JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

5.45.36.255

Neutral Activity

Abuse confidence score ?

0% Low Risk

7 reports

3 reporters · latest 6 months ago

ISP	Internet Utilities Europe and Asia Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS61317
Domain Name	netutils.io
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

5.45.36.255 has been reported 7 times. The most recent report is from 6 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 5.45.36.255

This IP address has been reported a total of 7 times from 3 distinct sources. 5.45.36.255 was first reported on October 25th 2025, and the most recent report was 6 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-03-20 00:07:47 (6 months ago)	(mod_security) mod_security (id:210350) triggered by 5.45.36.255 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210350) triggered by 5.45.36.255 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 20:07:41.329927 2026] [security2:error] [pid 29996:tid 29996] [client 5.45.36.255:45647] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.kirbysheetmetalworks.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.kirbysheetmetalworks.com"] [uri "/"] [unique_id "abyPzfvfODc9d50G7irOVAAAAAo"], referer: https://www.kirbysheetmetalworks.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-18 18:13:26 (6 months ago)	(mod_security) mod_security (id:210350) triggered by 5.45.36.255 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210350) triggered by 5.45.36.255 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 18 14:13:10.564873 2026] [security2:error] [pid 6176:tid 6176] [client 5.45.36.255:34027] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|kidswow.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "kidswow.com"] [uri "/about"] [unique_id "abrrNikdIcPYaWzMMZM-GgAAACE"], referer: https://kidswow.com/about show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-16 23:19:30 (6 months ago)	(mod_security) mod_security (id:210350) triggered by 5.45.36.255 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210350) triggered by 5.45.36.255 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 16 19:19:22.969830 2026] [security2:error] [pid 6281:tid 6288] [client 5.45.36.255:30981] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|teddysdeli.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "teddysdeli.com"] [uri "/about"] [unique_id "abiP-gaJRiDvo4pUdH7VsAAAAIU"], referer: https://teddysdeli.com/about show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-12 20:27:38 (6 months ago)	(mod_security) mod_security (id:210350) triggered by 5.45.36.255 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210350) triggered by 5.45.36.255 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 12 16:27:32.461476 2026] [security2:error] [pid 22981:tid 22981] [client 5.45.36.255:57377] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|drwolberg.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "drwolberg.com"] [uri "/about"] [unique_id "abMhtKM1-LA2XBg3cnNiDAAAAAY"], referer: https://drwolberg.com/about show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-11 03:22:39 (6 months ago)	(mod_security) mod_security (id:210350) triggered by 5.45.36.255 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210350) triggered by 5.45.36.255 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 10 23:22:24.406418 2026] [security2:error] [pid 29328:tid 29328] [client 5.45.36.255:32621] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|herstonfarm.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "herstonfarm.com"] [uri "/who-we-are"] [unique_id "abDf8D7SMBQuO67uINW6WAAAAAQ"], referer: https://herstonfarm.com/who-we-are show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-01-26 07:01:27 (7 months ago)	wordpress-trap	Web App Attack
🇵🇹 compulab.pt	2025-10-25 11:53:39 (10 months ago)	WHMCS reset password brute force	Brute-Force Web App Attack

Showing 1 to 7 of 7 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 57.129.120.143

🇩🇪 34.40.10.26

🇩🇪 209.50.185.85

🇦🇷 200.81.176.24

🇧🇷 187.125.132.142

🇭🇰 165.154.41.205

🇺🇸 159.26.100.53

🇭🇰 101.36.125.2

🇫🇷 83.193.131.136

🇻🇳 45.117.171.94

🇯🇵 34.85.35.204

🇺🇸 34.48.94.167

🇧🇷 179.111.75.44

🇺🇸 134.199.237.198

🇺🇸 129.121.99.2

🇱🇹 62.60.130.242

🇷🇺 37.29.83.180

🇮🇩 36.74.208.15

🇺🇸 34.24.74.169

🇺🇸 8.234.201.131