JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.45.81.2

212.45.81.2 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 34%: ?

34%

ISP	JSC Alma Telecommunications
Usage Type	Fixed Line ISP
ASN	AS39824
Domain Name	alma.plus
Country	🇰🇿 Kazakhstan
City	Almaty, Almaty

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 212.45.81.2

Whois 212.45.81.2

IP Abuse Reports for 212.45.81.2:

This IP address has been reported a total of 26 times from 17 distinct sources. 212.45.81.2 was first reported on February 4th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇹 Information Security	2026-10-09 16:50:29 (1 week ago)	Web App Attack ...	Web App Attack
🇺🇸 TPI-Abuse	2026-10-06 03:54:26 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 212.45.81.2 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210350) triggered by 212.45.81.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 23:54:22.785041 2026] [security2:error] [pid 27860:tid 27860] [client 212.45.81.2:44924] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|miroddi.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "miroddi.com"] [uri "/"] [unique_id "asRw7mmuEPW-QRbEwe0NrAAAAAY"], referer: https://automaticbacklinkbuilder.shop/dir/organic-traffic-backlinks-137525 show less	Brute-Force Bad Web Bot Web App Attack
🇸🇪 gandalf	2026-10-02 23:36:12 (2 weeks ago)	2026-10-03 01:36:08 wonderland sendmail[2314090]: 692Na22j2314090: ruleset=check_rcpt, arg1=<lena.be ... show more 2026-10-03 01:36:08 wonderland sendmail[2314090]: 692Na22j2314090: ruleset=check_rcpt, arg1=<[email protected]>, relay=[212.45.81.2], reject=550 5.7.1 <[email protected]>... Mail from 212.45.81.2 refused - see http://www.spamhaus.org/zen/ show less	Brute-Force Email Spam
🇩🇰 powerhostingdk	2026-10-02 22:51:35 (2 weeks ago)	[mailserver] CrowdSec detected crowdsecurity/postscreen-rbl (1 events). Automated abuse report.	Email Spam Brute-Force
🇮🇹 A000Z	2026-09-28 02:04:19 (2 weeks ago)	Fail2Ban: 212.45.81.2 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 ... show more Fail2Ban: 212.45.81.2 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇮🇹 A000Z	2026-09-25 00:49:39 (3 weeks ago)	Fail2Ban: 212.45.81.2 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 ... show more Fail2Ban: 212.45.81.2 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-18 04:36:45 (4 weeks ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-07 02:16:47 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇫🇷 arsonist	2026-08-31 12:31:28 (1 month ago)	[fail2ban] 2026-08-31T12:31:28.289660+00:00 arson caddy[1890453]: {"level":"info","ts":1788179488.28 ... show more [fail2ban] 2026-08-31T12:31:28.289660+00:00 arson caddy[1890453]: {"level":"info","ts":1788179488.2889419,"logger":"http.log.access.default","msg":"handled request","request":{"remote_ip":"212.45.81.2","remote_port":"37180","client_ip":"212.45.81.2","proto":"HTTP/2.0","method":"GET","host":"git.tc14.space","uri":"/tc14/trailblazer-colony-14/src/commit/c42567c2803168b81243201d577b2b2049dcdd0c/.envrc","headers":{"Referer":["https://git.tc14.space/tc14/trailblazer-colony-14/src/commit/c42567c2803168b81243201d577b2b2049dcdd0c"],"Sec-Ch-Ua":["\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"143\", \"Google Chrome\";v=\"143\""],"Upgrade-Insecure-Requests":["1"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8"],"Sec-Fetch-Mode":["navigate"],"Cache-Control":["max-age=0"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, ... show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-25 02:15:53 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-08-12 15:51:24 (2 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇩🇪 LRob	2026-08-06 15:01:04 (2 months ago)	CrowdSec: REPEAT OFFENDER (previously banned, came back) - distributed L7 HTTP flood on WordPress 'T ... show more CrowdSec: REPEAT OFFENDER (previously banned, came back) - distributed L7 HTTP flood on WordPress 'The Events Calendar' AJAX endpoints (request_format~json) - DDoS \| req: /calendrier-2/action~agenda/time_limit~1763161200/cat_ids~174,330/tag_ids~716,469,488,593,791/request_format~json/ \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 show less	DDoS Attack Web App Attack
🇺🇸 kosada.com	2026-07-31 07:15:00 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-06-29 12:01:58 (3 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇸🇬 mypatricks	2026-06-11 11:37:28 (4 months ago)	212.45.81.2 \| Port: 12888 \| DNS: 212.45.81.2 2026-06-11T19:37:28+08:00 Asia/Almaty \| IPs Spam list \| ... show more 212.45.81.2 \| Port: 12888 \| DNS: 212.45.81.2 2026-06-11T19:37:28+08:00 Asia/Almaty \| IPs Spam list \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36 HTTP/1.1 443 GET \| URL: /cart/?f818d75dd34d0bcab56dcb81aff46590=1777029931b \| Ref: - \| Country: KZ/Kazakhstan/+05:00 IP City: Jıbek joly Windows a0a052e96cb64af9-AKX/AKX 1 hits/0 secs Browser 2 show less	Brute-Force Web App Attack Blog Spam Web Spam Exploited Host

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 177.174.89.99

🇹🇼 34.81.9.141

🇨🇳 27.18.70.46

🇩🇪 172.68.194.192

🇻🇳 123.31.31.125

🇫🇮 89.44.76.90

🇫🇷 85.217.140.6

🇺🇸 77.220.192.137

🇨🇴 191.97.12.90

🇫🇷 185.177.72.75

🇳🇱 176.65.148.253

🇫🇷 169.40.142.8

🇺🇸 162.216.150.28

🇭🇰 148.66.49.226

🇳🇱 109.160.32.177

🇦🇺 101.103.96.89

🇲🇿 98.97.151.247

🇮🇳 74.225.203.7

🇺🇸 72.76.93.251

🇹🇼 35.201.131.36