JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.145.129.154

45.145.129.154 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 0%: ?

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	finegroupservers.com
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.145.129.154

Whois 45.145.129.154

IP Abuse Reports for 45.145.129.154:

This IP address has been reported a total of 14 times from 10 distinct sources. 45.145.129.154 was first reported on June 17th 2021, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-04-03 19:48:21 (2 months ago)	(mod_security) mod_security (id:210350) triggered by 45.145.129.154 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 45.145.129.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 15:48:15.166304 2026] [security2:error] [pid 20163:tid 20173] [client 45.145.129.154:63243] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|web123.dnchosting.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "web123.dnchosting.com"] [uri "/"] [unique_id "adAZfzjqJ8hoxfFo5KB-xwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-02 09:40:31 (2 months ago)	(mod_security) mod_security (id:210350) triggered by 45.145.129.154 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 45.145.129.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 02 05:40:27.356771 2026] [security2:error] [pid 12386:tid 12388] [client 45.145.129.154:18677] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|transitionalcareservices.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "transitionalcareservices.com"] [uri "/"] [unique_id "ac45iyH8BQOlFfcfcY5xxAAAAEA"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 IRT@Unisi	2025-11-24 01:04:55 (6 months ago)	Apache: Attempt to access forbidden file or directory.	Bad Web Bot
🇳🇱 WeCloudit-Anti-Abuse	2025-06-21 09:10:07 (11 months ago)	WAF: Block Joomla registration spam 2- wsit	Email Spam Brute-Force
🇳🇱 WeCloudit-Anti-Abuse	2025-06-10 09:30:54 (11 months ago)	WAF: Old style account creation and modification in Joomla! 2- wsit	Email Spam Brute-Force
🇺🇸 webgobe	2025-06-04 09:10:02 (1 year ago)	jow-Joomla User : try to access forms...	Hacking
🇳🇱 WeCloudit-Anti-Abuse	2025-06-03 23:00:27 (1 year ago)	WAF: Old style account creation and modification in Joomla! 2- wsit	Email Spam Brute-Force
🇨🇦 wil.com	2024-09-24 07:19:55 (1 year ago)	GlobalProtect login attempts with user bbello.	VPN IP Brute-Force
🇵🇱 sefinek.net	2024-08-29 14:54:05 (1 year ago)	This IP address has been identified as generating artificial traffic on websites after purchasing a ... show more This IP address has been identified as generating artificial traffic on websites after purchasing a specific service from a Fiverr gig. User-Agent & Referrer: Mozilla/5.0 (iPhone; CPU iPhone OS 16_6 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/122.0.6261.130 Mobile/15E148 Safari/604.1 - en-US - https://www.facebook.com/ show less	Bad Web Bot
🇵🇱 sefinek.net	2024-08-29 14:54:05 (1 year ago)	This IP address has been identified as generating artificial traffic on websites after purchasing a ... show more This IP address has been identified as generating artificial traffic on websites after purchasing a specific service from a Fiverr gig. User-Agent & Referrer: Mozilla/5.0 (iPhone; CPU iPhone OS 16_6 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/122.0.6261.130 Mobile/15E148 Safari/604.1 - en-US - https://www.facebook.com/ show less	Bad Web Bot
Anonymous	2024-08-06 12:11:12 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇨🇦 KIsmay	2024-05-18 05:22:06 (2 years ago)	May 18 01:21:47 www4 WPAudit[3941408]: 45.145.129.154 terratherma.com "Mozilla/5.0 (Windows NT 10.0; ... show more May 18 01:21:47 www4 WPAudit[3941408]: 45.145.129.154 terratherma.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36" admin:Doughnutboy FAIL May 18 01:21:52 www4 WPAudit[3941406]: 45.145.129.154 terratherma.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36" scott:Doughnutboy FAIL May 18 01:21:57 www4 WPAudit[3941408]: 45.145.129.154 terratherma.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36" user:Doughnutboy FAIL May 18 01:22:01 www4 WPAudit[3941408]: 45.145.129.154 terratherma.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36" root:Doughnutboy FAIL May 18 01:22:06 www4 WPAudit[3941406]: 45.145.129.154 terratherma.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome ... show less	Brute-Force Web App Attack
🇳🇱 Savvii	2022-11-18 05:13:49 (3 years ago)	20 attempts against mh-misbehave-ban on pluto	Brute-Force Bad Web Bot Web App Attack
🇯🇵 Nanoniele	2021-06-17 20:54:27 (4 years ago)	2021/06/14 05:17:28; SQL Injection; 3475, dx5N, 9470, 3XHHZYCi ZYCi	SQL Injection

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2607:f8b0:4001:c70::127

🇧🇩 210.4.68.72

🇦🇺 170.64.238.245

🇨🇳 117.72.114.183

🇺🇸 50.150.171.34

🇲🇾 47.250.155.223

🇧🇷 179.48.4.14

🇨🇳 101.76.248.214

🇷🇴 80.94.95.242

🇳🇱 45.148.10.205

🇨🇳 218.10.157.127

🇩🇪 213.209.159.56

🇺🇸 147.185.132.166

🇧🇩 103.174.50.49

🇯🇵 58.98.197.137

🇳🇱 45.148.10.147

🇺🇸 45.33.109.8

🇺🇸 40.121.200.75

🇧🇷 20.195.180.219

🇲🇦 196.117.203.217