JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.145.131.229

45.145.131.229 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 0%: ?

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	finegroupservers.com
Country	🇺🇸 United States of America
City	Newark, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.145.131.229

Whois 45.145.131.229

IP Abuse Reports for 45.145.131.229:

This IP address has been reported a total of 23 times from 13 distinct sources. 45.145.131.229 was first reported on December 2nd 2020, and the most recent report was 6 months ago.

Old Reports: The most recent abuse report for this IP address is from 6 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 nowyouknow	2025-12-01 05:27:42 (6 months ago)	(From [email protected]) Hey, Teddy here from Letstok. I came across your store and noticed your ... show more (From [email protected]) Hey, Teddy here from Letstok. I came across your store and noticed your product catalog — really great work. I’d love to offer you a way to instantly turn those product pages into video ads featuring real people. Letstok does it all automatically — just paste your product link and get a ready-to-post video. Try it free today and use SHOPIFY-10 for bonus tokens. https://bit.ly/LetstokAI Start creating a difference now! Whenever you prefer not to get additional emails from this message, kindly fill the form at bit. ly/fillunsubform with your domain address (URL). 4 Argyll Road, Yonkers, CA, USA, 95219 show less	Phishing Web Spam
🇦🇺 oncord	2025-11-28 04:27:17 (6 months ago)	Form spam	Web Spam
🇦🇺 oncord	2025-11-26 09:01:26 (6 months ago)	Form spam	Web Spam
Anonymous	2025-10-09 20:41:04 (8 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 TPI-Abuse	2025-09-14 00:37:40 (9 months ago)	(mod_security) mod_security (id:210350) triggered by 45.145.131.229 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 45.145.131.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 13 20:37:33.841345 2025] [security2:error] [pid 9269:tid 9269] [client 45.145.131.229:63723] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|nathsharmaandcompany.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "nathsharmaandcompany.com"] [uri "/"] [unique_id "aMYOTW__bhN0jZs389MF_gAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-06 20:38:02 (9 months ago)	(mod_security) mod_security (id:210730) triggered by 45.145.131.229 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 45.145.131.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 06 16:37:54.385514 2025] [security2:error] [pid 31940:tid 31940] [client 45.145.131.229:54207] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Cinna 8028/Thumbs.db"] [unique_id "aLybovWrdLfTDdtL7J_6WQAAAAw"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Cinna%208028/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2025-06-21 06:25:05 (11 months ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
🇺🇸 TPI-Abuse	2025-06-21 02:31:47 (11 months ago)	(mod_security) mod_security (id:210730) triggered by 45.145.131.229 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 45.145.131.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 20 22:31:40.834228 2025] [security2:error] [pid 3112174:tid 3112174] [client 45.145.131.229:41743] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Hudson II/Vermont Bark/Loveseat/Thumbs.db"] [unique_id "aFYZjFDIpxL7sbb-56QA5gAAAA4"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Hudson%20II/Vermont%20Bark/Loveseat/ show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 MAGIC	2025-01-14 09:09:11 (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2024-12-07 18:32:41 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 45.145.131.229 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 45.145.131.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 07 13:32:35.171440 2024] [security2:error] [pid 319293:tid 319293] [client 45.145.131.229:18835] [client 45.145.131.229] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|math1on1.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "math1on1.net"] [uri "/wp-json/wp/v2/users"] [unique_id "Z1SUw2keNIekgUPiM-3pawAAABQ"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Jean Valjean	2024-12-03 16:49:35 (1 year ago)	Fail2ban Caboom : wp-login.php Bruteforce	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2024-11-27 04:49:14 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 45.145.131.229 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 45.145.131.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 26 23:49:07.789629 2024] [security2:error] [pid 6500:tid 6500] [client 45.145.131.229:63695] [client 45.145.131.229] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|webjemm.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "webjemm.net"] [uri "/wp-json/wp/v2/users"] [unique_id "Z0akw05AKrnSMHxSydXglgAAAAU"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-10 22:05:42 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 45.145.131.229 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 45.145.131.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 10 17:05:37.114680 2024] [security2:error] [pid 2550059:tid 2550059] [client 45.145.131.229:45777] [client 45.145.131.229] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Hudson II/Vermont Bark/Loveseat/originals/Thumbs.db"] [unique_id "ZzEuMWybWXsmTG6aBMcSZgAAAAI"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Hudson%20II/Vermont%20Bark/Loveseat/originals/ show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 MAGIC	2024-10-31 17:02:45 (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇨🇦 wil.com	2024-09-23 18:28:27 (1 year ago)	GlobalProtect login attempts with user mbarnes.	VPN IP Brute-Force

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 138.0.240.109

🇺🇸 130.51.180.197

🇩🇪 92.204.37.150

🇫🇷 92.51.135.140

🇮🇹 57.131.49.91

🇫🇷 5.39.70.39

🇧🇴 190.181.27.27

🇮🇳 152.52.199.18

🇮🇩 110.35.80.116

🇹🇼 110.25.112.145

🇵🇹 109.50.190.98

🇳🇱 91.92.40.24

🇳🇱 91.92.40.11

🇺🇸 76.12.128.249

🇬🇧 209.38.166.81

🇲🇽 187.216.224.85

🇷🇺 176.120.22.147

🇩🇪 165.22.82.165

🇮🇳 143.110.253.134

🇳🇱 132.243.120.41