JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

145.223.132.89

Neutral Activity

Abuse confidence score ?

0% Low Risk

77 reports

23 reporters · latest 2 months ago

ISP	BYTEPLUS
Usage Type	Data Center/Web Hosting/Transit
ASN	AS150436
Domain Name	bytedance.com
Country	🇸🇬 Singapore
City	Singapore

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

145.223.132.89 has been reported 77 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 145.223.132.89

Export CSV

This IP address has been reported a total of 77 times from 23 distinct sources. 145.223.132.89 was first reported on April 12th 2026, and the most recent report was 2 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-08-15 07:06:21 (2 months ago)	Confirmed malicious by STILWaters CTI platform (score=98, sources=1)	Hacking Brute-Force SSH
Anonymous	2026-05-28 09:27:34 (4 months ago)	FortiWeb WAF: 2 attacks detected. Threat Score: 11000. Types: Client Management(1), GEO IP(1). Origi ... show more FortiWeb WAF: 2 attacks detected. Threat Score: 11000. Types: Client Management(1), GEO IP(1). Origin: Singapore. show less	Web App Attack
Anonymous	2026-05-26 09:21:45 (4 months ago)	FortiWeb WAF: 12 attacks detected. Threat Score: 16800. Types: Client Management(6), GEO IP(6). Orig ... show more FortiWeb WAF: 12 attacks detected. Threat Score: 16800. Types: Client Management(6), GEO IP(6). Origin: Singapore. show less	Web App Attack
🇩🇪 Vegascosmetics	2026-05-25 21:51:14 (4 months ago)	Kingcopy(AI-IDS): IP is wandering around the site and acting suspiciously.	Bad Web Bot
🇺🇸 nodepile	2026-05-25 12:56:48 (4 months ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/wishlist/index/add/product/ ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/wishlist/index/add/product/2303/form_key/7Uwh0YziOhcRV5m6/ ua='Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36') show less	Web App Attack Exploited Host
Anonymous	2026-05-25 04:42:23 (4 months ago)	Attack Signature Blocked: /wishlist/index/add/product/2342/form_key/vvHlSq1CWX2ks3CZ/ (Magento Site) ... show more Attack Signature Blocked: /wishlist/index/add/product/2342/form_key/vvHlSq1CWX2ks3CZ/ (Magento Site) (Botnet activity attributed to: Angara Technologies Group / mikhail-smirnov-79830322) show less	Web App Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-05-24 16:31:58 (4 months ago)	(mod_security) mod_security (id:210730) triggered by 145.223.132.89 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 145.223.132.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 24 12:31:46.639686 2026] [security2:error] [pid 9755:tid 9755] [client 145.223.132.89:37144] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|gamepart.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gamepart.com"] [uri "/home/tancedi1/gamepart.com"] [unique_id "ahMn8rupw3wgxRZrNJxoHAAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-05-24 13:55:42 (4 months ago)	IP banned by Fail2Ban in jail nginx-abusive-ips	Web App Attack Brute-Force Bad Web Bot
🇨🇭 zynex	2026-05-24 13:14:16 (4 months ago)	URL Probing: /index.php	Web App Attack
🇺🇸 TPI-Abuse	2026-05-24 11:38:59 (4 months ago)	(mod_security) mod_security (id:211180) triggered by 145.223.132.89 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:211180) triggered by 145.223.132.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 24 07:38:49.246199 2026] [security2:error] [pid 6058:tid 6058] [client 145.223.132.89:46662] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "50"] [id "211180"] [rev "3"] [msg "COMODO WAF: Session Fixation: SessionID Parameter Name with No Referer\|\|www.thecrimsonpirate.com\|F\|2"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.thecrimsonpirate.com"] [uri "/forum/index.php"] [unique_id "ahLjSdLvYQ5LFOf4i9LaQwAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-05-24 09:23:03 (4 months ago)	FortiWeb WAF: 76 attacks detected. Threat Score: 9800. Types: Client Management(38), GEO IP(38). Ori ... show more FortiWeb WAF: 76 attacks detected. Threat Score: 9800. Types: Client Management(38), GEO IP(38). Origin: Singapore. show less	Web App Attack
🇺🇸 SYSMarshal	2026-05-24 09:21:53 (4 months ago)	SYSMarshal detection: Port Scanning, Web Application Attack, DDoS Attack, DNS Attack, Bad Bot [Port: ... show more SYSMarshal detection: Port Scanning, Web Application Attack, DDoS Attack, DNS Attack, Bad Bot [Port:443, Proto:TCP, EventID:5152] show less	Port Scan Web App Attack Bad Web Bot
🇷🇸 Smel	2026-05-24 09:07:02 (4 months ago)	HTTP/80/443/8080 Unauthorized Probe, Hack -	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-05-24 06:27:15 (4 months ago)	(mod_security) mod_security (id:949110) triggered by 145.223.132.89 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:949110) triggered by 145.223.132.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 24 02:27:07.371952 2026] [security2:error] [pid 10882:tid 10882] [client 145.223.132.89:57130] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.scrase.com"] [uri "/WebResource.axd"] [unique_id "ahKaO4r-uUS9cu6diAhNYwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2026-05-24 05:37:14 (4 months ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 24	Exploited Host Web App Attack

Showing 1 to 15 of 77 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇦 196.92.7.247

🇲🇦 196.92.7.246

🇧🇷 187.45.59.195

🇮🇳 168.144.213.157

🇸🇬 167.172.86.80

🇭🇰 165.154.156.67

🇺🇸 147.90.234.19

🇺🇸 129.121.101.179

🇻🇳 113.182.16.108

🇬🇧 45.133.173.70

🇺🇸 40.124.171.189

🇮🇳 203.145.143.163

🇻🇪 143.255.87.151

🇸🇬 136.85.82.40

🇨🇳 117.81.212.152

🇬🇧 77.68.76.72

🇬🇧 35.203.210.3

🇮🇱 34.165.59.23

🇨🇴 186.80.31.138

🇸🇮 130.12.182.227