JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.66.209.236

45.66.209.236 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 18%: ?

18%

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS35830
Domain Name	finegroupservers.com
Country	🇺🇸 United States of America
City	New York City, New York

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.66.209.236

Whois 45.66.209.236

IP Abuse Reports for 45.66.209.236:

This IP address has been reported a total of 30 times from 16 distinct sources. 45.66.209.236 was first reported on June 3rd 2021, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 David Ferneding	2026-05-27 16:27:45 (2 weeks ago)	Blocked by UFW (TCP on 80) Source port: 20683 TTL: 118 Packet length: 60 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 80) Source port: 20683 TTL: 118 Packet length: 60 TOS: 0x00 This report (for 45.66.209.236) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇨🇭 Origon	2026-05-26 16:03:41 (2 weeks ago)	http-bad-user-agent - IP: 45.66.209.236 - time="2026-05-26T18:03:41+02:00" level=info msg="(555f66b ... show more http-bad-user-agent - IP: 45.66.209.236 - time="2026-05-26T18:03:41+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 45.66.209.236 (RU/35830) : 4h ban on Ip 45.66.209.236" module=db show less	Bad Web Bot
🇨🇭 4server	2026-05-26 04:17:54 (2 weeks ago)	[TueMay2606:17:48.8614322026][security2:error][pid4190716:tid4190964][client45.66.209.236:0]ModSecur ... show more [TueMay2606:17:48.8614322026][security2:error][pid4190716:tid4190964][client45.66.209.236:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"duoacaja.com\"][uri\"/robots.txt\"][unique_id\"ahUe7G_gNgHSdQJSV33Y7QAAAE8\"]\,referer:http://duoacaja.com/robots.txt show less	Hacking Web App Attack
🇩🇪 4server	2026-05-20 07:01:30 (3 weeks ago)	[WedMay2009:01:29.3318192026][security2:error][pid4126340:tid4126390][client45.66.209.236:0]ModSecur ... show more [WedMay2009:01:29.3318192026][security2:error][pid4126340:tid4126390][client45.66.209.236:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"parrocchiaditesserete.ch\"][uri\"/\"][unique_id\"ag1cSTNXbAO4U5SzBHG_jgAAAE4\"]\,referer:http://parrocchiaditesserete.ch/ show less	Port Scan Brute-Force Web App Attack
🇨🇭 Origon	2026-04-30 08:15:04 (1 month ago)	http-bad-user-agent - IP: 45.66.209.236 - time="2026-04-30T10:15:03+02:00" level=info msg="(555f66b ... show more http-bad-user-agent - IP: 45.66.209.236 - time="2026-04-30T10:15:03+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 45.66.209.236 (RU/35830) : 4h ban on Ip 45.66.209.236" module=db show less	Bad Web Bot
🇨🇭 backslash	2025-11-11 12:15:04 (6 months ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
🇺🇸 TPI-Abuse	2025-10-09 14:05:06 (8 months ago)	(mod_security) mod_security (id:210350) triggered by 45.66.209.236 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 45.66.209.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 09 10:04:56.783312 2025] [security2:error] [pid 25882:tid 25882] [client 45.66.209.236:54089] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|gemco-mfg.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gemco-mfg.com"] [uri "/"] [unique_id "aOfBCF3GwOxoPhlBIPoSzgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Reinhard	2025-08-31 06:08:52 (9 months ago)	Harvesting non-existent pages or unknown malicious BOT.	Bad Web Bot
🇺🇸 TPI-Abuse	2025-06-21 01:21:49 (11 months ago)	(mod_security) mod_security (id:210730) triggered by 45.66.209.236 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 45.66.209.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 20 21:21:45.755265 2025] [security2:error] [pid 3060759:tid 3060759] [client 45.66.209.236:61187] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Golden-Technologies/pics/Colors/Thumbs.db"] [unique_id "aFYJKS0Aw7Q_WJq5lFxYSwAAABE"], referer: https://vitalitywebb.com/backstore/Golden-Technologies/pics/Colors/ show less	Brute-Force Bad Web Bot Web App Attack
🇲🇽 licjperezl	2025-06-05 18:03:37 (1 year ago)	Ataque de diccionario o DDoS en nuestros servicios en linea	Brute-Force
Anonymous	2024-12-09 15:49:41 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-12-02 01:00:57 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-11-28 03:31:34 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-11-11 15:21:45 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-10-17 14:02:55 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇭 104.244.74.84

🇺🇸 2607:f8b0:4001:c70::123

🇸🇬 217.216.108.55

🇮🇩 103.239.165.114

🇱🇹 81.30.98.62

🇯🇲 72.252.226.42

🇩🇪 64.89.163.80

🇺🇸 52.165.88.92

🇺🇸 47.251.177.242

🇺🇸 47.189.89.148

🇷🇺 46.188.119.26

🇳🇱 45.198.224.5

🇺🇸 20.169.81.111

🇨🇳 223.166.22.119

🇨🇳 221.228.203.3

🇩🇪 213.209.159.56

🇹🇼 198.235.24.72

🇹🇳 197.244.163.41

🇧🇷 189.108.215.39

🇧🇮 154.117.199.56