JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.13.191.92

45.13.191.92 was found in our database!

This IP was reported 234 times. Confidence of Abuse is 13%: ?

13%

ISP	Pitline Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS42708
Domain Name	pitline.net
Country	🇳🇴 Norway
City	Oslo, Oslo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.13.191.92

Whois 45.13.191.92

IP Abuse Reports for 45.13.191.92:

This IP address has been reported a total of 234 times from 56 distinct sources. 45.13.191.92 was first reported on September 23rd 2023, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-11 13:18:49 (1 week ago)	"GET /wp-content/plugins/index.php HTTP/1.1"	Hacking Web App Attack
🇮🇹 VHosting	2026-07-10 04:05:05 (1 week ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇺🇸 mnsf	2026-05-12 03:05:17 (2 months ago)	Too many Status 40X (11)	Brute-Force Web App Attack
🇺🇸 nyt	2026-05-11 03:46:47 (2 months ago)	Non-standard WP File	Web App Attack
🇺🇸 mnsf	2026-05-11 02:05:07 (2 months ago)	Too many Status 40X (20)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-05-04 18:54:51 (2 months ago)	(mod_security) mod_security (id:234930) triggered by 45.13.191.92 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:234930) triggered by 45.13.191.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 04 14:54:44.662345 2026] [security2:error] [pid 8913:tid 8913] [client 45.13.191.92:30977] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\/lib\\\\/php\\\\/connector\\\\.minimal\\\\.php$" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/27_Apps_WPPlugin.conf"] [line "6787"] [id "234930"] [rev "2"] [msg "COMODO WAF: File upload vulnerability in the file manager plugin before 6.9 for WordPress (CVE-2020-25213)\|\|belluardo.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "belluardo.org"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "afjrdG9XFr8F0sIoQlrv-gAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nyt	2026-05-04 14:14:33 (2 months ago)	404 flood (16/60s), 404 flood (17/60s)	Bad Web Bot Web App Attack
🇫🇷 Octopuce	2026-05-04 10:36:16 (2 months ago)	Aggressive web search of vulnerable pages: /wp-content/packed.php /wp-content/languages/plugins/admi ... show more Aggressive web search of vulnerable pages: /wp-content/packed.php /wp-content/languages/plugins/admin.php /wp-includes/js/codemirror/config.php ... show less	Web App Attack
🇺🇸 octageeks.com	2026-04-16 04:06:47 (3 months ago)	Wordpress malicious attack:[octawpauthor]	Web App Attack
🇩🇪 SCHAPPY	2026-04-15 07:45:45 (3 months ago)	Mutliple attempts to access forbidden web resources, HTTP code 403.	Web App Attack
🇦🇺 MAGIC	2026-04-15 02:00:44 (3 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇫🇷 bazter.pro	2026-04-08 20:08:28 (3 months ago)	Fail2Ban: plesk-bot-aggressive - 15 failures	Port Scan Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-14 19:10:07 (4 months ago)	(mod_security) mod_security (id:210730) triggered by 45.13.191.92 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 45.13.191.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 14 15:10:02.783546 2026] [security2:error] [pid 16651:tid 16651] [client 45.13.191.92:38083] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|bitcointoolshop.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bitcointoolshop.com"] [uri "/www.sql"] [unique_id "abWyilfxF7CZq1ddLV5PZAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Savvii	2026-03-14 16:33:12 (4 months ago)	10 attempts against mh-misc-ban on frost	Web App Attack
🇺🇸 TPI-Abuse	2026-03-05 01:25:43 (4 months ago)	(mod_security) mod_security (id:210730) triggered by 45.13.191.92 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 45.13.191.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 04 20:25:36.247498 2026] [security2:error] [pid 14953:tid 14953] [client 45.13.191.92:58625] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|wendeenicole.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "wendeenicole.com"] [uri "/mysql.sql"] [unique_id "aajbkO1muLSFRdHSv6plHQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 234 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.24.212.45

🇺🇸 216.24.212.22

🇨🇭 209.99.189.24

🇦🇺 170.64.213.237

🇨🇳 123.160.172.225

🇩🇪 103.27.157.193

🇺🇸 40.83.182.122

🇹🇼 34.81.36.168

🇺🇸 31.58.179.214

🇮🇳 20.193.141.133

🇩🇪 185.220.101.26

🇮🇩 182.9.48.173

🇹🇷 94.154.43.36

🇫🇷 85.217.140.54

🇵🇱 34.116.142.185

🇺🇸 18.190.15.50

🇱🇻 213.100.10.125

🇧🇷 201.71.192.108

🇪🇨 200.41.3.165

🇩🇪 185.202.113.179