JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.148.234.148

45.148.234.148 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 1%: ?

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	finegroupservers.com
Country	🇺🇸 United States of America
City	New York City, New York

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.148.234.148

Whois 45.148.234.148

IP Abuse Reports for 45.148.234.148:

This IP address has been reported a total of 20 times from 12 distinct sources. 45.148.234.148 was first reported on August 3rd 2021, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 FeG Deutschland	2026-05-18 14:05:38 (1 month ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 25	Exploited Host Web App Attack
🇺🇸 oralunal	2026-04-03 13:58:27 (2 months ago)	IP banned by Fail2Ban in jail ente-suss ente.com-ssl_log mvfnds ...	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-20 00:31:07 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 45.148.234.148 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 45.148.234.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 20:31:01.131337 2026] [security2:error] [pid 24883:tid 24883] [client 45.148.234.148:54381] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|firstunitedreserve.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "firstunitedreserve.com"] [uri "/wp-json/wp/v2/users"] [unique_id "abyVRQ2MDOU9lbrgo6hTVQAAAAQ"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇵🇪 Jaime Sotelo	2026-03-11 16:24:00 (3 months ago)	Wordpress brute force attack	Brute-Force
🇩🇪 kjaerulff	2026-03-11 13:27:01 (3 months ago)	Failed Wordpress login using wp-login.php	Web App Attack
🇮🇳 liveaspankaj	2026-03-07 19:09:36 (3 months ago)	DDoS attack: 94 requests in 5m (GET / or repair.php).	DDoS Attack
🇩🇪 Packets-Decreaser.NET	2025-09-19 22:45:23 (9 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇨🇿 lp	2025-07-03 06:23:08 (11 months ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 45.148.234.148 2025-07-03T06:46:49+02 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 45.148.234.148 2025-07-03T06:46:49+02:00 vpn Access-Reject 'r.williams' station: 45.148.234.148 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-07-02 13:52:25 (11 months ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 45.148.234.148 2025-07-02T15:01:30+02 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 45.148.234.148 2025-07-02T15:01:30+02:00 vpn Access-Reject 'p.rodriguez' station: 45.148.234.148 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-06-28 13:50:23 (11 months ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 45.148.234.148 2025-06-28T15:35:50+02 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 45.148.234.148 2025-06-28T15:35:50+02:00 vpn Access-Reject 'wmi' station: 45.148.234.148 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇺🇸 nowyouknow	2025-06-17 22:47:38 (1 year ago)	(From [email protected]) While your competitors miss calls after hours, what if your business c ... show more (From [email protected]) While your competitors miss calls after hours, what if your business could serve customers and book appointments around the clock? Our voice AI technology does exactly this. You can even forward your current number, 678-363-3444, to the AI agent when you’re not open. I created a complimentary Voice AI demo for your business, all you have to do is click play and pretend to be someone calling your business. Want me to send it over? show less	Phishing Web Spam
🇺🇸 nowyouknow	2025-05-13 20:10:15 (1 year ago)	(From [email protected]) We have partnered with one of the largest public relations firms on the ... show more (From [email protected]) We have partnered with one of the largest public relations firms on the east coast, Kotton Grammer Media, and we're developing a media piece on how chiropractors are using AI to stay competitive. We are looking to conduct a 7-min interview via email/zoom with a few business owners from Port Jefferson Station, and get your feedback & thoughts on our Voice AI technology. In return, your feedback will be used in an upcoming article that will be published - a great way to bring positive attention to your business at no cost. Want more information? Best, Scotlyn Lozano Relationship Manager FromFuture.io show less	Phishing Web Spam
🇺🇸 TPI-Abuse	2025-03-10 14:12:55 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 45.148.234.148 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.148.234.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 10 10:12:48.844510 2025] [security2:error] [pid 29297:tid 29312] [client 45.148.234.148:17587] [client 45.148.234.148] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "myclassactionlawsuit.com.aafm.us"] [uri "/.env"] [unique_id "Z87zYKmCkzdDuUucUd4eAQAAAMw"], referer: https://tasamm.com/about/mmm212.html show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-03-06 00:19:40 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 45.148.234.148 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.148.234.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 05 19:19:35.544064 2025] [security2:error] [pid 14149:tid 14149] [client 45.148.234.148:40869] [client 45.148.234.148] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "intersession.net"] [uri "/.env"] [unique_id "Z8jqF2RFBNOrb6S-t1JetQAAAAY"], referer: https://tasamm.com/about/ggg165.html show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-02-08 19:52:35 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇴 181.234.13.119

🇺🇸 141.11.88.15

🇺🇸 216.25.89.80

🇫🇷 91.231.89.249

🇩🇪 45.135.141.17

🇨🇳 27.24.141.160

🇫🇷 2001:41d0:33d:9200::405

🇻🇪 200.71.154.142

🇺🇸 172.206.224.165

🇻🇳 165.154.105.128

🇩🇪 164.92.161.148

🇭🇰 150.5.131.119

🇺🇸 47.251.253.223

🇬🇧 35.203.211.242

🇬🇧 35.203.211.157

🇪🇨 45.184.226.43

🇨🇦 20.104.244.165

🇨🇳 218.201.148.69

🇸🇬 161.118.239.144

🇨🇳 117.81.212.152