JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.80.104.231

45.80.104.231 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 4%: ?

ISP	Hosting servers physically located in United Kingdom
Usage Type	Data Center/Web Hosting/Transit
ASN	AS59651
Domain Name	apexdatasolutions.online
Country	🇺🇸 United States of America
City	Newark, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.80.104.231

Whois 45.80.104.231

IP Abuse Reports for 45.80.104.231:

This IP address has been reported a total of 16 times from 13 distinct sources. 45.80.104.231 was first reported on December 13th 2020, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 4server	2026-09-01 22:20:18 (6 hours ago)	[WedSep0200:20:13.7497872026][security2:error][pid580664:tid580723][client45.80.104.231:0]ModSecurit ... show more [WedSep0200:20:13.7497872026][security2:error][pid580664:tid580723][client45.80.104.231:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"alessandrolucchini.ch\"][uri\"/xmlrpc.php\"][unique_id\"apdPndQMT8CgFkY3GfKzGgAAAE4\"] show less	Port Scan Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-04-30 10:40:30 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 45.80.104.231 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 45.80.104.231 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 06:40:24.212895 2026] [security2:error] [pid 5571:tid 5629] [client 45.80.104.231:59339] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seracon.com.ec"] [uri "/.env"] [unique_id "afMxmEcOIXnQ65WkvsEgUAAAAEk"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-04-27 12:49:38 (4 months ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 45.80.104.231 (GB/United Kingdom/-): ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 45.80.104.231 (GB/United Kingdom/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇺🇸 TPI-Abuse	2026-04-26 11:59:28 (4 months ago)	(mod_security) mod_security (id:210730) triggered by 45.80.104.231 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 45.80.104.231 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 26 07:59:22.459214 2026] [security2:error] [pid 20318:tid 20318] [client 45.80.104.231:9013] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vandromme.net\|F\|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vandromme.net"] [uri "/s3cmd.ini"] [unique_id "ae3-Gtplpah70fwPu63rnAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2026-04-11 00:48:00 (4 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇺🇸 TPI-Abuse	2026-04-08 08:03:04 (4 months ago)	(mod_security) mod_security (id:225170) triggered by 45.80.104.231 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 45.80.104.231 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 04:03:00.963307 2026] [security2:error] [pid 3880024:tid 3880024] [client 45.80.104.231:27321] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|unfinishedepic.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "unfinishedepic.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adYLtP4vylgWfZ7rWecq-gAAABI"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Hazzard	2026-04-05 12:46:58 (4 months ago)	(wordpress) Failed wordpress login from 45.80.104.231 (IL/Israel/-/-/-/[redacted]): (CF_ENABLE)	Brute-Force
🇩🇪 kjaerulff	2026-03-11 15:47:56 (5 months ago)	Failed Wordpress login using wp-login.php	Web App Attack
🇩🇪 Packets-Decreaser.NET	2024-09-02 19:44:09 (1 year ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
Anonymous	2023-11-19 00:46:12 (2 years ago)	opencart admin attack from fail2ban ...	DDoS Attack Brute-Force SSH
🇵🇱 rafix	2023-11-03 06:30:37 (2 years ago)	Scrapping website, using diffrent useragents, not wait for response, #botnet20231026	DDoS Attack Bad Web Bot
🇲🇾 syokadmin	2022-08-29 04:33:50 (4 years ago)	45.80.104.231 (GB/United Kingdom/-), more than 2 Apache 403 hits in the last 3600 secs	Brute-Force
Anonymous	2022-05-05 22:52:27 (4 years ago)		Web App Attack
Anonymous	2021-05-28 15:45:00 (5 years ago)	Credential Stuffing	Brute-Force
🇩🇪 Carsten	2020-12-17 17:40:37 (5 years ago)	Massive SQL injection from different IPs. AS49453 GLOBAL LAYER, AS206485 UGB HOSTING, AS200557 IT-KM ... show more Massive SQL injection from different IPs. AS49453 GLOBAL LAYER, AS206485 UGB HOSTING, AS200557 IT-KM LLC, AS62282 UAB RAKREJUS, AS35624 SILVERSTAR INVEST LIMITED, AS200557 REGION40 LLC. show less	SQL Injection

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.57

🇬🇧 193.163.125.95

🇧🇷 187.44.255.246

🇮🇩 182.253.221.210

🇫🇷 172.71.119.74

🇸🇬 168.144.41.166

🇲🇽 158.23.147.79

🇬🇧 123.58.207.140

🇸🇬 103.250.10.63

🇺🇿 95.46.160.29

🇫🇮 77.105.130.244

🇩🇪 49.12.129.34

🇮🇳 45.40.57.172

🇩🇪 35.198.100.128

🇯🇵 34.97.186.145

🇬🇧 31.14.254.15

🇬🇧 5.226.140.50

🇹🇭 1.20.180.40

🇺🇸 2607:f8b0:4001:c6c::126

🇨🇳 219.153.106.29