JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 80.237.87.45

80.237.87.45 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 32%: ?

32%

ISP	(MS009388) SKYFREIGHT,
Usage Type	Fixed Line ISP
ASN	AS20485
Hostname(s)	45.87.237.80.transtelecom.net
Domain Name	transtk.ru
Country	🇷🇺 Russian Federation
City	Kirzhach, Vladimir Oblast

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 80.237.87.45

Whois 80.237.87.45

IP Abuse Reports for 80.237.87.45:

This IP address has been reported a total of 16 times from 13 distinct sources. 80.237.87.45 was first reported on March 28th 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 big-cloud.nl	2026-05-21 01:04:02 (2 weeks ago)	Try to access /xmlrpc.php	Web App Attack
🇬🇧 consul.to	2026-05-21 00:56:00 (2 weeks ago)	Web attack/malicious scanning detected	Web App Attack
Anonymous	2026-05-16 23:50:57 (3 weeks ago)	(wordpress) Failed wordpress login from 80.237.87.45 (RU/Russia/45.87.237.80.transtelecom.net)	Brute-Force
🇫🇷 cphdude	2026-05-11 12:47:02 (4 weeks ago)	xmlrpc.php request	Web App Attack
🇳🇱 wlt-blocker	2026-04-22 17:27:03 (1 month ago)	Unauthorized access to webpage admin	Web App Attack
🇺🇸 TPI-Abuse	2026-04-19 22:10:26 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 80.237.87.45 (45.87.237.80.transtelecom.net): 1 ... show more (mod_security) mod_security (id:225170) triggered by 80.237.87.45 (45.87.237.80.transtelecom.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 19 18:10:21.438119 2026] [security2:error] [pid 3348716:tid 3348716] [client 80.237.87.45:30892] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|garanta.co\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "garanta.co"] [uri "/wp-json/wp/v2/users"] [unique_id "aeVSzedkiQG0wUakwPupawAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 rsiddall	2026-04-19 20:53:10 (1 month ago)	80.237.87.45 - - [19/Apr/2026:16:53:03 -0400] "POST /xmlrpc.php HTTP/1.1" 301 242 "-" "Mozilla/5.0 ( ... show more 80.237.87.45 - - [19/Apr/2026:16:53:03 -0400] "POST /xmlrpc.php HTTP/1.1" 301 242 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/86.0.0.0 Safari/537.36" 80.237.87.45 - - [19/Apr/2026:16:53:09 -0400] "POST /xmlrpc.php HTTP/1.1" 301 242 "-" "Mozilla/5.0 (Windows NT 10.0; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/13.0.0.0 Safari/537.36" ... show less	Brute-Force
🇺🇸 TPI-Abuse	2026-04-19 18:35:34 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 80.237.87.45 (45.87.237.80.transtelecom.net): 1 ... show more (mod_security) mod_security (id:225170) triggered by 80.237.87.45 (45.87.237.80.transtelecom.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 19 14:35:27.001691 2026] [security2:error] [pid 2579866:tid 2579866] [client 80.237.87.45:18660] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|citizensforsanity.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "citizensforsanity.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aeUgbgjbXk40Hw5bKS_iOwAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 stinpriza	2026-04-19 18:22:40 (1 month ago)	Web App Attack	Web App Attack
Anonymous	2026-04-18 18:47:03 (1 month ago)	Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1	Hacking Web App Attack
🇩🇪 4server	2026-04-18 18:13:16 (1 month ago)	[SatApr1820:13:13.5562192026][security2:error][pid3493141:tid3493204][client80.237.87.45:0]ModSecuri ... show more [SatApr1820:13:13.5562192026][security2:error][pid3493141:tid3493204][client80.237.87.45:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"chryptofarm.ch\"][uri\"/xmlrpc.php\"][unique_id\"aePJuQM4JrzosPvVCF-2owAAAQQ\"] show less	Port Scan Brute-Force Web App Attack
🇫🇮 stinpriza	2026-04-18 18:11:52 (1 month ago)	Web App Attack	Web App Attack
🇩🇪 Wido	2026-04-13 03:56:10 (1 month ago)	Web Attack: Unauthorized access attempt to sensitive/hidden system file.	Hacking Web App Attack
🇩🇪 Hazzard	2026-04-12 22:07:38 (1 month ago)	(wordpress) Failed wordpress login from 80.237.87.45 (RU/Russia/-/-/45.87.237.80.transtelecom.net/[r ... show more (wordpress) Failed wordpress login from 80.237.87.45 (RU/Russia/-/-/45.87.237.80.transtelecom.net/[redacted]): (CF_ENABLE) show less	Brute-Force
🇺🇸 xmission.com	2026-04-08 21:58:35 (2 months ago)	Blocked 14 connection attempts due to Spamhaus RBL (RJCT05) in the past 4 hours. To request delistin ... show more Blocked 14 connection attempts due to Spamhaus RBL (RJCT05) in the past 4 hours. To request delisting, visit https://www.spamhaus.org/lookup/ to check your IP status and submit a delist request if eligible. show less	Email Spam

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 188.240.59.32

🇫🇷 173.249.23.28

🇭🇰 8.217.133.144

🇦🇷 201.235.42.200

🇬🇧 195.206.182.210

🇯🇵 172.105.197.151

🇳🇱 147.45.50.147

🇺🇸 138.197.93.235

🇨🇳 124.117.195.46

🇰🇷 121.165.187.77

🇨🇳 112.103.62.79

🇨🇳 81.70.231.23

🇧🇬 79.124.58.142

🇭🇰 47.238.76.0

🇰🇭 36.37.211.116

🇨🇳 14.103.116.0

🇰🇷 222.232.176.7

🇲🇽 206.135.11.74

🇨🇳 203.57.70.32

192.168.198.111