JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.13.191.85

45.13.191.85 was found in our database!

This IP was reported 213 times. Confidence of Abuse is 20%: ?

20%

ISP	Pitline Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS42708
Domain Name	pitline.net
Country	🇳🇴 Norway
City	Oslo, Oslo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.13.191.85

Whois 45.13.191.85

IP Abuse Reports for 45.13.191.85:

This IP address has been reported a total of 213 times from 58 distinct sources. 45.13.191.85 was first reported on August 24th 2023, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 threatintelligence_bvc	2026-06-15 21:53:25 (11 hours ago)		Brute-Force
🇺🇸 nyt	2026-05-04 14:16:22 (1 month ago)	404 flood (16/60s), 404 flood (17/60s)	Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-05-03 21:05:19 (1 month ago)	Too many Status 40X (11)	Brute-Force Web App Attack
🇲🇹 Malta	2026-04-29 13:57:37 (1 month ago)	45.13.191.85 - - [29/Apr/2026:15:57:37 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT ... show more 45.13.191.85 - - [29/Apr/2026:15:57:37 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/129.0.0.0 Safari/537.36" show less	Hacking Web App Attack
Anonymous	2026-04-25 18:05:30 (1 month ago)	Blocked: Reason='Suspicious traffic score=65 (review-based detection)'; Requests=4	Hacking
🇦🇺 MAGIC	2026-04-15 02:00:43 (2 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2026-04-05 07:54:13 (2 months ago)	[redacted]site 45.13.191.85 - - [05/Apr/2026:09:54:10 +0200] "POST /xmlrpc.php HTTP/2.0" 200 170 "-" ... show more [redacted]site 45.13.191.85 - - [05/Apr/2026:09:54:10 +0200] "POST /xmlrpc.php HTTP/2.0" 200 170 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Vivaldi/6.7" [redacted]site 45.13.191.85 - - [05/Apr/2026:09:54:10 +0200] "POST /xmlrpc.php HTTP/2.0" 200 170 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Brave/1.65.0" [redacted]site 45.13.191.85 - - [05/Apr/2026:09:54:10 +0200] "POST /xmlrpc.php HTTP/2.0" 200 170 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" [redacted]site 45.13.191.85 - - [05/Apr/2026:09:54:10 +0200] "POST /xmlrpc.php HTTP/2.0" 200 170 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" [redacted]site 45.13.191.85 - - [05/Apr/2026:09:54:11 +0200] "POST /xmlrpc.php HTTP/2.0" 200 170 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) ... show less	Hacking Web App Attack
🇺🇸 Penny Packer	2026-03-15 13:50:37 (3 months ago)	Fail2Ban apache-tripwires	Web App Attack
🇯🇵 Valhalla	2026-03-13 06:52:15 (3 months ago)	/backups/config.json	Hacking Web App Attack
🇫🇷 Octopuce	2026-03-08 09:21:13 (3 months ago)	Aggressive web search of vulnerable pages: //tiny.php //user.php //menu.php //alfa.php //file.php // ... show more Aggressive web search of vulnerable pages: //tiny.php //user.php //menu.php //alfa.php //file.php //mini.php //info.php //log.php //wso.php //m ... show less	Web App Attack
🇺🇸 xmission.com	2026-03-05 02:35:48 (3 months ago)	Blocked by UFW (TCP on 1) Source port: 18813 TTL: 112 Packet length: 52 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 1) Source port: 18813 TTL: 112 Packet length: 52 TOS: 0x00 This report (for 45.13.191.85) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 filstal.org	2026-02-28 06:47:33 (3 months ago)	Security scan or malicious bot activity detected by Fail2Ban	Bad Web Bot Web App Attack
🇬🇧 pinguin	2026-02-25 00:43:28 (3 months ago)	Triggered Cloudflare WAF (firewallManaged) from NO. Action taken: LOG Protocol: HTTP/2 (HEAD method) ... show more Triggered Cloudflare WAF (firewallManaged) from NO. Action taken: LOG Protocol: HTTP/2 (HEAD method) Endpoint: /backup/directory.zip UA: Empty string This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇯🇵 Valhalla	2026-02-24 16:05:07 (3 months ago)	/backup/public_html.zip	Hacking Web App Attack
🇫🇮 gnom4ik	2026-02-22 04:21:09 (3 months ago)	ban-reviewer auto report; ip=45.13.191.85; scenario=http:scan; verdict=valid_ban; confidence=0.85; c ... show more ban-reviewer auto report; ip=45.13.191.85; scenario=http:scan; verdict=valid_ban; confidence=0.85; categories=14; active_decisions=1; lookback_decisions=1; nginx_requests=0; appsec_matches=0; auth_events=0; kernel_events=0; signals=IP flagged for 'http:scan' scenario; Port Scan (category 14) detected in abuseipdb_context; No evidence of legitimate activity during lookback window show less	Port Scan

Showing 1 to 15 of 213 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 186.251.71.202

🇺🇸 164.92.82.91

🇩🇪 148.153.140.110

🇺🇸 143.198.174.132

🇩🇪 136.243.228.177

🇫🇷 85.217.140.35

🇺🇸 72.234.16.75

🇺🇸 2607:f8b0:4001:c70::122

🇺🇸 2600:1f28:365:80b0:4c3:3444:4978:8f3a

🇳🇱 192.42.116.56

🇲🇽 187.191.48.24

🇷🇺 178.178.194.123

🇦🇪 132.243.121.237

🇸🇬 114.119.152.155

🇫🇷 91.231.89.235

🇰🇷 43.155.134.4

🇮🇳 4.240.8.92

🇳🇱 2.58.56.131

🇯🇵 203.25.124.206

🇲🇦 197.153.57.103