JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.159.21.13

45.159.21.13 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 16%: ?

16%

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS46475
Domain Name	finegroupservers.com
Country	🇵🇱 Poland
City	Gdansk, Pomerania

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.159.21.13

Whois 45.159.21.13

IP Abuse Reports for 45.159.21.13:

This IP address has been reported a total of 16 times from 12 distinct sources. 45.159.21.13 was first reported on September 17th 2022, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 FeG Deutschland	2026-07-17 22:03:34 (1 hour ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 18:59:49 (4 hours ago)	(mod_security) mod_security (id:225170) triggered by 45.159.21.13 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 45.159.21.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 14:59:46.109095 2026] [security2:error] [pid 4666:tid 4666] [client 45.159.21.13:56451] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|karturo.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "karturo.com"] [uri "/wp-json/wp/v2/users"] [unique_id "alp7oqqHhgQdjm-mTeUVZQAAABc"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-04 21:18:07 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 45.159.21.13 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 45.159.21.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 17:17:50.478030 2026] [security2:error] [pid 8275:tid 8275] [client 45.159.21.13:38911] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.csm-dtc.com"] [uri "/wp-config.php.old"] [unique_id "aiHrfgZJqwHIVh0OyUcGTgAAACE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-22 01:48:34 (3 months ago)	(mod_security) mod_security (id:225170) triggered by 45.159.21.13 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 45.159.21.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 21 21:48:27.379372 2026] [security2:error] [pid 20714:tid 20714] [client 45.159.21.13:9729] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|mariedjones.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mariedjones.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ab9Ka3yP1HI3DFt7R7C82QAAAAo"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 ambor	2026-03-06 02:28:17 (4 months ago)	Honeypot triggered on tcpdata.com - Attempted to access /wp-login.php (wordpress_login). User-Agent: ... show more Honeypot triggered on tcpdata.com - Attempted to access /wp-login.php (wordpress_login). User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 show less	Web App Attack
🇺🇸 TPI-Abuse	2026-01-22 13:38:41 (5 months ago)	(mod_security) mod_security (id:225170) triggered by 45.159.21.13 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 45.159.21.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 22 08:38:37.180210 2026] [security2:error] [pid 24246:tid 24246] [client 45.159.21.13:50545] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|technesa.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "technesa.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aXIoXYqv4Xi0Ty-8-NF0WwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 stinpriza	2026-01-21 11:11:33 (5 months ago)	Web App Attack	Web App Attack
🇨🇭 backslash	2025-07-15 01:50:06 (1 year ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇨🇿 lp	2025-02-12 01:22:18 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 45.159.21.13 2025-02-12T01:46:39+01:0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 45.159.21.13 2025-02-12T01:46:39+01:00 vpn Access-Reject 'posterotemporal' station: 45.159.21.13 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇷🇺 sms.ru	2024-09-21 20:55:06 (1 year ago)	SMS pumping attack from foreign country	DDoS Attack
🇻🇳 Xuan Can	2023-12-03 05:09:55 (2 years ago)	(mod_security) mod_security (id:6) triggered by 45.159.21.13 (US/United States/-): 1 in the last 360 ... show more (mod_security) mod_security (id:6) triggered by 45.159.21.13 (US/United States/-): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 03 12:09:47.449932 2023] [security2:error] [pid 12176:tid 47515933030144] [client 45.159.21.13:23941] [client 45.159.21.13] ModSecurity: Access denied with connection close (phase 2). Pattern match "wp-login.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "63"] [id "6"] [severity "CRITICAL"] [hostname "kb.pavietnam.vn"] [uri "/wp-login.php"] [unique_id "ZWwNm_MAzKV8bKaOfg6CMAAAAI0"], referer: https://kb.pavietnam.vn/ show less	Brute-Force SSH
🇺🇸 octageeks.com	2023-11-30 05:19:57 (2 years ago)	Wordpress malicious attack:[octa404]	Web App Attack
🇺🇸 octageeks.com	2023-11-28 05:19:12 (2 years ago)	Wordpress malicious attack:[octa404]	Web App Attack
🇳🇱 Roderic	2023-11-18 11:42:09 (2 years ago)	(apache-bow-document) Failed apache-bow-scanners trigger with match [redacted] from 45.159.21.13 (US ... show more (apache-bow-document) Failed apache-bow-scanners trigger with match [redacted] from 45.159.21.13 (US/United States/-) show less	Hacking
Anonymous	2023-01-20 11:23:06 (3 years ago)	Unauthorized VPN login attempt (on R).	VPN IP Hacking Brute-Force

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇴 190.255.139.177

🇩🇿 129.45.84.119

🇱🇹 81.30.98.144

🇺🇸 54.146.38.195

🇳🇱 45.153.34.72

🇺🇸 40.124.186.156

🇧🇩 202.4.115.210

🇨🇳 123.54.215.74

🇨🇳 121.229.25.10

🇭🇰 104.208.110.3

🇺🇸 103.94.185.230

🇸🇪 83.233.147.8

🇧🇬 79.124.62.230

🇷🇺 37.110.113.113

🇺🇸 2602:80d:1008::91

🇰🇷 222.239.251.12

🇹🇳 196.203.63.80

🇫🇮 46.29.26.195

🇱🇹 45.227.254.170

🇺🇸 13.89.125.31