JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

45.130.136.161

Neutral Activity

Abuse Confidence Score

0% Low Risk

153 reports

46 reporters · latest 1 year ago

ISP: Panq B.V.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS9009
Domain Name: panq.nl
Country: 🇪🇸 Spain
City: Barcelona, Catalonia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

45.130.136.161 has been reported 153 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

153 from 46 distinct reporters

First reported

September 3rd 2021

Most recent report

1 year ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 MaxSmartCode	2025-07-04 04:00:09 (1 year ago)	Credential brute-force attacks on webpage.	Brute-Force SSH
Anonymous	2025-07-03 23:41:48 (1 year ago)	FUNDATCOM WEBFORM SPAM 45.130.136.161 (45.130.136.161)	Web Spam
🇺🇸 TPI-Abuse	2025-06-23 23:40:49 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 45.130.136.161 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 23 19:40:43.120795 2025] [security2:error] [pid 1576229:tid 1576229] [client 45.130.136.161:14 ... show more (mod_security) mod_security (id:210730) triggered by 45.130.136.161 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 23 19:40:43.120795 2025] [security2:error] [pid 1576229:tid 1576229] [client 45.130.136.161:14797] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|nationalenq.com\|F\|2"] [data ".com.sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "nationalenq.com"] [uri "/nationalenq.com.sql"] [unique_id "aFnl-2-4Wig1T8H1gah33QAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 aranguren.org	2025-06-22 22:57:16 (1 year ago)	45.130.136.161 - - [23/Jun/2025:08:57:11 +1000] "HEAD /old/backup.zip HTTP/1.1" 404 - "-" "-" 45.130.136.161 - - [23/Jun/2025:08:57:11 +1000] "HEAD /bak/bak.gz HTTP/1.1" 404 - "-" "-" 45.130.136.161 - - [23/Jun/2025:08:57:12 +1000] "HEAD /old/public_ ... show more 45.130.136.161 - - [23/Jun/2025:08:57:11 +1000] "HEAD /old/backup.zip HTTP/1.1" 404 - "-" "-" 45.130.136.161 - - [23/Jun/2025:08:57:11 +1000] "HEAD /bak/bak.gz HTTP/1.1" 404 - "-" "-" 45.130.136.161 - - [23/Jun/2025:08:57:12 +1000] "HEAD /old/public_html.zip HTTP/1.1" 404 - "-" "-" 45.130.136.161 - - [23/Jun/2025:08:57:13 +1000] "HEAD /back/backup.zip HTTP/1.1" 404 - "-" "-" 45.130.136.161 - - [23/Jun/2025:08:57:14 +1000] "HEAD /restore/directory.gz HTTP/1.1" 404 - "-" "-" 45.130.136.161 - - [23/Jun/2025:08:57:15 +1000] "HEAD /backup/backup.sql.gz HTTP/1.1" 404 - "-" "-" ... show less	Bad Web Bot
🇩🇪 SpaceHost-Server	2025-06-14 22:28:29 (1 year ago)		Brute-Force Web App Attack
🇩🇪 SpaceHost-Server	2025-06-13 22:27:57 (1 year ago)		Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-06-13 14:16:09 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 45.130.136.161 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 13 10:16:02.632656 2025] [security2:error] [pid 1436511:tid 1436511] [client 45.130.136.161:55 ... show more (mod_security) mod_security (id:210730) triggered by 45.130.136.161 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 13 10:16:02.632656 2025] [security2:error] [pid 1436511:tid 1436511] [client 45.130.136.161:55149] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|lundtrading.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "lundtrading.com"] [uri "/back/mysql.sql"] [unique_id "aEwyonP8rlkxz4fJDIu-lAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 macrob	2025-06-13 01:37:01 (1 year ago)	2025/06/13 01:36:58 [error] 3371475#3371475: 5318690 access forbidden by rule, client: 45.130.136.161, server: antzcapital.com, request: "HEAD /backup/archive.zip HTTP/2.0", host: "antzcapital.com" 2025/06/13 01:36:59 [error] 3371473#3371473: 53187 ... show more 2025/06/13 01:36:58 [error] 3371475#3371475: 5318690 access forbidden by rule, client: 45.130.136.161, server: antzcapital.com, request: "HEAD /backup/archive.zip HTTP/2.0", host: "antzcapital.com" 2025/06/13 01:36:59 [error] 3371473#3371473: 5318731 access forbidden by rule, client: 45.130.136.161, server: antzcapital.com, request: "HEAD /backup/www.sql HTTP/2.0", host: "antzcapital.com" 2025/06/13 01:37:00 [error] 3371473#3371473: *5318744 access forbidden by rule, client: 45.130.136.161, server: antzcapital.com, request: "HEAD /backups/bak.zip HTTP/2.0", host: "antzcapital.com" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2025-06-13 01:35:07 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 45.130.136.161 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 12 21:34:59.657331 2025] [security2:error] [pid 2649799:tid 2649799] [client 45.130.136.161:64 ... show more (mod_security) mod_security (id:210730) triggered by 45.130.136.161 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 12 21:34:59.657331 2025] [security2:error] [pid 2649799:tid 2649799] [client 45.130.136.161:64651] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|swhowell.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "swhowell.com"] [uri "/backup/sql.sql"] [unique_id "aEuAQ3-mOsbodBTHfylrLQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2025-06-11 21:05:30 (1 year ago)	Too many Status 40X (13)	Brute-Force Web App Attack
🇫🇷 mikekarl	2025-06-08 21:21:51 (1 year ago)	Empty or bad user-agent.	Bad Web Bot
🇺🇸 mnsf	2025-06-07 13:08:23 (1 year ago)	Too many Status 40X (11)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-06-07 12:55:51 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 45.130.136.161 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 07 08:55:45.813198 2025] [security2:error] [pid 984867:tid 984867] [client 45.130.136.161:5860 ... show more (mod_security) mod_security (id:210492) triggered by 45.130.136.161 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 07 08:55:45.813198 2025] [security2:error] [pid 984867:tid 984867] [client 45.130.136.161:58607] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mrepoch.art"] [uri "/backup/sftp-config.json"] [unique_id "aEQ20XaBlovEjS_MAfQd5QAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-06-07 09:30:46 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 45.130.136.161 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 07 05:30:44.086971 2025] [security2:error] [pid 1012403:tid 1012403] [client 45.130.136.161:23 ... show more (mod_security) mod_security (id:210730) triggered by 45.130.136.161 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 07 05:30:44.086971 2025] [security2:error] [pid 1012403:tid 1012403] [client 45.130.136.161:23343] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|crypto-stamps.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "crypto-stamps.com"] [uri "/bak/backup.sql"] [unique_id "aEQGxOqlFPETL6p9edMpCgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-06-06 02:51:50 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 45.130.136.161 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 05 22:51:44.654171 2025] [security2:error] [pid 4054493:tid 4054493] [client 45.130.136.161:42 ... show more (mod_security) mod_security (id:210730) triggered by 45.130.136.161 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 05 22:51:44.654171 2025] [security2:error] [pid 4054493:tid 4054493] [client 45.130.136.161:42137] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|phantomkennels.com\|F\|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "phantomkennels.com"] [uri "/backup/wallet.dat"] [unique_id "aEJXwMZgs4rCMuuFA2CsRwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 153 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 221.5.224.71

🇳🇱 203.55.131.4

🇩🇪 194.88.98.84

🇷🇴 193.32.162.84

🇵🇰 175.107.216.129

🇸🇪 169.150.208.36

🇩🇪 151.243.11.42

🇳🇱 109.160.32.173

🇳🇱 85.137.63.221

🇷🇴 80.94.95.116

🇺🇸 74.125.230.136

🇺🇸 67.124.116.233

🇳🇱 45.148.10.141

🇧🇪 35.205.81.127

🇺🇦 2.63.188.78

🇦🇺 220.240.154.30

🇨🇳 220.161.52.149

🇰🇷 220.122.115.9

🇰🇷 218.234.186.2

🇳🇱 193.47.62.69