JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.66.208.220

45.66.208.220

Neutral Activity

20 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

FINE GROUP SERVERS SOLUTIONS LLC

Usage Type

Data Center/Web Hosting/Transit

ASN

AS26548

Domain Name

finegroupservers.com

Country

🇺🇸 United States of America

City

Newark, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

45.66.208.220 has been reported 20 times. The most recent report is from 3 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 45.66.208.220:

This IP address has been reported a total of 20 times from 10 distinct sources. 45.66.208.220 was first reported on October 10th 2021, and the most recent report was 3 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-05-15 23:15:50 (3 months ago)	(mod_security) mod_security (id:218580) triggered by 45.66.208.220 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:218580) triggered by 45.66.208.220 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 19:15:46.072601 2026] [security2:error] [pid 4412:tid 4412] [client 45.66.208.220:47319] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\/\\\\[!+](?:[\\\\w\\\\s=_\\\\-()]+)?\\\\*\\\\/)" at ARGS:action. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/22_SQL_SQLi.conf"] [line "76"] [id "218580"] [rev "1"] [msg "COMODO WAF: MySQL in-line comment detected.\|\|3905ccn.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "3905ccn.org"] [uri "/lookupLicensee.php"] [unique_id "agepIu5hzN-j5HJQFGhCcAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-13 00:11:01 (4 months ago)	(mod_security) mod_security (id:225170) triggered by 45.66.208.220 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 45.66.208.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 12 20:10:53.828806 2026] [security2:error] [pid 4180933:tid 4180933] [client 45.66.208.220:31921] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|title15.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "title15.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adw0jXZcgex6xbm-6SONHAAAAAQ"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-01-17 23:25:06 (7 months ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇨🇭 backslash	2026-01-17 02:40:05 (7 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇩🇪 hchristo	2026-01-16 03:54:43 (7 months ago)	[Fri Jan 16 04:54:38.363785 2026] [proxy_fcgi:error] [pid 16821:tid 17051] [client 45.66.208.220:212 ... show more [Fri Jan 16 04:54:38.363785 2026] [proxy_fcgi:error] [pid 16821:tid 17051] [client 45.66.208.220:21267] AH01071: Got error 'Primary script unknown' [Fri Jan 16 04:54:39.549687 2026] [proxy_fcgi:error] [pid 16821:tid 17015] [client 45.66.208.220:32117] AH01071: Got error 'Primary script unknown' [Fri Jan 16 04:54:40.740057 2026] [proxy_fcgi:error] [pid 16821:tid 17126] [client 45.66.208.220:58487] AH01071: Got error 'Primary script unknown' [Fri Jan 16 04:54:41.926950 2026] [proxy_fcgi:error] [pid 16821:tid 17057] [client 45.66.208.220:64899] AH01071: Got error 'Primary script unknown' [Fri Jan 16 04:54:43.117158 2026] [proxy_fcgi:error] [pid 16821:tid 17099] [client 45.66.208.220:52759] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force
🇨🇿 lp	2025-08-01 21:22:12 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 45.66.208.220 2025-08-01T21:51:35+02: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 45.66.208.220 2025-08-01T21:51:35+02:00 vpn Access-Reject 'kmartinez' station: 45.66.208.220 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-07-29 10:52:12 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 45.66.208.220 2025-07-29T12:18:03+02: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 45.66.208.220 2025-07-29T12:18:03+02:00 vpn Access-Reject 'opting' station: 45.66.208.220 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-07-19 10:52:21 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 45.66.208.220 2025-07-19T11:48:17+02: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 45.66.208.220 2025-07-19T11:48:17+02:00 vpn Access-Reject 'CRUZ' station: 45.66.208.220 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-07-18 16:52:07 (1 year ago)	Unauthorized VPN login attempts: 3 attempts were recorded from 45.66.208.220 2025-07-18T17:45:54+02: ... show more Unauthorized VPN login attempts: 3 attempts were recorded from 45.66.208.220 2025-07-18T17:45:54+02:00 vpn Access-Reject 'admin' station: 45.66.208.220 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' 2025-07-18T17:45:58+02:00 vpn Access-Reject 'admin' station: 45.66.208.220 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' 2025-07-18T18:07:45+02:00 vpn Access-Reject 'admin' station: 45.66.208.220 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-07-15 01:52:31 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 45.66.208.220 2025-07-15T02:48:53+02: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 45.66.208.220 2025-07-15T02:48:53+02:00 vpn Access-Reject 'GammaVisor' station: 45.66.208.220 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-07-04 21:21:54 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 45.66.208.220 2025-07-04T22:14:20+02: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 45.66.208.220 2025-07-04T22:14:20+02:00 vpn Access-Reject 'Willow' station: 45.66.208.220 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇲🇾 syokadmin	2025-06-09 22:04:37 (1 year ago)	(cpanel) Failed cPanel login from 45.66.208.220 (US/United States/-): 1 in the last 3600 secs	Brute-Force Web App Attack
🇩🇪 Shanna Vigass	2025-06-05 14:36:39 (1 year ago)	Auto-blocked for suspicious activity (VPN/Proxy/Abuse)	Hacking
Anonymous	2025-05-19 09:42:15 (1 year ago)	[19/May/2025:19:42:14 +1000] "GET /admin.php HTTP/1.1" 301 250 "http://[X].[X]/admin.php" "Mozilla/5 ... show more [19/May/2025:19:42:14 +1000] "GET /admin.php HTTP/1.1" 301 250 "http://[X].[X]/admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36" show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2025-02-25 12:35:28 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 45.66.208.220 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 45.66.208.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 25 07:35:21.072273 2025] [security2:error] [pid 27025:tid 27025] [client 45.66.208.220:19011] [client 45.66.208.220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dokuzadabirdeniz.com"] [uri "/.env"] [unique_id "Z725CWfKz9WupWYvCCTxdwAAAA8"], referer: https://tasamm.com/about/ddd69.html show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇦 209.50.188.103

🇪🇹 196.188.160.240

🇨🇱 173.194.91.158

🇻🇳 160.250.133.90

🇰🇿 88.204.245.66

🇺🇸 66.132.186.242

🇱🇹 62.60.130.242

🇳🇱 45.148.10.157

🇭🇰 223.197.145.114

🇪🇹 196.190.80.73

🇨🇴 190.0.243.67

🇧🇷 187.95.47.214

🇨🇭 185.156.175.51

🇻🇳 171.244.40.247

🇨🇳 171.217.70.151

🇫🇷 158.220.111.161

🇫🇮 147.185.133.138

🇨🇦 144.217.65.205

🇺🇸 136.108.62.143

🇨🇳 116.52.252.150