JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.252.81.75

45.252.81.75 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 47%: ?

47%

ISP	Colocation America Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS21769
Hostname(s)	75.81.252.45.rdns.colocationamerica.com.81.252.45.in-addr.arpa
Domain Name	colocationamerica.com
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.252.81.75

Whois 45.252.81.75

IP Abuse Reports for 45.252.81.75:

This IP address has been reported a total of 26 times from 7 distinct sources. 45.252.81.75 was first reported on June 23rd 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 NetShield-DE	2026-06-29 09:07:31 (3 hours ago)	Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-06-29T ... show more Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-06-29T11:07:02+0200. Last: 2026-06-29T11:07:02+0200. Samples: - 2026-06-28 01:37:24,123 fail2ban.actions [996924]: NOTICE [abuseipdb] Ban 45.252.81.75 show less	Web App Attack
🇩🇪 NetShield-DE	2026-06-29 04:07:31 (8 hours ago)	Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-06-29T ... show more Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-06-29T06:07:02+0200. Last: 2026-06-29T06:07:02+0200. Samples: - 2026-06-28 01:37:24,123 fail2ban.actions [996924]: NOTICE [abuseipdb] Ban 45.252.81.75 show less	Web App Attack
🇩🇪 NetShield-DE	2026-06-28 23:07:30 (13 hours ago)	Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-06-29T ... show more Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-06-29T01:07:01+0200. Last: 2026-06-29T01:07:01+0200. Samples: - 2026-06-28 01:37:24,123 fail2ban.actions [996924]: NOTICE [abuseipdb] Ban 45.252.81.75 show less	Web App Attack
🇩🇪 NetShield-DE	2026-06-28 19:07:32 (17 hours ago)	Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-06-28T ... show more Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-06-28T21:07:02+0200. Last: 2026-06-28T21:07:02+0200. Samples: - 2026-06-28 01:37:24,123 fail2ban.actions [996924]: NOTICE [abuseipdb] Ban 45.252.81.75 show less	Web App Attack
🇩🇪 NetShield-DE	2026-06-28 14:07:32 (22 hours ago)	Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-06-28T ... show more Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-06-28T16:07:01+0200. Last: 2026-06-28T16:07:01+0200. Samples: - 2026-06-28 01:37:24,123 fail2ban.actions [996924]: NOTICE [abuseipdb] Ban 45.252.81.75 show less	Web App Attack
🇩🇪 NetShield-DE	2026-06-28 09:07:31 (1 day ago)	Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-06-28T ... show more Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-06-28T11:07:01+0200. Last: 2026-06-28T11:07:01+0200. Samples: - 2026-06-28 01:37:24,123 fail2ban.actions [996924]: NOTICE [abuseipdb] Ban 45.252.81.75 show less	Web App Attack
🇩🇪 NetShield-DE	2026-06-28 04:07:31 (1 day ago)	Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-06-28T ... show more Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-06-28T06:07:01+0200. Last: 2026-06-28T06:07:01+0200. Samples: - 2026-06-28 01:37:24,123 fail2ban.actions [996924]: NOTICE [abuseipdb] Ban 45.252.81.75 show less	Web App Attack
🇺🇸 TPI-Abuse	2026-06-27 00:11:40 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 45.252.81.75 (75.81.252.45.rdns.colocationameri ... show more (mod_security) mod_security (id:210492) triggered by 45.252.81.75 (75.81.252.45.rdns.colocationamerica.com.81.252.45.in-addr.arpa): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 20:11:32.962591 2026] [security2:error] [pid 12576:tid 12576] [client 45.252.81.75:51354] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "graciousholding.com"] [uri "/sftp-config.json"] [unique_id "aj8VNFPX00VIyr4K_GargAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-06-25 22:55:22 (3 days ago)	Try to access /.vscode/sftp.json	Web App Attack
🇺🇸 TPI-Abuse	2026-06-25 15:15:16 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 45.252.81.75 (75.81.252.45.rdns.colocationameri ... show more (mod_security) mod_security (id:210492) triggered by 45.252.81.75 (75.81.252.45.rdns.colocationamerica.com.81.252.45.in-addr.arpa): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 11:15:12.693937 2026] [security2:error] [pid 28204:tid 28204] [client 45.252.81.75:21836] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tribwatch.com"] [uri "/sftp-config.json"] [unique_id "aj1GAH7lJelKsSp8Sc6xmgAAACU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-25 04:57:19 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 45.252.81.75 (75.81.252.45.rdns.colocationameri ... show more (mod_security) mod_security (id:210492) triggered by 45.252.81.75 (75.81.252.45.rdns.colocationamerica.com.81.252.45.in-addr.arpa): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 00:57:15.607710 2026] [security2:error] [pid 5679:tid 5679] [client 45.252.81.75:53602] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "travelsupersonic.com"] [uri "/sftp-config.json"] [unique_id "ajy1K_NM_wP8YJItmQADcAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 4server	2026-06-25 03:01:12 (4 days ago)	[ThuJun2505:01:08.5595212026][security2:error][pid1381654:tid1381668][client45.252.81.75:0]ModSecuri ... show more [ThuJun2505:01:08.5595212026][security2:error][pid1381654:tid1381668][client45.252.81.75:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"traslocaresubito.ch\"][uri\"/sftp-config.json\"][unique_id\"ajyZ9Hpn_HVLSPIKYZmBowAAAEs\"] show less	Port Scan Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-25 02:57:27 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 45.252.81.75 (75.81.252.45.rdns.colocationameri ... show more (mod_security) mod_security (id:210492) triggered by 45.252.81.75 (75.81.252.45.rdns.colocationamerica.com.81.252.45.in-addr.arpa): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 22:57:20.340361 2026] [security2:error] [pid 5358:tid 5358] [client 45.252.81.75:46844] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "trasimeno.ws"] [uri "/sftp-config.json"] [unique_id "ajyZEMlD_EOocAtOYh4l_gAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-25 01:17:23 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 45.252.81.75 (75.81.252.45.rdns.colocationameri ... show more (mod_security) mod_security (id:210492) triggered by 45.252.81.75 (75.81.252.45.rdns.colocationamerica.com.81.252.45.in-addr.arpa): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 21:17:18.294879 2026] [security2:error] [pid 29735:tid 29735] [client 45.252.81.75:16458] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "transmittersolution.com"] [uri "/sftp-config.json"] [unique_id "ajyBnlpb83v4tWgxtfT66wAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-24 12:58:55 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 45.252.81.75 (75.81.252.45.rdns.colocationameri ... show more (mod_security) mod_security (id:210492) triggered by 45.252.81.75 (75.81.252.45.rdns.colocationamerica.com.81.252.45.in-addr.arpa): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 08:58:50.096890 2026] [security2:error] [pid 17806:tid 17806] [client 45.252.81.75:40298] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "towida.org"] [uri "/sftp-config.json"] [unique_id "ajvUiktu0zuvA4UeR8jQ3AAAABE"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 160.119.69.14

🇿🇦 105.216.107.93

🇪🇸 85.251.51.122

🇰🇷 211.253.10.61

🇮🇶 204.154.201.108

🇵🇦 200.115.141.58

🇲🇽 186.96.158.180

🇨🇴 181.51.34.153

🇳🇱 176.65.148.144

🇮🇩 175.184.236.68

🇵🇰 139.135.44.123

🇵🇭 136.158.29.48

🇨🇳 111.31.165.51

🇿🇦 105.209.145.73

🇲🇦 105.188.81.181

🇮🇳 103.55.89.5

🇸🇬 20.212.226.51

🇺🇸 18.116.101.220

🇺🇸 3.133.55.150

🇰🇷 211.223.107.86