JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.145.131.154

45.145.131.154 was found in our database!

This IP was reported 31 times. Confidence of Abuse is 23%: ?

23%

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	finegroupservers.com
Country	🇺🇸 United States of America
City	Newark, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.145.131.154

Whois 45.145.131.154

IP Abuse Reports for 45.145.131.154:

This IP address has been reported a total of 31 times from 12 distinct sources. 45.145.131.154 was first reported on December 8th 2021, and the most recent report was 20 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 MAGIC	2026-06-13 01:05:23 (20 hours ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-12 04:32:08 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 45.145.131.154 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 45.145.131.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 00:32:03.751487 2026] [security2:error] [pid 10063:tid 10063] [client 45.145.131.154:44073] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|kirkrmartin.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kirkrmartin.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiuLwyDJyfVoF8Vn8vkw3QAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-10 14:18:08 (3 days ago)	(mod_security) mod_security (id:225170) triggered by 45.145.131.154 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 45.145.131.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 10:18:04.404272 2026] [security2:error] [pid 11641:tid 11641] [client 45.145.131.154:51541] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|controlaltsuccess.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "controlaltsuccess.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ailyHDQi1s_os-eOk-s25gAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Oakley	2026-06-04 05:26:11 (1 week ago)	(mod_security) mod_security (id:900178) triggered by 45.145.131.154 (IL/Israel/-): 5 in the last 900 ... show more (mod_security) mod_security (id:900178) triggered by 45.145.131.154 (IL/Israel/-): 5 in the last 900 secs show less	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-01-09 19:26:43 (5 months ago)	(mod_security) mod_security (id:210350) triggered by 45.145.131.154 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 45.145.131.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 09 14:26:32.715325 2026] [security2:error] [pid 23352:tid 23352] [client 45.145.131.154:47835] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.i-med.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.i-med.com"] [uri "/"] [unique_id "aWFWaFAt9Ci1Vxy8zxlcZAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2025-12-10 22:59:46 (6 months ago)	(modsec_5004) ModSec 5004: Code injection from 45.145.131.154 (US/United States/-): 1 in the last 36 ... show more (modsec_5004) ModSec 5004: Code injection from 45.145.131.154 (US/United States/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇺🇸 TPI-Abuse	2025-09-06 20:17:25 (9 months ago)	(mod_security) mod_security (id:210730) triggered by 45.145.131.154 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 45.145.131.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 06 16:17:18.504563 2025] [security2:error] [pid 4013:tid 4013] [client 45.145.131.154:15405] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Bermuda/Thumbs.db"] [unique_id "aLyWzqu-U2FlrM8q0kBF9gAAACY"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Bermuda/ show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 on-com	2025-05-16 09:55:23 (1 year ago)	URL scan	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-05-06 05:16:32 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 45.145.131.154 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 45.145.131.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 06 01:16:28.330020 2025] [security2:error] [pid 617893:tid 617893] [client 45.145.131.154:48121] [client 45.145.131.154] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Lochmere II Recliner/broughton_saddle/Thumbs.db"] [unique_id "aBmbLOjgjnXtVdnN8SCBnQAAABg"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Lochmere%20II%20Recliner/broughton_saddle/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Anonymous	2025-02-28 16:00:00 (1 year ago)	Brute force attack detected from 45.145.131.154	DDoS Attack Brute-Force Web App Attack
🇺🇸 Anonymous	2025-02-28 16:00:00 (1 year ago)	Brute force attack detected from 45.145.131.154	DDoS Attack Brute-Force Web App Attack
🇺🇸 Anonymous	2025-02-28 16:00:00 (1 year ago)	Brute force attack detected from 45.145.131.154	DDoS Attack Brute-Force Web App Attack
🇺🇸 Anonymous	2025-02-28 16:00:00 (1 year ago)	Brute force attack detected from 45.145.131.154	DDoS Attack Brute-Force Web App Attack
🇦🇺 MAGIC	2024-12-04 05:05:55 (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2024-12-01 08:57:39 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 45.145.131.154 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 45.145.131.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 01 03:57:33.907223 2024] [security2:error] [pid 3733913:tid 3733913] [client 45.145.131.154:45119] [client 45.145.131.154] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Danbury II/Stetson Coffee/originals/Thumbs.db"] [unique_id "Z0wk_SBucUbc5Yyl4eDmngAAAAg"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Danbury%20II/Stetson%20Coffee/originals/ show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 177.92.162.242

🇺🇸 172.235.41.203

🇺🇸 147.185.132.115

🇧🇬 78.128.114.110

🇺🇸 50.116.72.139

🇯🇵 8.216.90.10

🇹🇼 220.134.18.112

🇺🇸 216.25.89.119

🇵🇦 201.218.122.205

🇧🇷 189.51.43.54

🇷🇺 188.113.153.223

🇬🇧 145.241.193.43

🇺🇸 141.164.86.239

🇺🇸 139.180.229.207

🇺🇸 139.180.225.209

🇮🇳 128.185.187.2

🇮🇳 125.20.246.106

🇨🇳 113.116.156.219

🇷🇺 109.63.134.29

🇺🇸 107.150.100.72