JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.13.191.26

45.13.191.26 was found in our database!

This IP was reported 158 times. Confidence of Abuse is 8%: ?

ISP	Pitline Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS42708
Domain Name	pitline.net
Country	🇳🇴 Norway
City	Oslo, Oslo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.13.191.26

Whois 45.13.191.26

IP Abuse Reports for 45.13.191.26:

This IP address has been reported a total of 158 times from 52 distinct sources. 45.13.191.26 was first reported on July 28th 2023, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-07-30 05:33:37 (3 weeks ago)	Blocked by UFW (TCP on 1) Source port: 9459 TTL: 108 Packet length: 52 TOS: 0x08 This report (for 4 ... show more Blocked by UFW (TCP on 1) Source port: 9459 TTL: 108 Packet length: 52 TOS: 0x08 This report (for 45.13.191.26) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇭 backslash	2026-06-30 16:06:00 (1 month ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇩🇪 Viveronese	2026-06-07 07:29:04 (2 months ago)	HTTP vulnerability scanning	Web App Attack
🇩🇪 FeG Deutschland	2026-04-13 02:58:30 (4 months ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
Anonymous	2026-04-13 01:56:33 (4 months ago)	2026-04-13T03:56:25.663534+02:00 wordpress(wohnungsgenossenschaft.de)[456848]: Blocked user enumera ... show more 2026-04-13T03:56:25.663534+02:00 wordpress(wohnungsgenossenschaft.de)[456848]: Blocked user enumeration attempt from 45.13.191.26 2026-04-13T03:56:26.113841+02:00 wordpress(wohnungsgenossenschaft.de)[456848]: Blocked user enumeration attempt from 45.13.191.26 2026-04-13T03:56:26.598144+02:00 wordpress(wohnungsgenossenschaft.de)[456849]: Blocked user enumeration attempt from 45.13.191.26 2026-04-13T03:56:27.925214+02:00 wordpress(wohnungsgenossenschaft.de)[456849]: Blocked user enumeration attempt from 45.13.191.26 2026-04-13T03:56:31.516813+02:00 wordpress(wohnungsgenossenschaft.de)[456849]: Blocked user enumeration attempt from 45.13.191.26 show less	Web Spam Blog Spam Brute-Force Web App Attack
🇺🇸 myagent.site	2026-03-18 00:06:05 (5 months ago)	Blocking for trying to access an exploit file: //themes.php	Hacking
🇨🇳 pengpeng	2026-03-10 13:40:04 (5 months ago)	monitor: on VM-0-7-ubuntu \| port: 16432 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 16432 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2026-03-05 01:01:57 (5 months ago)	(mod_security) mod_security (id:210730) triggered by 45.13.191.26 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 45.13.191.26 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 04 20:01:51.295566 2026] [security2:error] [pid 15071:tid 15071] [client 45.13.191.26:42061] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|bwill.dev\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bwill.dev"] [uri "/backup/mysql.sql"] [unique_id "aajV_-aOl3jiyHHxZ97S9gAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 BestFans.com	2026-02-14 21:40:16 (6 months ago)	Credential brute-force attacks on webpage logins	Brute-Force
🇺🇸 Penny Packer	2026-02-13 22:42:54 (6 months ago)	Fail2Ban apache-tripwires	Web App Attack
🇺🇦 URAN Publishing Service	2026-02-12 05:33:01 (6 months ago)	45.13.191.26 - - [12/Feb/2026:07:32:59 +0200] "GET //wp-content/plugins/seoplugins/mar.php HTTP/1.1" ... show more 45.13.191.26 - - [12/Feb/2026:07:32:59 +0200] "GET //wp-content/plugins/seoplugins/mar.php HTTP/1.1" 404 275 "-" "Go-http-client/1.1" 45.13.191.26 - - [12/Feb/2026:07:33:00 +0200] "GET //wp-content/plugins/WordPressCore/include.php HTTP/1.1" 404 275 "-" "Go-http-client/1.1" ... show less	Web App Attack
🇧🇪 cmbplf	2026-02-11 05:21:49 (6 months ago)	208 requests with url.path /.well-known/acme-challenge/.php 202 requests with url.path /.well-k ... show more 208 requests with url.path /.well-known/acme-challenge/.php 202 requests with url.path /.well-known/pki-validation/*.php show less	Brute-Force Bad Web Bot
🇫🇷 dynamix	2026-02-10 23:14:21 (6 months ago)	Multiple WAF Violations	Web App Attack
🇳🇿 Antinson	2026-02-10 14:58:48 (6 months ago)	Scraping with a high error ratio and request rate	Bad Web Bot
🇺🇸 TPI-Abuse	2026-02-10 12:05:54 (6 months ago)	(mod_security) mod_security (id:240000) triggered by 45.13.191.26 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240000) triggered by 45.13.191.26 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 10 07:04:18.331612 2026] [security2:error] [pid 3173508:tid 3173508] [client 45.13.191.26:58197] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|guavaroad.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "guavaroad.com"] [uri "/images/stories/themes.php"] [unique_id "aYsewmNCGdfGAVed5ZhnJwAAAFI"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 158 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇱 194.180.48.205

🇨🇴 181.51.32.96

🇦🇷 181.44.143.169

🇺🇦 176.113.208.184

🇺🇸 173.255.243.63

🇱🇻 77.38.203.5

🇺🇸 74.235.104.155

🇺🇸 69.84.15.62

🇺🇸 20.84.61.38

🇨🇳 223.199.161.0

🇺🇸 209.145.53.180

🇬🇧 195.96.139.126

🇺🇸 172.59.186.159

🇫🇮 147.185.133.223

🇫🇮 147.185.133.113

🇺🇸 143.244.161.7

🇹🇭 118.194.250.245

🇸🇬 118.26.111.63

🇨🇳 112.241.215.198

🇦🇴 105.168.235.95