JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

45.9.148.165

Neutral Activity

Abuse confidence score ?

0% Low Risk

26 reports

18 reporters · latest 2 months ago

ISP	Nice IT Customers Network
Usage Type	Data Center/Web Hosting/Transit
ASN	AS49447
Domain Name	as49447.net
Country	🇳🇱 Netherlands
City	Dronten, Flevoland

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

45.9.148.165 has been reported 26 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 45.9.148.165

Export CSV

This IP address has been reported a total of 26 times from 18 distinct sources. 45.9.148.165 was first reported on December 31st 2023, and the most recent report was 2 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-08-08 03:48:18 (2 months ago)	Blocked by UFW (TCP on 43819) Source port: 53722 TTL: 47 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 43819) Source port: 53722 TTL: 47 Packet length: 60 TOS: 0x08 This report (for 45.9.148.165) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-08-04 04:11:57 (2 months ago)	Blocked by UFW (TCP on 6881) Source port: 36652 TTL: 48 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 6881) Source port: 36652 TTL: 48 Packet length: 60 TOS: 0x08 This report (for 45.9.148.165) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇪🇸 masterguru	2026-08-04 03:51:12 (2 months ago)	xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (5000900-122)	Web App Attack
🇺🇸 xmission.com	2026-08-03 05:09:17 (2 months ago)	Blocked by UFW (TCP on 50000) Source port: 35200 TTL: 48 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 50000) Source port: 35200 TTL: 48 Packet length: 60 TOS: 0x08 This report (for 45.9.148.165) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 anycast_ac	2026-08-02 09:39:29 (2 months ago)	[DDoS Attacker] This IP was attacking website exosware.fun and sent 640 requests on port 443	DDoS Attack Web App Attack
🇩🇪 LRob	2026-08-02 05:17:52 (2 months ago)	CrowdSec: crowdsecurity/http-bf-wordpress_bf_xmlrpc \| req: /xmlrpc.php \| UA: Mozilla/5.0 (iPhone; CP ... show more CrowdSec: crowdsecurity/http-bf-wordpress_bf_xmlrpc \| req: /xmlrpc.php \| UA: Mozilla/5.0 (iPhone; CPU iPhone OS 17_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/125.0 Mobile/15E148 Safari/604.1 show less	Brute-Force Web App Attack
Anonymous	2026-08-02 03:20:04 (2 months ago)		Web Spam Bad Web Bot
🇺🇸 xmission.com	2026-08-01 23:31:37 (2 months ago)	Blocked by UFW (TCP on 6881) Source port: 59350 TTL: 47 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 6881) Source port: 59350 TTL: 47 Packet length: 60 TOS: 0x08 This report (for 45.9.148.165) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-07-27 02:47:55 (2 months ago)	45.9.148.165 (NL/The Netherlands/-), 5 distributed sshd attacks on account [REDACTED] in the last 36 ... show more 45.9.148.165 (NL/The Netherlands/-), 5 distributed sshd attacks on account [REDACTED] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Jul 26 22:30:36 sshd[8477]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.126.89.35 user=[USERNAME] show less	DDoS Attack
🇩🇪 Lino Project	2026-07-24 05:17:36 (2 months ago)	CrowdSec abuse IP report (host SRV-2) Scenario: LePresidente/http-generic-403-bf	Hacking
🇺🇸 xmission.com	2026-07-23 18:36:38 (2 months ago)	Blocked by UFW (TCP on 50000) Source port: 59536 TTL: 47 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 50000) Source port: 59536 TTL: 47 Packet length: 60 TOS: 0x08 This report (for 45.9.148.165) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2026-07-22 21:46:22 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 45.9.148.165 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 45.9.148.165 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 17:46:14.616043 2026] [security2:error] [pid 2008205:tid 2008220] [client 45.9.148.165:38038] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|quantumgaze.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "quantumgaze.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amE6Ju7_ZJcUTd1TNPBa1QAAAEw"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-22 19:52:33 (2 months ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇺🇸 TPI-Abuse	2026-07-21 22:45:44 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 45.9.148.165 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 45.9.148.165 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 18:45:39.703921 2026] [security2:error] [pid 1787777:tid 1787777] [client 45.9.148.165:37544] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|aabondwnc.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "aabondwnc.com"] [uri "/wp-json/wp/v2/users"] [unique_id "al_2k7CL6Qsx8zNHrQrQ8wAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-07-21 08:50:37 (2 months ago)	Blocked by UFW (TCP on 54236) Source port: 49932 TTL: 48 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 54236) Source port: 49932 TTL: 48 Packet length: 60 TOS: 0x08 This report (for 45.9.148.165) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 194.88.98.110

🇲🇽 189.132.6.151

🇩🇪 94.26.106.122

🇵🇸 37.8.93.116

🇺🇸 34.168.236.225

🇮🇳 223.228.107.245

🇺🇦 195.96.143.165

🇷🇴 193.46.255.86

🇺🇸 173.77.226.72

🇺🇸 167.99.123.70

🇫🇷 163.172.66.206

🇷🇴 92.118.39.203

🇺🇸 74.7.227.30

🇬🇧 35.203.210.231

🇮🇳 27.100.15.70

🇺🇸 20.169.57.79

🇹🇼 198.235.24.114

🇺🇬 196.0.107.158

🇨🇱 190.12.170.92

🇨🇳 183.95.106.151