JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

45.235.229.111

Activity Trending Down

Abuse Confidence Score

53% Elevated

72 reports

28 reporters · latest 1 week ago

ISP: UNE COMUNICACIONES SRL
Usage Type: Fixed Line ISP
ASN: AS266798
Domain Name: une.do
Country: 🇩🇴 Dominican Republic
City: Constanza, La Vega

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

72 from 28 distinct reporters

First reported

April 25th 2026

Most recent report

1 week ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 16 🇩🇪 Germany 3 🇳🇱 Netherlands 2

Most common categories Port Scan 15 Bad Web Bot 9 Hacking 8 Web App Attack 4 Brute-Force 4

Old reports The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇸 Smel	2026-11-06 03:53:12 UTC · (1 week ago)	SQL/MH Probe, Scan, Hack -	Port Scan Hacking SQL Injection
🇺🇸 RAP	2026-11-03 02:20:44 UTC · (1 week ago)	2026-11-03 02:20:44 UTC Unauthorized activity to TCP port 1433. SQL	Port Scan
🇺🇸 RAP	2026-11-02 21:21:20 UTC · (1 week ago)	2026-11-02 21:21:20 UTC Unauthorized activity to TCP port 1433. SQL	Port Scan
🇺🇸 TPI-Abuse	2026-11-02 07:18:48 UTC · (1 week ago)	(mod_security) mod_security (id:210350) triggered by 45.235.229.111 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 02:18:41.511267 2026] [security2:error] [pid 28432:tid 28432] [client 45.235.229.111:16962] ... show more (mod_security) mod_security (id:210350) triggered by 45.235.229.111 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 02:18:41.511267 2026] [security2:error] [pid 28432:tid 28432] [client 45.235.229.111:16962] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|crockett.ws\|F\|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "crockett.ws"] [uri "/"] [unique_id "aug5Ua9K6wYpUM1CPqSoOAAAAA4"], referer: https://addurl.in/redirect.php?ref_host=nyapassat.nu show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-11-01 13:27:32 UTC · (1 week ago)	WEB attack	Brute-Force
🇳🇱 EGP Abuse Dept	2026-11-01 10:40:41 UTC · (1 week ago)	Unsolicited connection to port 445	Port Scan Hacking
🇺🇸 TPI-Abuse	2026-10-24 05:03:22 UTC · (3 weeks ago)	(mod_security) mod_security (id:225170) triggered by 45.235.229.111 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 01:03:15.831891 2026] [security2:error] [pid 11779:tid 11779] [client 45.235.229.111:64256] ... show more (mod_security) mod_security (id:225170) triggered by 45.235.229.111 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 01:03:15.831891 2026] [security2:error] [pid 11779:tid 11779] [client 45.235.229.111:64256] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|matt-bechtel.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "matt-bechtel.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atw8E6b57cWNRWJaB0FKpQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-23 16:14:28 UTC · (3 weeks ago)	(mod_security) mod_security (id:210350) triggered by 45.235.229.111 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 12:14:20.854961 2026] [security2:error] [pid 19631:tid 19725] [client 45.235.229.111:44036] ... show more (mod_security) mod_security (id:210350) triggered by 45.235.229.111 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 12:14:20.854961 2026] [security2:error] [pid 19631:tid 19725] [client 45.235.229.111:44036] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|super-8mm.net\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "super-8mm.net"] [uri "/"] [unique_id "atuH3PCqo8H7WfG4AEmyEQAAAUM"], referer: https://whatmydadleftbehind.blogspot.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Tsumugi Kotobuki	2026-10-19 17:19:33 UTC · (3 weeks ago)	Port Scan on Honeypot \| Ports: 445/SMB \| Proto: TCP(1) \| Flags: all SYN \| TTL: 239 \| Len: 40B \| Win: 1024(1) \| F2B/ufw-honeypot@2026-10-19T17:19:32Z	Port Scan Hacking
🇺🇸 RAP	2026-10-18 12:17:15 UTC · (3 weeks ago)	2026-10-18 12:17:15 UTC Unauthorized activity to TCP port 1433. SQL	Port Scan
🇺🇸 RAP	2026-10-18 00:06:18 UTC · (3 weeks ago)	2026-10-18 00:06:18 UTC Unauthorized activity to TCP port 445. SMB	Port Scan
🇺🇸 xmission.com	2026-10-17 13:50:17 UTC · (4 weeks ago)	Blocked by UFW (TCP on 1433) Source port: 64693 TTL: 242 Packet length: 40 TOS: 0x08 This report (for 45.235.229.111) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇺🇸 cwytech	2026-10-16 20:24:10 UTC · (4 weeks ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/wordpress-login-lockdown-high.	Bad Web Bot Web App Attack
Anonymous	2026-10-12 19:39:10 UTC · (1 month ago)	Unauthorized connection to SMB port 445	Port Scan
🇺🇸 RAP	2026-10-10 03:20:03 UTC · (1 month ago)	2026-10-10 03:20:03 UTC Unauthorized activity to TCP port 445. SMB	Port Scan

Showing 1 to 15 of 72 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇮🇹 151.67.158.240

🇺🇸 136.115.133.141

🇺🇸 130.248.137.3

🇳🇱 130.49.10.43

🇷🇴 92.118.39.56

🇺🇸 174.68.43.123

🇺🇸 172.56.99.116

🇮🇳 152.32.156.138

🇺🇸 147.185.132.252

🇺🇸 141.157.207.129

🇺🇸 104.218.193.197

🇺🇸 98.238.139.105

🇺🇸 75.191.68.98

🇺🇸 73.66.234.95

🇺🇸 72.197.228.217

🇺🇸 54.225.81.20

🇺🇸 32.218.21.186

🇹🇼 198.235.24.76

🇺🇸 174.173.146.57

🇺🇸 174.105.25.10