JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.148.126.155

45.148.126.155 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 22%: ?

22%

ISP	TrafficTransitSolution LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS35830
Domain Name	traffictransitsolution.us
Country	🇺🇸 United States of America
City	Newark, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.148.126.155

Whois 45.148.126.155

IP Abuse Reports for 45.148.126.155:

This IP address has been reported a total of 15 times from 7 distinct sources. 45.148.126.155 was first reported on March 19th 2022, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-21 17:57:35 (7 hours ago)	(mod_security) mod_security (id:225170) triggered by 45.148.126.155 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 45.148.126.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 13:57:29.097190 2026] [security2:error] [pid 29820:tid 29820] [client 45.148.126.155:64603] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|calvarycavaliers.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "calvarycavaliers.org"] [uri "/wp-json/wp/v2/users"] [unique_id "al-zCduJ85A0ZHtMo2cD_gAAAAs"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 DRI	2026-07-19 07:46:12 (2 days ago)	Web attack/Malicious activity detected	Web App Attack
🇩🇪 netclix.gr	2026-07-15 13:49:36 (6 days ago)	(wordpress) Failed wordpress login from 45.148.126.155 (RU/Russia/-): (CF_ENABLE)	Brute-Force
🇺🇸 TPI-Abuse	2026-07-12 08:47:13 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 45.148.126.155 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 45.148.126.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 12 04:47:09.978789 2026] [security2:error] [pid 10746:tid 10746] [client 45.148.126.155:23879] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|iconconstructors.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "iconconstructors.com"] [uri "/wp-json/wp/v2/users"] [unique_id "alNUjQPw8KsK6qdBGEJBZwAAAAA"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇨🇿 lp	2026-03-09 07:39:55 (4 months ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 45.148.126.155 2026-03-09T07:54:15+01 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 45.148.126.155 2026-03-09T07:54:15+01:00 vpn Access-Reject 'jeter' station: 45.148.126.155 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2026-03-05 10:41:12 (4 months ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 45.148.126.155 2026-03-05T11:32:33+01 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 45.148.126.155 2026-03-05T11:32:33+01:00 vpn Access-Reject 'bluewater' station: 45.148.126.155 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2026-03-04 13:27:50 (4 months ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 45.148.126.155 2026-03-04T14:18:38+01 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 45.148.126.155 2026-03-04T14:18:38+01:00 vpn Access-Reject 'dara' station: 45.148.126.155 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2026-02-25 17:55:53 (4 months ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 45.148.126.155 2026-02-25T17:58:46+01 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 45.148.126.155 2026-02-25T17:58:46+01:00 vpn Access-Reject 'shu' station: 45.148.126.155 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-09-25 04:45:12 (9 months ago)	(mod_security) mod_security (id:225170) triggered by 45.148.126.155 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 45.148.126.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 25 00:45:03.505137 2025] [security2:error] [pid 18396:tid 18396] [client 45.148.126.155:36853] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|pattenden.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "pattenden.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aNTIz5iMHNfM7L8kFgGKuAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-22 09:27:22 (9 months ago)	(mod_security) mod_security (id:225170) triggered by 45.148.126.155 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 45.148.126.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 22 05:27:14.473619 2025] [security2:error] [pid 15789:tid 15789] [client 45.148.126.155:22977] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|velvetculture.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "velvetculture.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aNEWcsToq7VVNu12QCOfOgAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇿 lp	2025-02-16 08:49:58 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 45.148.126.155 2025-02-16T08:57:01+01 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 45.148.126.155 2025-02-16T08:57:01+01:00 vpn Access-Reject 'carlos' station: 45.148.126.155 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇸🇪 OnTheEdge	2025-02-16 05:20:58 (1 year ago)	Password spraying. Multiple unauthorized login attempts	Hacking Web App Attack
🇺🇸 TPI-Abuse	2025-02-08 14:45:05 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 45.148.126.155 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.148.126.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 08 09:45:01.515385 2025] [security2:error] [pid 11373:tid 11373] [client 45.148.126.155:27375] [client 45.148.126.155] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agingworkforcenews.neathridge.com"] [uri "/.env"] [unique_id "Z6dt7aAH8ZT4-Q27ZiUCtAAAAAs"], referer: https://a00028.tiiny.site/ show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-07-16 08:53:18 (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2022-03-19 22:30:00 (4 years ago)	Password Spary Attack	Brute-Force Exploited Host

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2a09:bac1:76e0:460::5e:6f

🇬🇧 194.50.235.142

🇮🇩 103.178.175.124

🇸🇬 43.128.111.31

🇹🇿 41.93.82.201

🇬🇧 35.203.211.240

🇯🇵 8.216.15.11

🇳🇱 217.60.195.219

🇧🇷 205.210.31.208

🇺🇸 205.210.31.43

🇧🇪 198.235.24.232

🇲🇽 189.204.230.91

🇹🇭 171.100.121.127

🇺🇸 163.47.134.124

🇨🇦 144.217.135.148

🇲🇾 115.134.9.77

🇺🇸 104.229.252.225

🇮🇳 103.224.245.7

🇭🇰 101.36.108.191

🇷🇺 95.108.213.205