JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.159.20.111

45.159.20.111 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 25%: ?

25%

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS35830
Domain Name	finegroupservers.com
Country	🇺🇸 United States of America
City	Newark, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.159.20.111

Whois 45.159.20.111

IP Abuse Reports for 45.159.20.111:

This IP address has been reported a total of 22 times from 11 distinct sources. 45.159.20.111 was first reported on June 20th 2024, and the most recent report was 15 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Lino Project	2026-06-11 15:15:43 (15 hours ago)	45.159.20.111 - - [11/Jun/2026:17:15:42 +0200] "POST /xmlrpc.php HTTP/1.1" 403 3987 "-" "Mozilla/5.0 ... show more 45.159.20.111 - - [11/Jun/2026:17:15:42 +0200] "POST /xmlrpc.php HTTP/1.1" 403 3987 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E)" ... show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-04 08:34:14 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 45.159.20.111 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 45.159.20.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 04:34:07.060977 2026] [security2:error] [pid 13216:tid 13216] [client 45.159.20.111:36085] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.apesetx.com.jbcllcnet.com\|F\|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.apesetx.com.jbcllcnet.com"] [uri "/s3cmd.ini"] [unique_id "aiE4fwZ8AHipSpmpvQmwRgAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-05-23 22:03:00 (2 weeks ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-05-22. show less	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-05-22 22:30:10 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 45.159.20.111 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 45.159.20.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 22 18:30:05.536917 2026] [security2:error] [pid 17133:tid 17133] [client 45.159.20.111:44391] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "supportconvalelementary.com"] [uri "/.env"] [unique_id "ahDY7YxToVNiGDoamLdO4AAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-22 21:18:15 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 45.159.20.111 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 45.159.20.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 22 17:18:11.220414 2026] [security2:error] [pid 11301:tid 11301] [client 45.159.20.111:44347] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vanemby.com"] [uri "/.git/config"] [unique_id "ahDIE1ps96l38GfBkt2VaAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 cmbplf	2026-05-21 23:30:42 (3 weeks ago)	641 requests with url.path .git/	Brute-Force Bad Web Bot
🇩🇪 Packets-Decreaser.NET	2025-12-29 13:06:08 (5 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇨🇿 lp	2025-03-19 13:27:58 (1 year ago)	Unauthorized VPN login attempts: 2 attempts were recorded from 45.159.20.111 2025-03-19T13:07:07+01: ... show more Unauthorized VPN login attempts: 2 attempts were recorded from 45.159.20.111 2025-03-19T13:07:07+01:00 vpn Access-Reject 'flipper1' station: 45.159.20.111 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' 2025-03-19T13:41:33+01:00 vpn Access-Reject 'gooffy' station: 45.159.20.111 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-03-18 17:53:27 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 45.159.20.111 2025-03-18T18:43:57+01: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 45.159.20.111 2025-03-18T18:43:57+01:00 vpn Access-Reject 'Administrator' station: 45.159.20.111 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-03-17 01:25:21 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 45.159.20.111 2025-03-17T01:27:38+01: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 45.159.20.111 2025-03-17T01:27:38+01:00 vpn Access-Reject 'jdb' station: 45.159.20.111 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-03-15 04:23:15 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 45.159.20.111 2025-03-15T03:50:37+01: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 45.159.20.111 2025-03-15T03:50:37+01:00 vpn Access-Reject 'jazz' station: 45.159.20.111 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-03-13 14:53:56 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 45.159.20.111 2025-03-13T15:34:19+01: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 45.159.20.111 2025-03-13T15:34:19+01:00 vpn Access-Reject 'har' station: 45.159.20.111 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇸🇪 OnTheEdge	2025-02-13 17:44:01 (1 year ago)	Password spraying. Multiple unauthorized login attempts	Hacking Web App Attack
🇸🇪 OnTheEdge	2025-02-11 20:44:01 (1 year ago)	Password spraying. Multiple unauthorized login attempts	Hacking Web App Attack
🇸🇪 OnTheEdge	2025-02-04 20:13:13 (1 year ago)	Password spraying. Multiple unauthorized login attempts	Hacking Web App Attack

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.149.196

🇺🇸 107.172.77.182

🇺🇸 65.49.1.28

🇩🇪 213.209.159.56

🇲🇰 188.44.20.32

🇦🇷 181.116.220.140

🇨🇭 179.43.168.58

🇵🇰 153.117.33.95

🇺🇸 149.88.18.25

🇺🇸 149.40.56.18

🇺🇸 104.243.35.45

🇩🇪 69.5.169.232

🇩🇪 69.5.169.189

🇩🇪 46.101.119.195

🇩🇪 43.228.157.152

🇻🇳 14.241.186.116

🇵🇰 223.123.73.58

🇷🇺 213.234.5.66

🇯🇵 210.156.0.132

🇫🇷 146.70.40.70