AbuseIPDB » 45.130.81.57

45.130.81.57 was found in our database!

This IP was reported 94 times. Confidence of Abuse is 16%: ?

16%

ISP	VPN Consumer Kiev, Ukraine
Usage Type	Fixed Line ISP
ASN	AS206092
Domain Name	vpnconsumer.com
Country	Ukraine
City	Kyiv, Kyiv City

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 45.130.81.57

Whois 45.130.81.57

IP Abuse Reports for 45.130.81.57:

This IP address has been reported a total of 94 times from 22 distinct sources. 45.130.81.57 was first reported on March 31st 2022, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
blackrooty	2025-06-01 12:00:37 (1 month ago)	Automatic report: IP 45.130.81.57 detected 75 time(s). Reason: nginx ddos/crawl	DDoS Attack Brute-Force Bad Web Bot Web App Attack
blackrooty	2025-05-31 12:00:36 (1 month ago)	Automatic report: IP 45.130.81.57 detected 75 time(s). Reason: nginx ddos/crawl	DDoS Attack Brute-Force Bad Web Bot Web App Attack
blackrooty	2025-05-30 00:00:50 (1 month ago)	Automatic report: IP 45.130.81.57 detected 75 time(s). Reason: nginx ddos/crawl	DDoS Attack Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2025-05-29 09:57:48 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 45.130.81.57 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:210730) triggered by 45.130.81.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 29 05:57:42.754655 2025] [security2:error] [pid 2951674:tid 2951709] [client 45.130.81.57:45943] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||siestakeybch.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "siestakeybch.com"] [uri "/bak/www.sql"] [unique_id "aDgvlpLQAlXMsOBWjaPaMAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2025-05-29 09:31:14 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 45.130.81.57 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:210492) triggered by 45.130.81.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 29 05:31:10.016445 2025] [security2:error] [pid 2369552:tid 2369552] [client 45.130.81.57:49227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "uppermotradingco.com"] [uri "/old/sftp-config.json"] [unique_id "aDgpXmIje6E7oFWkceBM8AAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
blackrooty	2025-05-29 00:00:50 (1 month ago)	Automatic report: IP 45.130.81.57 detected 75 time(s). Reason: nginx ddos/crawl	DDoS Attack Brute-Force Bad Web Bot Web App Attack
blackrooty	2025-05-28 00:00:46 (1 month ago)	Automatic report: IP 45.130.81.57 detected 75 time(s). Reason: nginx ddos/crawl	DDoS Attack Brute-Force Bad Web Bot Web App Attack
blackrooty	2025-05-26 12:00:39 (1 month ago)	Automatic report: IP 45.130.81.57 detected 75 time(s). Reason: nginx ddos/crawl	DDoS Attack Brute-Force Bad Web Bot Web App Attack
blackrooty	2025-05-25 00:00:57 (1 month ago)	Automatic report: IP 45.130.81.57 detected 75 time(s). Reason: nginx ddos/crawl	DDoS Attack Brute-Force Bad Web Bot Web App Attack
blackrooty	2025-05-24 00:00:47 (1 month ago)	Automatic report: IP 45.130.81.57 detected 75 time(s). Reason: nginx ddos/crawl	DDoS Attack Brute-Force Bad Web Bot Web App Attack
blackrooty	2025-05-22 08:32:18 (1 month ago)	Automatic report: IP 45.130.81.57 detected 75 time(s). Reason: nginx ddos/crawl	DDoS Attack Brute-Force Bad Web Bot Web App Attack
Penny Packer	2025-04-28 18:14:40 (2 months ago)	Fail2Ban apache-tripwires	Web App Attack
Tripwire	2025-04-22 16:20:28 (2 months ago)	Scanning for exploits - /backup/website.zip	Web App Attack
TPI-Abuse	2025-04-21 08:07:08 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 45.130.81.57 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:210730) triggered by 45.130.81.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 21 04:07:02.609538 2025] [security2:error] [pid 7406:tid 7406] [client 45.130.81.57:27651] [client 45.130.81.57] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||powderriverinc.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "powderriverinc.com"] [uri "/bak/dump.sql"] [unique_id "aAX8pjFlJiTPl0SdoAEEfQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
oncord	2025-04-07 20:26:48 (3 months ago)	Form spam	Web Spam

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩