JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

45.148.233.189

Recent Activity

Abuse confidence score ?

22% Elevated

27 reports

17 reporters · latest 5 days ago

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	finegroupservers.com
Country	🇺🇸 United States of America
City	New York City, New York

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 45.148.233.189

Export CSV

This IP address has been reported a total of 27 times from 17 distinct sources. 45.148.233.189 was first reported on February 12th 2021, and the most recent report was 5 days ago. In the last 60 days, the top reporter locations were: Switzerland with 1 report; Germany with 1 report; Spain with 1 report. The most common categories in these recent reports were: Web App Attack 3 times; Hacking 2 times; Brute-Force 1 time; SQL Injection 1 time; Bad Web Bot 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 PlexLads	2026-10-08 05:18:48 (5 days ago)	45.148.233.189 - - [07/Oct/2026:22:18:44 -0700] "POST /?rest_route=/batch/v1 HTTP/1.1" 403 12579 "-" ... show more 45.148.233.189 - - [07/Oct/2026:22:18:44 -0700] "POST /?rest_route=/batch/v1 HTTP/1.1" 403 12579 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.6 Safari/605.1.15" 45.148.233.189 - - [07/Oct/2026:22:18:44 -0700] "POST /?rest_route=/batch/v1 HTTP/1.1" 403 12579 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.6 Safari/605.1.15" 45.148.233.189 - - [07/Oct/2026:22:18:46 -0700] "POST /wp-json/batch/v1 HTTP/1.1" 403 12579 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.6 Safari/605.1.15" 45.148.233.189 - - [07/Oct/2026:22:18:46 -0700] "POST /wp-json/batch/v1 HTTP/1.1" 403 12579 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.6 Safari/605.1.15" 45.148.233.189 - - [07/Oct/2026:22:18:47 -0700] "POST /?rest_route=/batch/v1 HTTP/1.1" 403 12579 "-" "Mozilla/5.0 (Macintosh; ... show less	Hacking Web App Attack
🇪🇸 librebit	2026-09-14 12:57:21 (4 weeks ago)	Brute force	Brute-Force
🇩🇪 LRob	2026-09-13 23:36:13 (4 weeks ago)	Malicious web request: probing for secrets, traversal or a known exploit path \| method: POST \| path: ... show more Malicious web request: probing for secrets, traversal or a known exploit path \| method: POST \| path: /xmlrpc.php \| ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0 \| 2026-09-13 23:36 UTC show less	Hacking Web App Attack
🇺🇦 URAN Publishing Service	2026-09-03 05:51:33 (1 month ago)	[03/Sep/2026:08:51:33 +0300] -- 45.148.233.189 Ban reason: User-Agent curl/	Bad Web Bot Web App Attack
🇨🇭 backslash	2026-09-01 13:21:00 (1 month ago)	block ruleset AA06B7315BA6AEB6421B52F0B32E14B509FD5FF0	SQL Injection
🇪🇸 librebit	2026-07-31 02:20:52 (2 months ago)	Brute force	Brute-Force
🇩🇪 FeG Deutschland	2026-07-28 18:38:19 (2 months ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
Anonymous	2026-05-27 10:11:30 (4 months ago)	SQL injection, multiple attempts.	SQL Injection
🇺🇸 TPI-Abuse	2026-05-22 01:14:13 (4 months ago)	(mod_security) mod_security (id:225170) triggered by 45.148.233.189 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 45.148.233.189 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 21 21:14:06.387032 2026] [security2:error] [pid 662:tid 662] [client 45.148.233.189:63089] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|wilcoxlawllc.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "wilcoxlawllc.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ag-t3g6RlmC043NOt7m5ZgAAAAw"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-21 05:20:33 (4 months ago)	(mod_security) mod_security (id:225170) triggered by 45.148.233.189 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 45.148.233.189 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 21 01:20:29.766058 2026] [security2:error] [pid 18444:tid 18444] [client 45.148.233.189:49885] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|wildcomaui.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "wildcomaui.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ag6WHQ7_XTraBKje9UcggwAAABg"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 octageeks.com	2026-05-18 04:08:48 (4 months ago)	Wordpress malicious attack:[octaxmlrpc]	Web App Attack
🇱🇻 garmtech.com	2026-05-15 22:01:59 (4 months ago)	IM360 WAF: SQL Injection via WordPress Link functionality MV:7')AnD//7581=DbMS_UTilITy.SQLid_tO_SQ ... show more IM360 WAF: SQL Injection via WordPress Link functionality MV:7')AnD//7581=DbMS_UTilITy.SQLid_tO_SQlHASH(CHr(126) show less	SQL Injection
🇧🇪 voormedia	2026-05-15 17:27:35 (4 months ago)	Accessed trap at '/xmlrpc.php'	Web App Attack
🇮🇹 VHosting	2026-02-20 21:30:10 (7 months ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇹🇷 cagatayakinci.com	2025-11-24 01:52:01 (10 months ago)	Web App Attack was Blocked. IP has been banned for 1 day Pazartesi, 24 Kasım 2025 04:52 ÖÖ	Web App Attack

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 213.199.45.174

🇬🇧 198.244.226.61

🇿🇦 185.132.186.11

🇺🇸 174.163.24.44

🇨🇳 112.102.168.195

🇨🇳 106.12.240.38

🇪🇸 104.22.136.84

🇫🇷 91.231.89.32

🇺🇸 69.42.211.50

🇺🇸 50.117.36.96

🇳🇱 45.148.10.152

🇵🇱 45.138.12.14

🇺🇸 34.29.140.96

🇧🇷 189.57.204.50

🇺🇸 162.216.150.136

🇸🇬 143.198.196.84

🇮🇳 103.179.197.248

🇬🇧 200.138.46.102

🇨🇿 195.113.133.194

🇺🇸 172.110.223.173