JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.133.170.250

45.133.170.250 was found in our database!

This IP was reported 68 times. Confidence of Abuse is 27%: ?

27%

ISP	Internet Utilities Europe and Asia Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS61317
Domain Name	netutils.io
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	London, England

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.133.170.250

Whois 45.133.170.250

IP Abuse Reports for 45.133.170.250:

This IP address has been reported a total of 68 times from 17 distinct sources. 45.133.170.250 was first reported on September 16th 2021, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-12 23:47:57 (2 days ago)	(mod_security) mod_security (id:210350) triggered by 45.133.170.250 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 45.133.170.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 12 19:47:49.430025 2026] [security2:error] [pid 2376868:tid 2376868] [client 45.133.170.250:64979] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|etudesoftware.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "etudesoftware.com"] [uri "/"] [unique_id "an0GJa-AmOLKc5REvxNvSQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-11 14:54:30 (3 days ago)	(mod_security) mod_security (id:210350) triggered by 45.133.170.250 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 45.133.170.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 11 10:54:19.399221 2026] [security2:error] [pid 26981:tid 26981] [client 45.133.170.250:47593] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.creartest.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.creartest.com"] [uri "/"] [unique_id "ans3m48zEAIJumKftuaOpwAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2026-08-11 07:05:54 (3 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 247	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-08-07 12:34:18 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 45.133.170.250 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 45.133.170.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 07 08:34:02.104076 2026] [security2:error] [pid 244740:tid 244740] [client 45.133.170.250:59363] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|oakleighfarm.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "oakleighfarm.com"] [uri "/student-registration"] [unique_id "anXQum5nn6bz_Qi9BHzL2AAAAAo"], referer: http://oakleighfarm.com/student-registration show less	Brute-Force Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2026-07-29 03:09:27 (2 weeks ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 06-09.45.133.170.250.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 06-09.45.133.170.250.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-13 09:26:27 (1 month ago)	(mod_security) mod_security (id:210350) triggered by 45.133.170.250 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 45.133.170.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 05:26:25.017646 2026] [security2:error] [pid 17197:tid 17197] [client 45.133.170.250:57667] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.blacksheepoffroad.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.blacksheepoffroad.com"] [uri "/wp-content/plugins/event-calendar-wd/css/font-awesome/font-awesome.css"] [unique_id "alSvQaGw2bcCHKtwIecmmgAAABs"], referer: http://www.blacksheepoffroad.com/wp-login.php?action=register show less	Brute-Force Bad Web Bot Web App Attack
🇸🇮 administrator	2026-06-26 22:09:05 (1 month ago)	2026-06-24 14:52:16,794 fail2ban.actions [1067]: NOTICE [apache-fakegooglebot] Ban 45.133.17 ... show more 2026-06-24 14:52:16,794 fail2ban.actions [1067]: NOTICE [apache-fakegooglebot] Ban 45.133.170.250 2026-06-24 14:52:16,794 fail2ban.actions [1067]: NOTICE [apache-fakegooglebot] Ban 45.133.170.250 2026-06-24 14:52:16,794 fail2ban.actions [1067]: NOTICE [apache-fakegooglebot] Ban 45.133.170.250 ... show less	Bad Web Bot Web Spam Email Spam Blog Spam Port Scan Brute-Force Web App Attack
🇩🇪 MusicLibrary	2026-06-25 10:34:50 (1 month ago)	Attempted access to sensitive configuration files (.env, .git, etc.)	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-25 09:37:11 (1 month ago)	(mod_security) mod_security (id:210350) triggered by 45.133.170.250 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 45.133.170.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 05:37:02.638378 2026] [security2:error] [pid 9940:tid 10004] [client 45.133.170.250:51619] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.wakhan-adventure.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.wakhan-adventure.com"] [uri "/"] [unique_id "ajz2vmNjYWaWbYb7OdHSgQAAAQU"] show less	Brute-Force Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2026-06-10 16:05:40 (2 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 19-05.45.133.170.250.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 19-05.45.133.170.250.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇺🇸 ipblock.com	2026-06-07 07:02:00 (2 months ago)	IPBlock protected site ID [4055-d][s=01]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-06-03 03:09:00 (2 months ago)	IPBlock protected site ID [4055-d][s=01]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-05-29 06:42:00 (2 months ago)	IPBlock protected site ID [4055-d][s=01]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-05-28 00:59:00 (2 months ago)	IPBlock protected site ID [4055-d][s=01]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-05-26 23:22:00 (2 months ago)	IPBlock protected site ID [4055-d][s=01]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack

Showing 1 to 15 of 68 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.255

🇧🇷 168.194.176.169

🇲🇽 38.49.131.90

🇧🇪 198.235.24.179

🇩🇪 194.88.98.119

🇷🇴 193.32.162.27

🇲🇽 189.203.137.185

🇸🇪 185.246.130.20

🇺🇸 185.243.5.235

🇸🇬 185.200.116.73

🇺🇦 185.177.188.226

🇦🇷 181.21.25.38

🇵🇱 176.53.159.199

🇺🇸 172.202.39.151

🇸🇪 104.23.217.125

🇫🇷 85.217.140.9

🇮🇷 85.198.9.131

🇺🇦 85.114.215.145

🇫🇷 79.143.186.145

🇲🇽 68.155.154.146