JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

45.80.104.164

Activity Trending Down

Abuse Confidence Score

19% Caution

30 reports

20 reporters · latest 1 week ago

ISP: Hosting servers physically located in United Kingdom
Usage Type: Data Center/Web Hosting/Transit
ASN: AS59651
Domain Name: apexdatasolutions.online
Country: 🇺🇸 United States of America
City: Newark, New Jersey

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

30 from 20 distinct reporters

First reported

December 8th 2020

Most recent report

1 week ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 3 🇩🇪 Germany 2

Most common categories Web App Attack 5 Brute-Force 4 Hacking 1 Bad Web Bot 1

Old reports The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-11-01 16:05:35 UTC · (1 week ago)	(mod_security) mod_security (id:210350) triggered by 45.80.104.164 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 11:05:29.827920 2026] [security2:error] [pid 2842:tid 2842] [client 45.80.104.164:27339] Mod ... show more (mod_security) mod_security (id:210350) triggered by 45.80.104.164 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 11:05:29.827920 2026] [security2:error] [pid 2842:tid 2842] [client 45.80.104.164:27339] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.jerusalem-korczak-home.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.jerusalem-korczak-home.com"] [uri "/zlata/21.htm"] [unique_id "audjSZ6ZVVEl7IFKg7t6XgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-10-08 16:05:11 UTC · (1 month ago)	Too many Status 40X (18)	Brute-Force Web App Attack
🇺🇸 mnsf	2026-10-06 01:05:06 UTC · (1 month ago)	Abuse Detected (9)	Brute-Force Web App Attack
🇩🇪 ghostwarriors	2026-09-29 12:20:11 UTC · (1 month ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
🇩🇪 yitzhaq	2026-09-29 12:06:27 UTC · (1 month ago)	45.80.104.164 - - [29/Sep/2026:14:06:21 +0200] "GET / HTTP/1.1" 200 16932 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 45.80.104.164 - - [29/Sep/2026:14:06:22 +0200] "POST ... show more 45.80.104.164 - - [29/Sep/2026:14:06:21 +0200] "GET / HTTP/1.1" 200 16932 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 45.80.104.164 - - [29/Sep/2026:14:06:22 +0200] "POST /?rest_route=/batch/v1 HTTP/1.1" 403 4437 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 45.80.104.164 - - [29/Sep/2026:14:06:24 +0200] "POST /wp-json/batch/v1 HTTP/1.1" 403 4438 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" show less	Web App Attack Hacking
🇺🇸 kosada.com	2026-07-02 21:28:48 UTC · (4 months ago)	Web password guessing	Brute-Force
🇫🇷 Tilellit.PRO	2026-06-28 07:03:05 UTC · (4 months ago)	Fail2Ban banned 45.80.104.164 for security violations in jail wp-armour. Log: 2026/06/28 07:03:05 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 45.80.104.164 \| Target: wplogin" , client: 45.80.104.164, server: [REDACTED], request: ... show more Fail2Ban banned 45.80.104.164 for security violations in jail wp-armour. Log: 2026/06/28 07:03:05 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 45.80.104.164 \| Target: wplogin" , client: 45.80.104.164, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
🇳🇱 GabrielJST	2026-06-26 07:17:26 UTC · (4 months ago)	(wordpress) Failed wordpress login from 45.80.104.164 (IL/Israel/-)	Brute-Force
🇺🇸 TPI-Abuse	2026-06-25 02:44:54 UTC · (4 months ago)	(mod_security) mod_security (id:225170) triggered by 45.80.104.164 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 22:44:47.375207 2026] [security2:error] [pid 5524:tid 5524] [client 45.80.104.164:60609] Mod ... show more (mod_security) mod_security (id:225170) triggered by 45.80.104.164 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 22:44:47.375207 2026] [security2:error] [pid 5524:tid 5524] [client 45.80.104.164:60609] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|rivendells.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rivendells.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajyWH8pODQPMSGGfFkDdnQAAAFE"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-06-20 13:50:10 UTC · (4 months ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-26 19:29:14 UTC · (7 months ago)	(mod_security) mod_security (id:225170) triggered by 45.80.104.164 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 15:29:10.231836 2026] [security2:error] [pid 14428:tid 14444] [client 45.80.104.164:10891] M ... show more (mod_security) mod_security (id:225170) triggered by 45.80.104.164 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 15:29:10.231836 2026] [security2:error] [pid 14428:tid 14444] [client 45.80.104.164:10891] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|pixelpushersdesign.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "pixelpushersdesign.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acWJBldNQNVpDlIDGOZXkQAAAA4"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-24 13:25:16 UTC · (7 months ago)	(mod_security) mod_security (id:225170) triggered by 45.80.104.164 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 24 09:25:09.282284 2026] [security2:error] [pid 8958:tid 8979] [client 45.80.104.164:28649] Mod ... show more (mod_security) mod_security (id:225170) triggered by 45.80.104.164 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 24 09:25:09.282284 2026] [security2:error] [pid 8958:tid 8979] [client 45.80.104.164:28649] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|dukesandgannon.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dukesandgannon.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acKQtRhoSCpNilpvDjqitgAAAMw"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-01-29 05:34:47 UTC · (9 months ago)	45.80.104.164 - - [29/Jan/2026:06:34:36 +0100] "GET /wp-login.php HTTP/1.1" 404 47 "-" "Wget/1.21.4" 45.80.104.164 - - [29/Jan/2026:06:34:37 +0100] "GET /wp-login.php HTTP/1.1" 404 47 "-" "Wget/1.21.4" ...	Web App Attack
🇮🇹 VHosting	2026-01-27 21:40:10 UTC · (9 months ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇬🇧 CrystalMaker	2026-01-23 16:58:17 UTC · (9 months ago)	Wordpress attack - POST /xmlrpc.php; POST /xmlrpc.php; POST /xmlrpc.php; POST /xmlrpc.php; POST /xmlrpc.php; POST /xmlrpc.php	Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 216.25.90.62

🇺🇸 162.216.149.246

🇳🇱 138.226.239.234

🇺🇸 91.230.168.4

🇩🇪 43.228.157.244

🇩🇪 2001:470:6d:792:996f:1127:63b:e600

🇩🇪 2001:470:6d:792:4b5f:d97a:5cb7:aa00

🇫🇮 185.89.42.38

🇺🇸 162.216.149.197

🇺🇸 162.216.149.18

🇺🇸 135.119.92.2

🇨🇳 120.48.176.103

🇨🇳 113.4.36.181

🇩🇪 69.5.169.49

🇩🇪 2001:470:6d:792:5a20:3969:8d6a:a400

🇺🇸 162.216.149.177

🇺🇸 162.216.149.132

🇺🇸 147.78.180.174

🇳🇱 138.226.239.233

🇩🇪 2001:470:6d:792:76f3:dde7:42ab:cc00