JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.61.139.117

45.61.139.117 was found in our database!

This IP was reported 43 times. Confidence of Abuse is 25%: ?

25%

ISP	BL Networks GB
Usage Type	Data Center/Web Hosting/Transit
ASN	AS399629
Domain Name	blnwx.com
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	London, England

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.61.139.117

Whois 45.61.139.117

IP Abuse Reports for 45.61.139.117:

This IP address has been reported a total of 43 times from 36 distinct sources. 45.61.139.117 was first reported on March 6th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇴 clauss	2026-05-02 18:47:47 (1 month ago)	IP reached maximum auth failures for a one day block	Brute-Force
Anonymous	2026-05-02 10:25:33 (1 month ago)	Blocked by ModSec and CSF	Port Scan
🇺🇸 hostseries	2026-05-02 09:55:54 (1 month ago)	Trigger: LF_CPANEL	Brute-Force
🇲🇽 DidierMX	2026-05-01 22:48:00 (1 month ago)	Attempt to exploit a WHM/cPanel vulnerability using badpass.	Port Scan Brute-Force Web App Attack
🇷🇴 gtheo99	2026-05-01 12:09:11 (1 month ago)	45.61.139.117 (GB/United Kingdom/-), 2 distributed cpanel attacks on account [root] in the last 900 ... show more 45.61.139.117 (GB/United Kingdom/-), 2 distributed cpanel attacks on account [root] in the last 900 secs show less	SSH Brute-Force Hacking
🇷🇴 clauss	2026-05-01 09:27:36 (1 month ago)	IP reached maximum auth failures for a one day block	Brute-Force
🇺🇸 VanKoh	2026-05-01 08:06:52 (1 month ago)	Detected 1 distributed attacks from 45.61.139.117. LF_DISTATTACK; Logs: [2026-05-01 02:06:51 -0600] ... show more Detected 1 distributed attacks from 45.61.139.117. LF_DISTATTACK; Logs: [2026-05-01 02:06:51 -0600] info [whostmgrd] 45.61.139.117 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect show less	DDoS Attack SSH
Anonymous	2026-05-01 07:15:38 (1 month ago)	45.61.139.117 (GB/United Kingdom/-), 5 distributed cpanel attacks on account [root] in the last 600 ... show more 45.61.139.117 (GB/United Kingdom/-), 5 distributed cpanel attacks on account [root] in the last 600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: [2026-05-01 01:15:34 -0600] info [whostmgrd] 45.61.139.117 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 01:14:22 -0600] info [whostmgrd] 66.63.173.199 - root "GET /cpsess4851259382/json-api/version HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 01:13:03 -0600] info [whostmgrd] 45.144.113.15 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 01:13:15 -0600] info [whostmgrd] 45.144.113.15 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-01 01:13:15 -0600] info [whostmgrd] 45.144.113.15 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect IP Addresses Blocked: show less	Port Scan
🇷🇸 SysBitNet	2026-05-01 02:47:00 (1 month ago)	- root [05/01/2026:00:07:41 -0000] "POST /login/?login_only=1 HTTP/1.1" 401 0 "-" "python-requests/2 ... show more - root [05/01/2026:00:07:41 -0000] "POST /login/?login_only=1 HTTP/1.1" 401 0 "-" "python-requests/2.32.3" "-" "-" 2087 show less	Port Scan Web App Attack
🇧🇷 hostseries	2026-05-01 02:04:14 (1 month ago)	Trigger: LF_DISTATTACK	Brute-Force
🇹🇷 Threat.live	2026-04-30 18:30:04 (1 month ago)	Suspicious Connection Attempts	Brute-Force
Anonymous	2026-04-30 18:03:34 (1 month ago)	45.61.139.117 (GB/United Kingdom/-)	Brute-Force
🇬🇧 Aetherweb Ark	2026-04-30 13:58:39 (1 month ago)	Port Scan detected from 45.61.139.117 (GB/United Kingdom/-). N in the last X seconds	Port Scan
Anonymous	2024-12-19 12:18:02 (1 year ago)	Malicious activity detected	Hacking Web App Attack
Anonymous	2024-12-19 11:47:28 (1 year ago)	[Wed Dec 18 08:38:04.719156 2024] [:error] [pid 16190] [client 45.61.139.117] ModSecurity: Access de ... show more [Wed Dec 18 08:38:04.719156 2024] [:error] [pid 16190] [client 45.61.139.117] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "appserver.[munged]"] [uri "/.env"] [unique_id "Z2LQPH8AAAEAAD8@0acAAAAD"] [Thu Dec 19 06:47:27.375369 2024] [:error] [pid 16945] [client 45.61.139.117] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 43 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 210.245.32.192

🇺🇸 198.62.7.218

🇳🇱 176.65.139.181

🇺🇸 172.236.239.55

🇺🇸 143.198.174.13

🇺🇸 20.168.121.152

🇯🇵 8.209.240.251

🇳🇱 5.187.35.26

🇮🇳 183.82.111.224

🇲🇦 154.144.243.93

🇫🇷 151.80.141.196

🇺🇸 103.168.67.159

🇭🇺 89.134.210.182

🇳🇱 45.148.10.152

🇪🇸 2.138.146.55

🇷🇺 212.3.155.8

🇺🇸 194.62.107.249

🇪🇸 162.158.120.204

🇲🇾 47.250.14.85

🇳🇱 45.148.10.151