JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.92.229.58

45.92.229.58 was found in our database!

This IP was reported 126 times. Confidence of Abuse is 75%: ?

75%

ISP	VPN Consumer New York City, United States of America
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	vpnconsumer.com
Country	🇺🇸 United States of America
City	New York City, New York

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.92.229.58

Whois 45.92.229.58

IP Abuse Reports for 45.92.229.58:

This IP address has been reported a total of 126 times from 73 distinct sources. 45.92.229.58 was first reported on April 9th 2023, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob.fr	2026-05-28 17:30:04 (6 days ago)	WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail	Brute-Force Web App Attack
Anonymous	2026-05-12 23:25:21 (3 weeks ago)	45.92.229.58 - - [13/May/2026:01:14:58 +0200] "POST /wp-login.php HTTP/1.0" 200 9395 "-" "Mozilla/5. ... show more 45.92.229.58 - - [13/May/2026:01:14:58 +0200] "POST /wp-login.php HTTP/1.0" 200 9395 "-" "Mozilla/5.0" 45.92.229.58 - - [13/May/2026:01:15:00 +0200] "POST /wp-login.php HTTP/1.1" 200 8923 "-" "Mozilla/5.0" 45.92.229.58 - - [13/May/2026:01:25:10 +0200] "POST /wp-login.php HTTP/1.0" 200 8951 "-" "Mozilla/5.0" 45.92.229.58 - - [13/May/2026:01:25:12 +0200] "POST /wp-login.php HTTP/1.1" 200 8479 "-" "Mozilla/5.0" 45.92.229.58 - - [13/May/2026:01:25:20 +0200] "POST /wp-login.php HTTP/1.0" 200 7079 "-" "Mozilla/5.0" ... show less	Brute-Force Web App Attack
🇺🇸 NicoID	2026-05-06 00:16:37 (4 weeks ago)	45.92.229.58 - - [05/May/2026:07:05:48 -0600] "POST /wp-login.php HTTP/1.1" 200 8208 "-" "Mozilla/5. ... show more 45.92.229.58 - - [05/May/2026:07:05:48 -0600] "POST /wp-login.php HTTP/1.1" 200 8208 "-" "Mozilla/5.0" ... show less	Brute-Force
🇫🇷 Baking333	2026-05-03 19:46:03 (1 month ago)	[redacted] 45.92.229.58 - - [03/May/2026:20:46:00 +0100] "GET /[redacted] HTTP/1.1" 302 5273 0/96030 ... show more [redacted] 45.92.229.58 - - [03/May/2026:20:46:00 +0100] "GET /[redacted] HTTP/1.1" 302 5273 0/96030 "-" "Mozilla/5.0" [redacted] 45.92.229.58 - - [03/May/2026:20:46:01 +0100] "GET /wp-admin/ HTTP/1.1" 301 606 0/274 "-" "Mozilla/5.0" show less	Bad Web Bot Web App Attack
🇩🇪 LRob.fr	2026-04-27 14:15:04 (1 month ago)	WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail	Brute-Force Web App Attack
🇫🇮 YF	2026-04-27 01:01:37 (1 month ago)	Attaque distribuée subnet	DDoS Attack Web App Attack
🇺🇸 TPI-Abuse	2026-04-24 00:37:40 (1 month ago)	(mod_security) mod_security (id:240000) triggered by 45.92.229.58 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240000) triggered by 45.92.229.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 23 20:37:36.086259 2026] [security2:error] [pid 527818:tid 527818] [client 45.92.229.58:64665] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|lemoulinavent.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "lemoulinavent.org"] [uri "/images/stories/themes.php"] [unique_id "aeq7UCBQRpEi6q_3ZLvkIAAAAC8"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 Erpelstolz	2026-04-23 23:31:46 (1 month ago)	external host: 45.92.229.58 - - [24/Apr/2026:01:31:44 +0200] "GET /wp-content/plugins/admin.php HTTP ... show more external host: 45.92.229.58 - - [24/Apr/2026:01:31:44 +0200] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 536 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" show less	Web App Attack
🇺🇸 xmission.com	2026-04-21 13:12:36 (1 month ago)	45.92.229.58 - - [21/Apr/2026:07:12:36 -0600] "POST /wp-login.php HTTP/1.1" 200 6929 "-" "Mozilla/5. ... show more 45.92.229.58 - - [21/Apr/2026:07:12:36 -0600] "POST /wp-login.php HTTP/1.1" 200 6929 "-" "Mozilla/5.0" ... show less	Brute-Force
🇺🇸 myagent.site	2026-03-04 08:47:38 (2 months ago)	Blocking for trying to access an exploit file: /xmlrpc.php	Hacking
🇺🇸 mind5t0rm	2026-03-04 04:22:14 (2 months ago)	(WPLOGIN) WP Login Attack 45.92.229.58 (US/United States/-): 3 in the last 3600 secs; Ports: ; Dire ... show more (WPLOGIN) WP Login Attack 45.92.229.58 (US/United States/-): 3 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: 45.92.229.58 - - [04/Mar/2026:10:46:07 +0700] "POST /wp-login.php HTTP/2.0" 200 2605 "-" "Mozilla/5.0" 45.92.229.58 - - [04/Mar/2026:11:02:45 +0700] "POST /wp-login.php HTTP/2.0" 200 2605 "-" "Mozilla/5.0" 45.92.229.58 - - [04/Mar/2026:11:22:10 +0700] "POST /wp-login.php HTTP/2.0" 200 2603 "-" "Mozilla/5.0" show less	Port Scan
🇩🇪 kernel-error.de	2026-03-03 14:30:47 (3 months ago)	45.92.229.58 - - [03/Mar/2026:15:30:09 +0100] "GET //wp-content/plugins/hellopress/wp_filemanager.ph ... show more 45.92.229.58 - - [03/Mar/2026:15:30:09 +0100] "GET //wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 146 "-" "-" www.kernel-error.de HTTP/1.1 https 0.000 - - - TLSv1.3 TLS_AES_256_GCM_SHA384 - 45.92.229.58 - - [03/Mar/2026:15:30:38 +0100] "GET //wp-includes/Requests/about.php HTTP/1.1" 404 146 "-" "-" www.kernel-error.de HTTP/1.1 https 0.000 - - - TLSv1.3 TLS_AES_256_GCM_SHA384 - 45.92.229.58 - - [03/Mar/2026:15:30:38 +0100] "GET //wp-includes/style-engine/about.php HTTP/1.1" 404 146 "-" "-" www.kernel-error.de HTTP/1.1 https 0.000 - - - TLSv1.3 TLS_AES_256_GCM_SHA384 - 45.92.229.58 - - [03/Mar/2026:15:30:41 +0100] "GET //wp-content/plugins/core/include.php HTTP/1.1" 404 146 "-" "-" www.kernel-error.de HTTP/1.1 https 0.000 - - - TLSv1.3 TLS_AES_256_GCM_SHA384 - 45.92.229.58 - - [03/Mar/2026:15:30:42 +0100] "GET //wp-includes/js/tinymce/skins/lightgray/img/index.php?p= HTTP/1.1" 404 146 "-" "-" www.kernel-error.de HTTP/1.1 https 0.000 - - - TLSv1.3 TLS_AES_256_GCM_SHA384 ... show less	Web App Attack
🇫🇷 dynamix	2026-03-03 07:51:56 (3 months ago)	Multiple WAF Violations	Web App Attack
🇫🇮 Christopher Hughes	2026-03-03 01:42:55 (3 months ago)	[Tue Mar 03 01:42:53.308537 2026] [proxy_fcgi:error] [pid 631125:tid 139767337436736] [client 45.92. ... show more [Tue Mar 03 01:42:53.308537 2026] [proxy_fcgi:error] [pid 631125:tid 139767337436736] [client 45.92.229.58:35121] AH01071: Got error 'Primary script unknown' [Tue Mar 03 01:42:53.723741 2026] [proxy_fcgi:error] [pid 631125:tid 139768100812352] [client 45.92.229.58:35121] AH01071: Got error 'Primary script unknown' [Tue Mar 03 01:42:54.517130 2026] [proxy_fcgi:error] [pid 631125:tid 139768050456128] [client 45.92.229.58:35121] AH01071: Got error 'Primary script unknown' [Tue Mar 03 01:42:55.165850 2026] [proxy_fcgi:error] [pid 631125:tid 139767471654464] [client 45.92.229.58:35121] AH01071: Got error 'Primary script unknown' [Tue Mar 03 01:42:55.446449 2026] [proxy_fcgi:error] [pid 631125:tid 139767337436736] [client 45.92.229.58:35121] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇫🇷 dynamix	2026-03-02 00:53:50 (3 months ago)	Multiple WAF Violations	Web App Attack

Showing 16 to 30 of 126 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 195.122.253.45

🇳🇱 192.142.24.156

🇮🇳 182.95.47.2

🇩🇪 130.12.181.101

🇨🇳 125.75.110.72

🇰🇪 104.22.30.144

🇮🇩 103.36.11.239

🇩🇪 43.228.157.179

🇬🇧 35.203.210.231

🇬🇧 35.203.210.189

🇫🇷 192.162.71.230

🇲🇽 186.96.145.241

🇺🇸 170.187.165.134

🇺🇸 162.216.149.185

🇨🇳 116.207.108.230

🇨🇳 103.205.5.203

🇳🇱 77.83.39.101

🇩🇪 43.228.157.234

🇲🇲 37.111.53.110

🇳🇱 213.177.179.175