JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.147.234.165

45.147.234.165 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 16%: ?

16%

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	finegroupservers.com
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.147.234.165

Whois 45.147.234.165

IP Abuse Reports for 45.147.234.165:

This IP address has been reported a total of 13 times from 8 distinct sources. 45.147.234.165 was first reported on October 15th 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-05-20 13:36:38 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 45.147.234.165 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.147.234.165 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 09:36:33.543566 2026] [security2:error] [pid 12566:tid 12566] [client 45.147.234.165:25877] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.grannyswash.kunzteam.com"] [uri "/wp-config.php.dist"] [unique_id "ag244dbquElpBSy3jt6g9gAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-20 12:48:35 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 45.147.234.165 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.147.234.165 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 08:48:27.687446 2026] [security2:error] [pid 22101:tid 22101] [client 45.147.234.165:31271] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.bak" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.iconbizpromo.com"] [uri "/wp-config.bak"] [unique_id "ag2tmy8R9ZifmOrlhggcLAAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-20 03:48:58 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 45.147.234.165 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.147.234.165 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 19 23:48:51.712204 2026] [security2:error] [pid 26342:tid 26342] [client 45.147.234.165:59373] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.txt" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dynamic-therapy-mn.com"] [uri "/wp-config.txt"] [unique_id "ag0vI5bUar0i7TZX92AOuAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-05-17 11:45:58 (3 weeks ago)	Multiple WAF Violations	Web App Attack
🇺🇸 octageeks.com	2026-05-06 04:08:11 (1 month ago)	Wordpress malicious attack:[octaxmlrpc]	Web App Attack
Anonymous	2026-01-31 14:41:10 (4 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.31 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.31 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 ANTI SCANNER	2026-01-22 12:50:10 (4 months ago)	Scanner : /wp-login.php	Web Spam
🇺🇸 Psycho Solutions LLC	2026-01-14 22:48:43 (4 months ago)	Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-json/wp/v2/users - User A ... show more Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-json/wp/v2/users - User Agent: N/A - Timestamp: 1/14/2026 10:48 pm (UTC-6) show less	Web Spam Hacking Bad Web Bot Web App Attack
🇨🇿 lp	2025-12-05 13:22:25 (6 months ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 45.147.234.165 2025-12-05T05:09:27+01 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 45.147.234.165 2025-12-05T05:09:27+01:00 vpn Access-Reject 'veeam' station: 45.147.234.165 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-12-01 17:52:01 (6 months ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 45.147.234.165 2025-12-01T18:37:25+01 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 45.147.234.165 2025-12-01T18:37:25+01:00 vpn Access-Reject 'pa_admin' station: 45.147.234.165 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
Anonymous	2025-11-30 17:25:34 (6 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.30 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.30 is noted in report timestamp show less	Hacking Brute-Force
🇨🇭 backslash	2025-11-19 14:01:22 (6 months ago)	block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE	Bad Web Bot
🇺🇸 TPI-Abuse	2025-10-15 08:29:20 (7 months ago)	(mod_security) mod_security (id:210350) triggered by 45.147.234.165 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 45.147.234.165 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 15 04:29:14.887578 2025] [security2:error] [pid 11532:tid 11532] [client 45.147.234.165:31321] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|salsberggroup.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "salsberggroup.com"] [uri "/"] [unique_id "aO9bWnSJbKBQwVxNE4FB-AAAABI"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 175.118.127.138

🇨🇳 121.4.20.64

🇳🇱 89.21.67.152

🇵🇭 49.145.10.58

🇳🇱 45.148.10.141

🇩🇴 38.156.235.204

🇧🇪 34.77.173.210

🇨🇭 34.65.172.232

🇧🇪 34.62.110.125

🇧🇪 34.38.164.152

🇵🇪 201.230.121.219

🇧🇷 200.175.61.207

🇸🇪 185.246.130.20

🇿🇦 102.129.53.240

🇷🇴 85.186.244.106

🇩🇪 34.185.137.115

🇬🇧 34.153.170.225

🇮🇩 34.101.224.155

🇯🇵 34.84.116.139

🇳🇱 34.32.181.181