JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.80.106.27

45.80.106.27 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 22%: ?

22%

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS35830
Domain Name	finegroupservers.com
Country	🇺🇸 United States of America
City	Newark, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.80.106.27

Whois 45.80.106.27

IP Abuse Reports for 45.80.106.27:

This IP address has been reported a total of 29 times from 11 distinct sources. 45.80.106.27 was first reported on June 14th 2021, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-05-27 00:37:30 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 45.80.106.27 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 45.80.106.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 26 20:37:24.770604 2026] [security2:error] [pid 2338:tid 2338] [client 45.80.106.27:23681] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|rotarymagnetics.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "rotarymagnetics.com"] [uri "/"] [unique_id "ahY8xIs3bJCCxv8JKTxzvQAAABc"], referer: https://www.facebook.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 HandyTreff.de	2026-05-23 14:03:59 (2 weeks ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -31.933 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -31.933 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Goosee-Audit/1.0 (+internal-security-audit) show less	Web App Attack Bad Web Bot
🇫🇷 masterguru	2026-05-17 15:59:40 (2 weeks ago)	Restricted File Access Attempt. Matched phrase "wp-config." at REQUEST_FILENAME. (930130-201)	Hacking Web App Attack
🇺🇸 nationaleventpros.com	2026-05-01 03:05:59 (1 month ago)	vulnerability scan	Web App Attack
🇫🇷 masterguru	2026-04-16 03:44:45 (1 month ago)	URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .b ... show more URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .backup/ .bak/ .bck/ .bk/ .bkp/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .cnf/ .com/ .compositefont/ .config/ .conf/ .copy/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dist/ .dll/ .dos/ .dpkg-dist/ .drv/ .gadget/ .hta/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .inf/ .ini/ .jse/ .key/ .licx/ .lnk/ .log/ .mdb/ .msc/ .ocx/ .old/ .pass/ .pdb/ .pfx/ .pif/ .pem/ .pol/ .prf/ .printer/ .pwd/ .rdb/ .rdp/ .reg/ .resources/ .resx/ .sav/ .save/ .scr/ .sct/ .sh/ .shs/ .sql/ .sqlite/ .sqlite3/ .swp/ .sys/ .temp/ .tlb/ .tmp/ .vb/ .vbe/ .vbs/ .vbproj/ .vsdisco/ .vxd/ .webinfo/ .ws/ .wsc/ .wsf/ .wsh/ .xsd/ .xsx/" at TX:extension. (920440-201) show less	Hacking
🇺🇸 TPI-Abuse	2025-11-06 03:27:21 (7 months ago)	(mod_security) mod_security (id:225170) triggered by 45.80.106.27 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 45.80.106.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 05 22:27:14.948219 2025] [security2:error] [pid 17490:tid 17490] [client 45.80.106.27:11909] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|staben.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "staben.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aQwVktSpqctK5ENM6x4g_gAAABk"], referer: https://staben.com/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2025-06-19 15:35:08 (11 months ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
Anonymous	2025-01-27 00:20:08 (1 year ago)	Automatic report - Vulnerability scan /RDWeb/Pages/en-US/login.aspx	Web App Attack
Anonymous	2025-01-25 13:10:35 (1 year ago)	Automatic report - Vulnerability scan /RDWeb/Pages/en-US/login.aspx	Web App Attack
Anonymous	2025-01-21 15:35:19 (1 year ago)	Automatic report - Vulnerability scan /RDWeb/Pages/en-US/login.aspx	Web App Attack
Anonymous	2025-01-18 00:30:09 (1 year ago)	Automatic report - Vulnerability scan /RDWeb/Pages/en-US/login.aspx	Web App Attack
Anonymous	2025-01-13 08:50:18 (1 year ago)	Automatic report - Vulnerability scan /RDWeb/Pages/en-US/login.aspx	Web App Attack
Anonymous	2024-12-26 23:05:11 (1 year ago)	Automatic report - Vulnerability scan /RDWeb/Pages/en-US/login.aspx	Web App Attack
Anonymous	2024-12-23 21:25:34 (1 year ago)	Automatic report - Vulnerability scan /RDWeb/Pages/en-US/login.aspx	Web App Attack
Anonymous	2024-12-02 12:40:28 (1 year ago)	Automatic report - Vulnerability scan /RDWeb/Pages/en-US/login.aspx	Web App Attack

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.72

🇮🇷 151.234.200.1

🇺🇸 172.104.210.105

🇺🇸 165.227.110.45

🇮🇳 122.169.207.93

🇨🇳 119.98.250.57

🇬🇧 35.203.211.98

🇭🇰 8.218.84.155

🇺🇸 162.216.150.85

🇨🇳 121.11.96.13

🇺🇸 107.150.103.20

🇺🇸 64.62.197.29

🇨🇭 45.143.200.246

🇯🇵 45.66.218.181

🇩🇪 43.228.157.10

🇺🇸 34.148.73.240

🇹🇼 198.235.24.103

🇩🇪 185.176.94.38

🇨🇳 112.43.33.165

🇺🇸 74.195.53.129