JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.139.104.172

45.139.104.172 was found in our database!

This IP was reported 513 times. Confidence of Abuse is 100%: ?

100%

ISP	49.3 Networking LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS399979
Domain Name	493networking.cc
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.139.104.172

Whois 45.139.104.172

IP Abuse Reports for 45.139.104.172:

This IP address has been reported a total of 513 times from 248 distinct sources. 45.139.104.172 was first reported on July 21st 2026, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Webhoster	2026-08-28 05:34:33 (3 weeks ago)	{"ClientAddr":"172.70.248.56:10394","ClientHost":"45.139.104.172","ClientPort":"10394","ClientUserna ... show more {"ClientAddr":"172.70.248.56:10394","ClientHost":"45.139.104.172","ClientPort":"10394","ClientUsername":"-","DownstreamContentSize":0,"DownstreamStatus":403,"Duration":16771911,"OriginContentSize":0,"OriginDuration":0,"OriginStatus":0,"Overhead":16771911,"RequestAddr":"files.timvdberg.dev","RequestContentSize":0,"RequestCount":227207,"RequestHost":"files.timvdberg.dev","RequestMethod":"GET","RequestPath":"/","RequestPort":"-","RequestProtocol":"HTTP/2.0","RequestScheme":"https","RetryAttempts":0,"RouterName":"files@file","StartLocal":"2026-08-28T05:34:32.73823164Z","StartUTC":"2026-08-28T05:34:32.73823164Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"https","level":"info","msg":"","request_Cf-Connecting-Ip":"45.139.104.172","request_X-Forwarded-For":"45.139.104.172","request_X-Real-Ip":"172.70.248.56","time":"2026-08-28T05:34:32Z"} ... show less	Port Scan Hacking Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-08-28 05:13:04 (3 weeks ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Web Spam (Form Abuse). Unsolicite ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Web Spam (Form Abuse). Unsolicited bulk message (Form Spam) captured. Evidence: HOST: app.definitelynotahoneypot.xyz \| URI: /contact.php \| UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36 \| BODY: [Empty / GET Request] --- SPAM DATA --- (From: [email protected]) [Empty / GET Request] show less	Web Spam Web App Attack
🇺🇸 azminawwar	2026-08-28 03:50:41 (3 weeks ago)	[45.139.104.172] triggered by honeypot on port [80], Timestamp [2026-08-28T03:50:41Z]METHOD=GET PATH ... show more [45.139.104.172] triggered by honeypot on port [80], Timestamp [2026-08-28T03:50:41Z]METHOD=GET PATH=/ HTTP=HTTP/1.1 UA="Mozilla/5.0 (Linux; Android 8.0.0; SM-G935F) AppleWebKit/537.36 (KHTML, like Ge show less	Port Scan Hacking
🇩🇪 FeG Deutschland	2026-08-28 02:24:12 (3 weeks ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247	Exploited Host Web App Attack
🇳🇴 Abuse Buster	2026-08-28 01:19:00 (3 weeks ago)	45.139.104.172 - [28/Aug/2026:03:18:58 +0200] "GET /scripts.56ecf2bfcf9c03d1.js HTTP/2.0" 404 548 "- ... show more 45.139.104.172 - [28/Aug/2026:03:18:58 +0200] "GET /scripts.56ecf2bfcf9c03d1.js HTTP/2.0" 404 548 "-" "Mozilla/5.0 (Linux; Android 4.4.2; LGMS323 Build/KOT49I.MS32310b) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/30.0.1599.103 Mobile Safari/537.36" Connecting ip: 45.139.104.172 Forwared for: 45.139.104.172 45.139.104.172 - [28/Aug/2026:03:18:58 +0200] "GET /polyfills.b3c3a4255a985e45.js HTTP/2.0" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.0.0 Safari/537.36" Connecting ip: 45.139.104.172 Forwared for: 45.139.104.172 45.139.104.172 - [28/Aug/2026:03:18:58 +0200] "GET /main.43f74bb6ada4ab5a.js HTTP/2.0" 404 548 "-" "Mozilla/5.0 (Linux; Android 11; SM-A526U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36" Connecting ip: 45.139.104.172 Forwared for: 45.139.104.172 ... show less	Web App Attack
🇵🇱 Budyn	2026-08-28 01:09:11 (3 weeks ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Web Spam (Form Abuse). Unsolicite ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Web Spam (Form Abuse). Unsolicited bulk message (Form Spam) captured. Evidence: HOST: docker.definitelynotahoneypot.online \| URI: /contact.php \| UA: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:40.0) Gecko/20100101 Firefox/40.0 \| BODY: [Empty / GET Request] --- SPAM DATA --- (From: [email protected]) [Empty / GET Request] show less	Web Spam Web App Attack
Anonymous	2026-08-27 22:00:10 (3 weeks ago)	45.139.104.172 - - [27/Aug/2026:21:59:07 +0000] "GET //andrei.chirila.me/js/main.min.35f435a5d8eac61 ... show more 45.139.104.172 - - [27/Aug/2026:21:59:07 +0000] "GET //andrei.chirila.me/js/main.min.35f435a5d8eac613c52daa28d8af544a4512337d3e95236e4a4978417b8dcb2f.js HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.54 Safari/537.36 Edg/101.0.1210.39" 45.139.104.172 - - [27/Aug/2026:22:00:09 +0000] "GET //andrei.chirila.me/js/main.min.35f435a5d8eac613c52daa28d8af544a4512337d3e95236e4a4978417b8dcb2f.js HTTP/1.1" 404 134 "-" "Mozilla/5.0 (X11; Linux i686; rv:2.0.1) Gecko/20100101 Firefox/4.0.1" ... show less	Web App Attack
🇵🇱 Budyn	2026-08-27 21:06:33 (3 weeks ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Web Spam (Form Abuse). Unsolicite ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Web Spam (Form Abuse). Unsolicited bulk message (Form Spam) captured. Evidence: HOST: elastic.sweetpuddingtrap.online \| URI: /contact.php \| UA: Mozilla/5.0 (Linux; Android 10; SM-N960F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36 \| BODY: [Empty / GET Request] --- SPAM DATA --- (From: [email protected]) [Empty / GET Request] show less	Web Spam Web App Attack
🇵🇱 Budyn	2026-08-27 16:47:34 (3 weeks ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Web Spam (Form Abuse). Unsolicite ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Web Spam (Form Abuse). Unsolicited bulk message (Form Spam) captured. Evidence: HOST: jira.goblinpot.website \| URI: /contact.php \| UA: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.0.7) Gecko/20060909 Firefox/1.5.0.7 MG(Novarra-Vision/6.9) \| BODY: [Empty / GET Request] --- SPAM DATA --- (From: [email protected]) [Empty / GET Request] show less	Web Spam Web App Attack
🇺🇸 thezelijah	2026-08-27 16:00:08 (3 weeks ago)	[AI Threat Score: 100/100] [AbuseIPDB Score: 100] IP address 45.139.104.172 generated a local hit re ... show more [AI Threat Score: 100/100] [AbuseIPDB Score: 100] IP address 45.139.104.172 generated a local hit requesting the root path GET / which matched the nonexistent-endpoint rule. This activity correlates with extensive historical telemetry showing 501 external reports on AbuseIPDB with a 100% confidence score, most recently reported shortly before the local detection. Likely motive: Reconnaissance show less	Hacking Web App Attack Port Scan
🇺🇸 MPL	2026-08-27 15:34:15 (3 weeks ago)	tcp ports: 80,443 (12 or more attempts)	Port Scan
🇫🇷 rellik	2026-08-27 14:36:00 (3 weeks ago)	Brute Force Scanning Critical Files	Hacking Brute-Force Web App Attack
🇵🇱 Budyn	2026-08-27 12:39:07 (3 weeks ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Web Spam (Form Abuse). Unsolicite ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Web Spam (Form Abuse). Unsolicited bulk message (Form Spam) captured. Evidence: HOST: shop.dont-eat-the-pudding.xyz \| URI: /contact.php \| UA: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0) \| BODY: [Empty / GET Request] --- SPAM DATA --- (From: [email protected]) [Empty / GET Request] show less	Web Spam Web App Attack
🇮🇹 VHosting	2026-08-27 10:35:07 (3 weeks ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇵🇱 Budyn	2026-08-27 08:32:13 (3 weeks ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Web Spam (Form Abuse). Unsolicite ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Web Spam (Form Abuse). Unsolicited bulk message (Form Spam) captured. Evidence: HOST: jira.goblinpot.space \| URI: /contact.php \| UA: MOTORIZR-Z8/46.00.00 Mozilla/4.0 (compatible; MSIE 6.0; Symbian OS; 356) Opera 8.65 [it] UP.Link/6.3.0.0.0 \| BODY: [Empty / GET Request] --- SPAM DATA --- (From: [email protected]) [Empty / GET Request] show less	Web Spam Web App Attack

Showing 1 to 15 of 513 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇿🇦 197.87.160.89

🇺🇸 162.245.60.68

🇮🇳 125.20.16.22

🇰🇷 118.39.219.45

🇳🇱 89.248.167.131

🇫🇷 217.71.127.125

🇳🇱 185.218.86.25

🇺🇸 91.230.168.251

🇫🇷 91.196.152.201

🇧🇬 78.128.112.6

🇺🇸 70.184.85.72

🇨🇳 218.13.152.23

🇳🇱 193.47.62.69

🇫🇷 151.80.61.151

🇧🇬 109.160.32.31

🇵🇱 104.164.171.59

🇮🇳 103.200.88.114

🇻🇳 103.170.255.14

🇧🇷 200.155.66.2

🇭🇹 200.113.202.226