JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.92.1.242

45.92.1.242 was found in our database!

This IP was reported 318 times. Confidence of Abuse is 100%: ?

100%

ISP	1337 Services GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS210558
Domain Name	as210558.net
Country	🇳🇱 Netherlands
City	Lelystad, Flevoland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.92.1.242

Whois 45.92.1.242

IP Abuse Reports for 45.92.1.242:

This IP address has been reported a total of 318 times from 164 distinct sources. 45.92.1.242 was first reported on May 25th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Webhoster	2026-05-28 19:06:35 (6 days ago)	{"ClientAddr":"104.23.170.195:13148","ClientHost":"45.92.1.242","ClientPort":"13148","ClientUsername ... show more {"ClientAddr":"104.23.170.195:13148","ClientHost":"45.92.1.242","ClientPort":"13148","ClientUsername":"-","DownstreamContentSize":0,"DownstreamStatus":429,"Duration":406396,"OriginContentSize":0,"OriginDuration":0,"OriginStatus":0,"Overhead":406396,"RequestAddr":"timvdberg.dev","RequestContentSize":0,"RequestCount":4695,"RequestHost":"timvdberg.dev","RequestMethod":"GET","RequestPath":"/wp-includes/wlwmanifest.xml","RequestPort":"-","RequestProtocol":"HTTP/2.0","RequestScheme":"https","RetryAttempts":0,"RouterName":"https-0-omari8kj3ono91z1qv5lbj10-coraza-www@docker","StartLocal":"2026-05-28T19:06:34.948376037Z","StartUTC":"2026-05-28T19:06:34.948376037Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"https","level":"info","msg":"","request_Cf-Connecting-Ip":"45.92.1.242","request_X-Forwarded-For":"45.92.1.242","request_X-Real-Ip":"104.23.170.195","time":"2026-05-28T19:06:34Z"} {"ClientAddr":"104.23.170.195:13148","ClientHost":"45.92.1.242","ClientPort":"1314 ... show less	Port Scan Hacking Bad Web Bot Web App Attack
🇩🇪 IVski	2026-05-28 19:04:01 (6 days ago)	IVski WAF \| WordPress scanner detected - probing wp-content, xmlrpc or wp-login	Port Scan Brute-Force Web App Attack
🇫🇷 eselpcore.com	2026-05-28 18:17:15 (6 days ago)	Requests to non‑existent PHP scripts (web‑shell probing)	Web App Attack
🇩🇪 on-com	2026-05-28 17:59:58 (6 days ago)	URL scan	Brute-Force Web App Attack
🇫🇷 applemooz	2026-05-28 17:51:02 (6 days ago)	WordPress XMLRPC Brute Force Attacks ...	Brute-Force Web App Attack
🇩🇪 LRob.fr	2026-05-28 17:45:06 (6 days ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot
🇹🇷 Threat.live	2026-05-28 17:25:04 (6 days ago)	Suspicious Connection Attempts	Brute-Force
🇦🇩 bakunin1848	2026-05-28 17:18:05 (6 days ago)	Firewall IPS Detection on 28-05-2026 at 19:18:05	Port Scan Exploited Host
🇫🇷 Kenshin869	2026-05-28 16:43:18 (6 days ago)	Wordpress unauthorized access attempt	Brute-Force
🇩🇪 pltcldvlpr	2026-05-28 16:41:54 (6 days ago)	CMS/framework probe: 45.92.1.242 - - [28/May/2026:18:41:54 +0200] "GET //wp-includes/wlwmanifest.xml ... show more CMS/framework probe: 45.92.1.242 - - [28/May/2026:18:41:54 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 10692 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" asn=210558 org="1337 Services GmbH" country=NL ... show less	Web App Attack
Anonymous	2026-05-28 15:02:29 (6 days ago)	45.92.1.242 - - [28/May/2026:17:02:28 +0200] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 301 "-" ... show more 45.92.1.242 - - [28/May/2026:17:02:28 +0200] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 301 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.92.1.242 - - [28/May/2026:17:02:28 +0200] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 450 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.92.1.242 - - [28/May/2026:17:02:28 +0200] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 301 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.92.1.242 - - [28/May/2026:17:02:28 +0200] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 450 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.92.1.242 - - [28/May/2026:17:02:28 +0200] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 450 "-" "Mozilla/ ... show less	Brute-Force Web App Attack
🇬🇧 Smish	2026-05-28 13:31:57 (6 days ago)	HONEYPOT HIT --> Fail2ban time=1779975116 log=2026-05-28T14:31:56+01:00 ip=45.92.1.242 host=router.h ... show more HONEYPOT HIT --> Fail2ban time=1779975116 log=2026-05-28T14:31:56+01:00 ip=45.92.1.242 host=router.ham.as210667.net method=GET uri="//xmlrpc.php?rsd" status=404 ua="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" ref="-" rid=f7ed5944ff6543d3157d9903d77afc18 show less	Web App Attack
🇫🇷 Campus France	2026-05-28 11:19:46 (6 days ago)	[Wed May 27 20:32:35.981113 2026] [php:error] [pid 1703248] [client 45.92.1.242:56040] script '/var/ ... show more [Wed May 27 20:32:35.981113 2026] [php:error] [pid 1703248] [client 45.92.1.242:56040] script '/var/www/html/xmlrpc.php' not found or unable to stat [Wed May 27 20:55:38.176400 2026] [php:error] [pid 1714195] [client 45.92.1.242:59785] script '/var/www/html/xmlrpc.php' not found or unable to stat [Thu May 28 01:19:37.242966 2026] [php:error] [pid 1849097] [client 45.92.1.242:51918] script '/var/www/html/xmlrpc.php' not found or unable to stat [Thu May 28 10:03:49.808321 2026] [php:error] [pid 2108262] [client 45.92.1.242:54671] script '/var/www/html/xmlrpc.php' not found or unable to stat [Thu May 28 13:19:46.175062 2026] [php:error] [pid 2198524] [client 45.92.1.242:55206] script '/var/www/html/xmlrpc.php' not found or unable to stat ... show less	Brute-Force Web App Attack
🇳🇱 i-turnradio.nl	2026-05-28 10:04:00 (6 days ago)	2026-05-28 @ 12:04:00 (CET) ~ Blocked for trying to access: /wp-includes/wlwmanifest.xml	Web App Attack
Anonymous	2026-05-28 09:32:06 (1 week ago)	FortiWeb WAF: 28 attacks detected. Threat Score: 6300. Types: Client Management(14), Block IP List(1 ... show more FortiWeb WAF: 28 attacks detected. Threat Score: 6300. Types: Client Management(14), Block IP List(14). Origin: Netherlands. show less	Web App Attack

Showing 181 to 195 of 318 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 185.198.240.116

🇸🇬 103.134.154.36

🇺🇸 212.102.40.218

🇰🇷 210.204.63.182

🇩🇿 197.200.154.252

🇬🇧 193.32.209.240

🇪🇸 185.9.193.111

🇺🇸 162.216.149.250

🇮🇩 157.15.73.34

🇫🇮 138.124.80.167

🇵🇱 87.251.64.145

🇭🇰 65.181.88.245

🇳🇱 45.148.10.141

🇸🇬 18.136.107.149

🇸🇬 4.194.4.255

🇫🇷 2001:41d0:33d:9200::400

🇻🇳 222.252.75.86

🇺🇸 172.174.72.225

🇳🇬 165.154.176.251

🇩🇪 159.195.151.66