JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.80.106.172

45.80.106.172 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 0%: ?

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS35830
Domain Name	finegroupservers.com
Country	🇺🇸 United States of America
City	Newark, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.80.106.172

Whois 45.80.106.172

IP Abuse Reports for 45.80.106.172:

This IP address has been reported a total of 30 times from 19 distinct sources. 45.80.106.172 was first reported on May 24th 2021, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-05-22 14:59:29 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 45.80.106.172 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 45.80.106.172 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 22 10:59:21.710006 2026] [security2:error] [pid 32371:tid 32371] [client 45.80.106.172:11067] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kobraagencies.com"] [uri "/wp-config.php.dist"] [unique_id "ahBvSVDDqomrF5ldGpJHkAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2026-05-21 23:38:28 (3 months ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-05-20 11:50:35 (3 months ago)	(mod_security) mod_security (id:210730) triggered by 45.80.106.172 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 45.80.106.172 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 07:50:28.315477 2026] [security2:error] [pid 5729:tid 5729] [client 45.80.106.172:33433] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|advantagept.org\|F\|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "advantagept.org"] [uri "/wp-config.inc"] [unique_id "ag2gBJlfVXNMf6gzFYtdOQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-05-20 03:08:07 (3 months ago)	Total IP rate limit exceeded: 6 q/min (Magento Site) (Botnet activity attributed to: Angara Technolo ... show more Total IP rate limit exceeded: 6 q/min (Magento Site) (Botnet activity attributed to: Angara Technologies Group / mikhail-smirnov-79830322) show less	Hacking
🇨🇭 4server	2026-05-16 23:53:15 (3 months ago)	[SunMay1701:53:12.9178202026][security2:error][pid322399:tid322420][client45.80.106.172:0]ModSecurit ... show more [SunMay1701:53:12.9178202026][security2:error][pid322399:tid322420][client45.80.106.172:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\^/wp-content/plugins/[\^/] /\(readme\\\\\\\\.txt\\|changelog\\\\\\\\.txt\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"381\"][id\"960828\"][msg\"WordPresspluginenumerationblocked\"][hostname\"salonesamire.ch\"][uri\"/wp-content/plugins/metform/readme.txt\"][unique_id\"agkDaH-IeyRq5LXLD9DP_gAAAJM\"] show less	Hacking Web App Attack
🇺🇸 webgobe	2026-05-13 07:08:53 (3 months ago)	jow-Joomla User : try to access forms...	Hacking
🇺🇸 TPI-Abuse	2026-05-13 00:20:08 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 45.80.106.172 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 45.80.106.172 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 12 20:20:00.422781 2026] [security2:error] [pid 21116:tid 21116] [client 45.80.106.172:38013] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arapi.org"] [uri "/.wp-config.php.bck"] [unique_id "agPDsF7S-lBfnipisaO-qwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-05-12 22:35:14 (3 months ago)	Forum/form spam	Web Spam
🇬🇧 Oakley	2026-04-17 22:41:08 (4 months ago)	(antiscrape_rule) Web application abuse detected 45.80.106.172 (IL/Israel/-): 5 in the last 900 secs	Hacking
🇳🇱 i-turnradio.nl	2026-04-16 19:27:00 (4 months ago)	2026-04-16 21:27:00 (CET) ~ Blocked by abusescan risk assessment	Web App Attack
🇺🇸 webgobe	2026-03-25 16:43:09 (4 months ago)	jow-Joomla User : try to access forms...	Hacking
🇱🇻 garmtech.com	2026-03-16 09:21:06 (5 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 11-21.45.80.106.172.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 11-21.45.80.106.172.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
Anonymous	2026-03-10 00:17:11 (5 months ago)	Forum/form spam	Web Spam
🇺🇸 Psycho Solutions LLC	2026-01-12 23:55:20 (7 months ago)	Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-json/wp/v2/users - User A ... show more Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-json/wp/v2/users - User Agent: N/A - Timestamp: 1/12/2026 11:55 pm (UTC-6) show less	Web Spam Hacking Bad Web Bot Web App Attack
🇬🇧 Bytemark	2026-01-12 23:50:47 (7 months ago)	45.80.106.172 - - [12/Jan/2026:23:50:44 +0000] "GET /wp-login.php HTTP/1.1" 404 47 "https://www.goog ... show more 45.80.106.172 - - [12/Jan/2026:23:50:44 +0000] "GET /wp-login.php HTTP/1.1" 404 47 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 45.80.106.172 - - [12/Jan/2026:23:50:45 +0000] "GET /wp-login.php HTTP/1.1" 404 47 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 45.80.106.172 - - [12/Jan/2026:23:50:46 +0000] "GET /wp-login.php HTTP/1.1" 404 47 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" show less	Brute-Force Web App Attack

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 84.247.131.0

🇩🇪 139.19.117.131

🇵🇭 124.105.69.156

🇩🇪 69.5.169.107

🇳🇱 45.148.10.157

🇧🇷 205.210.31.195

🇹🇼 198.235.24.96

🇩🇪 194.88.98.92

🇺🇸 162.216.149.130

🇵🇰 153.117.50.224

🇩🇪 69.5.169.11

🇺🇸 65.49.1.131

🇺🇸 64.62.156.38

🇺🇸 34.24.86.28

🇧🇪 34.14.94.237

🇧🇪 207.175.201.243

🇦🇷 200.123.46.20

🇺🇦 194.146.180.21

🇬🇧 185.247.137.52

🇺🇸 65.49.1.13