JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.145.131.16

45.145.131.16 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 11%: ?

11%

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	finegroupservers.com
Country	🇺🇸 United States of America
City	Newark, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.145.131.16

Whois 45.145.131.16

IP Abuse Reports for 45.145.131.16:

This IP address has been reported a total of 21 times from 13 distinct sources. 45.145.131.16 was first reported on November 30th 2021, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 Oakley	2026-06-05 14:54:40 (6 hours ago)	(mod_security) mod_security (id:900178) triggered by 45.145.131.16 (IL/Israel/-): 5 in the last 900 ... show more (mod_security) mod_security (id:900178) triggered by 45.145.131.16 (IL/Israel/-): 5 in the last 900 secs show less	Web App Attack Hacking
Anonymous	2026-05-06 02:00:10 (4 weeks ago)	Forum/form spam	Web Spam
Anonymous	2026-02-25 11:51:58 (3 months ago)	VPN password spraying	Brute-Force
🇪🇸 el-brujo	2026-01-10 00:14:56 (4 months ago)	Cloudflare WAF: Request Path: /xmlrpc.php Request Query: Host: foro.elhacker.net userAgent: Mozilla ... show more Cloudflare WAF: Request Path: /xmlrpc.php Request Query: Host: foro.elhacker.net userAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_4) AppleWebKit/532.35 (KHTML, like Gecko111) Chrome/93.8 Safari/534.51 Action: managed_challenge Source: firewallManaged ASN Description: PUREVOLTAGE-INC Country: US Method: POST Timestamp: 2026-01-10T00:14:56Z ruleId: 5de7edfa648c4d6891dc3e7f84534ffa. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2026-01-03 01:25:43 (5 months ago)	XML RPC Scan Activities	Brute-Force Web App Attack
🇮🇩 Burayot	2025-12-31 14:55:45 (5 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 45.145.131.16 (IL/Israel/-): 1 in t ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 45.145.131.16 (IL/Israel/-): 1 in the last 3600 secs show less	Web App Attack
🇺🇸 TPI-Abuse	2025-12-20 14:56:12 (5 months ago)	(mod_security) mod_security (id:211700) triggered by 45.145.131.16 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:211700) triggered by 45.145.131.16 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 20 09:55:54.485058 2025] [security2:error] [pid 10533:tid 10533] [client 45.145.131.16:29779] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:[ ()]case ?\\\\(\|\\\\) ?like ?\\\\(\|\\\\bhaving ?[^\\\\s]+ ?[^\\\\w ]\|\\\\bif ?\\\\([\\\\d\\\\w] ?[=<>~])" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/22_SQL_SQLi.conf"] [line "33"] [id "211700"] [rev "8"] [msg "COMODO WAF: Detects conditional SQL injection attempts\|\|www.kountz.org\|F\|2"] [data "Matched Data: having found within MATCHED_VAR: 50AND1GROUPBYCONCAT(0x54396747,(SELECT(ELT(2836=2836,1))),0x78576b72,FLOOR(RAND(0)2))HAVINGMIN(0)"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.kountz.org"] [uri "/showrepo.php"] [unique_id "aUa4-kX-M_UNlijr5wcsiAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-12 00:22:25 (8 months ago)	(mod_security) mod_security (id:210350) triggered by 45.145.131.16 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 45.145.131.16 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 11 20:22:20.076275 2025] [security2:error] [pid 19184:tid 19184] [client 45.145.131.16:34585] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|kirbysheetmetalworks.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "kirbysheetmetalworks.com"] [uri "/"] [unique_id "aMNnvGl8qAZB576J5w3ngAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-02-19 05:03:54 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2025-02-17 05:13:31 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇨🇦 wil.com	2024-09-25 09:23:42 (1 year ago)	GlobalProtect login attempts with user slothammer.	VPN IP Brute-Force
🇩🇪 Admins@FBN	2024-06-05 14:00:35 (2 years ago)	VPN Logon Failed: AAA user authentication Rejected user = <replaced>	Brute-Force Exploited Host
Anonymous	2024-04-07 14:50:47 (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-04-06 14:18:48 (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-04-05 06:59:56 (2 years ago)	Ports: 20,21,25,53,80,110,143,443,465,587,993,995,2077,2078,2079,2080,2082,2083,2086,2087,2095,2096, ... show more Ports: 20,21,25,53,80,110,143,443,465,587,993,995,2077,2078,2079,2080,2082,2083,2086,2087,2095,2096,3306,2195; Direction: 0; Trigger: LF_CUSTOMTRIGGER show less	Brute-Force SSH

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 222.107.156.227

🇨🇦 198.50.197.28

🇲🇩 185.195.185.76

🇧🇷 177.124.88.216

🇳🇱 155.117.6.32

🇨🇳 116.172.248.182

🇮🇹 93.92.79.18

🇺🇸 71.6.233.219

🇪🇸 46.6.124.216

🇨🇳 42.49.46.173

🇩🇪 213.209.159.56

🇮🇶 169.224.88.119

🇭🇰 168.76.131.178

🇫🇮 147.185.133.238

🇫🇮 147.185.133.34

🇳🇱 142.93.235.3

🇸🇬 103.187.146.90

🇻🇳 103.1.210.25

🇰🇬 92.62.74.41

🇺🇸 68.161.201.16