JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.148.235.61

45.148.235.61 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 13%: ?

13%

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	finegroupservers.com
Country	🇺🇸 United States of America
City	Newark, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.148.235.61

Whois 45.148.235.61

IP Abuse Reports for 45.148.235.61:

This IP address has been reported a total of 21 times from 16 distinct sources. 45.148.235.61 was first reported on July 12th 2021, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 4server	2026-08-06 23:19:39 (2 weeks ago)	[FriAug0701:19:32.2993272026][security2:error][pid401897:tid401958][client45.148.235.61:0]ModSecurit ... show more [FriAug0701:19:32.2993272026][security2:error][pid401897:tid401958][client45.148.235.61:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\\|wget\\|python\\|nikto\\|sqlmap\\|acunetix\\|fimap\\|dirbuster\\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"www.restaurantgandria.ch\"][uri\"/wp-login.php\"][unique_id\"anUWhDTvlFBTOADh2p_FmAAAAIA\"] show less	Port Scan Brute-Force Web App Attack
🇱🇻 garmtech.com	2026-06-25 06:32:15 (1 month ago)	IM360 WAF: SQL Injection via WordPress Link functionality MV:1" AND AND//10273=(sELeCT//UPPer(XM ... show more IM360 WAF: SQL Injection via WordPress Link functionality MV:1" AND AND//10273=(sELeCT//UPPer(XMLtYpE(chR(60) show less	SQL Injection
🇫🇷 mrcrassi	2026-06-24 18:30:55 (1 month ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/2 (POST method ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/2 (POST method) Endpoint: /wp-login.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇷 masterguru	2026-06-11 01:20:00 (2 months ago)	(modsec_2000110) ModSec 2000110: Malicious username admlnlx from 45.148.235.61 (US/United States/-): ... show more (modsec_2000110) ModSec 2000110: Malicious username admlnlx from 45.148.235.61 (US/United States/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇫🇷 masterguru	2026-06-07 06:39:26 (2 months ago)	(modsec_2000110) ModSec 2000110: Malicious username admlnlx from 45.148.235.61 (US/United States/-): ... show more (modsec_2000110) ModSec 2000110: Malicious username admlnlx from 45.148.235.61 (US/United States/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇫🇷 masterguru	2026-05-30 03:34:35 (2 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 45.148.235.61 (US/United States/-): 1 in the l ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 45.148.235.61 (US/United States/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 masterguru	2026-04-29 19:55:34 (3 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 45.148.235.61 (US/United States/-): 1 in the l ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 45.148.235.61 (US/United States/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇨🇿 ptlab	2026-04-27 16:45:44 (3 months ago)	Detected wp_login attack from WP-host.	Hacking Web App Attack
🇩🇪 big-cloud.nl	2026-04-26 17:49:03 (3 months ago)	Try to access /xmlrpc.php	Web App Attack
🇺🇸 TPI-Abuse	2026-04-12 00:29:19 (4 months ago)	(mod_security) mod_security (id:225170) triggered by 45.148.235.61 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 45.148.235.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 11 20:29:11.311691 2026] [security2:error] [pid 251266:tid 251266] [client 45.148.235.61:36093] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|ampstudio.eu\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ampstudio.eu"] [uri "/wp-json/wp/v2/users"] [unique_id "adrnV6XUqzapHKOr1cE5YAAAAA8"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-04 15:07:35 (4 months ago)	(mod_security) mod_security (id:225170) triggered by 45.148.235.61 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 45.148.235.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 11:07:27.571926 2026] [security2:error] [pid 18230:tid 18230] [client 45.148.235.61:48157] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|gmsdigita.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gmsdigita.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adEpLzWJld0Tt49ibJpk-QAAAAQ"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 ambor	2026-03-28 14:18:00 (4 months ago)	Honeypot access: WordPress admin access attempt. Path: /wp-login.php	Brute-Force Web App Attack
🇮🇹 VHosting	2026-03-26 20:24:48 (4 months ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇩🇪 ps-center	2026-03-03 13:15:02 (5 months ago)	C1: Web Attack GET /wp-login.php	Web Spam Hacking Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-02-22 02:05:05 (6 months ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 172.71.119.58

🇺🇿 84.54.72.95

🇫🇷 2400:cb00:986:1000:ebc5:c705:f9ea:5d16

🇰🇬 212.241.25.159

🇹🇼 198.235.24.121

🇧🇷 187.120.104.197

🇺🇸 172.208.49.78

🇻🇳 171.225.249.44

🇺🇸 170.187.163.133

🇩🇪 144.31.77.169

🇮🇹 87.18.49.157

🇫🇷 85.217.140.47

🇫🇷 85.217.140.4

🇺🇸 66.132.224.83

🇺🇸 44.207.207.230

🇧🇪 35.240.108.129

🇧🇪 35.240.90.85

🇫🇷 2400:cb00:986:1000:b076:1628:5dcd:133c

🇦🇷 200.59.114.120

🇺🇸 172.68.174.214