JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.13.191.99

45.13.191.99 was found in our database!

This IP was reported 191 times. Confidence of Abuse is 22%: ?

22%

ISP	Pitline Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS42708
Domain Name	pitline.net
Country	🇳🇴 Norway
City	Oslo, Oslo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.13.191.99

Whois 45.13.191.99

IP Abuse Reports for 45.13.191.99:

This IP address has been reported a total of 191 times from 57 distinct sources. 45.13.191.99 was first reported on September 23rd 2023, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 backslash	2026-07-10 05:06:02 (1 day ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇫🇷 Octopuce	2026-07-10 04:58:01 (1 day ago)	Aggressive web search of vulnerable pages: /wp-admin/maint/index.php /wp-admin/js/index.php /wp-admi ... show more Aggressive web search of vulnerable pages: /wp-admin/maint/index.php /wp-admin/js/index.php /wp-admin/css/index.php /wp-includes/assets/index.p ... show less	Web App Attack
🇩🇪 Viveronese	2026-05-24 11:48:43 (1 month ago)	HTTP vulnerability scanning	Web App Attack
🇳🇱 GabrielJST	2026-05-19 00:50:34 (1 month ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 45.13.191.99 (NO/Nor ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 45.13.191.99 (NO/Norway/-) show less	Bad Web Bot
🇺🇸 nyt	2026-05-11 03:42:28 (2 months ago)	404 flood (16/60s), 404 flood (17/60s)	Bad Web Bot Web App Attack
🇫🇷 Octopuce	2026-05-04 17:44:24 (2 months ago)	Aggressive web search of vulnerable pages: /wp-content/themes/builder-and-developer/inc/tgm/error.ph ... show more Aggressive web search of vulnerable pages: /wp-content/themes/builder-and-developer/inc/tgm/error.php /wp-content/plugins/wp-responsive-menu/in ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-05-04 08:35:07 (2 months ago)	(mod_security) mod_security (id:234930) triggered by 45.13.191.99 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:234930) triggered by 45.13.191.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 04 04:35:00.056530 2026] [security2:error] [pid 29099:tid 29099] [client 45.13.191.99:27015] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\/lib\\\\/php\\\\/connector\\\\.minimal\\\\.php$" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/27_Apps_WPPlugin.conf"] [line "6778"] [id "234930"] [rev "2"] [msg "COMODO WAF: File upload vulnerability in the file manager plugin before 6.9 for WordPress (CVE-2020-25213)\|\|bairentang.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "bairentang.org"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "afhaNM1W8TBwe9_nXB4SmQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-04-15 08:02:59 (2 months ago)	Try to access /xmlrpc.php	Web App Attack
🇨🇭 Origon	2026-04-15 02:44:24 (2 months ago)	http-wordpress_user-enum - IP: 45.13.191.99 - time="2026-04-15T04:44:24+02:00" level=info msg="(555 ... show more http-wordpress_user-enum - IP: 45.13.191.99 - time="2026-04-15T04:44:24+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-wordpress_user-enum by ip 45.13.191.99 (NO/42708) : 4h ban on Ip 45.13.191.99" module=db show less	Web App Attack
🇫🇷 bazter.pro	2026-04-08 20:17:42 (3 months ago)	Fail2Ban: plesk-bot-aggressive - 15 failures	Port Scan Bad Web Bot Web App Attack
🇫🇷 Kenshin869	2026-04-05 04:29:57 (3 months ago)	Wordpress unauthorized access attempt	Brute-Force
🇺🇸 TPI-Abuse	2026-03-14 19:31:14 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 45.13.191.99 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 45.13.191.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 14 15:31:10.106024 2026] [security2:error] [pid 17980:tid 17980] [client 45.13.191.99:28553] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "loriatrading.com"] [uri "/.env"] [unique_id "abW3fiKJQFq_B8Slg6AqAwAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-03-08 12:40:09 (4 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
Anonymous	2026-03-05 12:35:16 (4 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
🇩🇪 FeG Deutschland	2026-03-04 14:03:45 (4 months ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack

Showing 1 to 15 of 191 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 182.95.185.14

🇬🇧 2.57.17.77

🇳🇱 192.42.116.107

🇮🇩 163.7.9.84

🇮🇹 101.57.193.69

🇮🇷 78.39.48.166

🇬🇧 45.133.173.173

🇬🇧 45.133.173.128

🇧🇷 45.71.123.242

🇯🇵 43.153.150.130

🇨🇳 36.150.50.48

🇺🇸 2001:470:1:332::37

🇺🇿 195.158.26.59

🇨🇳 183.136.47.175

🇵🇱 176.53.159.197

🇺🇸 132.148.142.226

🇨🇳 116.177.172.108

🇺🇸 66.132.195.51

🇺🇸 47.253.221.248

🇳🇱 45.148.10.141