JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.67.99.2

45.67.99.2 was found in our database!

This IP was reported 156 times. Confidence of Abuse is 58%: ?

58%

ISP	Tarragona, 161 08014, Barcelona, Spain
Usage Type	Data Center/Web Hosting/Transit
ASN	AS40676
Domain Name	legaconetworks.nl
Country	🇪🇸 Spain
City	Barcelona, Catalonia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.67.99.2

Whois 45.67.99.2

IP Abuse Reports for 45.67.99.2:

This IP address has been reported a total of 156 times from 50 distinct sources. 45.67.99.2 was first reported on April 22nd 2022, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Site.eu	2026-07-14 01:08:28 (3 hours ago)	Excessive 404/403 errors	Brute-Force
🇨🇭 backslash	2026-07-13 14:51:00 (13 hours ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
Anonymous	2026-07-13 13:23:46 (14 hours ago)	[server.tmg.gr] httpd-suspicious-path: sites=www.aidshep2018.gr; logs=/var/log/httpd/domains/aidshep ... show more [server.tmg.gr] httpd-suspicious-path: sites=www.aidshep2018.gr; logs=/var/log/httpd/domains/aidshep2018.gr.log; samples=/wp-includes/woocommerce-call.php \| /wp-content/plugins/wordpress-seo/wp-seo-main-float.php \| /wp-content/plugins/enhanced-text-widget/analyst/src/403x.php show less	Hacking Web App Attack
🇫🇷 Octopuce	2026-07-13 11:52:43 (16 hours ago)	Aggressive web search of vulnerable pages: /wp-content/themes/index.php /wp-content/themes/builder-a ... show more Aggressive web search of vulnerable pages: /wp-content/themes/index.php /wp-content/themes/builder-and-developer/inc/tgm/error.php /wp-content/ ... show less	Web App Attack
🇩🇪 LRob	2026-07-13 05:23:15 (22 hours ago)	CrowdSec: crowdsecurity/http-wordpress-scan \| req: ["/wp-content/plugins/wordpress-seo/wp-seo-main-f ... show more CrowdSec: crowdsecurity/http-wordpress-scan \| req: ["/wp-content/plugins/wordpress-seo/wp-seo-main-float.php","/wp-content/plugins/enhanced-text-widget/analyst/src/403x.php","/wp-content/themes/news-portal/error.php","/wp-content/themes/fukasawa/inc/classes/403.php"] \| UA: ["Go-http-client/2.0"] show less	Web App Attack
🇧🇾 lns.bz	2026-07-13 04:24:52 (23 hours ago)	Too many 404 requests [BY]	Web App Attack
🇬🇧 consul.to	2026-07-13 03:13:59 (1 day ago)	Web attack/malicious scanning detected	Web App Attack
🇮🇹 VHosting	2026-07-13 00:45:04 (1 day ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇳🇱 Savvii	2026-05-31 23:50:11 (1 month ago)	10 attempts against mh-misc-ban on frost	Web App Attack
🇮🇱 spd.co.il	2026-05-24 02:04:55 (1 month ago)	Web application attack detected	Hacking Web App Attack
🇮🇱 Dolphi	2026-05-08 13:20:07 (2 months ago)	POST //xmlrpc.php	Brute-Force Web App Attack
🇺🇸 NicoID	2026-05-07 00:05:12 (2 months ago)	45.67.99.2 - - [06/May/2026:03:55:03 -0600] "GET /wp-content/themes/bltm/wp-login.php HTTP/2.0" 404 ... show more 45.67.99.2 - - [06/May/2026:03:55:03 -0600] "GET /wp-content/themes/bltm/wp-login.php HTTP/2.0" 404 0 "http://cfield.org/wp-content/themes/bltm/wp-login.php" "Go-http-client/2.0" ... show less	Brute-Force
🇬🇧 poundawebsiteltd	2026-05-06 06:38:46 (2 months ago)	Apache 403 Forbidden Access. Evidence: [REDACTED_DOMAIN]:80 45.67.99.2 - - [06/May/2026:07:38:45 +01 ... show more Apache 403 Forbidden Access. Evidence: [REDACTED_DOMAIN]:80 45.67.99.2 - - [06/May/2026:07:38:45 +0100] GET /classwithtostring.php HTTP/1.1 403 158 - Go-http-client/1.1 show less	Web App Attack
🇺🇸 TPI-Abuse	2026-05-06 05:26:29 (2 months ago)	(mod_security) mod_security (id:234930) triggered by 45.67.99.2 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:234930) triggered by 45.67.99.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 06 01:26:25.424853 2026] [security2:error] [pid 32176:tid 32197] [client 45.67.99.2:41867] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\/lib\\\\/php\\\\/connector\\\\.minimal\\\\.php$" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/27_Apps_WPPlugin.conf"] [line "6778"] [id "234930"] [rev "2"] [msg "COMODO WAF: File upload vulnerability in the file manager plugin before 6.9 for WordPress (CVE-2020-25213)\|\|certifiedfinancialmanager.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "certifiedfinancialmanager.org"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "afrRAU6RCeqyaCx7uxymFgAAAJE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-06 02:52:45 (2 months ago)	(mod_security) mod_security (id:234930) triggered by 45.67.99.2 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:234930) triggered by 45.67.99.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 05 22:52:40.588070 2026] [security2:error] [pid 12031:tid 12031] [client 45.67.99.2:37861] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\/lib\\\\/php\\\\/connector\\\\.minimal\\\\.php$" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/27_Apps_WPPlugin.conf"] [line "6787"] [id "234930"] [rev "2"] [msg "COMODO WAF: File upload vulnerability in the file manager plugin before 6.9 for WordPress (CVE-2020-25213)\|\|crooked1826.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "crooked1826.org"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "afqs-D-WSI3vu29UOKachgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 156 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.226

🇩🇪 185.220.101.183

🇺🇸 162.216.150.113

🇨🇳 125.35.109.214

🇨🇳 120.52.92.157

🇨🇳 120.48.178.142

🇮🇩 103.176.79.139

🇮🇷 94.184.10.115

🇺🇸 89.19.34.170

🇩🇪 69.5.169.172

🇱🇹 45.227.254.170

🇺🇸 40.76.124.110

🇺🇸 38.132.109.165

🇦🇺 209.38.93.97

🇬🇧 195.140.214.28

🇳🇱 195.133.40.246

🇷🇴 193.46.255.86

🇵🇱 176.53.159.198

🇮🇳 165.101.250.39

🇺🇸 162.216.150.115