JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.145.131.200

45.145.131.200 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 3%: ?

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	finegroupservers.com
Country	🇺🇸 United States of America
City	Newark, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.145.131.200

Whois 45.145.131.200

IP Abuse Reports for 45.145.131.200:

This IP address has been reported a total of 21 times from 15 distinct sources. 45.145.131.200 was first reported on November 24th 2021, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 Oakley	2026-07-19 23:27:52 (3 days ago)	(mod_security) mod_security (id:900178) triggered by 45.145.131.200 (IL/Israel/-): 5 in the last 900 ... show more (mod_security) mod_security (id:900178) triggered by 45.145.131.200 (IL/Israel/-): 5 in the last 900 secs show less	Web App Attack Hacking
🇫🇷 cityhunter_rhone	2026-05-22 12:06:08 (2 months ago)	Fail2Ban offender in jail [recidive] — 1 total attempts — tracked by mercurius-guide.com security sy ... show more Fail2Ban offender in jail [recidive] — 1 total attempts — tracked by mercurius-guide.com security system. show less	SSH Brute-Force
🇺🇸 TPI-Abuse	2026-05-22 10:35:30 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 45.145.131.200 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.145.131.200 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 22 06:35:24.034592 2026] [security2:error] [pid 21706:tid 21706] [client 45.145.131.200:40447] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "salernospizza.com"] [uri "/wp-config.php.dist"] [unique_id "ahAxbIIlpY1LtMuMGti3ZgAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nyt	2026-05-21 18:47:44 (2 months ago)	WP Config Probe	Web App Attack
🇺🇸 TPI-Abuse	2026-05-20 20:12:07 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 45.145.131.200 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.145.131.200 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 16:12:02.654975 2026] [security2:error] [pid 557:tid 557] [client 45.145.131.200:17867] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "indiahouseportland.com"] [uri "/wp-config.php~"] [unique_id "ag4VkiQwIlFfIFWsG5df9gAAAB8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 NicoID	2026-05-02 00:10:00 (2 months ago)	45.145.131.200 - - [01/May/2026:00:30:18 -0600] "POST /wp-login.php HTTP/1.1" 200 5830 "-" "Mozilla/ ... show more 45.145.131.200 - - [01/May/2026:00:30:18 -0600] "POST /wp-login.php HTTP/1.1" 200 5830 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Brute-Force
🇺🇸 nationaleventpros.com	2026-05-01 03:05:18 (2 months ago)	vulnerability scan	Web App Attack
🇫🇷 masterguru	2026-04-17 11:25:23 (3 months ago)	Too much 404 requests in 1 minute. Operator GE matched 10 at IP:block_script. (46020-201)	Hacking
🇺🇸 antlac1	2026-04-15 10:39:50 (3 months ago)	crowdsecurity/http-probing	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-03-13 00:48:24 (4 months ago)	(mod_security) mod_security (id:210350) triggered by 45.145.131.200 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 45.145.131.200 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 12 20:48:16.412622 2026] [security2:error] [pid 8091:tid 8093] [client 45.145.131.200:55921] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.rpiusa.net\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.rpiusa.net"] [uri "/index2/about-rpi/company-history"] [unique_id "abNe0P8narZxUibkoDbxcwAAAEA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-10 06:50:38 (4 months ago)	(mod_security) mod_security (id:210350) triggered by 45.145.131.200 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 45.145.131.200 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 10 02:50:32.807799 2026] [security2:error] [pid 28178:tid 28178] [client 45.145.131.200:54143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|rame-int.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "rame-int.com"] [uri "/certification-services"] [unique_id "aa-_OBbSIR3zXKTTy156ZAAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2025-06-27 10:50:09 (1 year ago)	WAF: Block Joomla registration spam 2- wsit	Email Spam Brute-Force
🇳🇱 WeCloudit-Anti-Abuse	2025-06-03 10:20:15 (1 year ago)	WAF: Old style account creation and modification in Joomla! 2- wsit	Email Spam Brute-Force
🇷🇺 OK	2025-05-12 13:19:02 (1 year ago)	HTTP/HTTPS	Hacking Web App Attack
Anonymous	2025-01-18 11:20:14 (1 year ago)	sql injection	Web App Attack

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 218.13.26.42

🇳🇱 213.152.161.138

🇩🇪 207.154.200.241

🇵🇱 176.53.159.197

🇮🇹 147.45.51.138

🇨🇳 120.48.150.146

🇹🇼 103.144.32.85

🇱🇹 77.90.185.20

🇩🇪 64.225.103.194

🇧🇷 45.205.1.244

🇺🇸 45.156.129.136

🇬🇧 31.14.254.65

🇩🇪 213.209.159.227

🇩🇪 147.90.209.119

🇩🇴 45.172.152.74

🇺🇸 2607:f8b0:4003:c26::12b

🇧🇷 189.15.35.221

🇺🇸 173.239.211.222

🇭🇰 152.32.172.177

🇨🇳 118.196.105.204