JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.141.215.91

45.141.215.91 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 0%: ?

ISP	1337 Services GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS210558
Hostname(s)	45.141.215.91.powered.by.rdp.sh
Domain Name	as210558.net
Country	🇵🇱 Poland
City	Warsaw, Mazovia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.141.215.91

Whois 45.141.215.91

IP Abuse Reports for 45.141.215.91:

This IP address has been reported a total of 25 times from 14 distinct sources. 45.141.215.91 was first reported on September 7th 2022, and the most recent report was 10 months ago.

Old Reports: The most recent abuse report for this IP address is from 10 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇾 lns.bz	2025-12-20 21:04:10 (10 months ago)	.env scanning [BY]	Web App Attack
🇺🇸 myagent.site	2025-12-20 12:46:21 (10 months ago)	Blocking for trying to access an exploit file: /.env	Hacking
🇺🇸 S.O.B.A. Dev.	2025-12-20 09:54:28 (10 months ago)	Threat Blocked by BeeHive from (ASN:210558) (Network:SERVICES-1337-GMBH 1337-SERVICES-GMBH-NETWORK) ... show more Threat Blocked by BeeHive from (ASN:210558) (Network:SERVICES-1337-GMBH 1337-SERVICES-GMBH-NETWORK) (Host:soba.dev) (Method:GET) (Protocol:HTTP/1.1) (Timestamp:2025-12-20T09:54:28Z) show less	Web Spam Brute-Force Web App Attack
🇺🇸 S.O.B.A. Dev.	2025-12-20 05:53:38 (10 months ago)	Threat Blocked by BeeHive from (ASN:210558) (Network:SERVICES-1337-GMBH 1337-SERVICES-GMBH-NETWORK) ... show more Threat Blocked by BeeHive from (ASN:210558) (Network:SERVICES-1337-GMBH 1337-SERVICES-GMBH-NETWORK) (Host:soba.dev) (Method:GET) (Protocol:HTTP/1.1) (Timestamp:2025-12-20T05:53:38Z) show less	Web Spam Brute-Force Web App Attack
🇺🇸 octageeks.com	2025-12-20 05:08:51 (10 months ago)	Wordpress malicious attack:[octablocked]	Web App Attack
Anonymous	2025-12-20 02:55:11 (10 months ago)	SuspiciousC2 Activity detected by FMBAD System 2025-12-20 05:55:11	Hacking Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-19 21:10:56 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 45.141.215.91 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 45.141.215.91 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 19 16:10:39.145057 2025] [security2:error] [pid 21063:tid 21063] [client 45.141.215.91:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yggdrasil.org"] [uri "/.env"] [unique_id "aUW_T7jM0oxCRLW1M4LSZQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 teamsecure	2025-12-19 20:05:17 (10 months ago)	Banned for trying to access env	Web App Attack
🇺🇸 TPI-Abuse	2025-12-19 15:31:02 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 45.141.215.91 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 45.141.215.91 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 19 10:30:47.849005 2025] [security2:error] [pid 10687:tid 10687] [client 45.141.215.91:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "barryherbach.com"] [uri "/.env"] [unique_id "aUVvp6dGGbSw6srFXS0AFAAAACU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-19 14:02:14 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 45.141.215.91 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 45.141.215.91 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 19 09:01:56.427431 2025] [security2:error] [pid 28950:tid 28950] [client 45.141.215.91:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kryptonome.com"] [uri "/.env"] [unique_id "aUVa1DiRpxO0FdhcTiPFMwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 S.O.B.A. Dev.	2025-12-19 13:32:34 (10 months ago)	Threat Blocked by BeeHive from (ASN:210558) (Network:SERVICES-1337-GMBH 1337-SERVICES-GMBH-NETWORK) ... show more Threat Blocked by BeeHive from (ASN:210558) (Network:SERVICES-1337-GMBH 1337-SERVICES-GMBH-NETWORK) (Host:soba.dev) (Method:GET) (Protocol:HTTP/1.1) (Timestamp:2025-12-19T13:32:34Z) show less	Web Spam Brute-Force Web App Attack
🇬🇧 Swiptly	2025-12-19 13:19:03 (10 months ago)	Bot scanning for environment files .env .env/\* ...	Web App Attack
🇺🇸 myagent.site	2025-12-19 12:08:38 (10 months ago)	Blocking for trying to access an exploit file: /.env	Hacking
🇫🇷 lindi	2025-12-19 11:09:25 (10 months ago)	trying to access .env file ...	Hacking Web App Attack
🇺🇸 TPI-Abuse	2025-12-19 02:03:53 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 45.141.215.91 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 45.141.215.91 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 18 21:03:38.743580 2025] [security2:error] [pid 24862:tid 24862] [client 45.141.215.91:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "virtualizecr.net"] [uri "/.env"] [unique_id "aUSyemV6I-hMAsy1tyzfsAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇪 185.226.194.12

🇸🇪 169.150.208.154

🇮🇳 154.30.100.193

🇺🇸 138.207.150.121

🇨🇳 121.10.252.86

🇨🇳 116.62.112.163

🇺🇸 50.6.22.250

🇫🇷 209.242.199.183

🇰🇪 197.248.113.161

🇺🇸 146.190.134.221

🇺🇸 136.242.106.219

🇻🇳 115.75.209.182

🇨🇳 112.103.130.232

🇷🇺 94.243.10.154

🇳🇱 89.23.103.50

🇺🇸 74.50.97.90

🇺🇸 66.132.195.101

🇷🇺 62.122.195.14

🇳🇱 45.148.10.151

🇳🇱 45.148.10.141