JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.130.81.99

45.130.81.99 was found in our database!

This IP was reported 119 times. Confidence of Abuse is 0%: ?

ISP	VPN Consumer Kiev, Ukraine
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	vpnconsumer.com
Country	🇵🇱 Poland
City	Warsaw, Mazovia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.130.81.99

Whois 45.130.81.99

IP Abuse Reports for 45.130.81.99:

This IP address has been reported a total of 119 times from 35 distinct sources. 45.130.81.99 was first reported on May 20th 2022, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 ki3	2026-07-03 13:36:00 (3 months ago)	Fail2Ban: Postfix Attack 45.130.81.99 1783085760.0(JST)	Email Spam Brute-Force
🇬🇧 relianoid.com	2026-06-30 18:06:21 (3 months ago)	POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web Spam
🇭🇺 bcsaba	2026-06-13 22:58:27 (4 months ago)	Joomla spam 45.130.81.99 - - [14/Jun/2026:00:58:25 +0200] "GET /index.php?option=com_easyblog&view=d ... show more Joomla spam 45.130.81.99 - - [14/Jun/2026:00:58:25 +0200] "GET /index.php?option=com_easyblog&view=dashboard&layout=write HTTP/1.1" 404 789 "https://REDACTED" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" show less	Web App Attack
🇺🇸 TPI-Abuse	2026-05-22 13:24:16 (4 months ago)	(mod_security) mod_security (id:210350) triggered by 45.130.81.99 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 45.130.81.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 22 09:24:08.919123 2026] [security2:error] [pid 14063:tid 14087] [client 45.130.81.99:59841] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|41bravo.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "41bravo.com"] [uri "/archivarix.cms.php"] [unique_id "ahBY-ApnHT0NQS4gdU-UswAAANU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-22 12:00:08 (4 months ago)	(mod_security) mod_security (id:210350) triggered by 45.130.81.99 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 45.130.81.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 22 08:00:03.968330 2026] [security2:error] [pid 9299:tid 9299] [client 45.130.81.99:49537] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|30daysout.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "30daysout.com"] [uri "/archivarix.cms.php"] [unique_id "ahBFQ8hJ6F2I9zUhoRD7GAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 SpaceHost-Server	2026-05-21 22:31:13 (5 months ago)		Brute-Force Web App Attack
🇫🇷 SpaceHost-Server	2026-05-20 22:31:00 (5 months ago)		Brute-Force Web App Attack
Anonymous	2026-05-20 17:07:43 (5 months ago)	/archivarix.cms.php trap	Port Scan Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-05-20 16:03:21 (5 months ago)	(mod_security) mod_security (id:210350) triggered by 45.130.81.99 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 45.130.81.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 12:03:03.280492 2026] [security2:error] [pid 6765:tid 6778] [client 45.130.81.99:53605] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|tvpin.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "tvpin.com"] [uri "/index.cgi"] [unique_id "ag3bNwoKkrfPLengCjRdZwAAAAs"], referer: http://www.tvpin.com/index.cgi?>=%20www.3DBusinessTV.com show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-05-20 15:23:23 (5 months ago)	Fail2Ban triggered	Web App Attack
🇺🇸 Jason Howell	2026-05-15 11:30:51 (5 months ago)	45.130.81.99 - - [15/May/2026:06:26:56 -0500] "POST //xmlrpc.php HTTP/1.1" 200 3014 "-" "Mozilla/5.0 ... show more 45.130.81.99 - - [15/May/2026:06:26:56 -0500] "POST //xmlrpc.php HTTP/1.1" 200 3014 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 45.130.81.99 - - [15/May/2026:06:28:47 -0500] "POST //xmlrpc.php HTTP/1.1" 200 3012 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 45.130.81.99 - - [15/May/2026:06:28:51 -0500] "POST //xmlrpc.php HTTP/1.1" 200 3013 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 45.130.81.99 - - [15/May/2026:06:30:29 -0500] "POST //xmlrpc.php HTTP/1.1" 200 3013 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 45.130.81.99 - - [15/May/2026:06:30:50 -0500] "POST //xmlrpc.php HTTP/1.1" 200 3014 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:136.0) Gecko/20100101 Firefox/138.0" ... show less	Web App Attack
🇧🇪 cmbplf	2026-05-15 07:40:48 (5 months ago)	436 requests with url.path //xmlrpc.php	Brute-Force Bad Web Bot
🇩🇪 Admin-Gito	2026-05-15 06:18:57 (5 months ago)	45.130.81.99 - - [15/May/2026:08:17:25 +0200] "POST //xmlrpc.php HTTP/1.1" 200 3150 "-" "Mozilla/5.0 ... show more 45.130.81.99 - - [15/May/2026:08:17:25 +0200] "POST //xmlrpc.php HTTP/1.1" 200 3150 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7_4) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Safari/605.1.15" 45.130.81.99 - - [15/May/2026:08:17:40 +0200] "POST //xmlrpc.php HTTP/1.1" 200 3149 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:136.0) Gecko/20100101 Firefox/138.0" 45.130.81.99 - - [15/May/2026:08:18:06 +0200] "POST //xmlrpc.php HTTP/1.1" 200 3150 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.3124.85" ... show less	Brute-Force Web App Attack
🇮🇱 Dolphi	2026-05-15 05:20:03 (5 months ago)	POST //xmlrpc.php	Brute-Force Web App Attack
Anonymous	2026-05-08 00:33:33 (5 months ago)	45.130.81.99 - - [08/May/2026:02:33:30 +0200] "POST //xmlrpc.php HTTP/1.1" 200 401 "-" "Mozilla/5.0 ... show more 45.130.81.99 - - [08/May/2026:02:33:30 +0200] "POST //xmlrpc.php HTTP/1.1" 200 401 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36 Edg/140.0.3124.85" 45.130.81.99 - - [08/May/2026:02:33:30 +0200] "POST //xmlrpc.php HTTP/1.0" 200 591 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36 Edg/140.0.3124.85" 45.130.81.99 - - [08/May/2026:02:33:31 +0200] "POST //xmlrpc.php HTTP/1.0" 200 591 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36 Edg/140.0.3124.85" 45.130.81.99 - - [08/May/2026:02:33:31 +0200] "POST //xmlrpc.php HTTP/1.1" 200 401 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36 Edg/140.0.3124.85" 45.130.81.99 - - [08/May/2026:02:33:32 +0200] "POST //xmlrpc.php HTTP/1.0" 200 591 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; ... show less	Brute-Force Web App Attack

Showing 1 to 15 of 119 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.208

🇷🇺 195.239.97.254

🇲🇽 189.248.38.166

🇸🇦 82.167.212.123

🇹🇭 2001:fb1:4a:4e8e:74ff:8bef:dd5:9ca9

🇺🇸 184.105.247.252

🇮🇳 124.123.125.62

🇰🇷 121.188.221.166

🇩🇪 69.5.169.170

🇧🇷 45.166.112.225

🇳🇱 45.74.28.6

🇲🇽 38.194.250.98

🇻🇪 38.172.184.104

🇧🇪 35.189.226.210

🇹🇼 34.80.151.74

🇺🇸 20.163.3.89

🇹🇳 197.7.83.255

🇦🇷 186.182.27.91

🇳🇱 176.65.148.136

🇩🇪 167.99.241.118