AbuseIPDB » 45.130.81.57

45.130.81.57 was found in our database!

This IP was reported 94 times. Confidence of Abuse is 16%: ?

16%

ISP	VPN Consumer Kiev, Ukraine
Usage Type	Fixed Line ISP
ASN	AS206092
Domain Name	vpnconsumer.com
Country	Ukraine
City	Kyiv, Kyiv City

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 45.130.81.57

Whois 45.130.81.57

IP Abuse Reports for 45.130.81.57:

This IP address has been reported a total of 94 times from 22 distinct sources. 45.130.81.57 was first reported on March 31st 2022, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
TPI-Abuse	2024-12-07 15:54:33 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 45.130.81.57 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:210492) triggered by 45.130.81.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 07 10:54:28.939693 2024] [security2:error] [pid 3178518:tid 3178518] [client 45.130.81.57:31859] [client 45.130.81.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fxztrader.com"] [uri "/restore/sftp-config.json"] [unique_id "Z1RvtO2_u2LJ1KxZ46eL5gAAACQ"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-12-04 19:45:29 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 45.130.81.57 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:210492) triggered by 45.130.81.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 04 14:45:23.924476 2024] [security2:error] [pid 10909:tid 10909] [client 45.130.81.57:57113] [client 45.130.81.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "otrantocapital.com"] [uri "/back/sftp-config.json"] [unique_id "Z1CxU0RJtjfKfPdqlkKDAQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-11-26 02:46:54 (7 months ago)	(mod_security) mod_security (id:210730) triggered by 45.130.81.57 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:210730) triggered by 45.130.81.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 25 21:46:49.489219 2024] [security2:error] [pid 27473:tid 27473] [client 45.130.81.57:56567] [client 45.130.81.57] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||krupaandsons.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "krupaandsons.com"] [uri "/old/backup.sql"] [unique_id "Z0U2mbCbqDq5meNujIdMMAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
nowyouknow	2024-11-22 01:21:28 (7 months ago)	(From [email protected]) I certainly don't mean to bother you, but I just quickly wanted t ... show more(From [email protected]) I certainly don't mean to bother you, but I just quickly wanted to make you aware of a new digital marketing application called Local Magic which generates qualified leads for your website by bringing in relevant organic traffic from Google, the technology behind this application has been recently awarded several US patents. Information about the product can be found here https://www.mrmarketingres.com/local-magic/. Licensing the application costs $800/mo and there is no contract because it has a success rate of 87% in most industries. We have case studies to illustrate the revenue we've generated for clients thus far and I'll be more than happy to provide you with a product demo over zoom if more internet leads would help your business grow. You can reach me at [email protected] or 843-720-7301. If our product is not a fit just let me know and I'll add your company to our do not contact list and our sales team will not try to reach out to you again. Thanks! show less	Phishing Web Spam
TPI-Abuse	2024-11-08 21:41:14 (8 months ago)	(mod_security) mod_security (id:210730) triggered by 45.130.81.57 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:210730) triggered by 45.130.81.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 08 16:41:08.205049 2024] [security2:error] [pid 4901:tid 4901] [client 45.130.81.57:4815] [client 45.130.81.57] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||ezecredit.net|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ezecredit.net"] [uri "/back/sql.sql"] [unique_id "Zy6FdMvPJA7EUGuFlAa1sgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-10-29 02:07:36 (8 months ago)	(mod_security) mod_security (id:210730) triggered by 45.130.81.57 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:210730) triggered by 45.130.81.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 28 22:07:32.835871 2024] [security2:error] [pid 3952:tid 3952] [client 45.130.81.57:31741] [client 45.130.81.57] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||bitcoinsubscribers.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bitcoinsubscribers.com"] [uri "/old/www.sql"] [unique_id "ZyBDZI3KSUgv6B-av72AzQAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-10-02 08:47:44 (9 months ago)	(mod_security) mod_security (id:210730) triggered by 45.130.81.57 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:210730) triggered by 45.130.81.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 02 04:47:41.450961 2024] [security2:error] [pid 3994:tid 3994] [client 45.130.81.57:58639] [client 45.130.81.57] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||brazilianbikinis.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "brazilianbikinis.com"] [uri "/bak/dump.sql"] [unique_id "Zv0IrRxHjjqeHdo59WWaowAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-09-27 16:17:51 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 45.130.81.57 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:210492) triggered by 45.130.81.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 27 12:17:43.264595 2024] [security2:error] [pid 22951:tid 22958] [client 45.130.81.57:30915] [client 45.130.81.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.fishrapper.com"] [uri "/bak/sftp-config.json"] [unique_id "Zvbap3huF-sRiDzC9cBLwgAAAIQ"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-09-05 21:00:36 (10 months ago)	(mod_security) mod_security (id:210730) triggered by 45.130.81.57 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:210730) triggered by 45.130.81.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 05 17:00:29.704733 2024] [security2:error] [pid 109719:tid 109719] [client 45.130.81.57:6465] [client 45.130.81.57] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||qualityelevatorcabs.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "qualityelevatorcabs.com"] [uri "/old/www.sql"] [unique_id "Ztob7fgPW37HHQArheZ4tAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
hbrks	2024-08-27 01:46:16 (10 months ago)	HEAD http://marche-be.com/backup/backup.sql.tar	Web Spam Hacking Bad Web Bot
diego	2024-08-02 12:23:43 (11 months ago)	Events: TCP SYN Discovery or Flooding, Seen 3 times in the last 10800 seconds	DDoS Attack
TPI-Abuse	2024-07-30 23:38:06 (11 months ago)	(mod_security) mod_security (id:210730) triggered by 45.130.81.57 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:210730) triggered by 45.130.81.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 30 19:38:02.488021 2024] [security2:error] [pid 18089:tid 18089] [client 45.130.81.57:15667] [client 45.130.81.57] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.crypto-stamps.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.crypto-stamps.com"] [uri "/back/backup.sql"] [unique_id "Zql5Wm_fHJ1ODnXgUtiKbQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
rcsb	2024-07-20 23:06:33 (11 months ago)	Spam Post In Forums	Web Spam
rcsb	2024-07-20 23:06:33 (11 months ago)	Spam Post In Forums	Web Spam
rcsb	2024-07-20 23:06:33 (11 months ago)	Spam Post In Forums	Web Spam

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩