JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 81.30.97.8

81.30.97.8 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 40%: ?

40%

ISP	Easy Netvvork LLC
Usage Type	Fixed Line ISP
ASN	AS205367
Domain Name	netpoint.az
Country	🇦🇿 Azerbaijan
City	Baku, Baki

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 81.30.97.8

Whois 81.30.97.8

IP Abuse Reports for 81.30.97.8:

This IP address has been reported a total of 23 times from 14 distinct sources. 81.30.97.8 was first reported on November 21st 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-10-14 09:57:36 (2 days ago)	denied SSH access attempt. destination port 22.	Port Scan Brute-Force SSH
🇷🇺 Darth Vader	2026-10-12 17:32:07 (4 days ago)	nfdump top talker: 81.30.97.8 \| first seen 2026-10-12 20:32:07.552 \| duration 00:00:00.059 \| flows=3 ... show more nfdump top talker: 81.30.97.8 \| first seen 2026-10-12 20:32:07.552 \| duration 00:00:00.059 \| flows=3 \| packets=69564 \| bytes=51.2 M \| pps=1166 \| bps=6.9 M \| bpp=735 \| proto=udp show less	DDoS Attack Exploited Host
🇷🇺 Darth Vader	2026-10-12 16:23:41 (4 days ago)	nfdump top talker: 81.30.97.8 \| first seen 2026-10-12 19:23:41.568 \| duration 00:00:00.280 \| flows=7 ... show more nfdump top talker: 81.30.97.8 \| first seen 2026-10-12 19:23:41.568 \| duration 00:00:00.280 \| flows=7 \| packets=276210 \| bytes=198.6 M \| pps=986 \| bps=5.7 M \| bpp=719 \| proto=udp show less	DDoS Attack Exploited Host
🇷🇸 pavel Karpenko	2026-10-12 16:00:02 (4 days ago)	81.30.97.8 - - [12/Oct/2026:19:00:02 +0300] "GET /transfer/?company=Samuel+Cosgrove&company_country= ... show more 81.30.97.8 - - [12/Oct/2026:19:00:02 +0300] "GET /transfer/?company=Samuel+Cosgrove&company_country=GB&counterparty=Neterra+Ltd.&counterparty_country=BG&country=GB&lang=en&months=6&scope=ripe_to&share=d8b6285406c7bdcb&view=pair HTTP/2.0" 302 0 "https://ultralir.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" client_port=51716 server_port=443 rt=0.013 urt=0.013 transfer_entry=- server_addr=195.133.18.6 epoch=1791820802.450 show less	DDoS Attack
🇷🇺 Darth Vader	2026-10-08 10:20:20 (1 week ago)	nfdump top talker: 81.30.97.8 \| first seen 2026-10-08 13:20:20.096 \| duration 00:00:00.240 \| flows=7 ... show more nfdump top talker: 81.30.97.8 \| first seen 2026-10-08 13:20:20.096 \| duration 00:00:00.240 \| flows=7 \| packets=208692 \| bytes=156.8 M \| pps=869 \| bps=5.2 M \| bpp=751 \| proto=any show less	DDoS Attack Port Scan Exploited Host
Anonymous	2026-10-04 14:01:25 (1 week ago)	denied traffic to a honeypot network. destination port 23.	Port Scan Hacking
🇺🇸 TPI-Abuse	2026-10-04 08:13:29 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 81.30.97.8 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210350) triggered by 81.30.97.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 04:13:25.064972 2026] [security2:error] [pid 30352:tid 30352] [client 81.30.97.8:51604] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|comfortcartel.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "comfortcartel.com"] [uri "/"] [unique_id "asIKpW4UoEqGglmZ5t2mjgAAAA4"], referer: https://localseobacklinks.shop/dir/managed-link-building-43457 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 NetVexor	2026-09-24 16:30:22 (3 weeks ago)	Attack source identified and submitted via NetVexor BGP Blackhole Network	Port Scan Hacking Brute-Force
Anonymous	2026-09-24 15:32:59 (3 weeks ago)	denied Telnet access attempt. destination port 23.	Port Scan Brute-Force
🇺🇸 TPI-Abuse	2026-09-20 06:21:20 (3 weeks ago)	(mod_security) mod_security (id:210350) triggered by 81.30.97.8 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210350) triggered by 81.30.97.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 02:21:14.531338 2026] [security2:error] [pid 24472:tid 24472] [client 81.30.97.8:39329] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|donzie.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "donzie.com"] [uri "/"] [unique_id "aq97WrnZ8AnGP0mwLySygwAAAAA"], referer: https://backlinks-checker.com/share/105838 show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-09-19 01:50:13 (3 weeks ago)	Asking over plain http and never following the redirect served — a crawler that reads nothing it ask ... show more Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for \| method: GET \| path: /a-propos \| 2026-09-19 01:50 UTC show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-10 00:55:36 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇸🇬 celestialcity	2026-09-09 11:45:19 (1 month ago)	Blocked by UFW on celestialcityas [23/tcp] \| SPT: 48583 \| TTL: 37 \| LEN: 60 \| TOS: 0x00 • Reported b ... show more Blocked by UFW on celestialcityas [23/tcp] \| SPT: 48583 \| TTL: 37 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan IoT Targeted
Anonymous	2026-09-06 03:12:59 (1 month ago)	denied traffic to a honeypot network. destination port 26790.	Port Scan Hacking
🇺🇸 鬼影233	2026-09-04 09:21:22 (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 206.189.26.120

🇦🇷 186.58.8.193

🇻🇳 171.244.63.98

🇨🇿 82.118.30.33

🇱🇹 62.60.130.253

🇺🇸 205.210.31.31

🇦🇷 190.111.218.139

🇨🇳 183.201.208.25

🇬🇧 178.62.127.165

🇬🇧 138.68.158.164

🇬🇧 134.209.27.168

🇳🇱 85.203.40.40

🇺🇸 70.183.235.25

🇬🇧 64.227.37.85

🇬🇧 64.227.34.152

🇸🇪 43.225.91.19

🇰🇷 218.236.58.204

🇻🇳 210.245.30.140

🇧🇷 190.115.84.25

🇲🇽 187.190.35.163