JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 181.232.252.45

181.232.252.45 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 4%: ?

ISP	ZAMBRANO INTRIAGO RICHARD EDISSON (ZAM NET)
Usage Type	Fixed Line ISP
ASN	AS272147
Domain Name	zamnet.ec
Country	🇪🇨 Ecuador
City	Portoviejo, Manabi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 181.232.252.45

Whois 181.232.252.45

IP Abuse Reports for 181.232.252.45:

This IP address has been reported a total of 10 times from 8 distinct sources. 181.232.252.45 was first reported on June 20th 2025, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-23 04:13:46 (3 days ago)	(mod_security) mod_security (id:210350) triggered by 181.232.252.45 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 181.232.252.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 00:13:42.619260 2026] [security2:error] [pid 31061:tid 31061] [client 181.232.252.45:41852] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|brianbrock.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "brianbrock.com"] [uri "/"] [unique_id "atre9tpKKOmRZ56ZIQZXEgAAAAU"], referer: https://newschoolnotes.blogspot.com/2022/07 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-06-29 13:47:53 (3 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇵🇱 sefinek.net	2026-05-24 07:56:14 (5 months ago)	Triggered Cloudflare WAF (firewallCustom) from EC. Action: MANAGED_CHALLENGE \| Protocol: HTTP/2 (GET ... show more Triggered Cloudflare WAF (firewallCustom) from EC. Action: MANAGED_CHALLENGE \| Protocol: HTTP/2 (GET) \| Endpoint: /booru/tags \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.2 Safari/605.1.15 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇦 polycoda	2026-04-19 10:41:57 (6 months ago)	🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27	DDoS Attack
Anonymous	2025-11-25 00:18:56 (11 months ago)	scanning http requests from known botnet	Web App Attack
🇺🇸 nodepile	2025-11-22 23:29:44 (11 months ago)	Requests denied due to proxy/VPN risk (tenant=82 method=GET path=/brands/diode-dynamics/backup-leds- ... show more Requests denied due to proxy/VPN risk (tenant=82 method=GET path=/brands/diode-dynamics/backup-leds-for-2015-2020-acura-tlx-pair.html ua='Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36') show less	Open Proxy VPN IP
🇺🇸 nodepile	2025-11-04 04:41:43 (11 months ago)	Requests denied due to proxy/VPN risk (tenant=82 method=GET path=/brands.html ua='Mozilla/5.0 (Macin ... show more Requests denied due to proxy/VPN risk (tenant=82 method=GET path=/brands.html ua='Mozilla/5.0 (Macintosh; Intel Mac OS X 11_3_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.128 Safari/537.36') show less	Open Proxy VPN IP
🇺🇸 nodepile	2025-10-29 21:36:46 (11 months ago)	Requests denied due to proxy/VPN risk. By NodeFleet	Open Proxy VPN IP
🇨🇭 backslash	2025-08-21 04:36:21 (1 year ago)		Bad Web Bot
🇫🇷 bigorre.org	2025-06-20 08:06:21 (1 year ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 204.76.203.214

🇮🇩 202.158.36.50

🇳🇱 200.138.46.155

🇻🇳 180.93.54.135

🇱🇾 165.16.5.62

🇭🇰 152.32.134.89

🇨🇱 45.168.68.254

🇬🇧 45.133.173.123

🇬🇧 45.133.173.54

🇧🇪 35.240.58.49

🇧🇪 207.175.160.119

🇧🇷 205.210.31.243

🇹🇼 198.235.24.19

🇺🇸 195.184.76.50

🇹🇷 193.111.77.94

🇲🇽 187.252.203.41

🇺🇸 172.86.119.188

🇮🇳 152.32.159.180

🇹🇭 147.50.231.135

🇻🇳 125.212.235.194