JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.159.21.56

45.159.21.56 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 18%: ?

18%

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS46475
Domain Name	finegroupservers.com
Country	🇺🇸 United States of America
City	Newark, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.159.21.56

Whois 45.159.21.56

IP Abuse Reports for 45.159.21.56:

This IP address has been reported a total of 24 times from 12 distinct sources. 45.159.21.56 was first reported on November 1st 2023, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-22 17:08:31 (2 days ago)	(mod_security) mod_security (id:225170) triggered by 45.159.21.56 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 45.159.21.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 13:08:22.332681 2026] [security2:error] [pid 2524943:tid 2524943] [client 45.159.21.56:42691] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|ccoxes.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ccoxes.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amD5Bg9N5UhzPM7PtYwEvwAAADs"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Oakley	2026-07-01 12:37:34 (3 weeks ago)	(confirmed_bot_sig) Confirmed bot	Hacking
🇫🇷 Tilellit.PRO	2026-06-29 16:47:44 (3 weeks ago)	Fail2Ban banned 45.159.21.56 for security violations in jail wp-armour. Log: 2026/06/29 16:47:43 [er ... show more Fail2Ban banned 45.159.21.56 for security violations in jail wp-armour. Log: 2026/06/29 16:47:43 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 45.159.21.56 \| Target: wplogin" , client: 45.159.21.56, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
🇫🇷 Tilellit.PRO	2026-06-28 08:56:47 (3 weeks ago)	Fail2Ban banned 45.159.21.56 for security violations in jail wp-armour. Log: 2026/06/28 08:56:46 [er ... show more Fail2Ban banned 45.159.21.56 for security violations in jail wp-armour. Log: 2026/06/28 08:56:46 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 45.159.21.56 \| Target: wplogin" , client: 45.159.21.56, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
🇫🇷 Tilellit.PRO	2026-06-27 06:17:00 (4 weeks ago)	Fail2Ban banned 45.159.21.56 for security violations in jail wp-armour. Log: 2026/06/27 06:16:59 [er ... show more Fail2Ban banned 45.159.21.56 for security violations in jail wp-armour. Log: 2026/06/27 06:16:59 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 45.159.21.56 \| Target: wplogin" , client: 45.159.21.56, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
🇩🇪 kjaerulff	2026-03-02 19:01:32 (4 months ago)	Failed Wordpress login using wp-login.php	Web App Attack
Anonymous	2026-01-21 06:58:12 (6 months ago)	wordpress-trap	Web App Attack
🇨🇿 lp	2025-10-30 08:53:05 (8 months ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 45.159.21.56 2025-10-30T08:44:37+01:0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 45.159.21.56 2025-10-30T08:44:37+01:00 vpn Access-Reject 'naeem' station: 45.159.21.56 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-10-27 16:21:39 (8 months ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 45.159.21.56 2025-10-27T17:04:14+01:0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 45.159.21.56 2025-10-27T17:04:14+01:00 vpn Access-Reject 'mym' station: 45.159.21.56 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-10-25 18:20:48 (8 months ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 45.159.21.56 2025-10-25T19:58:49+02:0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 45.159.21.56 2025-10-25T19:58:49+02:00 vpn Access-Reject 'cisco' station: 45.159.21.56 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-10-24 19:50:15 (9 months ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 45.159.21.56 2025-10-24T20:50:47+02:0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 45.159.21.56 2025-10-24T20:50:47+02:00 vpn Access-Reject 'admin' station: 45.159.21.56 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-10-21 19:51:59 (9 months ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 45.159.21.56 2025-10-21T21:20:48+02:0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 45.159.21.56 2025-10-21T21:20:48+02:00 vpn Access-Reject 'colston' station: 45.159.21.56 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-10-20 13:51:21 (9 months ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 45.159.21.56 2025-10-20T15:26:20+02:0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 45.159.21.56 2025-10-20T15:26:20+02:00 vpn Access-Reject 'administrator' station: 45.159.21.56 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-10-19 19:51:00 (9 months ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 45.159.21.56 2025-10-19T20:43:51+02:0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 45.159.21.56 2025-10-19T20:43:51+02:00 vpn Access-Reject 'admin' station: 45.159.21.56 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-10-14 19:52:37 (9 months ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 45.159.21.56 2025-10-14T21:26:41+02:0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 45.159.21.56 2025-10-14T21:26:41+02:00 vpn Access-Reject 'cisco' station: 45.159.21.56 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 192.161.49.2

🇧🇷 177.7.30.146

🇮🇱 147.235.223.127

🇨🇳 115.190.165.165

🇺🇸 104.238.38.140

🇨🇳 60.173.105.206

🇸🇬 43.156.115.211

🇬🇧 35.203.210.128

🇷🇺 213.177.100.74

🇬🇧 157.245.38.70

🇸🇳 154.125.3.204

🇫🇮 147.185.133.59

🇺🇸 135.233.97.43

🇨🇳 116.204.16.43

🇨🇳 115.190.117.228

🇧🇩 103.240.4.72

🇳🇱 45.148.10.183

🇮🇶 185.158.20.4

🇻🇳 171.241.63.62

🇩🇪 167.94.146.32