JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.78.231.85

45.78.231.85 was found in our database!

This IP was reported 35 times. Confidence of Abuse is 2%: ?

ISP	BYTEPLUS
Usage Type	Data Center/Web Hosting/Transit
ASN	AS150436
Domain Name	bytedance.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.78.231.85

Whois 45.78.231.85

IP Abuse Reports for 45.78.231.85:

This IP address has been reported a total of 35 times from 23 distinct sources. 45.78.231.85 was first reported on April 12th 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 polycoda	2026-05-24 13:21:40 (2 weeks ago)	🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27	DDoS Attack
🇺🇸 ipblock.com	2026-04-02 06:32:00 (2 months ago)	IPBlock protected site ID [3192-af][s=06]. Exploit request, vulnerability probe.	Hacking Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-03-31 08:15:00 (2 months ago)	IPBlock protected site ID [3192-af][s=06]. Exploit request, vulnerability probe.	Hacking Bad Web Bot Web App Attack
🇺🇸 Hmorrin	2026-03-02 12:15:54 (3 months ago)		Port Scan
🇵🇱 rafix	2026-02-21 14:22:43 (3 months ago)	DDoS on HTTP/HTTPS, #botnet20250221	DDoS Attack Bad Web Bot
Anonymous	2026-02-21 14:11:14 (3 months ago)	Web app attack and vulnerability scan detected from IIS logs	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-21 12:55:28 (3 months ago)	(mod_security) mod_security (id:210730) triggered by 45.78.231.85 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 45.78.231.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 21 07:55:16.531831 2026] [security2:error] [pid 3461:tid 3461] [client 45.78.231.85:34722] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.campnecon.com\|F\|2"] [data ".overlookconnection.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.campnecon.com"] [uri "/www.overlookconnection.com"] [unique_id "aZmrNMOQnvmazWth0xcoMAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 chrisj	2026-02-21 12:53:51 (3 months ago)	2026-02-21T12:53:50.678531+00:00 www.diamondaviators.net throttler[903963]: Throttle IP 45.78.231.85 ... show more 2026-02-21T12:53:50.678531+00:00 www.diamondaviators.net throttler[903963]: Throttle IP 45.78.231.85 with 25 denials ... show less	Bad Web Bot
🇨🇦 1gz	2026-02-21 12:44:26 (3 months ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /kerko.php UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇷 chrisj	2026-02-21 12:18:58 (3 months ago)	2026-02-21T12:18:57.336768+00:00 www.diamondaviators.net throttler[903963]: Throttle IP 45.78.231.85 ... show more 2026-02-21T12:18:57.336768+00:00 www.diamondaviators.net throttler[903963]: Throttle IP 45.78.231.85 with 25 denials ... show less	Bad Web Bot
Anonymous	2026-02-17 23:04:00 (3 months ago)	Web attack	Bad Web Bot Web App Attack
Anonymous	2026-02-14 15:04:14 (3 months ago)	Web attack	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-31 16:53:52 (4 months ago)	(mod_security) mod_security (id:210730) triggered by 45.78.231.85 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 45.78.231.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 31 11:53:43.423847 2026] [security2:error] [pid 18025:tid 18025] [client 45.78.231.85:37792] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|brandoncomputergeeks.com\|F\|2"] [data ".axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "brandoncomputergeeks.com"] [uri "/blog/image.axd"] [unique_id "aX4zl2-zafswH-Sf49YulQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nodepile	2026-01-31 16:39:40 (4 months ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/browse-by-car-model/hyundai ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/browse-by-car-model/hyundai/accent.html ua='Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36') show less	Exploited Host Web App Attack
🇪🇸 librebit	2026-01-31 16:30:30 (4 months ago)	Brute force	Brute-Force

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 172.211.56.214

🇻🇳 103.163.215.131

🇺🇸 98.97.11.210

🇺🇸 96.78.175.41

🇱🇹 83.176.206.215

🇷🇴 80.94.92.186

🇺🇸 71.62.92.255

🇺🇸 45.131.195.226

🇺🇸 205.210.31.108

🇪🇹 196.189.155.89

🇬🇧 195.140.214.28

🇮🇳 182.95.230.158

🇧🇷 179.184.0.32

🇧🇬 91.92.40.204

🇱🇹 45.227.254.170

🇺🇸 20.80.105.83

🇮🇪 3.248.230.139

🇧🇷 205.210.31.251

🇲🇽 187.191.48.23

🇫🇷 185.177.72.10