JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.145.129.127

45.145.129.127 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 11%: ?

11%

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	finegroupservers.com
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.145.129.127

Whois 45.145.129.127

IP Abuse Reports for 45.145.129.127:

This IP address has been reported a total of 18 times from 9 distinct sources. 45.145.129.127 was first reported on August 21st 2022, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 oncord	2026-07-04 19:34:54 (1 day ago)	Form spam	Web Spam
🇦🇺 oncord	2026-07-02 18:32:43 (3 days ago)	Form spam	Web Spam
🇺🇸 oncord	2026-06-30 16:52:10 (5 days ago)	Form spam	Web Spam
🇺🇸 oncord	2026-06-28 05:33:23 (1 week ago)	Form spam	Web Spam
🇦🇺 oncord	2026-06-26 09:26:49 (1 week ago)	Form spam	Web Spam
🇦🇺 oncord	2026-06-24 00:25:44 (1 week ago)	Form spam	Web Spam
🇦🇺 oncord	2026-06-09 12:43:14 (3 weeks ago)	Form spam	Web Spam
🇺🇸 TPI-Abuse	2026-05-16 22:26:24 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 45.145.129.127 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 45.145.129.127 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 16 18:26:18.065219 2026] [security2:error] [pid 12708:tid 12708] [client 45.145.129.127:31143] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Kendall II/Thumbs.db"] [unique_id "agjvCqZuBphOFFCE24-nQAAAABE"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Kendall%20II/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2026-04-17 02:33:02 (2 months ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
🇩🇪 HandyTreff.de	2026-04-16 19:14:29 (2 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -55.26 (Bad < -10 / Very Bad < -20 / ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -55.26 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.214.10 show less	Web App Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-02-16 15:34:57 (4 months ago)	(mod_security) mod_security (id:210350) triggered by 45.145.129.127 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 45.145.129.127 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 16 10:34:53.813272 2026] [security2:error] [pid 28740:tid 28740] [client 45.145.129.127:51527] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|wagsgrooming.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "wagsgrooming.com"] [uri "/"] [unique_id "aZM5HasuMuCPxVji1cW7wQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2025-11-19 19:01:16 (7 months ago)	block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE	Bad Web Bot
🇺🇸 TPI-Abuse	2025-10-06 14:30:22 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 45.145.129.127 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.145.129.127 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 06 10:30:04.398175 2025] [security2:error] [pid 30580:tid 30580] [client 45.145.129.127:36203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.oualierealty.com"] [uri "/v1/.env"] [unique_id "aOPSbFOiLBy_zJMbG_qhngAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-09-23 06:05:43 (9 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇳🇱 exxos	2025-09-21 15:03:01 (9 months ago)	HTTP1.x attacks	DDoS Attack

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 167.94.145.17

🇳🇬 102.88.54.76

🇺🇸 168.62.174.83

🇩🇪 165.232.73.237

🇻🇳 160.22.171.138

🇸🇪 155.4.244.179

🇺🇸 138.197.41.176

🇬🇧 51.195.183.123

🇳🇱 45.148.10.240

🇧🇪 34.156.82.234

🇧🇪 34.77.198.156

🇷🇴 2.57.122.209

🇮🇱 2a05:d025:668:3b00:dbe0:461f:3e3f:e608

🇳🇱 176.65.149.178

🇧🇩 103.118.78.28

🇹🇿 102.69.166.82

🇳🇱 45.148.10.157

🇺🇸 43.153.48.240

🇻🇳 27.2.129.90

🇨🇳 223.85.102.135