JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.159.23.38

45.159.23.38 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 0%: ?

ISP	Atlas Network Holdings LLC
Usage Type	Fixed Line ISP
ASN	AS213954
Domain Name	atlasnetworkholdings.online
Country	🇫🇮 Finland
City	Helsinki, Uusimaa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.159.23.38

Whois 45.159.23.38

IP Abuse Reports for 45.159.23.38:

This IP address has been reported a total of 22 times from 13 distinct sources. 45.159.23.38 was first reported on October 2nd 2021, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 John Chrys.	2026-03-30 10:06:51 (2 months ago)	45.159.23.38 - - [30/Mar/2026:13:06:42 +0300] "POST /xmlrpc.php HTTP/1.1" 403 3448 "-" "curl/7.88.1" ... show more 45.159.23.38 - - [30/Mar/2026:13:06:42 +0300] "POST /xmlrpc.php HTTP/1.1" 403 3448 "-" "curl/7.88.1" 45.159.23.38 - - [30/Mar/2026:13:06:43 +0300] "POST /xmlrpc.php HTTP/1.1" 403 3448 "-" "curl/7.88.1" 45.159.23.38 - - [30/Mar/2026:13:06:43 +0300] "POST /xmlrpc.php HTTP/1.1" 403 3448 "-" "Wget/1.21.4" 45.159.23.38 - - [30/Mar/2026:13:06:43 +0300] "POST /xmlrpc.php HTTP/1.1" 403 3448 "-" "Wget/1.21.4" 45.159.23.38 - - [30/Mar/2026:13:06:43 +0300] "POST /xmlrpc.php HTTP/1.1" 403 3448 "-" "curl/8.6.0" 45.159.23.38 - - [30/Mar/2026:13:06:44 +0300] "POST /xmlrpc.php HTTP/1.1" 403 3448 "-" "curl/8.6.0" ... show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-10-08 03:24:49 (7 months ago)	(mod_security) mod_security (id:210350) triggered by 45.159.23.38 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 45.159.23.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 07 23:24:42.427352 2025] [security2:error] [pid 30589:tid 30589] [client 45.159.23.38:35389] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.rochesterhistorical.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.rochesterhistorical.org"] [uri "/"] [unique_id "aOXZemiqJb3Bz1GTAxoqpwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-08-22 12:09:13 (9 months ago)	(mod_security) mod_security (id:210730) triggered by 45.159.23.38 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 45.159.23.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 22 08:09:06.605265 2025] [security2:error] [pid 3335:tid 3335] [client 45.159.23.38:59419] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.auditleverage.com\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.auditleverage.com"] [uri "/Download/mike/HijackThis8-5-05.log"] [unique_id "aKhd4mKa5xTLrxO-Y8fwogAAAAc"], referer: https://www.experts-exchange.com/questions/21447354/CPU-usage-jumps-to-100-and-stays-there.html show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2025-06-19 21:45:05 (11 months ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
🇺🇸 TPI-Abuse	2025-05-06 05:29:40 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 45.159.23.38 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 45.159.23.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 06 01:29:35.045380 2025] [security2:error] [pid 630937:tid 630937] [client 45.159.23.38:28963] [client 45.159.23.38] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Hudson II/Vermont Bark/Loveseat/originals/Thumbs.db"] [unique_id "aBmeP3DixYYjbenZau5z0QAAABM"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Hudson%20II/Vermont%20Bark/Loveseat/originals/ show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 sefinek.net	2025-01-31 23:08:27 (1 year ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE ASN: 26548 (PUREV ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE ASN: 26548 (PUREVOLTAGE-INC) Protocol: HTTP/1.1 (GET method) Endpoint: / Timestamp: 2025-01-31T23:04:03Z Ray ID: 90ad56ac4ac2c392 UA: Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:114.0) Gecko/20100101 Firefox/114.0 Report generated by Cloudflare-WAF-To-AbuseIPDB: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇸🇬 oncord	2024-11-01 14:47:25 (1 year ago)	Form spam	Web Spam
🇸🇬 oncord	2024-10-30 18:15:31 (1 year ago)	Form spam	Web Spam
🇸🇬 oncord	2024-10-26 17:56:27 (1 year ago)	Form spam	Web Spam
🇺🇸 nowyouknow	2024-10-22 12:21:21 (1 year ago)	(From [email protected]) Tired of your website being slow or being unavailable now and then? ... show more (From [email protected]) Tired of your website being slow or being unavailable now and then? Switch to Cloudways Autonomous... Easy, Powerful, Reliable & Autoscaling WordPress Hosting! Get a hosting solution with zero configurations, one-click management, and no downtime. Simply host your site and focus on growing your business, while Autonomous takes care of everything! - No Hands Needed - Automatically Scales - Remain Highly Available - Try Free With A $100 Credit Tap into the potential of your site today: https://bit.ly/wayscloud You can unsubscribe by filling the form: https://bit.ly/remove-url 1504 Eden Drive, Southlake , TX, US show less	Phishing Web Spam
🇺🇸 nowyouknow	2024-10-22 02:53:18 (1 year ago)	(From [email protected]) Fed up of your website being sluggish and/or being unavailable from ti ... show more (From [email protected]) Fed up of your website being sluggish and/or being unavailable from time to time? Switch to Cloudways Autonomous... Easy, Robust, Reliable & Scalable WordPress Hosting! Get a hosting solution with no setup needed, single-click control, and constant uptime. Host your site and focus on growing your venture, while Autonomous does the rest! - No Hands Needed - Automatically Scales - Always Available - Get Started with a $100 Credit Unleash the potential of your website today: https://bit.ly/wayscloud You can unsubscribe by filling this form: https://bit.ly/remove-url 1260 James Street, Gatesville , Texas, USA show less	Phishing Web Spam
🇺🇸 nowyouknow	2024-10-21 17:21:08 (1 year ago)	(From [email protected]) Tired of your site being unresponsive and experiencing downtime now ... show more (From [email protected]) Tired of your site being unresponsive and experiencing downtime now and then? Check out Cloudways Autonomous... Easy, Robust, Dependable & Autoscaling WordPress Hosting! Get a hosting solution with no setup needed, single-click control, and no downtime. Host your website and concentrate on growing your business, while Autonomous does the rest! - Go Hands-off - Truly Autoscale - Remain Highly Available - Get Started with a $100 Credit Tap into the capabilities of your website today: https://bit.ly/wayscloud You can unsubscribe by filling this form: https://bit.ly/remove-url Via Carlo Alberto 138, Waxahachie , Texas, US show less	Phishing Web Spam
Anonymous	2024-09-10 12:54:04 (1 year ago)	Malicious activity detected	Hacking Web App Attack
🇦🇺 MAGIC	2024-08-16 14:05:46 (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 ChamberofCommerce.com	2024-08-13 19:49:52 (1 year ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226 show less	Bad Web Bot

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 220.167.224.133

🇭🇰 199.45.154.186

🇭🇰 123.58.213.128

🇮🇩 103.166.10.244

🇻🇳 103.42.57.146

🇺🇸 64.94.159.231

🇪🇬 38.54.59.87

🇬🇧 206.189.23.246

🇲🇿 197.249.46.152

🇰🇪 197.248.15.98

🇺🇸 195.184.76.122

🇨🇳 115.190.165.143

🇮🇩 115.85.80.12

🇳🇱 85.121.55.219

🇸🇬 47.128.33.174

🇩🇪 43.228.157.10

🇯🇵 160.251.182.78

🇨🇳 117.50.119.132

🇳🇱 91.92.243.216

🇫🇮 86.38.238.75