5.45.207.131

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted. Whitelisted Subnet

Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who may use them for search engine spiders. However, these same entities sometimes also provide cloud servers and mail services which are easily abused. Pay special attention when trusting or distrusting these IPs.

Abuse Confidence Score
0% Low Risk
160 reports
35 reporters · latest 3 years ago

5.45.207.131 is on our whitelist as Yandex via the subnet 5.45.192.0/18.

ISP
Yandex enterprise network
Usage Type
Data Center/Web Hosting/Transit
ASN
AS208398
Hostname(s)
5-45-207-131.spider.yandex.com
Domain Name
yandex.net
Country
🇷🇺 Russian Federation
City
Moscow, Moscow
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

5.45.207.131 has been reported 160 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
160 from 35 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇨🇦 JuicyJ
Excessive crawling/scraping
Web App Attack
🇨🇦 JuicyJ
Excessive crawling/scraping
Web App Attack
🇨🇦 JuicyJ
Excessive crawling/scraping
Web App Attack
🇨🇦 JuicyJ
Excessive crawling/scraping
Web App Attack
🇸🇬 Sofibox Cyberwatch
[bad_ip: 5.45.207.131:61676 [alert_level: Medium Risk [target_port: 443 [class: nil [msg: SSLBL: Malicious JA3 SSL-Client Fingerprint detected (CoinMiner) [virustotal: malicious [cidr_net24: ip-is-not-found [(C) Arafat Ali @ arafatx.com
Hacking
🇮🇩 hermawan
Hacking Web App Attack
🇮🇩 hermawan
Hacking Web App Attack
🇩🇪 rh24
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 5.45.207.131 (RU/Russia/5-45-207-131.spider.yandex.com): (CF_ENABLE)
Bad Web Bot
🇬🇧 Bytemark
5.45.207.131 - - [27/Feb/2023:01:18:08 +0000] "GET /viewtopic.php?t=7451 HTTP/1.1" 200 14546 "-" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)"
Brute-Force Web App Attack
🇩🇪 raspi4
Fail2Ban Ban Triggered
Brute-Force Web App Attack
🇦🇺 ozisp.com.au
RU_YANDEX-MNT_<33>1677164181 [1:2032979:1] ET SCAN Yandex Webcrawler User-Agent (YandexBot) [Classification: Not Suspicious Traffic] [Priority: 3] {TCP} 5.45.207.131:59952
Hacking
🇫🇷 GabrielJST
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 5.45.207.131 (RU/Russia/5-45-207-131.spider.yandex.com)
Bad Web Bot
🇪🇸 10dencehispahard SL
Abusive use detected
Brute-Force
🇩🇪 mclo
5.45.207.131 - - [16/Feb/2023:19:18:12 +0100] "GET /Make-more-money-with-music.html HTTP/1.1" 404 134 "-" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)" ...
Web App Attack
🇮🇩 hermawan
Hacking Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 195.178.110.204
🇩🇪 138.68.64.165
🇲🇦 105.77.201.214
🇺🇸 57.141.0.49
🇸🇬 52.187.9.8
🇵🇱 46.149.220.211
🇸🇳 41.83.19.238
🇧🇷 170.80.110.63
🇺🇸 167.99.147.99
🇺🇸 130.131.220.95
🇦🇴 102.214.36.152
🇦🇷 45.231.214.83
🇺🇸 40.74.210.14
🇨🇳 27.42.175.59
🇺🇸 3.19.147.110
🇷🇺 85.175.100.132
🇳🇱 34.7.124.138
🇱🇰 220.247.224.226
🇫🇷 163.172.66.206
🇺🇸 104.165.4.8
feedback