JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.147.232.56

45.147.232.56 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 0%: ?

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	finegroupservers.com
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.147.232.56

Whois 45.147.232.56

IP Abuse Reports for 45.147.232.56:

This IP address has been reported a total of 12 times from 6 distinct sources. 45.147.232.56 was first reported on September 7th 2025, and the most recent report was 4 months ago.

Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-01-21 18:01:12 (4 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.21 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.21 is noted in report timestamp show less	Hacking Brute-Force
🇱🇻 garmtech.com	2026-01-01 11:15:51 (5 months ago)	IM360 WAF: Attempt to upload malware	Hacking
Anonymous	2025-12-25 16:20:07 (5 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.12.25 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.12.25 is noted in report timestamp show less	Hacking Brute-Force
🇫🇷 masterguru	2025-12-23 10:59:30 (5 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 45.147.232.56 (US/United States/-): 1 in the l ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 45.147.232.56 (US/United States/-): 1 in the last 3600 secs (0-193) show less	Hacking
Anonymous	2025-12-17 22:38:16 (5 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.12.17 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.12.17 is noted in report timestamp show less	Hacking Brute-Force
🇱🇻 garmtech.com	2025-12-02 10:42:02 (6 months ago)	IM360 WAF: Attempt to upload malware	Hacking
🇱🇻 garmtech.com	2025-11-24 23:24:50 (6 months ago)	IM360 WAF: Attempt to upload malware	Hacking
🇺🇸 TPI-Abuse	2025-11-07 02:15:10 (6 months ago)	(mod_security) mod_security (id:225170) triggered by 45.147.232.56 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 45.147.232.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 06 21:15:03.398746 2025] [security2:error] [pid 32154:tid 32154] [client 45.147.232.56:52545] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|bernsteinip.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bernsteinip.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aQ1WJ7Wyl5ux-kdWtejWeAAAAAc"], referer: https://bernsteinip.com/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Penny Packer	2025-10-20 16:05:48 (7 months ago)	Fail2Ban apache-tripwires	Web App Attack
🇺🇸 TPI-Abuse	2025-10-16 18:11:53 (7 months ago)	(mod_security) mod_security (id:210350) triggered by 45.147.232.56 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 45.147.232.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 16 14:11:49.671040 2025] [security2:error] [pid 8738:tid 8738] [client 45.147.232.56:9421] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.paragonprintingcenter.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paragonprintingcenter.com"] [uri "/help-center/terms-conditions/"] [unique_id "aPE1ZQZ3R5EOGpF6AX-UPAAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 fbarela	2025-10-11 21:00:15 (7 months ago)	FortiGate SSL VPN login failures.	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-09-07 05:12:34 (8 months ago)	(mod_security) mod_security (id:210350) triggered by 45.147.232.56 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 45.147.232.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 07 01:12:27.698829 2025] [security2:error] [pid 2929:tid 2929] [client 45.147.232.56:55909] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|surrenderhouse.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "surrenderhouse.com"] [uri "/about.html"] [unique_id "aL0UO-_d5Rwt-E34roPBRQAAABo"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.217

🇺🇸 142.93.64.197

🇳🇱 45.148.10.141

🇺🇸 5.78.205.169

🇬🇧 193.32.209.243

🇺🇸 184.72.0.240

🇷🇺 178.176.229.202

🇩🇪 172.217.33.220

🇮🇳 139.59.59.165

🇺🇸 100.29.192.37

🇧🇷 45.161.165.241

🇨🇦 3.98.164.173

🇨🇳 223.166.28.151

🇬🇧 188.240.59.21

🇧🇷 186.233.118.22

🇬🇧 143.58.202.60

🇨🇳 116.178.130.73

🇨🇳 112.46.213.104

🇮🇩 108.137.8.107

🇸🇬 97.74.87.152