JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.84.120.4

45.84.120.4 was found in our database!

This IP was reported 448 times. Confidence of Abuse is 100%: ?

100%

ISP	M247 Dallas Infrastructure
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Domain Name	m247global.com
Country	🇺🇸 United States of America
City	Dallas, Texas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.84.120.4

Whois 45.84.120.4

IP Abuse Reports for 45.84.120.4:

This IP address has been reported a total of 448 times from 221 distinct sources. 45.84.120.4 was first reported on December 18th 2022, and the most recent report was 26 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 donarev419	2026-06-07 01:34:38 (26 minutes ago)	Connection to port 80 with data transfer. Data preview: GET /.env HTTP/1.1 Host: 167.253.66.144 Us ... show more Connection to port 80 with data transfer. Data preview: GET /.env HTTP/1.1 Host: 167.253.66.144 User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/53 show less	Port Scan Hacking
🇸🇰 iplusv	2026-06-07 00:00:21 (2 hours ago)	Automatic report from IV firewall log.	Port Scan Hacking Brute-Force
🇩🇪 samba.org	2026-06-06 02:38:44 (23 hours ago)	spam (f2b h2)	Brute-Force
🇺🇸 rsiddall	2026-06-06 02:01:11 (1 day ago)	2026-06-05T22:00:56.710563linnet.elirion.net postfix/postscreen[12893]: DISCONNECT [45.84.120.4]:635 ... show more 2026-06-05T22:00:56.710563linnet.elirion.net postfix/postscreen[12893]: DISCONNECT [45.84.120.4]:63522 2026-06-05T22:01:00.662392linnet.elirion.net postfix/postscreen[12893]: DISCONNECT [45.84.120.4]:53131 2026-06-05T22:01:03.940102linnet.elirion.net postfix/postscreen[12893]: DISCONNECT [45.84.120.4]:53534 2026-06-05T22:01:07.200743linnet.elirion.net postfix/postscreen[12893]: DISCONNECT [45.84.120.4]:53789 2026-06-05T22:01:10.537757linnet.elirion.net postfix/postscreen[12893]: DISCONNECT [45.84.120.4]:54121 ... show less	Brute-Force
🇮🇩 Burayot	2026-06-06 01:17:31 (1 day ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 45.84.120.4 (US/United States/-): 2 ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 45.84.120.4 (US/United States/-): 2 in the last 3600 secs show less	Web App Attack
🇹🇭 MWA SOC	2026-06-05 21:36:43 (1 day ago)		Port Scan
🇹🇭 thaizone.com	2026-06-05 21:32:55 (1 day ago)	Credential brute-force attacks	Email Spam Brute-Force
🇸🇬 serverutama	2026-06-05 20:03:08 (1 day ago)	Nginx scanner: 45.84.120.4 - - [06/Jun/2026:02:19:38 +0700] "GET /.env HTTP/1.1" 444 0 "-" "Mozilla/ ... show more Nginx scanner: 45.84.120.4 - - [06/Jun/2026:02:19:38 +0700] "GET /.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "-" show less	Web App Attack Bad Web Bot
🇩🇪 HoneyPot-FrPri	2026-06-05 19:34:49 (1 day ago)	45.84.120.4 - - [05/Jun/2026:21:34:48 +0200] "GET /.env HTTP/1.1" 404 187 "-" "Mozilla/5.0 (X11; Lin ... show more 45.84.120.4 - - [05/Jun/2026:21:34:48 +0200] "GET /.env HTTP/1.1" 404 187 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.84.120.4 - ... show less	Bad Web Bot Web App Attack
🇸🇬 Starburst SysOp Team	2026-06-05 17:22:01 (1 day ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-sin2-2)	Hacking Bad Web Bot
🇩🇪 psauxit	2026-06-05 16:55:11 (1 day ago)	Fail2Ban - POSTFIX DNSBL listed sender, DNSBL Rank \> 3	Email Spam Spoofing Brute-Force
Anonymous	2026-06-05 16:41:40 (1 day ago)	45.84.120.4 - - [05/Jun/2026:16:41:37 +0000] "GET /.env HTTP/1.1" 404 193 "-" "Mozilla/5.0 (X11; Lin ... show more 45.84.120.4 - - [05/Jun/2026:16:41:37 +0000] "GET /.env HTTP/1.1" 404 193 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Bad Web Bot Web App Attack
Anonymous	2026-06-05 16:17:13 (1 day ago)	2026-06-05T18:17:13.015213+02:00 gollum postfix/smtpd[2890984]: NOQUEUE: reject: RCPT from unknown[4 ... show more 2026-06-05T18:17:13.015213+02:00 gollum postfix/smtpd[2890984]: NOQUEUE: reject: RCPT from unknown[45.84.120.4]: 554 5.7.1 Service unavailable; Client host [45.84.120.4] blocked using zen.spamhaus.org; Listed by XBL, see https://check.spamhaus.org/query/ip/45.84.120.4 / Listed by CSS, see https://check.spamhaus.org/query/ip/45.84.120.4; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<10-11-178-138> ... show less	Email Spam
Anonymous	2026-06-05 15:52:25 (1 day ago)	45.84.120.4 - - [05/Jun/2026:17:52:23 +0200] "GET /.env HTTP/1.1" 403 5796 "-" "Mozilla/5.0 (X11; Li ... show more 45.84.120.4 - - [05/Jun/2026:17:52:23 +0200] "GET /.env HTTP/1.1" 403 5796 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Web App Attack
🇩🇪 ecs.ge	2026-06-05 14:39:48 (1 day ago)	Automatic Fail2Ban report from jail plesk-modsecurity: multiple matching events detected.	Web App Attack Hacking

Showing 1 to 15 of 448 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.105

🇧🇬 193.24.211.107

🇵🇰 160.187.180.175

🇭🇰 103.243.26.174

🇺🇸 72.10.32.138

🇬🇧 46.101.5.249

🇬🇧 35.203.211.152

🇬🇧 35.203.210.94

🇺🇸 3.140.208.239

🇬🇧 194.74.196.10

🇳🇮 186.1.63.50

🇳🇱 172.94.9.155

🇫🇷 149.202.60.80

🇷🇺 95.215.0.144

🇵🇱 87.251.64.149

🇳🇱 64.89.162.139

🇨🇦 57.134.215.133

🇳🇱 45.153.34.16

🇲🇲 37.111.53.110

🇺🇸 23.238.123.176