JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 145.223.131.189

145.223.131.189 was found in our database!

This IP was reported 81 times. Confidence of Abuse is 57%: ?

57%

ISP	BYTEPLUS
Usage Type	Data Center/Web Hosting/Transit
ASN	AS150436
Domain Name	bytedance.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 145.223.131.189

Whois 145.223.131.189

IP Abuse Reports for 145.223.131.189:

This IP address has been reported a total of 81 times from 18 distinct sources. 145.223.131.189 was first reported on April 15th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-19 23:13:35 (1 day ago)	(mod_security) mod_security (id:210350) triggered by 145.223.131.189 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 145.223.131.189 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 19:13:25.435803 2026] [security2:error] [pid 2202741:tid 2202741] [client 145.223.131.189:48322] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.clcmillvale.com\|F\|4"] [data "keep-alive, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.clcmillvale.com"] [uri "/wp-content/uploads/2020/05/2020-05-03_Sermon_PS.pdf"] [unique_id "al1aFUrEZOL6jQ73-M5YLQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-19 22:42:49 (1 day ago)	(mod_security) mod_security (id:210350) triggered by 145.223.131.189 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 145.223.131.189 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 18:42:37.596740 2026] [security2:error] [pid 1861:tid 1861] [client 145.223.131.189:33818] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|arsenalfordemocracy.com\|F\|4"] [data "keep-alive, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/wp-content/uploads/2019/07/Lend-Lease-Ep-7-Links-and-Notes-Democratic-Leadership-Attacks-on-the-Left.pdf"] [unique_id "al1S3arvTXveVHxP3gMuGgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-12 06:13:08 (1 week ago)	Web attack	Bad Web Bot Web App Attack
🇺🇸 Hmorrin	2026-07-12 05:15:39 (1 week ago)		Port Scan
🇺🇸 gui-ying233	2026-07-12 00:01:23 (1 week ago)	Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mob ... show more Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 show less	Bad Web Bot
🇺🇸 ipblock.com	2026-07-11 14:38:00 (1 week ago)	IPBlock protected site ID [3192-af][s=06]. Exploit request, vulnerability probe.	Hacking Bad Web Bot Web App Attack
🇺🇸 gui-ying233	2026-07-11 00:01:45 (1 week ago)	Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Mob ... show more Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Mobile Safari/537.36 show less	Bad Web Bot
Anonymous	2026-07-10 20:03:06 (1 week ago)	Web attack	Bad Web Bot Web App Attack
🇺🇸 gui-ying233	2026-07-10 00:02:06 (1 week ago)	Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Vers ... show more Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/172.1 show less	Bad Web Bot
Anonymous	2026-07-09 10:02:42 (1 week ago)	Web attack	Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-07-09 08:31:00 (1 week ago)	IPBlock protected site ID [3192-af][s=06]. Exploit request, vulnerability probe.	Hacking Bad Web Bot Web App Attack
🇺🇸 Hmorrin	2026-06-30 01:16:02 (3 weeks ago)		Port Scan
Anonymous	2026-06-29 09:29:02 (3 weeks ago)	FortiWeb WAF: 4 attacks detected. Threat Score: 7000. Types: Client Management(2), GEO IP(2). Origin ... show more FortiWeb WAF: 4 attacks detected. Threat Score: 7000. Types: Client Management(2), GEO IP(2). Origin: Singapore. show less	Web App Attack
🇺🇸 Hmorrin	2026-06-29 00:16:11 (3 weeks ago)		Port Scan
🇺🇸 kosada.com	2026-06-28 08:30:08 (3 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot

Showing 1 to 15 of 81 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 185.226.197.37

🇺🇸 45.56.83.149

🇳🇱 185.189.182.234

🇺🇸 165.22.38.85

🇺🇸 162.144.99.131

🇱🇾 102.38.18.177

🇹🇷 94.154.43.36

🇵🇹 81.193.216.17

🇺🇸 66.132.224.29

🇺🇸 64.62.156.182

🇺🇸 64.62.156.152

🇺🇸 40.124.81.157

🇨🇳 14.22.11.180

🇹🇼 198.235.24.95

🇺🇸 185.180.141.38

🇺🇸 185.117.225.239

🇩🇪 167.94.146.33

🇿🇦 105.184.42.30

🇷🇺 95.140.148.172

🇺🇸 74.125.181.148