JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 170.245.158.160

170.245.158.160 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 51%: ?

51%

ISP	VELONET SAS
Usage Type	Fixed Line ISP
ASN	AS267832
Hostname(s)	170-245-158-160.velonet.co
Domain Name	velonet.co
Country	🇨🇴 Colombia
City	Medellin, Antioquia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 170.245.158.160

Whois 170.245.158.160

IP Abuse Reports for 170.245.158.160:

This IP address has been reported a total of 13 times from 9 distinct sources. 170.245.158.160 was first reported on April 28th 2026, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-16 15:04:37 (9 hours ago)	(mod_security) mod_security (id:210350) triggered by 170.245.158.160 (170-245-158-160.velonet.co): 1 ... show more (mod_security) mod_security (id:210350) triggered by 170.245.158.160 (170-245-158-160.velonet.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 11:04:32.987150 2026] [security2:error] [pid 23172:tid 23185] [client 170.245.158.160:45688] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|humaehealth.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "humaehealth.com"] [uri "/"] [unique_id "aqqwAOrt0i_Rpa6qfeGlLQAAAAo"], referer: https://backlinkscheckerbulk.website/dir/editorial-seo-backlinks-96416 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-09-07 05:24:15 (1 week ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0 ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0%5D=digest_key_terms%3A325&f%5B1%5D=digest_key_terms%3A355&field_article_edition%5B504%5D=504&field_key_terms%5B338%5D=338 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0") show less	DDoS Attack Bad Web Bot
🇫🇷 security.rdmc.fr	2026-09-06 15:21:18 (1 week ago)	Port Scan Attack proto:TCP src:59424 dst:23	Port Scan
🇬🇧 spufidoo	2026-09-06 03:22:01 (1 week ago)	2026-09-06T04:21:57.214448+01:00 heimdall kernel: [9726526.925680] [UFW BLOCK] IN=eth0 OUT= MAC=b8:2 ... show more 2026-09-06T04:21:57.214448+01:00 heimdall kernel: [9726526.925680] [UFW BLOCK] IN=eth0 OUT= MAC=b8:27:eb:a2:a7:d3:d4:05:de:c6:00:32:08:00:45:00:00:3c:dc:83:40:00:35:06:5a:ad SRC=170.245.158.160 DST=192.168.4.77 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=56451 DF PROTO=TCP SPT=64819 DPT=22 WINDOW=65535 RES=0x00 SYN URGP=0 2026-09-06T04:21:57.715018+01:00 heimdall kernel: [9726527.426263] [UFW BLOCK] IN=eth0 OUT= MAC=b8:27:eb:a2:a7:d3:d4:05:de:c6:00:32:08:00:45:00:00:3c:dc:84:40:00:35:06:5a:ac SRC=170.245.158.160 DST=192.168.4.77 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=56452 DF PROTO=TCP SPT=64819 DPT=22 WINDOW=65535 RES=0x00 SYN URGP=0 2026-09-06T04:21:58.795041+01:00 heimdall kernel: [9726528.506265] [UFW BLOCK] IN=eth0 OUT= MAC=b8:27:eb:a2:a7:d3:d4:05:de:c6:00:32:08:00:45:00:00:3c:dc:85:40:00:35:06:5a:ab SRC=170.245.158.160 DST=192.168.4.77 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=56453 DF PROTO=TCP SPT=64819 DPT=22 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Brute-Force SSH
Anonymous	2026-09-05 04:50:54 (1 week ago)	denied SSH access attempt. destination port 22.	Port Scan Brute-Force SSH
🇺🇸 MPL	2026-09-05 02:07:39 (1 week ago)	tcp ports: 23,22 (4 or more attempts)	Port Scan
🇺🇸 gui-ying233	2026-09-03 23:38:00 (1 week ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇺🇸 Aurealize	2026-08-30 08:43:35 (2 weeks ago)	Cowrie SSH brute-force activity detected. 2 or more observation(s) from 2026-08-30T08:43:00.000Z thr ... show more Cowrie SSH brute-force activity detected. 2 or more observation(s) from 2026-08-30T08:43:00.000Z through 2026-08-30T08:43:35.000Z. show less	Brute-Force SSH
🇹🇷 SeczarSecureOps	2026-08-30 04:21:11 (2 weeks ago)	Auto-blocked by Seczar SecureOps — High-Risk Port Probe (admin-managed entries) — SSH (6 events in 5 ... show more Auto-blocked by Seczar SecureOps — High-Risk Port Probe (admin-managed entries) — SSH (6 events in 5min) at 2026-08-30 04:20 show less	Web App Attack
🇺🇸 kosada.com	2026-08-27 02:48:21 (2 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-08-26 03:01:40 (3 weeks ago)	(mod_security) mod_security (id:210730) triggered by 170.245.158.160 (170-245-158-160.velonet.co): 1 ... show more (mod_security) mod_security (id:210730) triggered by 170.245.158.160 (170-245-158-160.velonet.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 23:01:36.028675 2026] [security2:error] [pid 3357231:tid 3357274] [client 170.245.158.160:37154] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vtweaversguild.org\|F\|2"] [data ".lucienne-repweave.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vtweaversguild.org"] [uri "/workshops/www.lucienne-repweave.com"] [unique_id "ao5XEHK1jCnyj5EdX-ak3gAAAQM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 gui-ying233	2026-08-24 18:49:42 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
Anonymous	2026-04-28 11:44:41 (4 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 222.204.1.9

🇺🇸 172.203.228.114

🇺🇸 152.163.59.66

🇺🇸 147.185.132.28

🇩🇪 69.5.169.91

🇩🇪 43.228.157.10

🇺🇸 35.232.15.176

🇫🇮 2.26.0.248

🇺🇸 2001:470:1:332::14a

🇨🇭 209.99.186.43

🇦🇷 201.158.96.255

🇪🇹 196.189.126.10

🇸🇻 190.87.195.106

🇳🇱 185.112.73.42

🇮🇩 180.243.0.196

🇪🇨 177.234.223.63

🇨🇳 140.143.246.90

🇳🇱 91.92.42.121

🇱🇧 77.246.71.171

🇺🇸 31.97.135.102