JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.13.191.72

45.13.191.72 was found in our database!

This IP was reported 178 times. Confidence of Abuse is 26%: ?

26%

ISP	Pitline Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS42708
Domain Name	pitline.net
Country	🇳🇴 Norway
City	Oslo, Oslo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.13.191.72

Whois 45.13.191.72

IP Abuse Reports for 45.13.191.72:

This IP address has been reported a total of 178 times from 61 distinct sources. 45.13.191.72 was first reported on September 23rd 2023, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-11 12:22:39 (1 week ago)	"GET /wp-includes/woocommerce-call.php HTTP/1.1"	Hacking Web App Attack
🇨🇭 backslash	2026-07-10 12:03:00 (1 week ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
Anonymous	2026-07-10 10:06:19 (1 week ago)	45.13.191.72 - - [10/Jul/2026:12:05:03 +0200] "GET /wp-includes/woocommerce-call.php HTTP/1.1" 404 1 ... show more 45.13.191.72 - - [10/Jul/2026:12:05:03 +0200] "GET /wp-includes/woocommerce-call.php HTTP/1.1" 404 17281 "-" "Go-http-client/1.1" 45.13.191.72 - - [10/Jul/2026:12:05:04 +0200] "GET /wp-content/plugins/wordpress-seo/wp-seo-main-float.php HTTP/1.1" 404 10662 "-" "Go-http-client/1.1" 45.13.191.72 - - [10/Jul/2026:12:05:04 +0200] "GET /wp-content/plugins/enhanced-text-widget/analyst/src/403x.php HTTP/1.1" 404 10670 "-" "Go-http-client/1.1" 45.13.191.72 - - [10/Jul/2026:12:05:05 +0200] "GET /wp-content/themes/news-portal/error.php HTTP/1.1" 404 10666 "-" "Go-http-client/1.1" 45.13.191.72 - - [10/Jul/2026:12:05:06 +0200] "GET /wp-content/themes/fukasawa/inc/classes/403.php HTTP/1.1" 404 10658 "-" "Go-http-client/1.1" 45.13.191.72 - - [10/Jul/2026:12:05:07 +0200] "GET /wp-content/plugins/hello-plus/classes/ehp-sarang.php HTTP/1.1" 404 10663 "-" "Go-http-client/1.1" 45.13.191.72 - - [10/Jul/2026:12:05:07 +0200] "GET /wp-content/plugins/so-pinyin-slugs/inc/main_json.php HTTP/1.1" 404 10664 "-" ... show less	DDoS Attack
Anonymous	2026-07-07 19:15:19 (2 weeks ago)	45.13.191.72 - - [07/Jul/2026:21:14:54 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "Mozilla/5.0 ( ... show more 45.13.191.72 - - [07/Jul/2026:21:14:54 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 45.13.191.72 - - [07/Jul/2026:21:14:55 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 45.13.191.72 - - [07/Jul/2026:21:15:05 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 45.13.191.72 - - [07/Jul/2026:21:15:06 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 45.13.191.72 - - [07/Jul/2026:21:15:17 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Ch ... show less	Brute-Force Web App Attack
🇩🇪 Viveronese	2026-05-24 11:50:00 (1 month ago)	HTTP vulnerability scanning	Web App Attack
Anonymous	2026-05-11 04:34:37 (2 months ago)	Multiple, malicious web requests detected	Port Scan Hacking
🇮🇳 dineshskt4all	2026-05-10 18:10:19 (2 months ago)	[Sun May 10 18:10:16.881432 2026] [proxy_fcgi:error] [pid 692121:tid 129571361871552] [client 45.13. ... show more [Sun May 10 18:10:16.881432 2026] [proxy_fcgi:error] [pid 692121:tid 129571361871552] [client 45.13.191.72:0] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force
🇺🇸 nyt	2026-05-04 14:14:40 (2 months ago)	Web Shell Upload	Hacking Web App Attack
🇫🇷 Octopuce	2026-05-04 01:36:43 (2 months ago)	Aggressive web search of vulnerable pages: /wp-content/themes/theme-check/theme-check.php /wp-conten ... show more Aggressive web search of vulnerable pages: /wp-content/themes/theme-check/theme-check.php /wp-content/plugins/WordPressCore/include.php /wp-con ... show less	Web App Attack
🇦🇺 MAGIC	2026-04-15 02:00:38 (3 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇫🇷 bazter.pro	2026-04-08 20:03:04 (3 months ago)	Fail2Ban: plesk-bot-aggressive - 15 failures	Port Scan Bad Web Bot Web App Attack
🇺🇸 myagent.site	2026-04-04 20:18:23 (3 months ago)	Blocking for trying to access an exploit file: /admin.php	Hacking
🇫🇷 Octopuce	2026-04-04 19:46:52 (3 months ago)	Aggressive web search of vulnerable pages: /1.php /a.php /m.php /modules/ets_whatsapp/security.php / ... show more Aggressive web search of vulnerable pages: /1.php /a.php /m.php /modules/ets_whatsapp/security.php /templates/beez/ /templates/beez3/ /template ... show less	Web App Attack
🇷🇺 DZBOT	2026-03-14 15:42:15 (4 months ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-03-14 15:38:28 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 45.13.191.72 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 45.13.191.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 14 11:38:23.699322 2026] [security2:error] [pid 16405:tid 16405] [client 45.13.191.72:60093] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lundtrading.com"] [uri "/backup/sftp-config.json"] [unique_id "abWA76F61vyLP1xTqaMLwAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 178 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 173.239.211.213

🇷🇴 92.118.39.71

🇺🇸 35.202.222.151

🇧🇷 177.87.33.60

🇮🇩 121.101.131.27

🇸🇬 47.236.161.139

🇧🇷 205.210.31.255

🇧🇷 170.238.160.191

🇩🇪 167.94.146.46

🇺🇸 162.216.150.165

🇵🇰 139.135.59.138

🇨🇳 61.28.113.246

🇺🇸 2602:fa59:10:c71::1

🇳🇱 195.178.110.30

🇬🇧 185.216.145.186

🇧🇷 168.232.60.82

🇱🇾 154.127.69.9

🇺🇸 144.172.96.99

🇻🇳 113.172.151.220

🇬🇧 109.155.208.204