This IP address has been reported a total of
11
times from
6 distinct
sources.
43.245.120.54 was first reported on
July 29th 2025 , and the most recent report was
9 hours ago United States of America
with 2
reports;
Russian Federation
with 1
report.
The most common categories in these recent reports were:
Bad Web Bot
3
times;
DDoS Attack
2
times;
Hacking
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
2026-09-23 17:00:24
(9 hours ago)
Large-scale coordinated botnet (6M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/S ...
show more
Large-scale coordinated botnet (6M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim|LIS|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies Group | Offpeak: Sessionless Catalog Access Blocked: /brands/spectralink/shopby/manufacturer-extron-hp-brightline-aruba_networks-projectiondesign-spectralink.html?p=5 | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 | (Magento Site)
show less
Hacking
Bad Web Bot
🇺🇸
kosada.com
2026-08-25 15:11:52
(4 weeks ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇺🇸
kosada.com
2026-08-08 19:42:31
(1 month ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇺🇸
kosada.com
2026-07-15 04:51:44
(2 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-30 21:33:31
(2 months ago)
(mod_security) mod_security (id:210730) triggered by 43.245.120.54 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 43.245.120.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 17:33:27.175417 2026] [security2:error] [pid 23268:tid 23268] [client 43.245.120.54:14800] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Jefferson/Thumbs.db"] [unique_id "akQ2J_SBeFDG3Y2cl_mKEgAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-06-29 12:49:04
(2 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇦🇺
MAGIC
2026-02-25 02:31:01
(6 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-01-25 22:22:12
(7 months ago)
(mod_security) mod_security (id:217210) triggered by 43.245.120.54 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:217210) triggered by 43.245.120.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 25 17:22:07.467006 2026] [security2:error] [pid 846747:tid 846747] [client 43.245.120.54:50946] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./]*(?::\\\\d+)?)?/[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?|options \\\\*)\\\\s+[\\\\w\\\\./]+|get /[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line||usa61shes.top|F|4"] [data "GET http://usa61shes.top HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "usa61shes.top"] [uri "/"] [unique_id "aXaXjySJNG2LHJ5x1ZgdDAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-01-03 18:05:13
(8 months ago)
block ruleset DA4A07AEE48B136A3922182BE8AA8BFBC1840803
Bad Web Bot
🇳🇱
exxos
2025-07-29 03:55:32
(1 year ago)
HTTP1.x attacks
DDoS Attack
🇳🇱
exxos
2025-07-29 03:03:38
(1 year ago)
HTTP1.x attacks
DDoS Attack
Showing 1 to
11
of 11 reports
