JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.80.106.124

45.80.106.124 was found in our database!

This IP was reported 44 times. Confidence of Abuse is 23%: ?

23%

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS35830
Domain Name	finegroupservers.com
Country	🇺🇸 United States of America
City	Newark, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.80.106.124

Whois 45.80.106.124

IP Abuse Reports for 45.80.106.124:

This IP address has been reported a total of 44 times from 20 distinct sources. 45.80.106.124 was first reported on September 18th 2023, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 HandyTreff.de	2026-05-21 04:14:49 (2 weeks ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -61.159 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -61.159 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.620.27 show less	Web App Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-05-20 18:11:26 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 45.80.106.124 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 45.80.106.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 14:11:21.315088 2026] [security2:error] [pid 17572:tid 17572] [client 45.80.106.124:12399] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gellertdealers.com"] [uri "/wp-config.php~"] [unique_id "ag35Sduc4K3INIFU9S2YIwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-20 16:39:41 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 45.80.106.124 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 45.80.106.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 12:39:36.530723 2026] [security2:error] [pid 4041:tid 4065] [client 45.80.106.124:63091] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tsengkwongchi.com"] [uri "/wp-config.php.bak"] [unique_id "ag3jyFyds1s1b4JiXjmP5gAAAFM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-20 13:27:48 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 45.80.106.124 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 45.80.106.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 09:27:41.520398 2026] [security2:error] [pid 25194:tid 25194] [client 45.80.106.124:37125] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bolivarbulletintimes.com"] [uri "/wp-config.php.save"] [unique_id "ag22zRYFnfiKxTTI6vGj-gAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-20 13:02:31 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 45.80.106.124 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 45.80.106.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 09:02:25.228294 2026] [security2:error] [pid 20322:tid 20322] [client 45.80.106.124:30429] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.bak" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dixiegeek.com"] [uri "/wp-config.bak"] [unique_id "ag2w4Y7MCBpBIn2OnCScPAAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-20 12:09:52 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 45.80.106.124 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 45.80.106.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 08:09:44.854736 2026] [security2:error] [pid 18892:tid 18892] [client 45.80.106.124:60203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cmcnow.com"] [uri "/wp-config.php.orig"] [unique_id "ag2kiH9iSJ-ZZbey_uPfhAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-05-18 05:17:59 (3 weeks ago)	URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .b ... show more URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .backup/ .bak/ .bck/ .bk/ .bkp/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .cnf/ .com/ .compositefont/ .config/ .conf/ .copy/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dist/ .dll/ .dos/ .dpkg-dist/ .drv/ .gadget/ .hta/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .inf/ .ini/ .jks/ .jse/ .key/ .licx/ .lnk/ .log/ .mdb/ .msc/ .ocx/ .old/ .pass/ .pdb/ .pfx/ .pif/ .pem/ .pol/ .prf/ .printer/ .pwd/ .rdb/ .rdp/ .reg/ .resources/ .resx/ .sav/ .save/ .scr/ .sct/ .sh/ .shs/ .sql/ .sqlite/ .sqlite3/ .swap/ .swo/ .swp/ .sys/ .temp/ .tfstate/ .tlb/ .tmp/ .vb/ .vbe/ .vbs/ .vbproj/ .vsdisco/ .vxd/ .webinfo/ .ws/ .wsc/ .wsf/ .wsh/ .xsd/ .xsx/" at TX:extension. (920440-201) show less	Hacking
🇷🇺 avaio-media	2026-04-17 00:44:14 (1 month ago)		Brute-Force
🇫🇷 masterguru	2026-04-15 05:16:23 (1 month ago)	Too much 404 requests in 1 minute. Operator GE matched 10 at IP:block_script. (46020-201)	Hacking
🇳🇱 Mangelot Hosting	2026-04-14 19:21:09 (1 month ago)	(modsecurity) srv104 ModSecurity 45.80.106.124 (US/United States/-): 10 in the last 3600 secs; Ports ... show more (modsecurity) srv104 ModSecurity 45.80.106.124 (US/United States/-): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇨🇿 lp	2025-12-04 22:22:33 (6 months ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 45.80.106.124 2025-12-04T22:57:21+01: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 45.80.106.124 2025-12-04T22:57:21+01:00 vpn Access-Reject 'user7' station: 45.80.106.124 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-12-04 04:22:45 (6 months ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 45.80.106.124 2025-12-04T04:18:28+01: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 45.80.106.124 2025-12-04T04:18:28+01:00 vpn Access-Reject 'testuser' station: 45.80.106.124 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-12-03 07:24:38 (6 months ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 45.80.106.124 2025-12-03T07:17:34+01: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 45.80.106.124 2025-12-03T07:17:34+01:00 vpn Access-Reject 'sty' station: 45.80.106.124 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-12-01 13:23:53 (6 months ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 45.80.106.124 2025-12-01T12:49:28+01: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 45.80.106.124 2025-12-01T12:49:28+01:00 vpn Access-Reject 'naka' station: 45.80.106.124 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
Anonymous	2025-12-01 12:51:54 (6 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.12.01 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.12.01 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 44 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇰 223.123.43.4

🇨🇳 139.212.70.235

🇨🇳 110.17.188.222

🇰🇿 92.46.38.225

🇷🇴 80.94.92.168

🇮🇳 27.123.104.42

🇩🇪 167.94.146.77

🇷🇺 90.188.27.236

🇮🇳 68.183.89.16

🇸🇬 47.84.134.78

🇳🇱 45.148.10.5

🇳🇱 5.255.99.123

🇬🇧 193.176.29.5

🇨🇳 123.145.39.17

🇰🇷 121.180.249.7

🇮🇳 117.247.110.24

🇨🇦 24.69.254.76

🇺🇸 20.169.105.32

🇨🇳 1.85.218.34

🇵🇭 222.127.251.163