AbuseIPDB » 45.13.191.65

45.13.191.65 was found in our database!

This IP was reported 89 times. Confidence of Abuse is 45%: ?

45%

ISP	Pitline Ltd
Usage Type	Data Center/Web Hosting/Transit
Domain Name	pitline.net
Country	Norway
City	Oslo, Oslo

Report 45.13.191.65

Whois 45.13.191.65

IP Abuse Reports for 45.13.191.65:

This IP address has been reported a total of 89 times from 26 distinct sources. 45.13.191.65 was first reported on July 28th 2023, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
octageeks.com	2024-03-31 04:08:02 (8 months ago)	Wordpress malicious attack:[octa404]	Web App Attack
octageeks.com	2024-03-29 04:08:06 (8 months ago)	Wordpress malicious attack:[octa404]	Web App Attack
octageeks.com	2024-03-27 04:07:59 (8 months ago)	Wordpress malicious attack:[octa404]	Web App Attack
octageeks.com	2024-03-25 04:08:37 (8 months ago)	Wordpress malicious attack:[octa404]	Web App Attack
TheMadBeaker	2024-03-23 11:27:51 (8 months ago)	Fail2Ban Ban Triggered HTTP SQL Injection Attempt	Hacking SQL Injection
TPI-Abuse	2024-03-09 05:03:42 (8 months ago)	(mod_security) mod_security (id:210730) triggered by 45.13.191.65 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:210730) triggered by 45.13.191.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 09 00:03:16.700591 2024] [security2:error] [pid 11674] [client 45.13.191.65:24789] [client 45.13.191.65] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|bitcointoolshop.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bitcointoolshop.com"] [uri "/backups/sql.sql"] [unique_id "ZevtlCxfL4tCN-bSi0bSPQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-02-17 13:17:14 (9 months ago)	(mod_security) mod_security (id:210730) triggered by 45.13.191.65 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:210730) triggered by 45.13.191.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 17 08:17:06.343631 2024] [security2:error] [pid 18789:tid 47609280251648] [client 45.13.191.65:11039] [client 45.13.191.65] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|liquido.cocoonprojects.com\|F\|2"] [data ".info.sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "liquido.cocoonprojects.com"] [uri "/restore/liquidorganization.info.sql"] [unique_id "ZdCx0tQxnU9xuybwQ3btzwAAAMc"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-02-08 19:05:38 (9 months ago)	(mod_security) mod_security (id:210730) triggered by 45.13.191.65 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:210730) triggered by 45.13.191.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 08 14:05:34.865712 2024] [security2:error] [pid 4871] [client 45.13.191.65:16779] [client 45.13.191.65] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.crypto-stamps.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.crypto-stamps.com"] [uri "/backups/mysql.sql"] [unique_id "ZcUl_upJorNXxfgSjFsKpgAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-01-18 04:33:06 (10 months ago)	(mod_security) mod_security (id:210730) triggered by 45.13.191.65 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:210730) triggered by 45.13.191.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 17 23:32:59.117205 2024] [security2:error] [pid 13525] [client 45.13.191.65:62463] [client 45.13.191.65] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|fxztrader.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "fxztrader.com"] [uri "/bak/backup.sql"] [unique_id "Zaip-9J_BNXn8S9z0_yKuwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2023-09-01 13:30:43 (1 year ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
Anonymous	2023-08-29 11:10:11 (1 year ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
RF68	2023-08-29 04:24:46 (1 year ago)	45.13.191.65 [28/Aug/2023 * Spam host detected, probing for vulnerabilities]	Web Spam Exploited Host Web App Attack
Anonymous	2023-07-28 12:14:19 (1 year ago)	XSS Attempt	Hacking
Anonymous	0000-00-00 00:00:00 (2025 years ago)	spambot	Web Spam