JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.145.131.143

45.145.131.143 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 0%: ?

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	finegroupservers.com
Country	🇺🇸 United States of America
City	Newark, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.145.131.143

Whois 45.145.131.143

IP Abuse Reports for 45.145.131.143:

This IP address has been reported a total of 24 times from 11 distinct sources. 45.145.131.143 was first reported on March 21st 2021, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-04-30 04:59:54 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 45.145.131.143 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 45.145.131.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 00:59:46.231991 2026] [security2:error] [pid 10589:tid 10589] [client 45.145.131.143:52895] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|sigridsnaturalfoods.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sigridsnaturalfoods.com"] [uri "/wp-json/wp/v2/users"] [unique_id "afLhwtJCwqd2YIgSJffaqQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-29 01:27:18 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 45.145.131.143 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 45.145.131.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 28 21:27:14.789593 2026] [security2:error] [pid 10728:tid 10728] [client 45.145.131.143:16763] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|nihlabs.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "nihlabs.org"] [uri "/wp-json/wp/v2/users"] [unique_id "afFecvLYsly_2DKe9azyHAAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-21 16:45:07 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 45.145.131.143 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 45.145.131.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 21 12:44:59.132973 2026] [security2:error] [pid 1495474:tid 1495474] [client 45.145.131.143:49213] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|evolute.io\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "evolute.io"] [uri "/wp-json/wp/v2/users"] [unique_id "aeepi9AN7J-G2nryU6wiKgAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-06 19:59:32 (3 months ago)	(mod_security) mod_security (id:210350) triggered by 45.145.131.143 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 45.145.131.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 06 14:59:28.647922 2026] [security2:error] [pid 10479:tid 10479] [client 45.145.131.143:14209] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|jolankagroup.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jolankagroup.com"] [uri "/"] [unique_id "aasyICJKDFwjKavn2TobPwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-06 14:42:27 (3 months ago)	(mod_security) mod_security (id:210350) triggered by 45.145.131.143 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 45.145.131.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 06 09:42:22.877243 2026] [security2:error] [pid 11988:tid 11988] [client 45.145.131.143:56593] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|gonzalez.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gonzalez.com"] [uri "/"] [unique_id "aarnzpXI9gNFrNn2R1CWbAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-12-29 14:02:23 (5 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇮🇩 BPS-StatisticsIndonesia	2025-12-25 20:09:40 (5 months ago)	WP Login Scan Activities	Web App Attack
🇦🇺 MAGIC	2025-05-06 10:08:21 (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 oncord	2025-03-19 10:20:15 (1 year ago)	Form spam	Web Spam
🇺🇸 nowyouknow	2025-03-19 05:34:43 (1 year ago)	(From [email protected]) We have a large amount of BTC in cold storage and we are part of a ... show more (From [email protected]) We have a large amount of BTC in cold storage and we are part of a group of participants that got awarded contract opportunities on the USA Government Bitcoin Reserve. Visit this link to follow where current legislation is tracking https://bitcoinreservemonitor.com We're looking for investors to assist us in operations execute our part of the agreement. We've got a limited amount BTC that we purchased years ago. . .thus, the claim slots are scarce. Claims are in units of 100 USD or 1000 USD. Your first stake remains for 10 days , after which your return is $200 or $2000 - withdraw at any time and for any amount later on. You have the option to reinvest your earnings every ten days for as long as three months. Act now, because we are eliminating all taxes advisory fees while absorbing taxes and charges on our end. Contact us to get started. Nate +1 (602) 551-6607 Text and WhatsApp [email protected] Unger Cleaning Products \| Cleaning Tools for Professio show less	Phishing Web Spam
🇺🇸 nowyouknow	2025-03-19 04:51:58 (1 year ago)	(From [email protected]) We have a large amount of Bitcoin kept in offline storage and w ... show more (From [email protected]) We have a large amount of Bitcoin kept in offline storage and we are part of a group of participants who were granted government-backed deals through the United States Government Bitcoin Reserve. Go to this page to see where current legislation is tracking https://bitcoinreservemonitor.com We require participants to help us in execution fulfill our part of the agreement. We have only a small supply of Bitcoin bought several years earlier. . .thus, the claim slots are scarce. Stake sizes are available in $100 or $1,000. The first claim stays for 10 days , after which your return is $200 or $2000 - withdraw at any time and whatever sum you prefer beyond that. You have the option to continue growing your earnings every ten days for as long as three months. Act now, as we are waiving any associated fees and taxes and covering taxes and fees for you. Reach out to us to start. Nate +1 (602) 551-6607 Text and WhatsApp [email protected] Unger Cleaning Pro show less	Phishing Web Spam
🇫🇮 JimArchon72	2025-03-04 07:20:02 (1 year ago)	2025/03/04 07:19:08 "GET /wp-login.php HTTP/2.0"	Web App Attack
Anonymous	2025-02-16 05:41:21 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 nowyouknow	2025-01-01 06:52:41 (1 year ago)	(From [email protected]) Hi friend, i want to ask u if u need loan , i can give u up to 100k w ... show more (From [email protected]) Hi friend, i want to ask u if u need loan , i can give u up to 100k without any questions, fees start from 2%. u can take for long and short term, if u need please contact me My Whatsapp: +353877761357 My phone: +17852122012 My email: [email protected] show less	Phishing Web Spam
🇺🇸 nowyouknow	2024-12-31 06:42:48 (1 year ago)	(From [email protected]) Hi, I need your help with a problem I've got. I messed up with a youn ... show more (From [email protected]) Hi, I need your help with a problem I've got. I messed up with a young girl and now she's upset with me. I know I was in the wrong and I want to fix it. Can you help me figure out what to do? I'm willing to pay for your time and expertise. Please call me as soon as you can. My Whatsapp: +353877761357 My phone: +17852122012 My email: [email protected] Thanks, Angus show less	Phishing Web Spam

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 218.78.60.105

🇬🇧 213.166.84.35

🇪🇬 196.130.151.10

🇬🇧 188.240.59.16

🇳🇱 176.65.148.2

🇩🇪 172.71.164.40

🇰🇷 118.37.214.187

🇨🇳 116.178.129.190

🇮🇳 104.23.216.230

🇷🇴 80.94.95.116

🇷🇴 80.94.95.115

🇺🇸 66.249.79.35

🇺🇸 66.228.62.150

🇳🇱 62.164.177.223

🇧🇷 45.179.116.187

🇷🇴 2.57.121.112

🇳🇱 185.156.73.233

🇺🇸 167.172.221.229

🇮🇩 103.220.23.235

🇺🇸 70.120.203.193