JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.136.27.29

45.136.27.29 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 8%: ?

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	finegroupservers.com
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.136.27.29

Whois 45.136.27.29

IP Abuse Reports for 45.136.27.29:

This IP address has been reported a total of 9 times from 7 distinct sources. 45.136.27.29 was first reported on November 23rd 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-04-30 19:12:37 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 45.136.27.29 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 45.136.27.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 15:12:29.822455 2026] [security2:error] [pid 17247:tid 17292] [client 45.136.27.29:27183] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|victorchiarizia.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "victorchiarizia.com"] [uri "/wp-json/wp/v2/users"] [unique_id "afOpnSn3XBhCIAbfU1pJUAAAAQc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-28 03:57:39 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 45.136.27.29 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 45.136.27.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 27 23:57:34.282548 2026] [security2:error] [pid 10591:tid 10591] [client 45.136.27.29:61371] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|hydrusdetergents.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hydrusdetergents.com"] [uri "/wp-json/wp/v2/users"] [unique_id "afAwLn4CL60Nfhvb6fMAZgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2026-04-21 22:07:31 (1 month ago)	ThreatBook Intelligence: http_proxy,Dynamic IP more details on https://threatbook.io/ip/45.136.27.29 ... show more ThreatBook Intelligence: http_proxy,Dynamic IP more details on https://threatbook.io/ip/45.136.27.29 2026-04-21 18:50:47 /.env.www show less	Web App Attack
Anonymous	2026-01-21 22:23:41 (4 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.21 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.21 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2026-01-04 23:56:14 (5 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇱🇻 garmtech.com	2026-01-02 16:07:13 (5 months ago)	IM360 WAF: Attempt to upload malware	Hacking
🇺🇸 TPI-Abuse	2025-12-17 16:11:52 (5 months ago)	(mod_security) mod_security (id:225170) triggered by 45.136.27.29 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 45.136.27.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 17 11:11:48.114102 2025] [security2:error] [pid 21418:tid 21418] [client 45.136.27.29:55285] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|admin.turedinmobiliaria.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "admin.turedinmobiliaria.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aULWRH-sogY5SXSTVUmqfAAAACA"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Mendip_Defender	2025-12-10 01:01:14 (5 months ago)	[10/Dec/2025:01:00:58.497870 +0000] aTjGShVRU4mM_dd2FtD-uQAAAFg 45.136.27.29 40392 188.246.206.60 70 ... show more [10/Dec/2025:01:00:58.497870 +0000] aTjGShVRU4mM_dd2FtD-uQAAAFg 45.136.27.29 40392 188.246.206.60 7081 [10/Dec/2025:01:01:02.242776 +0000] aTjGThVRU4mM_dd2FtD-ugAAAEA 45.136.27.29 43444 188.246.206.60 7081 ... show less	Brute-Force
🇺🇸 fbarela	2025-11-23 05:00:36 (6 months ago)	FortiGate SSL VPN login failures.	Hacking Brute-Force

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.181

🇺🇦 195.60.175.119

🇨🇳 180.102.110.147

🇨🇳 101.249.61.184

🇺🇸 216.73.216.240

🇮🇶 185.158.22.150

🇸🇾 139.28.49.199

🇨🇳 121.227.152.250

🇻🇳 113.173.4.31

🇮🇹 2.57.170.159

🇨🇳 223.199.168.43

🇲🇽 189.194.140.170

🇦🇹 152.53.0.56

🇨🇳 111.113.88.119

🇻🇳 45.117.179.232

🇭🇰 23.249.28.115

🇷🇴 212.146.119.134

🇬🇧 198.244.240.220

🇹🇼 198.235.24.67

🇮🇩 163.7.8.178