JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.159.21.241

45.159.21.241 was found in our database!

This IP was reported 50 times. Confidence of Abuse is 19%: ?

19%

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS59651
Domain Name	finegroupservers.com
Country	🇵🇱 Poland
City	Lublin, Lublin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.159.21.241

Whois 45.159.21.241

IP Abuse Reports for 45.159.21.241:

This IP address has been reported a total of 50 times from 23 distinct sources. 45.159.21.241 was first reported on December 8th 2020, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 Burayot	2026-05-30 00:28:44 (6 days ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 45.159.21.241 (US/United States/-): ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 45.159.21.241 (US/United States/-): 1 in the last 3600 secs show less	Web App Attack
🇺🇸 TPI-Abuse	2026-05-26 08:19:04 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 45.159.21.241 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 45.159.21.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 26 04:18:57.862554 2026] [security2:error] [pid 31315:tid 31315] [client 45.159.21.241:64989] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|tapiaqualityproducts.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "tapiaqualityproducts.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahVXceKG-meV_NpXlfZRmgAAABI"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 interbiznw.com	2026-05-16 02:37:11 (2 weeks ago)	wordpress-bruteforce	Hacking Brute-Force Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-05-13 19:22:32 (3 weeks ago)	(mod_security) mod_security (id:211030) triggered by 45.159.21.241 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:211030) triggered by 45.159.21.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 13 15:22:24.859970 2026] [security2:error] [pid 10102:tid 10102] [client 45.159.21.241:64259] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at ARGS. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "17"] [id "211030"] [rev "3"] [msg "COMODO WAF: LDAP Injection Attack\|\|www.genesis-castle.com\|F\|2"] [data "Matched Data: (%'%~%'%\|%\|%( found within ARGS: 0"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.genesis-castle.com"] [uri "/gallery/index.php"] [unique_id "agTPcMEuFd94aAJphnIE3AAAACI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-25 11:23:11 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 45.159.21.241 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 45.159.21.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 25 07:23:06.124038 2026] [security2:error] [pid 5368:tid 5368] [client 45.159.21.241:64965] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|ruizpuche.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ruizpuche.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acPFmno-7_b7EjvEib364gAAABs"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-23 10:01:30 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 45.159.21.241 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 45.159.21.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 23 06:01:24.256428 2026] [security2:error] [pid 26122:tid 26122] [client 45.159.21.241:25195] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|heinsohn.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "heinsohn.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acEPdIzD2UVS1el1ISPHwwAAAAE"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 myagent.site	2026-03-21 10:16:00 (2 months ago)	Blocking for trying to access an exploit file: /xmlrpc.php	Hacking
🇩🇪 stinpriza	2026-03-20 05:22:17 (2 months ago)	Web App Attack	Web App Attack
🇺🇸 myagent.site	2026-03-19 02:13:03 (2 months ago)	Blocking for trying to access an exploit file: /xmlrpc.php	Hacking
🇩🇪 LRob.fr	2026-03-17 09:45:10 (2 months ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇺🇸 myagent.site	2026-03-17 09:11:05 (2 months ago)	Blocking for trying to access an exploit file: /xmlrpc.php	Hacking
🇨🇿 lp	2026-03-10 07:41:06 (2 months ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 45.159.21.241 2026-03-10T07:05:11+01: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 45.159.21.241 2026-03-10T07:05:11+01:00 vpn Access-Reject 'sean21' station: 45.159.21.241 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2026-02-25 17:55:49 (3 months ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 45.159.21.241 2026-02-25T17:57:57+01: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 45.159.21.241 2026-02-25T17:57:57+01:00 vpn Access-Reject 'randy' station: 45.159.21.241 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇦 SSH-Admin	2026-02-07 17:12:28 (3 months ago)	Probing for Exploits	Exploited Host Web App Attack
🇫🇷 masterguru	2026-01-26 12:58:37 (4 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 45.159.21.241 (EE/Estonia/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 45.159.21.241 (EE/Estonia/-): 1 in the last 3600 secs (0-195) show less	Hacking

Showing 1 to 15 of 50 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 85.121.127.146

🇵🇹 81.193.216.17

🇧🇷 189.45.207.103

🇳🇱 185.100.232.75

🇺🇸 164.90.151.212

🇭🇺 148.135.241.66

🇺🇸 147.185.132.90

🇳🇵 110.34.30.122

🇸🇬 104.28.163.234

🇧🇷 45.205.1.5

🇺🇸 24.144.84.83

🇧🇷 189.110.191.46

🇧🇷 189.84.223.33

🇵🇭 180.191.169.33

🇳🇱 45.148.10.141

🇵🇰 202.163.76.184

🇪🇪 196.196.253.20

🇬🇧 35.203.210.254

🇰🇷 222.108.147.76

🇺🇸 195.184.76.23