JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.70.58.103

45.70.58.103 was found in our database!

This IP was reported 102 times. Confidence of Abuse is 30%: ?

30%

ISP	Gavilanes Parreño Irene Del Rocío
Usage Type	Fixed Line ISP
ASN	AS271911
Hostname(s)	103-58-70-45.simantec.ec
Domain Name	simantec.ec
Country	🇪🇨 Ecuador
City	Quito, Pichincha

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.70.58.103

Whois 45.70.58.103

IP Abuse Reports for 45.70.58.103:

This IP address has been reported a total of 102 times from 41 distinct sources. 45.70.58.103 was first reported on May 4th 2024, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 kosada.com	2026-07-05 18:38:01 (2 days ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 nodepile	2026-06-29 23:24:47 (1 week ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalogsearch/result/index/ ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalogsearch/result/index/ ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36') show less	Web App Attack Exploited Host
🇩🇪 Vegascosmetics	2026-06-13 13:34:40 (3 weeks ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
🇮🇩 hermawan	2026-06-10 07:17:17 (4 weeks ago)	[Wed Jun 10 14:17:17.492263 2026] [security2:error] [pid 309566:tid 140281727919808] [client 45.70.5 ... show more [Wed Jun 10 14:17:17.492263 2026] [security2:error] [pid 309566:tid 140281727919808] [client 45.70.58.103:51632] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561326-infografis-himbauan-waspada-suhu-udara-panas HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561326-infografis-himbauan-waspada-suhu-udara-panas"] [unique_id "aikPfVOccmjACoYImqDougAB2AQ"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[309591] [GKyFCKFasgc] [aikPfVOccmjACoYImqDougAB2AQ] keep_alive=[1 ... show less	Email Spam Hacking
🇫🇷 Sklurk	2026-05-23 05:28:26 (1 month ago)	Web App Attack	Web App Attack
Anonymous	2026-05-10 10:51:51 (1 month ago)	Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ... show more Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in thread-post.asp show less	Exploited Host Bad Web Bot
🇺🇸 nodepile	2026-05-10 04:50:50 (1 month ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/ ua='Mozilla/5.0 (Linux; An ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/ ua='Mozilla/5.0 (Linux; Android 8.0.0; SM-J330G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36 EdgA/114.0.1823.74') show less	Web App Attack Exploited Host
🇨🇭 ALPHANET	2026-05-09 13:45:47 (1 month ago)	Botnet or web spider not respecting robots.txt	DDoS Attack Exploited Host
🇦🇺 MAGIC	2026-05-06 00:20:03 (2 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇩🇪 EGP Abuse Dept	2026-04-28 02:45:37 (2 months ago)	Scanning for port/service exploits on tpc-016.mach3builders.nl	Port Scan Hacking
🇺🇸 nodepile	2026-04-24 05:26:50 (2 months ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalogsearch/result/index/ ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalogsearch/result/index/ ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36') show less	Web App Attack Exploited Host
🇺🇸 TPI-Abuse	2026-04-13 03:25:20 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 45.70.58.103 (103-58-70-45.simantec.ec): 1 in t ... show more (mod_security) mod_security (id:210730) triggered by 45.70.58.103 (103-58-70-45.simantec.ec): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 12 23:25:13.266254 2026] [security2:error] [pid 1659983:tid 1659983] [client 45.70.58.103:38321] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Danbury II/Stetson Bordeaux/originals/Thumbs.db"] [unique_id "adxiGVwhABOoYJeYke8T1AAAAAc"], referer: https://vitalitywebb.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 filstal.org	2026-04-08 09:40:11 (3 months ago)	Brute-force/Enumeration: Multiple login attempts for non-existent mail accounts (Honeytrap).	Email Spam Brute-Force
🇺🇸 stechusa	2026-04-07 02:17:04 (3 months ago)	ELEVATED_THREAT \| country=EC \| ASN=Gavilanes Parreno Irene Del Rocio \| 9 IPs targeting /room.html \| ... show more ELEVATED_THREAT \| country=EC \| ASN=Gavilanes Parreno Irene Del Rocio \| 9 IPs targeting /room.html \| Facet request during elevated threat (facet_ratio=0.82, unique_ips=176) \| HTTP/1.1 over TLS (elevated=True) show less	Bad Web Bot DDoS Attack
🇺🇸 stechusa	2026-04-07 02:17:04 (3 months ago)	[Askari] \| country=EC \| Behavior: HTTP/1.1 over TLS, Targeting specific pages, Outdated browser, Con ... show more [Askari] \| country=EC \| Behavior: HTTP/1.1 over TLS, Targeting specific pages, Outdated browser, Concurrent page load during attack show less	Bad Web Bot DDoS Attack

Showing 1 to 15 of 102 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 2400:cb00:523:1000:1a52:5868:503a:7cad

🇮🇩 202.165.42.255

🇸🇪 157.22.16.173

🇳🇱 91.92.42.19

🇺🇸 74.114.28.211

🇨🇳 58.19.140.90

🇸🇬 47.82.55.143

🇧🇬 2620:171:66:f003:9999::244

🇺🇿 144.124.196.34

🇳🇬 105.112.198.184

🇺🇸 104.207.37.29

🇮🇳 103.171.39.147

🇱🇹 77.90.185.20

🇺🇦 31.42.184.158

🇧🇷 20.206.88.199

🇬🇹 190.14.140.70

🇫🇷 185.177.72.11

🇨🇳 144.7.81.55

🇨🇳 119.53.253.2

🇺🇸 103.143.10.140