JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.9.150.130

45.9.150.130 was found in our database!

This IP was reported 783 times. Confidence of Abuse is 0%: ?

ISP	Nice IT Services Group Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS49447
Domain Name	as49447.net
Country	🇳🇱 Netherlands
City	Dronten, Flevoland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.9.150.130

Whois 45.9.150.130

IP Abuse Reports for 45.9.150.130:

This IP address has been reported a total of 783 times from 315 distinct sources. 45.9.150.130 was first reported on November 21st 2023, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 LTM	2025-10-11 06:20:01 (1 year ago)	WebServer - Attempts to exploit	Hacking Brute-Force Web App Attack
🇮🇹 LTM	2025-02-17 07:20:01 (1 year ago)	WebServer - Attempts to exploit	Hacking Brute-Force Web App Attack
🇮🇹 LTM	2024-08-09 06:20:01 (2 years ago)	WebServer - Attempts to exploit	Hacking Brute-Force Web App Attack
🇳🇱 Linuxmalwarehuntingnl	2024-07-04 23:21:28 (2 years ago)	Honeypot HIT	Brute-Force
🇳🇱 Linuxmalwarehuntingnl	2024-06-28 22:54:37 (2 years ago)	Honeypot HIT	Brute-Force
🇺🇸 TPI-Abuse	2024-05-13 01:03:35 (2 years ago)	(mod_security) mod_security (id:225170) triggered by 45.9.150.130 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 45.9.150.130 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 12 21:03:27.918212 2024] [security2:error] [pid 1039] [client 45.9.150.130:61587] [client 45.9.150.130] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.grandriverhomes.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.grandriverhomes.com"] [uri "/wp-json/wp/v2/users/2"] [unique_id "ZkFm381YVA1aHSsiE5bCoQAAAAU"], referer: https://www.grandriverhomes.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇲🇾 Rizzy	2024-05-12 05:09:35 (2 years ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2024-05-11 15:39:39 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 45.9.150.130 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 45.9.150.130 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 11 11:39:33.573253 2024] [security2:error] [pid 30772] [client 45.9.150.130:46483] [client 45.9.150.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "constructionloansfunding.com"] [uri "/wp-config.phpOLD"] [unique_id "Zj-RNefZmHcA6vdICSJ76QAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-05-11 08:29:52 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 45.9.150.130 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 45.9.150.130 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 11 04:29:46.224028 2024] [security2:error] [pid 3886117] [client 45.9.150.130:28397] [client 45.9.150.130] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|maidsinmalta.com\|F\|2"] [data ".old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "maidsinmalta.com"] [uri "/config.old"] [unique_id "Zj8seicM8z5bNjzvr2-3MQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-05-11 05:04:52 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 45.9.150.130 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 45.9.150.130 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 11 01:04:44.358655 2024] [security2:error] [pid 2669505] [client 45.9.150.130:12537] [client 45.9.150.130] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vangentholding.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vangentholding.com"] [uri "/vangentholdin.sql"] [unique_id "Zj78bFc4oHZYhZ2BqWYrdQAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-05-07 08:08:29 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 45.9.150.130 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 45.9.150.130 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 07 04:08:26.124999 2024] [security2:error] [pid 19992] [client 45.9.150.130:40378] [client 45.9.150.130] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|controvac.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "controvac.com"] [uri "/ntrovac.sql"] [unique_id "Zjnhejjr-EuxmIxbj9f8LgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-05-06 13:37:21 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 45.9.150.130 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 45.9.150.130 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 06 09:37:18.244851 2024] [security2:error] [pid 29036] [client 45.9.150.130:13910] [client 45.9.150.130] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|realdoctorstories.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "realdoctorstories.com"] [uri "/torstories.sql"] [unique_id "ZjjdDmQfGlocE8u1NeZvewAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-05-05 01:06:56 (2 years ago)	XSS Attempt	Hacking
🇳🇱 Dark0547	2024-05-04 03:48:30 (2 years ago)	[2024-05-04 03:48:20.768481] TELNET/8080 Unautorized connection, Suspicious Mirai Botnet.	DDoS Attack Port Scan Hacking Brute-Force IoT Targeted
🇦🇺 ozisp.com.au	2024-04-29 23:17:25 (2 years ago)	null_null_<33>1714432641 [1:2522094:5507] ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic ... show more null_null_<33>1714432641 [1:2522094:5507] ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic group 95 [Classification: Misc Attack] [Priority: 2] {TCP} 45.9.150.130:48917 show less	Open Proxy

Showing 1 to 15 of 783 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.71.154.123

🇺🇸 147.185.132.15

🇦🇺 118.209.227.24

🇳🇱 94.154.43.43

🇬🇧 87.106.65.126

🇧🇪 34.62.25.61

🇲🇴 125.31.2.160

🇨🇳 118.196.142.135

🇨🇳 113.31.103.129

🇩🇪 109.160.32.135

🇰🇿 67.209.155.205

🇩🇪 64.89.163.81

🇩🇪 213.209.159.242

🇧🇪 198.235.24.237

🇺🇸 132.226.86.114

🇨🇳 121.43.153.185

🇺🇸 69.1.18.79

🇧🇷 45.188.45.167

🇳🇱 45.148.10.151

🇺🇸 45.41.86.226