JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

45.67.99.2

Neutral Activity

Abuse Confidence Score

0% Low Risk

170 reports

58 reporters · latest 2 months ago

ISP: Tarragona, 161 08014, Barcelona, Spain
Usage Type: Data Center/Web Hosting/Transit
ASN: AS40676
Domain Name: legaconetworks.nl
Country: 🇪🇸 Spain
City: Barcelona, Catalonia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

45.67.99.2 has been reported 170 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

170 from 58 distinct reporters

First reported

April 22nd 2022

Most recent report

2 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 mnsf	2026-02-06 16:05:09 UTC · (9 months ago)	Too many Status 40X (12)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-01-13 06:54:40 UTC · (9 months ago)	(mod_security) mod_security (id:210730) triggered by 45.67.99.2 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 13 01:54:34.675164 2026] [security2:error] [pid 32559:tid 32559] [client 45.67.99.2:52433] ModSecu ... show more (mod_security) mod_security (id:210730) triggered by 45.67.99.2 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 13 01:54:34.675164 2026] [security2:error] [pid 32559:tid 32559] [client 45.67.99.2:52433] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.enriquelaw.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.enriquelaw.com"] [uri "/backup/backup.sql"] [unique_id "aWXsKgyMLnIY8dH-OjzgrwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 filstal.org	2026-01-13 06:01:41 UTC · (9 months ago)	WordPress Brute Force / Login Attack	Web App Attack
🇺🇸 TPI-Abuse	2025-12-31 02:15:11 UTC · (10 months ago)	(mod_security) mod_security (id:210730) triggered by 45.67.99.2 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 30 21:15:08.807896 2025] [security2:error] [pid 15273:tid 15273] [client 45.67.99.2:0] ModSecurity ... show more (mod_security) mod_security (id:210730) triggered by 45.67.99.2 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 30 21:15:08.807896 2025] [security2:error] [pid 15273:tid 15273] [client 45.67.99.2:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|kryptonome.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "kryptonome.com"] [uri "/dump.sql"] [unique_id "aVSHLB7AghXveeo6SGfvfQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 Gem	2025-12-29 18:41:23 UTC · (10 months ago)	Unauthorized web scan.	Web App Attack
🇦🇺 aranguren.org	2025-12-27 19:17:07 UTC · (10 months ago)	45.67.99.2 - - [28/Dec/2025:05:32:57 +1100] "HEAD /bak/public_html.tar.gz HTTP/1.1" 404 - "-" "-" 45.67.99.2 - - [28/Dec/2025:05:32:58 +1100] "HEAD /backup/bak.tar.gz HTTP/1.1" 404 - "-" "-" 45.67.99.2 - - [28/Dec/2025:06:17:04 +1100] "HEAD /bak/dire ... show more 45.67.99.2 - - [28/Dec/2025:05:32:57 +1100] "HEAD /bak/public_html.tar.gz HTTP/1.1" 404 - "-" "-" 45.67.99.2 - - [28/Dec/2025:05:32:58 +1100] "HEAD /backup/bak.tar.gz HTTP/1.1" 404 - "-" "-" 45.67.99.2 - - [28/Dec/2025:06:17:04 +1100] "HEAD /bak/directory.zip HTTP/1.1" 404 - "-" "-" 45.67.99.2 - - [28/Dec/2025:06:17:05 +1100] "HEAD /back/sql.sql HTTP/1.1" 404 - "-" "-" 45.67.99.2 - - [28/Dec/2025:06:17:06 +1100] "HEAD /backups/bak.tar HTTP/1.1" 404 - "-" "-" 45.67.99.2 - - [28/Dec/2025:06:17:06 +1100] "HEAD /old/wallet.zip HTTP/1.1" 404 - "-" "-" ... show less	Bad Web Bot
🇺🇸 TPI-Abuse	2025-12-27 19:16:09 UTC · (10 months ago)	(mod_security) mod_security (id:210730) triggered by 45.67.99.2 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 14:16:06.060256 2025] [security2:error] [pid 430947:tid 431047] [client 45.67.99.2:23395] ModSe ... show more (mod_security) mod_security (id:210730) triggered by 45.67.99.2 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 14:16:06.060256 2025] [security2:error] [pid 430947:tid 431047] [client 45.67.99.2:23395] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|nobletitles.org\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "nobletitles.org"] [uri "/bak/dump.sql"] [unique_id "aVAwdkOoapDULp0U_wZ9qwAAAco"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-27 18:42:55 UTC · (10 months ago)	(mod_security) mod_security (id:210730) triggered by 45.67.99.2 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 13:42:51.926220 2025] [security2:error] [pid 28821:tid 28821] [client 45.67.99.2:63291] ModSecu ... show more (mod_security) mod_security (id:210730) triggered by 45.67.99.2 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 13:42:51.926220 2025] [security2:error] [pid 28821:tid 28821] [client 45.67.99.2:63291] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|secureonebank.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "secureonebank.com"] [uri "/backup/www.sql"] [unique_id "aVAoq4RcsQy7cOiv_FvjiQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇹🇭 thaizone.com	2025-12-22 23:37:21 UTC · (10 months ago)	Brute-forcing login against websites (D1-2) #1	Hacking Web App Attack
🇺🇸 TPI-Abuse	2025-12-19 18:40:54 UTC · (10 months ago)	(mod_security) mod_security (id:210730) triggered by 45.67.99.2 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 19 13:40:47.525924 2025] [security2:error] [pid 26277:tid 26277] [client 45.67.99.2:0] ModSecurity ... show more (mod_security) mod_security (id:210730) triggered by 45.67.99.2 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 19 13:40:47.525924 2025] [security2:error] [pid 26277:tid 26277] [client 45.67.99.2:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|sportsbookcommission.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "sportsbookcommission.com"] [uri "/back/backup.sql"] [unique_id "aUWcL_CWqTBMS_TLSiIFtQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 masterguru	2025-12-13 20:33:37 UTC · (10 months ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-122)	Bad Web Bot
🇪🇸 masterguru	2025-12-13 17:51:58 UTC · (10 months ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-123)	Bad Web Bot
🇳🇱 Site.eu	2025-12-13 17:12:19 UTC · (10 months ago)	Excessive 404/403 errors	Brute-Force
🇺🇸 COMPLEX	2025-12-08 16:59:53 UTC · (11 months ago)	Triggered Cloudflare WAF (firewallCustom) from ES. Action taken: MANAGED_CHALLENGE ASN: 40676 (AS40676) Protocol: HTTP/2 (GET method) Endpoint: /	Bad Web Bot
🇳🇿 Tripwire	2025-12-02 03:05:22 UTC · (11 months ago)	Scanning for exploits - /backup/credentials.txt	Web App Attack

Showing 46 to 60 of 170 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇫🇮 196.244.192.202

🇺🇸 173.255.225.15

🇹🇷 149.86.136.185

🇲🇾 120.141.25.162

🇶🇦 89.211.82.210

🇺🇸 68.225.58.246

🇫🇷 62.138.8.174

🇳🇱 45.148.10.152

🇹🇼 221.120.6.242

🇺🇸 216.25.89.150

🇺🇸 104.152.52.225

🇷🇺 94.77.167.231

🇺🇸 66.132.224.26

🇭🇰 47.239.40.220

🇷🇺 37.110.113.113

🇨🇳 36.134.69.15

🇺🇸 104.152.52.212

🇨🇳 101.200.120.180

🇹🇷 85.99.93.205

🇷🇺 85.21.31.226