JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.145.131.230

45.145.131.230 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 9%: ?

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	finegroupservers.com
Country	🇺🇸 United States of America
City	Newark, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.145.131.230

Whois 45.145.131.230

IP Abuse Reports for 45.145.131.230:

This IP address has been reported a total of 24 times from 14 distinct sources. 45.145.131.230 was first reported on August 13th 2021, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 ghostwarriors	2026-05-12 10:21:05 (3 weeks ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-05-06 14:25:10 (1 month ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-05-05 20:53:54 (1 month ago)	Forum/form spam	Web Spam
🇦🇺 Anytech	2026-04-02 00:44:31 (2 months ago)	Blocked by Conn-Monitor: Automated bot activity	Bad Web Bot Web App Attack
Anonymous	2026-04-01 17:13:24 (2 months ago)	Forum/form spam	Web Spam
🇺🇸 webgobe	2026-03-25 15:40:17 (2 months ago)	jow-Joomla User : try to access forms...	Hacking
🇺🇸 TPI-Abuse	2026-03-03 00:59:02 (3 months ago)	(mod_security) mod_security (id:210350) triggered by 45.145.131.230 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 45.145.131.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 02 19:58:55.851744 2026] [security2:error] [pid 26219:tid 26219] [client 45.145.131.230:57597] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|slampools.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "slampools.com"] [uri "/"] [unique_id "aaYyTxwcoVh-WgYgxC9FuwAAABA"], referer: https://www.facebook.com/ show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-02-23 18:23:36 (3 months ago)	Forum/form spam	Web Spam
🇺🇸 webgobe	2025-12-24 21:05:48 (5 months ago)	jow-Joomla User : try to access forms...	Hacking
Anonymous	2025-12-07 03:40:52 (6 months ago)	multiple unauthorized attempts at Thu, 04 Dec 2025 07:52:34 +0000 a total of 2 times.	Brute-Force
🇺🇸 TPI-Abuse	2025-10-24 11:28:16 (7 months ago)	(mod_security) mod_security (id:225170) triggered by 45.145.131.230 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 45.145.131.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 24 07:28:12.711278 2025] [security2:error] [pid 29661:tid 29661] [client 45.145.131.230:60359] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|jolankagroup.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jolankagroup.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aPtizPW3K1yJTR8qpQVD8AAAABE"], referer: https://jolankagroup.com/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-10-15 22:04:01 (7 months ago)	multiple unauthorized attempts at Tue, 14 Oct 2025 23:32:46 +0000 a total of 1 times.	Brute-Force
🇳🇱 WeCloudit-Anti-Abuse	2025-10-10 15:40:51 (7 months ago)	WAF: Old style account creation and modification in Joomla! 2- wsit	Email Spam Brute-Force
🇺🇸 TPI-Abuse	2025-08-27 11:09:43 (9 months ago)	(mod_security) mod_security (id:210831) triggered by 45.145.131.230 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 45.145.131.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 27 07:09:36.084154 2025] [security2:error] [pid 23490:tid 23490] [client 45.145.131.230:53007] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|backstore.com\|F\|4"] [data "a href="] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "backstore.com"] [uri "/usage_202508.html"] [unique_id "aK7ncJZN7dnV8KV2ocVn_gAAAB8"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-08-21 22:38:18 (9 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 187.230.115.212

🇭🇰 123.58.212.28

🇮🇩 116.193.190.130

🇮🇳 103.123.53.88

🇷🇴 80.94.92.186

🇩🇪 69.5.169.49

🇧🇪 34.76.251.152

🇦🇪 5.194.223.179

🇷🇴 2.57.121.25

🇮🇳 2404:7c80:6f:b8d9:7183:369:9931:f78c

🇵🇱 2001:41d0:602:34af::1

🇺🇿 213.230.86.244

🇹🇼 128.14.226.125

🇹🇷 95.15.225.120

🇳🇱 89.190.156.8

🇷🇴 80.94.92.171

🇭🇰 34.92.59.134

🇰🇷 221.161.235.168

🇯🇵 219.102.104.142

🇧🇪 198.235.24.213