JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.14.71.9

45.14.71.9 was found in our database!

This IP was reported 130 times. Confidence of Abuse is 40%: ?

40%

ISP	ProtonVPN
Usage Type	Data Center/Web Hosting/Transit
ASN	AS4785
Domain Name	protonvpn.com
Country	🇯🇵 Japan
City	Osaka, Osaka

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.14.71.9

Whois 45.14.71.9

IP Abuse Reports for 45.14.71.9:

This IP address has been reported a total of 130 times from 72 distinct sources. 45.14.71.9 was first reported on January 25th 2021, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 pcouy	2026-10-17 02:59:10 (6 days ago)	Obvious bot patterns with spoofed User-agent : Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Apple ... show more Obvious bot patterns with spoofed User-agent : Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 ... show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-10-12 22:19:37 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 45.14.71.9 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210350) triggered by 45.14.71.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 18:19:28.612565 2026] [security2:error] [pid 32307:tid 32307] [client 45.14.71.9:39602] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|goldengatecorgis.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "goldengatecorgis.org"] [uri "/"] [unique_id "as1c8A0CtlgaN1gcAoi_hQAAAAo"], referer: https://herbblogcom.blogspot.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-09 17:20:25 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 45.14.71.9 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210730) triggered by 45.14.71.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 13:20:17.924405 2026] [security2:error] [pid 10521:tid 10521] [client 45.14.71.9:5109] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|echinech.utilis.net\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "echinech.utilis.net"] [uri "/sqlite/dev.sql"] [unique_id "askiUapHIRCUM6yRsysv5wAAACM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-10-07 23:37:35 (2 weeks ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B3%5 ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B3%5D=70&topics%5B4%5D=45&topics%5B5%5D=35&topics%5B6%5D=67 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.2 Safari/605.1.15") show less	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-10-05 21:28:31 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 45.14.71.9 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210350) triggered by 45.14.71.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 17:28:24.194763 2026] [security2:error] [pid 3003:tid 3003] [client 45.14.71.9:18714] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|lgougeon.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "lgougeon.com"] [uri "/"] [unique_id "asQWeGArkJPLxAcSlV01dgAAAAM"], referer: https://linkbuildingmarketing.online/dir/quality-link-building-121409 show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-10-05 18:59:08 (2 weeks ago)	Shop search flood (L7 DDoS) \| path: /97-vtc-all-road-electrique \| query: order=product.reference.des ... show more Shop search flood (L7 DDoS) \| path: /97-vtc-all-road-electrique \| query: order=product.reference.desc&productListView=list&q=Taille-XL-S/Marque-Lapierre \| src_port: 39553 show less	DDoS Attack Web App Attack
🇺🇸 鬼影233	2026-09-24 17:54:08 (4 weeks ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇳🇱 DrLex0	2026-09-24 07:45:59 (4 weeks ago)	BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap, violating robots.txt an ... show more BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap, violating robots.txt and meta directives 45.14.71.9 443 - [24/Sep/2026:07:45:59 +0000] "GET [redacted] HTTP/1.1" 410 6092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" show less	Bad Web Bot Exploited Host
🇺🇸 kosada.com	2026-09-24 05:32:52 (4 weeks ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B2%5 ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B2%5D=28&topics%5B3%5D=47&topics%5B4%5D=79&topics%5B5%5D=81 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36") show less	DDoS Attack Bad Web Bot
🇺🇸 ipblock.com	2026-09-14 21:41:00 (1 month ago)	IPBlock protected site ID [4055-d][s=03]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack
🇩🇪 Vegascosmetics	2026-09-13 21:52:13 (1 month ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after high AbuseIPDB reputation + local blo ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after high AbuseIPDB reputation + local block policy. Evidence: High Abuse + Suspicion (60, Abuse: 50) show less	Hacking Exploited Host Web App Attack
🇫🇷 Tilellit.PRO	2026-09-13 03:17:13 (1 month ago)	WP Armour Plugin detection	Web Spam Brute-Force
🇦🇺 electronico	2026-09-13 01:00:53 (1 month ago)	45.14.71.9 - - [13/Sep/2026:12:00:49 +1100] "GET /wp-login.php HTTP/1.1" 301 487 "-" "Mozilla/5.0 (M ... show more 45.14.71.9 - - [13/Sep/2026:12:00:49 +1100] "GET /wp-login.php HTTP/1.1" 301 487 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 45.14.71.9 - - [13/Sep/2026:12:00:51 +1100] "GET /wp-login.php HTTP/1.1" 403 7436 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 45.14.71.9 - - [13/Sep/2026:12:00:52 +1100] "GET /wp-login.php HTTP/1.1" 301 486 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" ... show less	Brute-Force Web App Attack
🇺🇸 ipblock.com	2026-09-04 20:16:00 (1 month ago)	IPBlock protected site ID [4055-d][s=03]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack
🇺🇸 rjdefrancisco	2026-08-30 07:07:24 (1 month ago)	Unwanted traffic detected by honeypot on August 29, 2026: port scans (1 port 22 scan).	Port Scan Brute-Force SSH

Showing 1 to 15 of 130 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 202.134.242.47

🇫🇷 185.194.178.22

🇳🇱 138.226.239.233

🇧🇩 103.112.65.4

🇺🇸 98.144.102.103

🇦🇪 84.235.249.123

🇮🇳 202.133.63.17

🇪🇹 196.189.155.89

🇮🇷 185.170.8.81

🇰🇷 112.151.168.124

🇰🇷 106.244.120.37

🇩🇪 91.92.43.221

🇫🇷 86.253.190.19

🇩🇪 84.33.251.121

🇺🇸 43.173.123.204

🇩🇪 31.56.19.180

🇭🇰 23.91.97.88

🇺🇸 20.121.113.85

🇺🇸 16.146.81.48

🇬🇧 2a06:4884:3000::48