JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.43.166.120

45.43.166.120 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 73%: ?

73%

ISP	LUMADOCK LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS203919
Domain Name	lifeincloud.com
Country	🇷🇴 Romania
City	Bucharest, Bucharest

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.43.166.120

Whois 45.43.166.120

IP Abuse Reports for 45.43.166.120:

This IP address has been reported a total of 22 times from 18 distinct sources. 45.43.166.120 was first reported on June 28th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-01 04:43:18 (1 week ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
🇬🇧 openstrike.co.uk	2026-06-29 05:14:22 (2 weeks ago)	10 attacks on config grabbing URLs (type 2), VC URLs, password grabbing URLs, env grabbing URLs: GET ... show more 10 attacks on config grabbing URLs (type 2), VC URLs, password grabbing URLs, env grabbing URLs: GET /config.json HTTP/1.1 GET /.git/config HTTP/1.1 GET /.aws/credentials HTTP/1.1 GET /backend/.env HTTP/1.1 show less	Hacking
🇫🇮 YF	2026-06-29 03:00:39 (2 weeks ago)	Attaque distribuée subnet	DDoS Attack Web App Attack
🇺🇸 TPI-Abuse	2026-06-29 01:29:10 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 45.43.166.120 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 45.43.166.120 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 21:29:06.064836 2026] [security2:error] [pid 19565:tid 19598] [client 45.43.166.120:50162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "media928.opticaldesignconcepts.com"] [uri "/.git/HEAD"] [unique_id "akHKYgvi8FUz4usJfJ6gJQAAAhY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-29 00:30:03 (2 weeks ago)	IP banned by Fail2Ban in jail nginx-abusive-ips	Web App Attack Brute-Force Bad Web Bot
🇩🇪 DEV-DNS	2026-06-28 23:12:59 (2 weeks ago)	(mod_security) mod_security triggered on hostname [redacted])	SQL Injection
🇳🇱 homeshowdomain.nl	2026-06-28 22:03:08 (2 weeks ago)	Auto-ban: >3000 req/min op 2026-06-28	Web App Attack SSH Hacking
🇬🇧 markawes	2026-06-28 20:54:08 (2 weeks ago)	[markis] Auto banned by Fail2Ban. Reason: Malicious web scan / attempted access to sensitive paths. ... show more [markis] Auto banned by Fail2Ban. Reason: Malicious web scan / attempted access to sensitive paths. Evidence: 45.43.166.120 - - [28/Jun/2026:21:54:04 +0100] "GET /.git/HEAD HTTP/1.1" 404 458 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15" 45.43.166.120 - - [28/Jun/2026:21:54:05 +0100] "GET /.env HTTP/1.1" 404 458 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/146.0.3856.109" 45.43.166.120 - - [28/Jun/2026:21:54:07 +0100] "GET /.env.local HTTP/1.1" 404 458 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" show less	Port Scan Hacking Web App Attack
Anonymous	2026-06-28 19:41:02 (2 weeks ago)	Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1, GET /.env.development HTTP/1.1, G ... show more Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1, GET /.env.development HTTP/1.1, GET /api/.env HTTP/1.1, GET /js/config.js HTTP/1.1, HEAD / HTTP/1.1, GET /config.json HTTP/1.1, GET /.aws/credentials HTTP/1.1, GET /contact.html HTTP/1.1, GET /env HTTP/1.1, GET /.git/HEAD HTTP/1.1, GET /backend/.env HTTP/1.1, GET /.env HTTP/1.1, GET /index.html HTTP/1.1, GET /market%20research.html HTTP/1.1, GET / HTTP/1.1, GET /INTERIM%20MANAGEMENT.html HTTP/1.1, GET /COST.html HTTP/1.1, GET /.env.production HTTP/1.1, GET /LEGAL.html HTTP/1.1, GET /SALES.html HTTP/1.1, GET /Brief.html HTTP/1.1, GET /.env.local HTTP/1.1 show less	Hacking Web App Attack
🇫🇷 masterguru	2026-06-28 19:39:17 (2 weeks ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-201)	Hacking Web App Attack
🇧🇪 cmbplf	2026-06-28 19:30:10 (2 weeks ago)	306 requests with url.path .env 265 requests with url.path .git/* 111 requests with url.path c ... show more 306 requests with url.path .env 265 requests with url.path .git/ 111 requests with url.path config.json 106 requests with url.path .aws/* show less	Brute-Force Bad Web Bot
🇬🇧 consul.to	2026-06-28 19:10:40 (2 weeks ago)	Web attack/malicious scanning detected	Web App Attack
Anonymous	2026-06-28 18:45:02 (2 weeks ago)	suspicious request in access.log	Web App Attack
🇩🇪 BlueWire Hosting	2026-06-28 18:39:27 (2 weeks ago)	Probing websites for vulnerabilities	Web App Attack SQL Injection
🇧🇷 dominioz	2026-06-28 18:30:29 (2 weeks ago)	2026-06-28 18:30:11 GET /.env - - 45.43.166.120 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_1 ... show more 2026-06-28 18:30:11 GET /.env - - 45.43.166.120 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/147.0.0.0+Safari/537.36 - 301 552 2026-06-28 18:30:14 GET /backend/.env - - 45.43.166.120 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+15_7_5)+AppleWebKit/605.1.15+(KHTML,+like+Gecko)+Version/26.0+Safari/605.1.15 - 301 568 2026-06-28 18:30:17 GET /.git/config - - 45.43.166.120 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/147.0.0.0+Safari/537.36 - 301 566 2026-06-28 18:30:17 GET /err/ 404;https://menumais.com.br:443/backend/.env - 45.43.166.120 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+15_7_5)+AppleWebKit/605.1.15+(KHTML,+like+Gecko)+Version/26.0+Safari/605.1.15 https://menumais.com.br/backend/.env 200 1588 ... show less	Web App Attack

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.82

🇹🇼 198.235.24.100

🇵🇱 194.180.49.70

🇩🇪 185.242.3.195

🇺🇸 173.244.60.241

🇷🇺 95.220.223.242

🇹🇭 1.2.174.102

🇺🇸 2a09:bac5:9441:3af::5e:55

🇺🇸 2607:f8b0:4023:1000::122

🇧🇷 187.49.63.41

🇩🇪 158.94.208.36

🇭🇰 152.32.172.177

🇩🇪 140.248.75.88

🇨🇦 134.122.43.85

🇻🇳 103.200.23.154

🇫🇷 85.217.140.4

🇳🇱 45.148.10.152

🇳🇱 45.148.10.147

🇺🇸 45.79.82.114

🇺🇸 44.217.109.75