JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 145.223.130.183

145.223.130.183 was found in our database!

This IP was reported 40 times. Confidence of Abuse is 55%: ?

55%

ISP	BYTEPLUS
Usage Type	Data Center/Web Hosting/Transit
ASN	AS150436
Domain Name	bytedance.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 145.223.130.183

Whois 145.223.130.183

IP Abuse Reports for 145.223.130.183:

This IP address has been reported a total of 40 times from 13 distinct sources. 145.223.130.183 was first reported on April 20th 2026, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 1gz	2026-06-19 05:16:24 (13 hours ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /showbiz/foto-endri-thyen-per-here-te-pare-heshtjen-per-beniten/851047/ UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2026-06-18 22:30:26 (20 hours ago)	Large-scale coordinated botnet (200+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) ... show more Large-scale coordinated botnet (200+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) \| Attack Signature Blocked: /wishlist/index/add/product/2258/form_key/QE5Fs42d4FSE7aY7/ \| UA: Mozilla/5.0 (Windows NT 10.0; rv:145.0) Gecko/20100101 Firefox/145.0 \| (Magento Site) show less	Hacking Bad Web Bot Web App Attack
🇨🇭 ALPHANET	2026-06-18 20:10:03 (23 hours ago)	Botnet or web spider not respecting robots.txt	DDoS Attack Exploited Host
🇺🇸 nodepile	2026-06-18 02:38:05 (1 day ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/browse-by-car-model/mercede ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/browse-by-car-model/mercedes-benz/mercedes-benz-e300/mercedes-benz-e300.html ua='Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36') show less	Web App Attack Exploited Host
🇺🇸 ipblock.com	2026-06-17 22:27:00 (1 day ago)	IPBlock protected site ID [3192-af][s=06]. Exploit request, vulnerability probe.	Hacking Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-06-12 23:18:00 (6 days ago)	IPBlock protected site ID [3192-af][s=06]. Exploit request, vulnerability probe.	Hacking Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-06-11 17:04:00 (1 week ago)	IPBlock protected site ID [3192-af][s=06]. Exploit request, vulnerability probe.	Hacking Bad Web Bot Web App Attack
Anonymous	2026-06-07 20:11:30 (1 week ago)	Web app attack and vulnerability scan detected from IIS logs	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-06 19:11:40 (1 week ago)	Web app attack and vulnerability scan detected from IIS logs	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-03 04:22:16 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 145.223.130.183 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 145.223.130.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 00:22:03.304839 2026] [security2:error] [pid 19434:tid 19463] [client 145.223.130.183:39774] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.certifiedprojectmanager.eu\|F\|4"] [data "keep-alive, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.certifiedprojectmanager.eu"] [uri "/5 Step Project Managment Executive Guide Tracking.pdf"] [unique_id "ah-r6wm81nCmAFgNuqqe2AAAARA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-28 09:15:55 (3 weeks ago)	(mod_security) mod_security (id:210350) triggered by 145.223.130.183 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 145.223.130.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 28 05:15:43.590391 2026] [security2:error] [pid 7393:tid 7393] [client 145.223.130.183:36258] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.nhgrange.org\|F\|4"] [data "keep-alive, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.nhgrange.org"] [uri "/Documents/2026_Leaders-Registration_Form.pdf"] [unique_id "ahgHv4FB4vK-ti0wQdMxKgAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Vegascosmetics	2026-05-26 21:55:28 (3 weeks ago)	Kingcopy(AI-IDS): IP is wandering around the site and acting suspiciously.	Bad Web Bot
🇺🇸 ipblock.com	2026-05-17 05:34:00 (1 month ago)	IPBlock protected site ID [3192-af][s=06]. Exploit request, vulnerability probe.	Hacking Bad Web Bot Web App Attack
🇺🇸 nodepile	2026-05-02 05:58:46 (1 month ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalog/product/view/id/927 ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalog/product/view/id/927/s/toyota-tundra-03-06-headlight-covers/category/2591/ ua='Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/172.1') show less	Web App Attack Exploited Host
🇺🇸 ipblock.com	2026-05-02 00:01:00 (1 month ago)	IPBlock protected site ID [3192-af][s=02]. Exploit request, vulnerability probe.	Hacking Bad Web Bot Web App Attack

Showing 1 to 15 of 40 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 213.35.107.21

🇰🇷 211.178.247.182

🇭🇰 199.45.154.142

🇺🇸 147.185.132.198

🇵🇱 87.251.64.158

🇮🇷 46.143.100.72

🇳🇱 192.142.24.47

🇺🇸 147.185.132.61

🇺🇸 20.64.96.40

🇳🇱 5.187.35.26

🇱🇧 213.204.93.111

🇨🇳 180.76.171.14

🇧🇷 177.11.17.179

🇫🇷 91.231.89.108

🇫🇷 88.167.110.98

🇿🇲 41.63.62.103

🇬🇧 31.14.254.39

🇺🇸 20.64.106.18

🇷🇺 5.255.231.7

🇺🇸 185.226.196.15