JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.91.20.220

45.91.20.220

Neutral Activity

66 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

VPN Consumer Milan, Italy

Usage Type

Data Center/Web Hosting/Transit

ASN

AS9009

Domain Name

vpnconsumer.com

Country

🇮🇹 Italy

City

Milan, Lombardy

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

45.91.20.220 has been reported 66 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 45.91.20.220:

This IP address has been reported a total of 66 times from 29 distinct sources. 45.91.20.220 was first reported on October 27th 2022, and the most recent report was 1 year ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2025-09-01 19:42:48 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 45.91.20.220 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 45.91.20.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 01 15:42:43.298772 2025] [security2:error] [pid 2859:tid 2859] [client 45.91.20.220:49843] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|brazilianbikinis.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "brazilianbikinis.com"] [uri "/bak/backup.sql"] [unique_id "aLX3M4CF-rBGavagREeYvwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 hbrks	2025-08-29 22:02:41 (1 year ago)	2 attack(s) detected since 2025-08-29T21:48:06.170Z, such as these: {"event":"nginx_block","ip":"45. ... show more 2 attack(s) detected since 2025-08-29T21:48:06.170Z, such as these: {"event":"nginx_block","ip":"45.91.20.220","host":"p4u.xyz","request":"HEAD /back/public_html.tar.gz HTTP/2.0","user_agent":"","reason":"404","timestamp":"2025-08-29T21:48:11 00:00"} More Details: https://p4u.xyz/0A7NVMCEIPS/1 show less	Web Spam Hacking Bad Web Bot
🇬🇧 pinguin	2025-08-27 08:50:40 (1 year ago)	Triggered Cloudflare WAF (firewallManaged) from IT. Action taken: LOG Protocol: HTTP/2 (HEAD method) ... show more Triggered Cloudflare WAF (firewallManaged) from IT. Action taken: LOG Protocol: HTTP/2 (HEAD method) Endpoint: /bak/www.zip UA: Empty string This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2025-08-23 22:16:01 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 45.91.20.220 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 45.91.20.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 23 18:15:56.211161 2025] [security2:error] [pid 24306:tid 24306] [client 45.91.20.220:35061] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|hodlmoser.com\|F\|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "hodlmoser.com"] [uri "/restore/wallet.dat"] [unique_id "aKo9nKD5OWxBf3ML_BJtewAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Penny Packer	2025-08-21 01:57:50 (1 year ago)	Fail2Ban apache-tripwires	Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2025-08-19 14:12:01 (1 year ago)	WP Admin Scan Activities	Web App Attack
🇸🇬 pusathosting.com	2025-08-19 08:54:04 (1 year ago)	2ds22 bruteforce	Brute-Force Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2025-08-19 02:55:48 (1 year ago)	WP Admin Scan Activities	Web App Attack
🇺🇸 CBJ	2025-08-18 20:29:43 (1 year ago)	fail2ban: apache-filepath-recon ...	Web App Attack
🇺🇦 URAN Publishing Service	2025-08-18 18:44:26 (1 year ago)	45.91.20.220 - - [18/Aug/2025:21:44:23 +0300] "GET //wp-includes/blocks/page-list/page-list/index.ph ... show more 45.91.20.220 - - [18/Aug/2025:21:44:23 +0300] "GET //wp-includes/blocks/page-list/page-list/index.php HTTP/1.1" 404 274 "-" "Go-http-client/1.1" 45.91.20.220 - - [18/Aug/2025:21:44:25 +0300] "GET //wp-admin/includes/nav.php HTTP/1.1" 404 274 "-" "Go-http-client/1.1" ... show less	Web App Attack
🇮🇩 Burayot	2025-08-18 15:35:40 (1 year ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 45.91.20.220 (IT/Italy/-): 1 in the ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 45.91.20.220 (IT/Italy/-): 1 in the last 3600 secs show less	Web App Attack
🇺🇸 TPI-Abuse	2025-08-04 08:51:29 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 45.91.20.220 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 45.91.20.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 04 04:51:21.988276 2025] [security2:error] [pid 345:tid 345] [client 45.91.20.220:25715] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|thegoldentether.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "thegoldentether.com"] [uri "/old/backup.sql"] [unique_id "aJB0iX4umofwUF49FMONlwAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-08-03 09:56:13 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 45.91.20.220 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 45.91.20.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 03 05:56:08.731702 2025] [security2:error] [pid 24825:tid 24825] [client 45.91.20.220:54907] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.robcohn.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.robcohn.com"] [uri "/restore/sql.sql"] [unique_id "aI8yOMkiZewPRY1EoYoFQQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-07-24 16:02:14 (1 year ago)	Web attack	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-07-20 02:51:57 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 45.91.20.220 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 45.91.20.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 19 22:51:53.655428 2025] [security2:error] [pid 5236:tid 5236] [client 45.91.20.220:44115] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|wendeenicole.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "wendeenicole.com"] [uri "/back/backup.sql"] [unique_id "aHxZycxYt8UoCzrbPuuxbAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 66 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 75.1.240.64

🇨🇳 223.109.252.192

🇺🇸 165.227.204.236

🇺🇸 144.225.187.68

🇺🇸 45.156.129.46

🇺🇸 45.130.83.242

🇮🇳 45.40.57.172

🇩🇪 43.228.157.8

🇲🇦 41.251.23.80

🇺🇸 40.74.209.4

🇨🇳 36.151.68.7

🇫🇮 34.88.31.191

🇧🇪 34.53.187.53

🇨🇭 195.177.93.75

🇻🇳 165.101.40.180

🇺🇸 163.252.210.245

🇸🇬 121.6.81.59

🇧🇩 103.130.197.107

🇫🇷 92.205.57.72

🇺🇸 65.49.1.162