JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.153.34.43

45.153.34.43 was found in our database!

This IP was reported 4,470 times. Confidence of Abuse is 100%: ?

100%

ISP	TechTies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS197170
Domain Name	tech-ties.net
Country	🇳🇱 Netherlands
City	Eygelshoven, Limburg

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.153.34.43

Whois 45.153.34.43

IP Abuse Reports for 45.153.34.43:

This IP address has been reported a total of 4,470 times from 652 distinct sources. 45.153.34.43 was first reported on October 13th 2025, and the most recent report was 25 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 oalver	2026-08-24 16:12:04 (25 minutes ago)	Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: nginx_path_signa ... show more Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: nginx_path_signature, honeypot_http, nginx_404_flood. Sources: honeypot, nginx. Details: path_signature: request to /.aws/credentials (HTTP 301); path_signature: request to /admin/phpinfo.php (HTTP 301); 404_flood: 10 requests to /env.php (HTTP 404) within 60s. First seen: 2026-08-07. Risk score: 100/100. show less	Web App Attack
🇺🇸 thieuleu	2026-08-24 08:57:17 (7 hours ago)	Unauthorized connection attempt blocked by firewall policy. Web application hardening active.	Brute-Force Exploited Host
🇪🇸 netfactotum	2026-08-24 08:53:22 (7 hours ago)		Hacking Web App Attack
🇺🇸 RLDD	2026-08-24 07:51:03 (8 hours ago)	WP probing for vulnerabilities -nov	Web App Attack
🇮🇹 VHosting	2026-08-24 07:50:05 (8 hours ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇩🇪 Gwyneth Llewelyn	2026-08-24 06:48:37 (9 hours ago)	2026/08/24 07:48:35 [error] 380594#380594: 196414 access forbidden by rule, client: 45.153.34.43, s ... show more 2026/08/24 07:48:35 [error] 380594#380594: 196414 access forbidden by rule, client: 45.153.34.43, server: bestasquadradas.org, request: "GET /.env HTTP/2.0", host: "bestasquadradas.org", referrer: "https://www.bestasquadradas.org/.env" 45.153.34.43 - - [24/Aug/2026:07:48:35 +0100] "GET /.env HTTP/2.0" 301 162 "http://www.bestasquadradas.org/.env" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.153.34.43 - - [24/Aug/2026:07:48:35 +0100] "GET /.env HTTP/2.0" 403 1045 "https://www.bestasquadradas.org/.env" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-24 06:10:21 (10 hours ago)	(mod_security) mod_security (id:210492) triggered by 45.153.34.43 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 45.153.34.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 02:10:15.667619 2026] [security2:error] [pid 14321:tid 14321] [client 45.153.34.43:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.nyemdr.org"] [uri "/.env"] [unique_id "aovgR56Uc7wPn71GoFJZYQAAAA0"], referer: http://cpanel.nyemdr.org/.env show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Mundo Bueno	2026-08-24 04:44:15 (11 hours ago)	[ISILIA Protection v2.1] Tentative d'accès: /info.php \| Pays: NL \| UA: Mozilla/5.0 (Windows NT 10.0; ... show more [ISILIA Protection v2.1] Tentative d'accès: /info.php \| Pays: NL \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.12 show less	Hacking Web App Attack
🇺🇸 Mundo Bueno	2026-08-24 04:02:28 (12 hours ago)	[ISILIA Protection v2.1] Tentative d'accès: /phpinfo.php \| Pays: NL \| UA: Mozilla/5.0 (Windows NT 10 ... show more [ISILIA Protection v2.1] Tentative d'accès: /phpinfo.php \| Pays: NL \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.12 show less	Hacking Web App Attack
🇩🇪 maxpower	2026-08-24 03:30:41 (13 hours ago)	(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 45.153.34.43 (-): 1 in the last 3600 sec ... show more (exploit_critical) REGOLA 2 - Critical File Exploit Attempt 45.153.34.43 (-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 45.153.34.43 - - [24/Aug/2026:05:30:37 +0200] "GET /.aws/credentials HTTP/1.1" 404 355 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "45.153.34.43" host=www.lisoladeidesideri.it show less	Port Scan
🇧🇷 Peregrine	2026-08-24 03:17:28 (13 hours ago)	Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 45.153.34.43 172.71.102.161 - - [26/Jun/2026:15:38: ... show more Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 45.153.34.43 172.71.102.161 - - [26/Jun/2026:15:38:36 -0300] "GET /phpinfo.php HTTP/1.1" 404 18193 show less	Bad Web Bot
Anonymous	2026-08-24 03:11:29 (13 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 45.153.34.43 (-)	SQL Injection
🇺🇸 Mundo Bueno	2026-08-24 02:59:58 (13 hours ago)	[ISILIA Protection v2.1] Tentative d'accès: /config.phpinfo \| Pays: NL \| UA: Mozilla/5.0 (X11; Linux ... show more [ISILIA Protection v2.1] Tentative d'accès: /config.phpinfo \| Pays: NL \| UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/5 show less	Hacking Web App Attack
🇪🇸 alferez	2026-08-24 01:47:43 (14 hours ago)	Searching hacked php files	Hacking Exploited Host Web App Attack
🇫🇷 dynamix	2026-08-23 22:32:08 (18 hours ago)	Multiple WAF Violations	Web App Attack

Showing 1 to 15 of 4470 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 194.85.235.99

🇸🇪 178.174.135.213

🇨🇳 175.15.14.220

🇺🇸 155.94.142.85

🇨🇳 144.52.232.64

🇷🇺 81.5.119.98

🇳🇱 45.148.10.152

🇧🇷 170.82.152.127

🇮🇳 104.28.200.97

🇺🇸 76.32.56.161

🇩🇪 64.89.163.139

🇳🇱 45.148.10.151

🇧🇷 43.157.148.38

🇷🇴 2.57.122.53

🇦🇷 179.238.43.242

🇳🇱 178.16.53.6

🇭🇰 165.154.6.75

🇺🇸 161.35.179.218

🇮🇳 122.187.237.122

🇰🇷 118.194.248.4