JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.66.208.174

45.66.208.174 was found in our database!

This IP was reported 35 times. Confidence of Abuse is 1%: ?

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	finegroupservers.com
Country	🇺🇸 United States of America
City	Newark, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.66.208.174

Whois 45.66.208.174

IP Abuse Reports for 45.66.208.174:

This IP address has been reported a total of 35 times from 20 distinct sources. 45.66.208.174 was first reported on May 28th 2021, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 ph	2026-08-13 00:04:32 (3 weeks ago)	Bad web bot attempting to run wp-login.php on non-WP site	Hacking Bad Web Bot Web App Attack
Anonymous	2026-05-21 21:01:19 (3 months ago)	FPROCO WEBEXPLOIT 45.66.208.174 (45.66.208.174)	Web App Attack
🇺🇸 TPI-Abuse	2026-05-19 07:41:50 (3 months ago)	(mod_security) mod_security (id:225170) triggered by 45.66.208.174 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 45.66.208.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 19 03:41:44.740201 2026] [security2:error] [pid 9160:tid 9182] [client 45.66.208.174:50725] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|2291106.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "2291106.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agwUOCYokgFXQKzcUsZtqQAAABQ"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2026-05-06 19:30:37 (3 months ago)	IM360 WAF: Old style account creation and modification in Joomla! MV:registration	Web App Attack
🇺🇸 TPI-Abuse	2026-02-06 19:05:48 (6 months ago)	(mod_security) mod_security (id:225170) triggered by 45.66.208.174 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 45.66.208.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 06 14:05:45.512701 2026] [security2:error] [pid 17585:tid 17585] [client 45.66.208.174:22543] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|austli.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "austli.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aYY7iUpgqiOERodoCfyH8wAAAAI"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Tilellit.PRO	2026-01-30 13:59:00 (7 months ago)	Fail2Ban banned 45.66.208.174 for security violations in jail wp-armour. Log: 2026/01/30 13:58:59 [e ... show more Fail2Ban banned 45.66.208.174 for security violations in jail wp-armour. Log: 2026/01/30 13:58:59 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 45.66.208.174 \| Target: wplogin" , client: 45.66.208.174, server: [REDACTED], request: "POST /wp-login.php HTTP/2.0", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
🇺🇸 TPI-Abuse	2026-01-15 17:21:25 (7 months ago)	(mod_security) mod_security (id:240335) triggered by 45.66.208.174 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 45.66.208.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 15 12:21:20.537987 2026] [security2:error] [pid 28033:tid 28033] [client 45.66.208.174:38409] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 45.66.208.174 (+1 hits since last alert)\|amoriotech.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "amoriotech.com"] [uri "/xmlrpc.php"] [unique_id "aWkiELF6H3Z7sl--fkRSAQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2025-07-24 15:25:04 (1 year ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇨🇦 wil.com	2025-04-01 10:40:43 (1 year ago)	GlobalProtect login attempts with user tbratton.	VPN IP Brute-Force
🇨🇭 backslash	2025-03-25 07:30:10 (1 year ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇮🇩 BPS-StatisticsIndonesia	2025-03-12 05:59:08 (1 year ago)	WP Login Scan Activities	Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2025-02-12 06:39:34 (1 year ago)	WP Login Scan Activities	Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2025-02-11 02:25:56 (1 year ago)	WP Login Scan Activities	Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2025-02-09 16:56:46 (1 year ago)	WP Login Scan Activities	Web App Attack
Anonymous	2025-02-05 07:15:02 (1 year ago)	Attempted WordPress login: 45.66.208.174 - - [05/Feb/2025:07:13:53 +0000] "GET /wp-login.php HTTP/1 ... show more Attempted WordPress login: 45.66.208.174 - - [05/Feb/2025:07:13:53 +0000] "GET /wp-login.php HTTP/1.1" 404 249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.2" show less	Hacking Web App Attack

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2a12:f545:4181:994:9225:27bc:1484:e1ef

🇺🇸 162.216.149.44

🇫🇷 2a13:f43:5d48:46c7:71e8:9b7e:20df:85e2

🇺🇸 2a12:f546:7d8c:91ef:1cf9:6826:2eaf:3591

🇺🇸 2a12:f542:b351:14d9:3555:2b87:ef5d:e640

🇺🇸 2a12:f541:4816:7840:df01:bafb:b98d:d094

🇸🇬 2a11:c44:56af:aea6:b6c7:b327:89ae:cfa

🇺🇸 2a10:7b06:e89e:84:5c2f:40c2:4211:8e8d

🇺🇸 2a10:4a05:7c9c:1046:50d1:6886:ec69:d056

🇳🇱 2a0f:ca80:b00b:56f7::5

🇬🇧 2a06:4880:2000::42

🇬🇧 194.50.235.137

🇮🇳 124.123.68.73

🇳🇱 77.239.124.253

🇬🇧 35.203.211.208

🇬🇧 5.226.140.60

🇫🇷 2a13:f44:8bff:1ac3:8d83:ce55:d0e3:8ea9

🇺🇸 2a12:f540:df41:779e:62e3:8e01:9613:174

🇺🇸 2a10:4a03:ad53:3cf3:fcba:f22e:62ed:41c

🇺🇸 2a10:4a02:3b29:5755:de56:2032:b9dc:bb0f