JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 145.223.131.21

145.223.131.21 was found in our database!

This IP was reported 86 times. Confidence of Abuse is 61%: ?

61%

ISP	BYTEPLUS
Usage Type	Data Center/Web Hosting/Transit
ASN	AS150436
Domain Name	bytedance.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 145.223.131.21

Whois 145.223.131.21

IP Abuse Reports for 145.223.131.21:

This IP address has been reported a total of 86 times from 23 distinct sources. 145.223.131.21 was first reported on April 15th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-25 08:25:22 (2 days ago)	(mod_security) mod_security (id:210350) triggered by 145.223.131.21 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 145.223.131.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 04:25:05.760278 2026] [security2:error] [pid 4879:tid 4879] [client 145.223.131.21:59958] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.chrisbilder.com\|F\|4"] [data "keep-alive, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.chrisbilder.com"] [uri "/stat850/graded/2019/FinalExam_web2019.docx"] [unique_id "ao1RYUexzIYJNcQqBzMvfAAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-24 00:16:58 (3 days ago)	(mod_security) mod_security (id:210350) triggered by 145.223.131.21 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 145.223.131.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 20:16:48.761745 2026] [security2:error] [pid 18977:tid 18977] [client 145.223.131.21:58702] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.puregoldmorgans.com\|F\|4"] [data "keep-alive, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.puregoldmorgans.com"] [uri "/GSDs/pedigrees/Pedigree-Hannah.doc"] [unique_id "aouNcCC4HlChWqXjuBpvyAAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 stechusa	2026-08-22 01:14:11 (5 days ago)	[Askari] \| country=SG \| Behavior: Targeting specific pages, HTTP/1.1 over TLS, Concurrent page load ... show more [Askari] \| country=SG \| Behavior: Targeting specific pages, HTTP/1.1 over TLS, Concurrent page load during attack show less	Bad Web Bot DDoS Attack
🇺🇸 stechusa	2026-08-22 01:14:11 (5 days ago)	ELEVATED_THREAT \| country=SG \| ASN=Byteplus Pte. Ltd. \| AbuseIPDB=68% \| 12 IPs targeting /brand/halc ... show more ELEVATED_THREAT \| country=SG \| ASN=Byteplus Pte. Ltd. \| AbuseIPDB=68% \| 12 IPs targeting /brand/halco-lighting/halco-light-bulbs.html \| Facet request during elevated threat (facet_ratio=0.85, unique_ips=95) \| HTTP/1.1 over TLS (elevated=True) show less	Bad Web Bot DDoS Attack
Anonymous	2026-08-19 20:52:26 (1 week ago)	Attacks websites by trying to access known vulnerables of plugins, brute-force of backends or probin ... show more Attacks websites by trying to access known vulnerables of plugins, brute-force of backends or probing of administrative tools show less	Brute-Force Web App Attack
Anonymous	2026-08-15 22:26:51 (1 week ago)	Scraper not respecting robots.txt or not identifying itself properly ...	Bad Web Bot
🇺🇸 kosada.com	2026-08-15 20:15:16 (1 week ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-08-13 08:30:07 (2 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-08-05 12:06:38 (3 weeks ago)	Scraper not respecting robots.txt or not identifying itself properly ...	Bad Web Bot
🇺🇸 kosada.com	2026-08-05 02:45:31 (3 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇫🇷 Sklurk	2026-08-05 02:06:57 (3 weeks ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-08-04 00:42:22 (3 weeks ago)	Web App Attack	Web App Attack
Anonymous	2026-08-04 00:29:26 (3 weeks ago)	Scraper not respecting robots.txt or not identifying itself properly ...	Bad Web Bot
🇸🇪 KIDOS	2026-08-03 03:31:56 (3 weeks ago)	CrowdSec detected malicious activity	DDoS Attack
🇸🇪 Johan Finn	2026-08-03 03:31:38 (3 weeks ago)	malicious activity	Web App Attack

Showing 1 to 15 of 86 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇹 196.189.236.151

🇳🇵 157.10.100.12

🇳🇴 87.120.104.29

🇭🇰 83.229.123.161

🇷🇺 77.41.156.64

🇨🇳 60.223.251.132

🇺🇸 2400:cb00:988:1000:4036:9cbc:89b9:c437

🇩🇪 167.94.145.25

🇫🇷 147.135.213.177

🇺🇸 72.167.221.243

🇩🇪 69.5.169.214

🇺🇸 66.132.172.200

🇨🇦 54.39.0.13

🇳🇱 45.148.10.151

🇬🇧 35.203.210.184

🇭🇰 23.91.97.170

🇰🇪 197.248.225.17

🇬🇧 193.32.209.236

🇺🇸 178.128.2.28

🇺🇸 172.203.149.63