AbuseIPDB » 45.228.30.161
45.228.30.161
This IP was reported 4 times. Confidence of
Abuse
is 11% : ?
ISP
REDE SPIRIT
Usage Type
Fixed Line ISP
ASN
AS267088
Hostname(s)
45-228-30-161.redespirit.net.br
Domain Name
redespirit.net.br
Country
🇧🇷
Brazil
City
Sao Paulo, Sao Paulo
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 45.228.30.161 :
This IP address has been reported a total of
4
times from
4 distinct
sources.
45.228.30.161 was first reported on
November 4th 2025 , and the most recent report was
2 days ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-09-16 01:30:17
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 45.228.30.161 (45-228-30-161.redespirit.net.br) ...
show more
(mod_security) mod_security (id:210492) triggered by 45.228.30.161 (45-228-30-161.redespirit.net.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 21:29:17.068331 2026] [security2:error] [pid 24187:tid 24261] [client 45.228.30.161:36372] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "piroskazalkadi.richardleeweatherman.com"] [uri "/production/.env.tmp"] [unique_id "aqnw7QwHPcdkUn4WKJbUlwAAAIY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-07-31 17:27:04
(1 month ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇩🇪
EGP Abuse Dept
2026-07-08 02:27:06
(2 months ago)
Scraping webshop URLs (www.creall.com), likely botnet drone
Bad Web Bot
Exploited Host
🇮🇩
hermawan
2025-11-04 08:14:36
(10 months ago)
[Tue Nov 04 15:13:35.636382 2025] [security2:error] [pid 42007:tid 139712333346496] [client 45.228.3 ...
show more
[Tue Nov 04 15:13:35.636382 2025] [security2:error] [pid 42007:tid 139712333346496] [client 45.228.30.161:57209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "WOW64" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.19.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "231"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: WOW64 found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.87 Safari/537.36 request_line = GET /index.php/profil/meteorologi/list-of-all-tags/infografis-dasarian-tahun-2022 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/profil/meteorologi/list-of-all-tags/infografis-dasarian-tahun-2022"] [unique_id "aQm1rw1yesxWWFOyh9BimQAAAsA"] [staklim-malang.info] [staklim-malang.info] top=[42034] [d7p/aACkY3k] [aQm1rw1yesxWWFOyh9BimQAAAsA] keep_alive=[0] [2025-11-04 15:13:35.636390] [R:aQm1rw1yesxW
...
show less
Hacking
Web App Attack
Showing 1 to
4
of 4 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: