AbuseIPDB » 45.8.148.214

45.8.148.214 was found in our database!

This IP was reported 42 times. Confidence of Abuse is 31%: ?

31%

ISP	TT1 Datacenter UG (haftungsbeschraenkt)
Usage Type	Data Center/Web Hosting/Transit
Hostname(s)	vmi2143089.contaboserver.net
Domain Name	tt1-datacenter.de
Country	Germany
City	Frankfurt am Main, Hessen

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 45.8.148.214

Whois 45.8.148.214

IP Abuse Reports for 45.8.148.214:

This IP address has been reported a total of 42 times from 25 distinct sources. 45.8.148.214 was first reported on August 4th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Apache	2024-08-05 13:37:19 (1 month ago)	(mod_security) mod_security (id:20000010) triggered by 45.8.148.214 (DE/Germany/vmi2000740.contabose ... show more(mod_security) mod_security (id:20000010) triggered by 45.8.148.214 (DE/Germany/vmi2000740.contaboserver.net): 5 in the last 300 secs show less	Brute-Force Web App Attack
Ba-Yu	2024-08-05 08:54:12 (1 month ago)	General hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
Anonymous	2024-08-05 08:11:48 (2 months ago)	Fail2Ban apache-noscript	Bad Web Bot
URAN Publishing Service	2024-08-05 07:57:35 (2 months ago)	45.8.148.214 - - [05/Aug/2024:10:57:34 +0300] "GET /cgi-bin/inputs.php HTTP/1.1" 404 440 "-" "Mozill ... show more45.8.148.214 - - [05/Aug/2024:10:57:34 +0300] "GET /cgi-bin/inputs.php HTTP/1.1" 404 440 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" ... show less	Web App Attack
conseilgouz	2024-08-05 06:30:11 (2 months ago)	sie-7 : Trying access unauthorized files/dir=>/wp-content/inputs.php	Hacking
Mediashaker	2024-08-05 04:11:21 (2 months ago)	(apache-scanners) Failed apache-scanners trigger with match [redacted] from 45.8.148.214 (DE/Germany ... show more(apache-scanners) Failed apache-scanners trigger with match [redacted] from 45.8.148.214 (DE/Germany/vmi2000740.contaboserver.net) show less	Port Scan
clapper	2024-08-05 03:42:04 (2 months ago)	45.8.148.214 (DE/Germany/vmi2000740.contaboserver.net), more than 100 Apache 404 hits in the last 36 ... show more45.8.148.214 (DE/Germany/vmi2000740.contaboserver.net), more than 100 Apache 404 hits in the last 3600 secs; ID: rub show less	Brute-Force Bad Web Bot
Anonymous	2024-08-05 01:45:41 (2 months ago)	Common attack or app scan event detected and blocked	Port Scan Hacking Web App Attack
URAN Publishing Service	2024-08-04 18:17:05 (2 months ago)	45.8.148.214 - - [04/Aug/2024:21:17:04 +0300] "GET /cgi-bin/inputs.php HTTP/1.1" 404 448 "-" "Mozill ... show more45.8.148.214 - - [04/Aug/2024:21:17:04 +0300] "GET /cgi-bin/inputs.php HTTP/1.1" 404 448 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.8.148.214 - - [04/Aug/2024:21:17:04 +0300] "GET /wp-content/inputs.php HTTP/1.1" 404 285 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" ... show less	Web App Attack
Anonymous	2024-08-04 17:44:00 (2 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
cmbplf	2024-08-04 17:27:09 (2 months ago)	532 requests to /.well-known/pki-validation/.php 231 requests to /.well-known/acme-challe ... show more532 requests to /.well-known/pki-validation/.php 231 requests to /.well-known/acme-challenge/*.php 5 requests to /indoxploit.php show less	Brute-Force Bad Web Bot
TPI-Abuse	2024-08-04 17:12:22 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 45.8.148.214 (vmi2000740.contaboserver.net): 1 ... show more(mod_security) mod_security (id:210492) triggered by 45.8.148.214 (vmi2000740.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 04 13:12:18.944310 2024] [security2:error] [pid 25366:tid 25366] [client 45.8.148.214:51897] [client 45.8.148.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.soulwolf.com"] [uri "/wp-config.php"] [unique_id "Zq-2clZqfNe2f4QhXZmkdQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack