JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.130.81.20

45.130.81.20 was found in our database!

This IP was reported 124 times. Confidence of Abuse is 23%: ?

23%

ISP	VPN Consumer Kiev, Ukraine
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	vpnconsumer.com
Country	🇺🇦 Ukraine
City	Kyiv, Kyiv City

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.130.81.20

Whois 45.130.81.20

IP Abuse Reports for 45.130.81.20:

This IP address has been reported a total of 124 times from 40 distinct sources. 45.130.81.20 was first reported on July 3rd 2022, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 CrystalMaker	2026-06-02 05:08:56 (3 weeks ago)	PHP vulnerability scan - GET /archivarix.cms.php	Web App Attack
🇦🇺 screwlooseit.com.au	2026-05-28 14:02:37 (3 weeks ago)	Blocked by CSF 13 firewall - Rule: XMLRPC NL/Netherlands/-	Web App Attack
🇩🇪 ghostwarriors	2026-05-21 07:20:04 (1 month ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
Anonymous	2026-05-21 07:09:23 (1 month ago)	Fail2Ban triggered	Web App Attack
🇺🇸 kosada.com	2026-05-06 19:46:32 (1 month ago)	Web contact form spam: casino ohne	Web Spam
🇩🇪 FeG Deutschland	2026-05-04 20:34:46 (1 month ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 27	Exploited Host Web App Attack
🇷🇺 DZBOT	2026-03-14 05:06:06 (3 months ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇺🇸 myagent.site	2026-03-09 22:31:47 (3 months ago)	Blocking for trying to access an exploit file: //xmlrpc.php?rsd	Hacking
🇬🇧 pinguin	2026-03-03 14:07:06 (3 months ago)	Triggered Cloudflare WAF (firewallManaged) from UA. Action taken: LOG Protocol: HTTP/1.1 (HEAD metho ... show more Triggered Cloudflare WAF (firewallManaged) from UA. Action taken: LOG Protocol: HTTP/1.1 (HEAD method) Endpoint: /back/backup.sql.zip UA: Empty string This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇬🇧 Axel	2026-02-24 20:14:02 (3 months ago)	Blocked by ModSecurity. Rule ID: 210730 Message: COMODO WAF: URL file extension is restricted by pol ... show more Blocked by ModSecurity. Rule ID: 210730 Message: COMODO WAF: URL file extension is restricted by policy\|\|usvi.network\|F\|2 Phase: 2 Severity: CRITICAL URI: /backups/backup.sql Server: UK-01 show less	Web App Attack Hacking SQL Injection
🇺🇸 TPI-Abuse	2026-02-23 11:31:39 (4 months ago)	(mod_security) mod_security (id:210730) triggered by 45.130.81.20 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 45.130.81.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 23 06:31:34.613832 2026] [security2:error] [pid 12450:tid 12450] [client 45.130.81.20:30803] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|russiacoin.info\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "russiacoin.info"] [uri "/bak/mysql.sql"] [unique_id "aZw6lododrIIcAxGnAi35gAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Penny Packer	2026-02-14 08:32:38 (4 months ago)	Fail2Ban apache-tripwires	Web App Attack
🇩🇪 BlueWire Hosting	2026-01-26 15:16:57 (4 months ago)	Suspicious HTTP(s) activity without a user agent provided	Bad Web Bot
🇺🇸 TPI-Abuse	2026-01-15 15:37:38 (5 months ago)	(mod_security) mod_security (id:210730) triggered by 45.130.81.20 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 45.130.81.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 15 10:37:35.509098 2026] [security2:error] [pid 17047:tid 17047] [client 45.130.81.20:23343] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|mapleleaf-marketing.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mapleleaf-marketing.com"] [uri "/bak/mysql.sql"] [unique_id "aWkJv40_69ILTGCwPKd2UgAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Penny Packer	2026-01-09 19:06:35 (5 months ago)	Fail2Ban apache-tripwires	Web App Attack

Showing 1 to 15 of 124 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.242

🇧🇪 198.235.24.162

🇧🇪 198.235.24.152

🇰🇷 118.37.214.187

🇯🇵 103.125.235.25

🇳🇱 91.92.40.13

🇫🇷 85.217.140.11

🇺🇸 76.79.213.70

🇧🇪 34.62.138.158

🇫🇷 2a02:4780:27:1372:0:31b5:d015:1

🇨🇳 221.229.220.180

🇬🇧 217.154.45.93

🇺🇸 198.98.62.211

🇳🇱 195.178.110.30

🇫🇷 158.220.125.127

🇬🇭 143.105.209.154

🇺🇸 141.11.88.7

🇰🇷 106.243.155.71

🇰🇿 95.58.255.251

🇧🇬 79.124.58.242