JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.159.22.30

45.159.22.30 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 4%: ?

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS59651
Domain Name	finegroupservers.com
Country	🇸🇪 Sweden
City	Marsta, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.159.22.30

Whois 45.159.22.30

IP Abuse Reports for 45.159.22.30:

This IP address has been reported a total of 20 times from 13 distinct sources. 45.159.22.30 was first reported on May 28th 2021, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 librebit	2026-06-15 05:43:18 (2 days ago)	Brute force	Brute-Force
🇺🇸 TPI-Abuse	2026-04-11 22:22:36 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 45.159.22.30 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 45.159.22.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 11 18:22:30.920148 2026] [security2:error] [pid 3345459:tid 3345459] [client 45.159.22.30:62255] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|henrietteg.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "henrietteg.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adrJprXcpm5K5387BIH2CwAAAAk"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 WeekendWeb	2026-04-11 14:07:25 (2 months ago)	Wordpress Vunerability attack	Web App Attack
🇫🇮 Shaik Sai Meera	2026-04-04 15:25:33 (2 months ago)	IM360 WAF: LDAP Injection Attack	FTP Brute-Force Port Scan SSH
🇫🇷 masterguru	2026-03-05 05:33:37 (3 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 45.159.22.30 (LV/Latvia/-): 1 in the last 3600 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 45.159.22.30 (LV/Latvia/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇫🇷 masterguru	2026-03-05 05:10:19 (3 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 45.159.22.30 (LV/Latvia/-): 1 in the last 3600 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 45.159.22.30 (LV/Latvia/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 masterguru	2026-03-05 03:59:46 (3 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 45.159.22.30 (LV/Latvia/-): 1 in the last 3600 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 45.159.22.30 (LV/Latvia/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇫🇷 masterguru	2026-02-21 10:44:45 (3 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 45.159.22.30 (LV/Latvia/-): 1 in the last 3600 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 45.159.22.30 (LV/Latvia/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇺🇸 TPI-Abuse	2025-12-26 07:18:46 (5 months ago)	(mod_security) mod_security (id:225170) triggered by 45.159.22.30 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 45.159.22.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 26 02:18:40.807040 2025] [security2:error] [pid 21668:tid 21668] [client 45.159.22.30:26365] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|method1.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "method1.net"] [uri "/wp-json/wp/v2/users/"] [unique_id "aU420Hpr9pd2J53kqhGtOQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 Burayot	2025-12-25 16:23:47 (5 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 45.159.22.30 (US/United States/-): ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 45.159.22.30 (US/United States/-): 1 in the last 3600 secs show less	Web App Attack
Anonymous	2025-12-25 16:10:11 (5 months ago)	Attempted WordPress login: 45.159.22.30 - - [25/Dec/2025:16:10:11 +0000] "GET /wp-login.php HTTP/1. ... show more Attempted WordPress login: 45.159.22.30 - - [25/Dec/2025:16:10:11 +0000] "GET /wp-login.php HTTP/1.1" 200 234 "http://[sub domain]/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0" show less	Hacking Web App Attack
🇳🇿 Tripwire	2025-12-13 22:01:10 (6 months ago)	Scanning for exploits - /phpmyadmin/	Web App Attack
🇳🇿 Tripwire	2025-03-07 15:54:02 (1 year ago)	Wordpress login attempts	Brute-Force Web App Attack
🇨🇿 lp	2024-11-23 02:52:36 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 45.159.22.30 2024-11-23T02:47:15+01:0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 45.159.22.30 2024-11-23T02:47:15+01:00 vpn Access-Reject 'hongbaoshiyulecheng' station: 45.159.22.30 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2024-11-22 01:26:32 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 45.159.22.30 2024-11-22T01:33:40+01:0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 45.159.22.30 2024-11-22T01:33:40+01:00 vpn Access-Reject '676' station: 45.159.22.30 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇬 196.0.120.6

🇨🇳 192.140.175.185

🇺🇸 192.34.56.169

🇧🇷 177.38.182.70

🇷🇴 141.98.83.240

🇨🇳 49.232.138.49

🇹🇷 46.1.133.244

🇺🇸 38.76.73.6

🇺🇸 35.243.238.28

🇮🇩 34.128.77.56

🇺🇸 2600:1002:b17a:f2af:0:52:36bf:3101

🇨🇳 114.139.184.162

🇨🇳 113.239.60.147

🇺🇸 107.150.101.57

🇰🇷 39.115.195.164

🇩🇪 23.88.23.149

🇳🇱 193.176.31.242

🇳🇱 185.242.226.33

🇺🇸 162.216.149.19

🇮🇹 79.47.2.57