JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.91.22.80

45.91.22.80 was found in our database!

This IP was reported 58 times. Confidence of Abuse is 53%: ?

53%

ISP	VPN Consumer Paris, France
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	vpnconsumer.com
Country	🇫🇷 France
City	Paris, Ile-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.91.22.80

Whois 45.91.22.80

IP Abuse Reports for 45.91.22.80:

This IP address has been reported a total of 58 times from 29 distinct sources. 45.91.22.80 was first reported on January 16th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 masterguru	2026-06-06 12:41:33 (1 day ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-122) show less	Bad Web Bot
🇫🇷 Octopuce	2026-06-06 12:02:24 (1 day ago)	Aggressive web search of vulnerable pages: /wp-content/plugins/so-pinyin-slugs/inc/js-inc.php /wp-co ... show more Aggressive web search of vulnerable pages: /wp-content/plugins/so-pinyin-slugs/inc/js-inc.php /wp-content/plugins/wpcall-button/button-image.ph ... show less	Web App Attack
🇨🇭 Origon	2026-06-06 00:34:49 (1 day ago)	http-wordpress-scan - IP: 45.91.22.80 - time="2026-06-06T02:34:48+02:00" level=info msg="(555f66b4f ... show more http-wordpress-scan - IP: 45.91.22.80 - time="2026-06-06T02:34:48+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-wordpress-scan by ip 45.91.22.80 (FR/137409) : 4h ban on Ip 45.91.22.80" module=db show less	Web App Attack
Anonymous	2026-06-06 00:21:13 (1 day ago)	Web App Attack	Brute-Force Exploited Host Web App Attack
🇺🇦 URAN Publishing Service	2026-05-20 07:11:39 (2 weeks ago)	45.91.22.80 - - [20/May/2026:10:11:39 +0300] "GET /wp-content/plugins/enhanced-text-widget/analyst/s ... show more 45.91.22.80 - - [20/May/2026:10:11:39 +0300] "GET /wp-content/plugins/enhanced-text-widget/analyst/src/403x.php HTTP/1.1" 404 716 "-" "Go-http-client/1.1" ... show less	Web App Attack
🇺🇦 URAN Publishing Service	2026-05-20 03:28:48 (2 weeks ago)	45.91.22.80 - - [20/May/2026:06:28:48 +0300] "GET /wp-content/plugins/hello-plus/classes/ehp-social- ... show more 45.91.22.80 - - [20/May/2026:06:28:48 +0300] "GET /wp-content/plugins/hello-plus/classes/ehp-social-elf.php HTTP/1.1" 404 707 "-" "Go-http-client/1.1" ... show less	Web App Attack
Anonymous	2026-05-20 02:23:26 (2 weeks ago)	Web attack blocked by Wordfence on heemkundesjin.nl (2 hits). Reported by CRMON.	Web App Attack
🇺🇦 URAN Publishing Service	2026-05-19 19:04:49 (2 weeks ago)	45.91.22.80 - - [19/May/2026:22:04:48 +0300] "GET /wp-content/plugins/so-pinyin-slugs/inc/main_json. ... show more 45.91.22.80 - - [19/May/2026:22:04:48 +0300] "GET /wp-content/plugins/so-pinyin-slugs/inc/main_json.php HTTP/1.1" 404 713 "-" "Go-http-client/1.1" 45.91.22.80 - - [19/May/2026:22:04:48 +0300] "GET /wp-content/plugins/WPManager/up.php HTTP/1.1" 404 713 "-" "Go-http-client/1.1" ... show less	Web App Attack
🇩🇪 ger-stg-sifi1	2026-05-18 23:01:44 (2 weeks ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇫🇷 dynamix	2026-05-18 22:44:36 (2 weeks ago)	WordPress wp-login.php Brute Force Attack	Brute-Force Web App Attack
🇩🇪 itsolon	2026-05-17 01:50:42 (3 weeks ago)	45.91.22.80 - - [17/May/2026:03:46:54 +0200] "POST /wp-login.php HTTP/1.1" 200 3853 "https://www.ska ... show more 45.91.22.80 - - [17/May/2026:03:46:54 +0200] "POST /wp-login.php HTTP/1.1" 200 3853 "https://www.skantek.net/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36" 45.91.22.80 - - [17/May/2026:03:47:16 +0200] "POST /wp-login.php HTTP/1.1" 200 3858 "https://www.skantek.net/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36" 45.91.22.80 - - [17/May/2026:03:48:56 +0200] "POST /wp-login.php HTTP/1.1" 200 3859 "https://www.skantek.net/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.54 Safari/537.36" 45.91.22.80 - - [17/May/2026:03:50:41 +0200] "POST /wp-login.php HTTP/1.1" 200 3857 "https://www.skantek.net/wp-admin/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" ... show less	Brute-Force Web App Attack
🇺🇸 nationaleventpros.com	2026-05-06 21:24:47 (1 month ago)	vulnerability scan	Web App Attack
🇺🇸 TPI-Abuse	2026-04-22 17:04:24 (1 month ago)	(mod_security) mod_security (id:234930) triggered by 45.91.22.80 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:234930) triggered by 45.91.22.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 22 13:04:17.952512 2026] [security2:error] [pid 30440:tid 30440] [client 45.91.22.80:48881] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\/lib\\\\/php\\\\/connector\\\\.minimal\\\\.php$" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/27_Apps_WPPlugin.conf"] [line "6778"] [id "234930"] [rev "2"] [msg "COMODO WAF: File upload vulnerability in the file manager plugin before 6.9 for WordPress (CVE-2020-25213)\|\|robcruickshank.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "robcruickshank.net"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "aej_kWzGqtnDzAVUCZ9VxQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-04-17 14:11:21 (1 month ago)	Excessive 404/403 errors	Brute-Force
🇨🇦 Mediashaker	2026-04-14 20:20:01 (1 month ago)	(apache-scanners) Failed apache-scanners trigger with match [redacted] from 45.91.22.80 (FR/France/- ... show more (apache-scanners) Failed apache-scanners trigger with match [redacted] from 45.91.22.80 (FR/France/-) show less	Port Scan

Showing 1 to 15 of 58 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.124

🇬🇧 193.163.125.134

🇳🇮 186.77.204.105

🇲🇳 180.149.125.229

🇨🇳 180.100.198.68

🇺🇸 165.154.162.239

🇩🇪 157.230.21.37

🇧🇮 154.117.199.56

🇩🇪 88.214.25.125

🇳🇱 45.148.10.152

🇵🇪 38.250.157.114

🇰🇷 211.37.174.180

🇦🇷 186.22.238.72

🇨🇳 111.61.177.190

🇷🇺 77.222.35.115

🇸🇬 47.236.42.244

🇩🇪 43.157.98.118

🇵🇰 223.29.232.10

🇧🇪 198.235.24.209

🇨🇱 186.189.112.175