JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 130.51.21.109

130.51.21.109 was found in our database!

This IP was reported 185 times. Confidence of Abuse is 30%: ?

30%

ISP	Cloudfanatic
Usage Type	Data Center/Web Hosting/Transit
ASN	AS11878
Domain Name	cloudfanatic.net
Country	🇺🇸 United States of America
City	Raleigh, North Carolina

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 130.51.21.109

Whois 130.51.21.109

IP Abuse Reports for 130.51.21.109:

This IP address has been reported a total of 185 times from 24 distinct sources. 130.51.21.109 was first reported on December 30th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob	2026-08-22 22:05:37 (1 day ago)	Malicious web request: probing for secrets, traversal or a known exploit path \| method: POST \| path: ... show more Malicious web request: probing for secrets, traversal or a known exploit path \| method: POST \| path: /xmlrpc.php show less	Hacking Web App Attack
🇩🇪 LRob	2026-08-21 00:04:35 (3 days ago)	Malicious web request: probing for secrets, traversal or a known exploit path \| method: POST \| path: ... show more Malicious web request: probing for secrets, traversal or a known exploit path \| method: POST \| path: /xmlrpc.php show less	Hacking Web App Attack
🇩🇪 LRob	2026-08-16 01:36:56 (1 week ago)	WordPress probing \| req: /xmlrpc.php \| UA: PHP/6.2.00	Brute-Force Web App Attack
🇺🇸 SX Communications	2026-08-13 22:31:10 (1 week ago)	Web spam bot from 130.51.21.109: automated HTTPS requests for fake pharmacy / prescription / drug SE ... show more Web spam bot from 130.51.21.109: automated HTTPS requests for fake pharmacy / prescription / drug SEO URLs (bbs and blog product-style paths). 1 hits; spam paths: Online-Pharmacy-Travel-Medications. show less	Web Spam Blog Spam Bad Web Bot
🇺🇸 SX Communications	2026-08-12 20:50:42 (1 week ago)	Web spam bot from 130.51.21.109: automated HTTPS requests for fake pharmacy / prescription / drug SE ... show more Web spam bot from 130.51.21.109: automated HTTPS requests for fake pharmacy / prescription / drug SEO URLs (bbs and blog product-style paths). 1 hits; spam paths: Online-Safe-Pharmacy. show less	Web Spam Blog Spam Bad Web Bot
🇸🇪 KIDOS	2026-08-08 04:03:33 (2 weeks ago)	malicious activity	Web App Attack
🇺🇸 SX Communications	2026-08-07 12:06:49 (2 weeks ago)	Web spam bot from 130.51.21.109: automated HTTPS requests for fake pharmacy / prescription / drug SE ... show more Web spam bot from 130.51.21.109: automated HTTPS requests for fake pharmacy / prescription / drug SEO URLs (bbs and blog product-style paths). 1 hits; spam paths: Online-Safe-Pharmacy. show less	Web Spam Blog Spam Bad Web Bot
🇱🇻 garmtech.com	2026-08-04 05:07:36 (2 weeks ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 08-07.130.51.21.109.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 08-07.130.51.21.109.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇱🇻 garmtech.com	2026-08-03 03:26:33 (3 weeks ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 06-26.130.51.21.109.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 06-26.130.51.21.109.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇺🇸 SX Communications	2026-07-26 14:00:15 (4 weeks ago)	Web spam bot from 130.51.21.109: automated HTTPS requests for fake pharmacy / prescription / drug SE ... show more Web spam bot from 130.51.21.109: automated HTTPS requests for fake pharmacy / prescription / drug SEO URLs (bbs and blog product-style paths). 1 hits; spam paths: Online-Pharmacy-Travel-Medications. show less	Web Spam Blog Spam Bad Web Bot
🇲🇽 octageeks.com	2026-07-20 04:17:24 (1 month ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇱🇻 garmtech.com	2026-07-12 11:45:01 (1 month ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 14-45.130.51.21.109.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 14-45.130.51.21.109.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇱🇻 garmtech.com	2026-07-06 15:29:35 (1 month ago)	IM360 WAF: Old style account creation and modification in Joomla! MV:registration	Web App Attack
🇩🇪 LRob	2026-06-28 20:30:06 (1 month ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-28 07:56:22 (1 month ago)	(mod_security) mod_security (id:210831) triggered by 130.51.21.109 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 130.51.21.109 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 03:56:17.830987 2026] [security2:error] [pid 20212:tid 20212] [client 130.51.21.109:37564] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|backstore.com\|F\|4"] [data "a href="] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "backstore.com"] [uri "/webalizer/usage_201802.html"] [unique_id "akDToRsBl8IU9oJDd5U9oQAAAAs"], referer: http://backstore.com/ show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 185 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇬 102.88.137.213

🇳🇱 45.148.10.152

🇰🇷 210.114.22.126

🇵🇾 181.94.250.70

🇺🇸 172.68.175.104

🇺🇸 172.68.174.83

🇪🇸 139.28.190.135

🇮🇳 122.187.249.88

🇧🇪 91.182.101.65

🇫🇮 77.42.49.249

🇺🇸 184.19.18.71

🇻🇳 163.223.12.243

🇨🇳 120.225.57.161

🇻🇳 116.98.0.168

🇳🇬 102.88.114.229

🇭🇺 91.83.65.7

🇺🇸 70.124.240.13

🇩🇪 46.101.249.210

🇬🇧 2001:41d0:801:2000::5ab5

🇻🇳 165.154.221.175