AbuseIPDB » 45.84.107.128

45.84.107.128 was found in our database!

This IP was reported 1,166 times. Confidence of Abuse is 100%: ?

100%

This address is a Tor exit node. Neither the owner nor the provider are directly behind the offending action.

ISP	QuxLabs AB
Usage Type	Data Center/Web Hosting/Transit
ASN	AS214503
Hostname(s)	exit-11.tor.r0cket.net
Domain Name	quxlabs.com
Country	Sweden
City	Stockholm, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 45.84.107.128

Whois 45.84.107.128

IP Abuse Reports for 45.84.107.128:

This IP address has been reported a total of 1,166 times from 308 distinct sources. 45.84.107.128 was first reported on February 19th 2025, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Site.eu	2025-06-24 04:08:05 (2 hours ago)	Excessive multi-domain requests	Brute-Force
ThreatBook.io	2025-06-24 00:31:29 (6 hours ago)	ThreatBook Intelligence: tor_proxy,Zombie more details on https://threatbook.io/ip/45.84.107.128<br ... show moreThreatBook Intelligence: tor_proxy,Zombie more details on https://threatbook.io/ip/45.84.107.128 2025-06-23 10:05:58 http://dpc8dvxsgy3qp.cloudfront.net/ 2025-06-23 02:00:39 /robots.txt 2025-06-23 02:00:39 / 2025-06-23 09:35:40 http://d3ivqzdymldr3c.cloudfront.net/ 2025-06-23 03:51:44 / 2025-06-23 00:58:55 /robots.txt 2025-06-23 08:57:38 http://d3ivqzdymldr3c.cloudfront.net/ show less	SSH
LRob.fr	2025-06-24 00:00:42 (6 hours ago)	Repeated attacks detected by Fail2Ban in recidive jail	Hacking
rtbh.com.tr	2025-06-23 20:07:18 (10 hours ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Pingger Shikkoken	2025-06-23 13:13:15 (17 hours ago)	2025-06-23T13:13:15+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC ... show more2025-06-23T13:13:15+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=45.84.107.128 DST=10.1.1.11 LEN=52 TOS=0x00 PREC=0x00 TTL=54 ID=51291 DF PROTO=TCP SPT=27072 DPT=8443 WINDOW=35608 RES=0x00 SYN URGP=0 2025-06-23T13:13:16+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=45.84.107.128 DST=10.1.1.11 LEN=52 TOS=0x00 PREC=0x00 TTL=54 ID=51292 DF PROTO=TCP SPT=27072 DPT=8443 WINDOW=35608 RES=0x00 SYN URGP=0 2025-06-23T13:13:17+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=45.84.107.128 DST=10.1.1.11 LEN=52 TOS=0x00 PREC=0x00 TTL=54 ID=51293 DF PROTO=TCP SPT=27072 DPT=8443 WINDOW=35608 RES=0x00 SYN URGP=0 ... show less	Hacking Bad Web Bot
LRob.fr	2025-06-23 12:30:12 (18 hours ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
el-brujo	2025-06-23 08:48:53 (22 hours ago)	06/23/2025-10:38:34.712711 45.84.107.128 Protocol: 6 ET TOR Known Tor Exit Node Traffic group 95	Hacking
kosada.com	2025-06-23 05:39:02 (1 day ago)	Web vulnerability probing	Web App Attack
ut-addicted.com	2025-06-23 02:35:59 (1 day ago)	\[Mon Jun 23 04:35:58.077085 2025\] \[:error\] \[pid 11558:tid 140572132112128\] \[client 45.84.107. ... show more\[Mon Jun 23 04:35:58.077085 2025\] \[:error\] \[pid 11558:tid 140572132112128\] \[client 45.84.107.128:6338\] \[client 45.84.107.128\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded \(Total Score: 5\)"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "ut-addicted.com"\] \[uri "/wp-config.php_____"\] \[unique_id "aFi9jistECWRx3v2-OTO-AAAAMI"\] show less	Brute-Force Web App Attack
ozisp.com.au	2025-06-23 01:56:15 (1 day ago)	null_null_<33>1750643773 [1:2522095:5924] ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic ... show morenull_null_<33>1750643773 [1:2522095:5924] ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic group 96 [Classification: Misc Attack] [Priority: 2] {TCP} 45.84.107.128:60796 show less	Open Proxy
ThreatBook.io	2025-06-23 00:28:32 (1 day ago)	ThreatBook Intelligence: tor_proxy,Zombie more details on https://threatbook.io/ip/45.84.107.128<br ... show moreThreatBook Intelligence: tor_proxy,Zombie more details on https://threatbook.io/ip/45.84.107.128 2025-06-22 01:08:51 / 2025-06-22 03:10:04 http://d3azdm1q0gvo54.cloudfront.net/ 2025-06-22 00:10:58 http://dpc8dvxsgy3qp.cloudfront.net/ 2025-06-22 05:50:29 / 2025-06-22 08:10:24 / show less	SSH
ipblock.com	2025-06-22 23:03:00 (1 day ago)	IPBlock protected site ID [4055-d][s=06]. Major crawler impostor. Mozilla/5.0 (compati ... show moreIPBlock protected site ID [4055-d][s=06]. Major crawler impostor. Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) show less	Bad Web Bot
rtbh.com.tr	2025-06-22 20:07:18 (1 day ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Pingger Shikkoken	2025-06-22 19:14:22 (1 day ago)	2025-06-22T19:14:22+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC ... show more2025-06-22T19:14:22+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=45.84.107.128 DST=10.1.1.11 LEN=52 TOS=0x00 PREC=0x00 TTL=53 ID=7903 DF PROTO=TCP SPT=36072 DPT=8443 WINDOW=35608 RES=0x00 SYN URGP=0 2025-06-22T19:14:23+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=45.84.107.128 DST=10.1.1.11 LEN=52 TOS=0x00 PREC=0x00 TTL=53 ID=7904 DF PROTO=TCP SPT=36072 DPT=8443 WINDOW=35608 RES=0x00 SYN URGP=0 2025-06-22T19:14:24+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=45.84.107.128 DST=10.1.1.11 LEN=52 TOS=0x00 PREC=0x00 TTL=53 ID=7905 DF PROTO=TCP SPT=36072 DPT=8443 WINDOW=35608 RES=0x00 SYN URGP=0 ... show less	Hacking Bad Web Bot
ipblock.com	2025-06-22 11:27:00 (1 day ago)	IPBlock protected site ID [4055-d][s=04]. Major crawler impostor. Mozilla/5.0 (compati ... show moreIPBlock protected site ID [4055-d][s=04]. Major crawler impostor. Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) show less	Bad Web Bot

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩