AbuseIPDB » 45.130.81.57

45.130.81.57 was found in our database!

This IP was reported 94 times. Confidence of Abuse is 15%: ?

15%

ISP	VPN Consumer Kiev, Ukraine
Usage Type	Fixed Line ISP
ASN	AS206092
Domain Name	vpnconsumer.com
Country	Ukraine
City	Kyiv, Kyiv City

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 45.130.81.57

Whois 45.130.81.57

IP Abuse Reports for 45.130.81.57:

This IP address has been reported a total of 94 times from 22 distinct sources. 45.130.81.57 was first reported on March 31st 2022, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
TPI-Abuse	2024-05-17 18:52:08 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 45.130.81.57 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:210730) triggered by 45.130.81.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 17 14:52:03.035772 2024] [security2:error] [pid 556639] [client 45.130.81.57:54963] [client 45.130.81.57] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||firejasstrio.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "firejasstrio.com"] [uri "/backups/backup.sql"] [unique_id "ZkenUyMAetHkJE57exK5lgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-05-05 01:40:39 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 45.130.81.57 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:210730) triggered by 45.130.81.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 04 21:40:35.676367 2024] [security2:error] [pid 1639808:tid 47510406063872] [client 45.130.81.57:17635] [client 45.130.81.57] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dpscsde.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dpscsde.com"] [uri "/backups/backup.sql"] [unique_id "Zjbjk_pPUxXBCbXj4ev1BgAAAM8"] show less	Brute-Force Bad Web Bot Web App Attack
hbrks	2024-04-26 04:14:26 (1 year ago)	http://_/ * statusCode: 400 * user-agent:DDOS Attack	Web Spam Hacking Bad Web Bot
penjaga BRIN	2024-04-01 08:09:31 (1 year ago)	Multiple WP scan detected from same source ip.-180	Bad Web Bot
sms.ru	2024-03-24 12:20:08 (1 year ago)	SMS pumping attack from foreign country	DDoS Attack
TPI-Abuse	2024-03-14 13:18:58 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 45.130.81.57 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:210730) triggered by 45.130.81.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 14 09:18:52.167677 2024] [security2:error] [pid 23146] [client 45.130.81.57:48817] [client 45.130.81.57] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||sailingcharterburma.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "sailingcharterburma.com"] [uri "/backups/sql.sql"] [unique_id "ZfL5PKnYTC-9N_8H8fG2GAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
hbrks	2024-03-05 10:37:47 (1 year ago)	HEAD http://marche-be.com/bak.zip statusCode: 503	Web Spam Hacking Bad Web Bot
TPI-Abuse	2024-02-28 00:48:01 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 45.130.81.57 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:210730) triggered by 45.130.81.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 27 19:47:54.716998 2024] [security2:error] [pid 1432] [client 45.130.81.57:55507] [client 45.130.81.57] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||qualityelevatorcabs.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "qualityelevatorcabs.com"] [uri "/restore/backup.sql"] [unique_id "Zd6Cum3KHL8WX1x9QVkScgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-02-24 05:50:27 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 45.130.81.57 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:210730) triggered by 45.130.81.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 24 00:50:22.827387 2024] [security2:error] [pid 3511] [client 45.130.81.57:8561] [client 45.130.81.57] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||isitel.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "isitel.com"] [uri "/backup/sql.sql"] [unique_id "ZdmDnhE8tVHqlXXurktt-QAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-02-22 11:44:54 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 45.130.81.57 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:210730) triggered by 45.130.81.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 22 06:44:49.410228 2024] [security2:error] [pid 21598] [client 45.130.81.57:26593] [client 45.130.81.57] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||crypto-stamps.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "crypto-stamps.com"] [uri "/back/sql.sql"] [unique_id "ZdczseHed6aDjKWaenhb8AAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
hbrks	2024-02-17 23:29:31 (1 year ago)	HEAD http://crm.marche-be.com/www.gz statusCode: 503	Web Spam Hacking Bad Web Bot
TPI-Abuse	2024-02-14 11:17:37 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 45.130.81.57 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:210730) triggered by 45.130.81.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 14 06:17:30.697707 2024] [security2:error] [pid 17872] [client 45.130.81.57:49679] [client 45.130.81.57] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.dudleyanddudley.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.dudleyanddudley.com"] [uri "/old/backup.sql"] [unique_id "ZcyhStpQZt7xiLgAFSQAAgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-02-13 01:43:54 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 45.130.81.57 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:210730) triggered by 45.130.81.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 12 20:43:51.466881 2024] [security2:error] [pid 28950] [client 45.130.81.57:2393] [client 45.130.81.57] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||nationalenq.com|F|2"] [data ".com.sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "nationalenq.com"] [uri "/restore/nationalenq.com.sql"] [unique_id "ZcrJVzVohpYq0UqaAFinKAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-01-15 20:06:34 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 45.130.81.57 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:210730) triggered by 45.130.81.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 15 15:06:26.364455 2024] [security2:error] [pid 20457:tid 47808063293184] [client 45.130.81.57:44263] [client 45.130.81.57] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||blastfuturepress.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "blastfuturepress.com"] [uri "/backups/backup.sql"] [unique_id "ZaWQQlwyWLsrhPaTFBDSyQAAANY"] show less	Brute-Force Bad Web Bot Web App Attack
sumnone	2023-08-14 06:06:12 (1 year ago)	Vulnerability probing: Error 404. The requested page (/sql.sql) was not found	Bad Web Bot Exploited Host Web App Attack

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩