.978640] [R:ajPRYKQ7DtW_FqvSSC0MCAAAhgU] UA:'Mozilla/5.0 (iPhone; CPU iPhone OS 15_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15_5 Mobile/15E148 Safari/604.1' Host:'staklim-jatim.bmkg.go.id' AC
...
show less
Email Spam
Hacking
2026-05-12 23:50:43
(1 month ago)
Unauthorized connection attempt on Port 2323
Port Scan
Hacking
Exploited Host
2026-05-12 17:30:14
(1 month ago)
Unauthorized connection attempt on Port 23
Port Scan
Hacking
Exploited Host
🇬🇧
PeravixGroup
2026-05-12 02:29:01
(1 month ago)
Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: ME ...
show more
Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud
show less
IoT Targeted
Brute-Force
🇺🇸
MPL
2026-05-11 12:39:06
(1 month ago)
tcp/23 (2 or more attempts)
Port Scan
🇱🇻
garmtech.com
2025-12-26 08:24:30
(6 months ago)
IM360 WAF: Information Disclosure Attempt in WordPress MV:/wp-config.php2
Web App Attack
2025-11-26 03:12:14
(7 months ago)
scanning http requests from known botnet
Web App Attack
2025-11-19 04:41:19
(7 months ago)
scanning http requests from known botnet
Web App Attack
🇳🇱
exxos
2025-08-21 11:03:01
(10 months ago)
Attacks with Bad user agents
Hacking
Showing 1 to
11
of 11 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: