JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.13.191.107

45.13.191.107 was found in our database!

This IP was reported 192 times. Confidence of Abuse is 9%: ?

ISP	Pitline Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS42708
Domain Name	pitline.net
Country	🇳🇴 Norway
City	Oslo, Oslo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.13.191.107

Whois 45.13.191.107

IP Abuse Reports for 45.13.191.107:

This IP address has been reported a total of 192 times from 54 distinct sources. 45.13.191.107 was first reported on August 12th 2023, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇪 vaia.cloud	2026-08-27 16:35:01 (3 weeks ago)	crowdsecurity/http-wordpress-scan	Brute-Force Web App Attack
🇺🇸 kosada.com	2026-08-25 02:47:01 (4 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-07-11 10:28:53 (2 months ago)	"GET /wp-content/themes/Divi/404.php HTTP/1.1"	Hacking Web App Attack
🇺🇦 URAN Publishing Service	2026-07-10 20:21:39 (2 months ago)	45.13.191.107 - - [10/Jul/2026:23:21:38 +0300] "GET /wp-content/plugins/so-pinyin-slugs/inc/main_jso ... show more 45.13.191.107 - - [10/Jul/2026:23:21:38 +0300] "GET /wp-content/plugins/so-pinyin-slugs/inc/main_json.php HTTP/1.1" 404 706 "-" "Go-http-client/1.1" 45.13.191.107 - - [10/Jul/2026:23:21:38 +0300] "GET /wp-content/plugins/filester/assets/css/404.php HTTP/1.1" 404 706 "-" "Go-http-client/1.1" ... show less	Web App Attack
🇹🇷 cagatayakinci.com	2026-07-10 16:23:13 (2 months ago)	45.13.191.107 - - [10/Jul/2026:19:23:04 +0300] "GET /wp-content/languages/index.php HTTP/1.1" 404 11 ... show more 45.13.191.107 - - [10/Jul/2026:19:23:04 +0300] "GET /wp-content/languages/index.php HTTP/1.1" 404 118 "-" "Go-http-client/2.0" 45.13.191.107 - - [10/Jul/2026:19:23:04 +0300] "GET /wp-content/languages/plugins/index.php HTTP/1.1" 404 118 "-" "Go-http-client/2.0" 45.13.191.107 - - [10/Jul/2026:19:23:05 +0300] "GET /wp-content/languages/themes/index.php HTTP/1.1" 404 118 "-" "Go-http-client/2.0" 45.13.191.107 - - [10/Jul/2026:19:23:05 +0300] "GET /wp-content/fonts/index.php HTTP/1.1" 404 118 "-" "Go-http-client/2.0" 45.13.191.107 - - [10/Jul/2026:19:23:09 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php HTTP/1.1" 404 118 "-" "Go-http-client/2.0" 45.13.191.107 - - [10/Jul/2026:19:23:09 +0300] "GET /.well-known/index.php HTTP/1.1" 404 118 "-" "Go-http-client/2.0" 45.13.191.107 - - [10/Jul/2026:19:23:10 +0300] "GET /classwithtostring.php HTTP/1.1" 404 118 "-" "Go-http-client/2.0" 45.13.191.107 - - [10/Jul/2026:19:23:10 +0300] "GET /filemanager.php HTTP/1.1" 404 118 "-" ... show less	Web App Attack Port Scan
🇺🇸 SiliSoftware	2026-07-10 09:21:25 (2 months ago)	/wp-includes/woocommerce-call.php	Web App Attack
🇩🇪 Viveronese	2026-05-24 11:47:27 (3 months ago)	HTTP vulnerability scanning	Web App Attack
🇮🇳 dineshskt4all	2026-05-10 18:00:31 (4 months ago)	[Sun May 10 18:00:29.489569 2026] [proxy_fcgi:error] [pid 692121:tid 129571429013184] [client 45.13. ... show more [Sun May 10 18:00:29.489569 2026] [proxy_fcgi:error] [pid 692121:tid 129571429013184] [client 45.13.191.107:0] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force
🇫🇷 Octopuce	2026-05-04 17:47:21 (4 months ago)	Aggressive web search of vulnerable pages: /wp-content/themes/chillbud/inc/welcome/assets/img/index. ... show more Aggressive web search of vulnerable pages: /wp-content/themes/chillbud/inc/welcome/assets/img/index.php /wp-content/themes/astra/inc/builder/ty ... show less	Web App Attack
🇩🇪 LRob	2026-04-15 04:00:18 (5 months ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇫🇷 Kenshin869	2026-04-05 04:32:53 (5 months ago)	Wordpress unauthorized access attempt	Brute-Force
🇯🇵 Valhalla	2026-03-15 11:08:29 (6 months ago)	/bak.zip	Hacking Web App Attack
🇯🇵 Valhalla	2026-03-13 06:52:07 (6 months ago)	/bak/backup.sql	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-02-25 15:03:24 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 45.13.191.107 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 45.13.191.107 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 25 10:03:18.659814 2026] [security2:error] [pid 20575:tid 20575] [client 45.13.191.107:58615] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|linnardfinancial.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "linnardfinancial.com"] [uri "/back/sql.sql"] [unique_id "aZ8PNlEgg6xzBIykxHw91wAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-24 22:32:22 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 45.13.191.107 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 45.13.191.107 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 24 17:32:18.711589 2026] [security2:error] [pid 25458:tid 25458] [client 45.13.191.107:58139] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|headcount.dev\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "headcount.dev"] [uri "/backups/mysql.sql"] [unique_id "aZ4m8kaewl32PntTQYvFgAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 192 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2001:4860:4844:400::

🇧🇪 198.235.24.195

🇺🇸 136.116.101.247

🇮🇷 130.193.77.236

🇵🇰 103.251.255.3

🇺🇸 64.62.156.170

🇨🇳 60.218.242.71

🇨🇳 59.39.184.233

🇳🇱 45.148.10.183

🇺🇸 45.20.186.151

🇺🇸 35.237.190.204

🇯🇵 34.84.146.35

🇧🇷 200.149.213.242

🇺🇸 136.118.63.135

🇭🇰 95.182.95.244

🇱🇹 62.60.130.201

🇭🇰 52.175.51.129

🇺🇸 52.165.91.89

🇧🇷 45.234.222.99

🇳🇱 45.148.10.152