45.91.21.4

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
34% Elevated
106 reports
54 reporters · latest 1 day ago
ISP
VPN Consumer Stockholm, Sweden
Usage Type
Data Center/Web Hosting/Transit
ASN
AS42708
Domain Name
vpnconsumer.com
Country
🇸🇪 Sweden
City
Stockholm, Stockholm

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV
Total reports
106 from 54 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 3 🇩🇰 Denmark 1 🇪🇸 Spain 1
Most common categories Web App Attack 8 Brute-Force 3 Bad Web Bot 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Log in to search reports. Log In
Reporter IoA Timestamp (UTC) Comment Categories
🇳🇱 Alt255
Bad Web Bot Web App Attack
🇩🇰 ability6511
Brute-force login attack detected by WordPress firewall. 5 failed login attempts within the configured time window.
Brute-Force Web App Attack
🇮🇹 VHosting
Detected WordPress attack from different servers
Brute-Force Web App Attack
🇩🇪 marten_o
45.91.21.4 - - [05/Oct/2026:20:43:42 +0200] "GET /wp-content/plugins/buddypress/alfa.php?wp-content/plugins/buddypress/alfa.php HTTP/2.0" 404 175 "https://rettungsdienst-en.de/wp-content/plugins/buddypress/alfa.php" "Go-http-client/2.0" 123 363 ...
Web App Attack
🇺🇸 xmission.com
45.91.21.4 - - [26/Sep/2026:14:50:23 -0600] "POST /xmlrpc.php HTTP/1.1" 200 415 "https://staging.dooce.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:130.0) Gecko/20100101 Firefox/130.0" ...
Web App Attack
🇪🇸 robotstxt
Web App Attack
🇩🇪 big-cloud.nl
Try to access /xmlrpc.php
Web App Attack
🇩🇪 rh24
(wordpress) Failed wordpress login from 45.91.21.4 (SE/Sweden/-): (CF_ENABLE)
Brute-Force
🇮🇪 AutosOnShow
blocked for webapp attack | path requested: /.env | seen at 2026-09-21 04:21:22.677 |
Web App Attack
Anonymous
Brute-Force Web App Attack
Anonymous
Multiple web server 400 error codes from same source ip
Web App Attack
🇨🇭 backslash
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇬🇧 consul.to
Web attack/malicious scanning detected
Web App Attack
🇦🇺 aranguren.org
Bad Web Bot
🇺🇦 URAN Publishing Service
Web App Attack

Showing 1 to 15 of 106 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇩🇪 136.243.165.90
🇮🇷 85.198.19.217
🇳🇱 77.67.26.75
🇦🇺 210.0.90.81
🇧🇷 177.135.206.10
🇧🇪 34.77.140.104
🇺🇸 216.180.246.191
🇸🇬 206.189.159.224
🇬🇧 206.189.30.150
🇳🇱 195.178.110.228
🇲🇽 187.170.82.200
🇮🇹 151.25.12.139
🇨🇳 121.31.210.125
🇳🇱 109.160.32.112
🇫🇷 88.174.118.143
🇨🇳 60.177.250.104
🇺🇸 20.65.202.224
🇳🇱 193.25.217.249
🇨🇳 101.126.11.137
🇳🇴 85.19.195.12
feedback