JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.159.20.74

45.159.20.74 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 8%: ?

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS35830
Domain Name	finegroupservers.com
Country	🇺🇸 United States of America
City	Newark, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.159.20.74

Whois 45.159.20.74

IP Abuse Reports for 45.159.20.74:

This IP address has been reported a total of 17 times from 10 distinct sources. 45.159.20.74 was first reported on November 1st 2023, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 kosada.com	2026-06-11 13:24:30 (4 weeks ago)	Web password guessing	Brute-Force
🇺🇸 kosada.com	2026-05-30 14:39:21 (1 month ago)	Web password guessing	Brute-Force
🇺🇸 TPI-Abuse	2026-05-24 13:45:23 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 45.159.20.74 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 45.159.20.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 24 09:45:17.550352 2026] [security2:error] [pid 24918:tid 24918] [client 45.159.20.74:13697] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|eandgenergy.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "eandgenergy.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahMA7WifNjXkVEZ1ds0rKQAAAAM"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-21 10:24:17 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 45.159.20.74 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 45.159.20.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 21 06:24:10.739091 2026] [security2:error] [pid 23476:tid 23476] [client 45.159.20.74:27929] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|dwightbrown.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dwightbrown.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ag7dSqN3gwMkMSMzxzVxswAAABI"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-25 17:04:06 (3 months ago)	(mod_security) mod_security (id:225170) triggered by 45.159.20.74 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 45.159.20.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 25 13:04:01.870734 2026] [security2:error] [pid 22026:tid 22026] [client 45.159.20.74:12091] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|jmgrigg.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jmgrigg.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acQVgdMmOrcU65YatYZrHwAAAAo"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-04 13:06:26 (4 months ago)	(mod_security) mod_security (id:225170) triggered by 45.159.20.74 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 45.159.20.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 04 08:06:20.860381 2026] [security2:error] [pid 14401:tid 14401] [client 45.159.20.74:24189] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|alan-ip.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "alan-ip.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aaguTIDNGanwHJ1HSf4XswAAAAA"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-02-12 17:50:40 (4 months ago)	wordpress-trap	Web App Attack
🇨🇦 Mediashaker	2024-12-26 12:36:34 (1 year ago)	(smtpauth) Failed SMTP AUTH login from 45.159.20.74 (US/United States/-)	Brute-Force
Anonymous	2024-12-23 16:54:57 (1 year ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2024.12.23 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2024.12.23 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 DeadEye	2024-12-23 12:45:00 (1 year ago)	SMTP - Unauthorized brute force login attempted.	Hacking Brute-Force
Anonymous	2024-12-21 08:50:46 (1 year ago)	Attempted brute force login to web vpn	Hacking Brute-Force
Anonymous	2024-12-19 14:59:10 (1 year ago)	Attempted brute force login to web vpn	Hacking Brute-Force
Anonymous	2024-12-17 23:26:03 (1 year ago)	Attempted brute force login to web vpn	Hacking Brute-Force
Anonymous	2024-12-10 13:49:00 (1 year ago)	VPN unauthorized logon attempt	VPN IP Hacking
🇹🇼 nansen su	2024-08-13 16:38:01 (1 year ago)	Firewall Web Interface Login fail: remip="45.159.20.74" user=admin	Brute-Force Exploited Host

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 185.213.175.171

🇳🇱 204.76.203.15

🇺🇸 172.174.244.235

🇺🇸 155.103.69.40

🇨🇳 123.145.0.3

🇪🇬 41.33.161.161

🇺🇸 2607:f8b0:4023:100d::129

🇪🇨 200.50.234.211

🇲🇽 187.191.2.214

🇨🇳 180.102.110.142

🇧🇷 164.152.250.192

🇺🇸 161.35.178.199

🇫🇷 75.119.134.54

🇺🇸 34.219.99.94

🇲🇾 195.86.192.66

🇮🇩 182.8.130.168

🇵🇱 176.53.159.198

🇺🇸 162.216.149.250

🇳🇱 45.148.10.152

🇷🇴 13.143.252.19