JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.145.128.111

45.145.128.111 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 0%: ?

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	finegroupservers.com
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.145.128.111

Whois 45.145.128.111

IP Abuse Reports for 45.145.128.111:

This IP address has been reported a total of 14 times from 8 distinct sources. 45.145.128.111 was first reported on February 6th 2024, and the most recent report was 5 months ago.

Old Reports: The most recent abuse report for this IP address is from 5 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2025-12-20 03:54:22 (5 months ago)	Forum/form spam	Web Spam
Anonymous	2025-11-16 09:35:06 (6 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.16 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.16 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-09-06 19:58:25 (8 months ago)	(mod_security) mod_security (id:210730) triggered by 45.145.128.111 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 45.145.128.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 06 15:58:19.139083 2025] [security2:error] [pid 14487:tid 14487] [client 45.145.128.111:46361] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Eclipse II/Thumbs.db"] [unique_id "aLySW-Xq9EQrdqp4VuMdRQAAAAQ"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Eclipse%20II/ show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-08-31 00:33:04 (9 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2025-08-20 01:10:29 (9 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇨🇭 backslash	2025-05-24 05:02:09 (1 year ago)		Bad Web Bot
🇺🇸 TPI-Abuse	2024-12-01 09:01:23 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 45.145.128.111 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 45.145.128.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 01 04:01:17.984726 2024] [security2:error] [pid 3730923:tid 3730923] [client 45.145.128.111:54547] [client 45.145.128.111] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Churchill II Recliner/Art Burl/originals/Thumbs.db"] [unique_id "Z0wl3bl1n6idQMJFq0ZEgQAAAAw"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Churchill%20II%20Recliner/Art%20Burl/originals/ show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-10-20 10:54:40 (1 year ago)	This IP was involved in an brute force and password spray attack on 2024/10/20 05:50:47	Port Scan Brute-Force Exploited Host Web App Attack
🇨🇦 wil.com	2024-10-11 10:28:19 (1 year ago)	GlobalProtect login attempts with user root.	VPN IP Brute-Force
🇷🇺 sms.ru	2024-09-26 11:20:07 (1 year ago)	SMS pumping attack from foreign country	DDoS Attack
Anonymous	2024-08-08 04:24:44 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇨🇭 backslash	2024-05-23 00:50:10 (2 years ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
🇨🇭 backslash	2024-04-11 22:00:28 (2 years ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
🇺🇸 TPI-Abuse	2024-02-06 17:17:11 (2 years ago)	(mod_security) mod_security (id:217200) triggered by 45.145.128.111 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:217200) triggered by 45.145.128.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 06 12:17:07.629750 2024] [security2:error] [pid 16497] [client 45.145.128.111:25403] [client 45.145.128.111] ModSecurity: Access denied with code 403 (phase 1). Match of "endsWith /wp-cron.php" against "REQUEST_FILENAME" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "103"] [id "217200"] [rev "2"] [msg "COMODO WAF: HTTP/1.1 POST request missing Content-Length Header\|\|www.jaxlist.org\|F\|2"] [data "/index.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.jaxlist.org"] [uri "/index.php"] [unique_id "ZcJpk3njOdpQ4jrZ_kJOEgAAABo"], referer: https://www.jaxlist.org/index.php?page=register&action=register show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 158.94.187.62

🇳🇱 77.83.39.154

🇺🇸 64.62.191.78

🇹🇭 47.81.9.231

🇧🇷 200.155.66.2

🇳🇱 176.65.149.124

🇺🇸 165.154.162.176

🇮🇳 136.232.157.230

🇵🇱 87.251.64.149

🇬🇧 45.82.76.109

🇧🇪 35.210.61.208

🇷🇴 2.57.121.112

🇺🇸 2001:470:1:332::66

🇨🇳 221.233.51.130

🇺🇸 198.98.50.123

🇺🇸 192.206.141.63

🇲🇴 182.93.50.90

🇺🇸 136.49.53.226

🇨🇴 45.65.233.18

🇬🇧 185.195.13.17