JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

45.83.216.28

Activity Trending Down

Abuse Confidence Score

39% Elevated

29 reports

23 reporters · latest 1 month ago

ISP: OPTIC NET Ltd.
Usage Type: Fixed Line ISP
ASN: AS12436
Domain Name: bergon.net
Country: 🇧🇬 Bulgaria
City: Dobrich, Dobrich

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

29 from 23 distinct reporters

First reported

February 18th 2023

Most recent report

1 month ago

Last 60 days

Top reporter locations 🇩🇪 Germany 9 🇺🇸 United States of America 7 🇲🇽 Mexico 2

Most common categories Web App Attack 17 Bad Web Bot 7 Brute-Force 6 Exploited Host 3 SQL Injection 2

Old reports The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 maxpower	2026-09-30 09:10:48 (1 month ago)	(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 45.83.216.28 (BG/Bulgaria/28.216.83.45.opticnet.bergon.net): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 45.83.216.28 - - [30/Sep/2026:11:10:44 +0200] "PO ... show more (wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 45.83.216.28 (BG/Bulgaria/28.216.83.45.opticnet.bergon.net): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 45.83.216.28 - - [30/Sep/2026:11:10:44 +0200] "POST /xmlrpc.php HTTP/2.0" 200 4807 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" "-" host=matteodinicola.net show less	Port Scan
🇺🇸 鬼影233	2026-09-29 10:20:58 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36	Bad Web Bot
🇲🇽 octageeks.com	2026-09-29 04:11:54 (1 month ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇵🇱 lns.bz	2026-09-29 03:02:13 (1 month ago)	Web app attack [PL.Lu]	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-09-28 18:23:38 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 45.83.216.28 (28.216.83.45.opticnet.bergon.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 14:23:33.492796 2026] [security2:error] [pid 15320:tid 15320] ... show more (mod_security) mod_security (id:225170) triggered by 45.83.216.28 (28.216.83.45.opticnet.bergon.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 14:23:33.492796 2026] [security2:error] [pid 15320:tid 15320] [client 45.83.216.28:14024] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|americanureport.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "americanureport.com"] [uri "/wp-json/wp/v2/users"] [unique_id "arqwpbKIZfnuPZym0oF6lQAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-09-28 14:06:05 (1 month ago)	Web exploit attempt \| method: GET \| path: /wp-json/wp/v2/users \| ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36	Hacking Web App Attack
🇩🇪 ger-stg-sifi1	2026-09-28 06:03:15 (1 month ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇺🇸 TPI-Abuse	2026-09-27 21:18:23 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 45.83.216.28 (28.216.83.45.opticnet.bergon.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 27 17:18:19.120144 2026] [security2:error] [pid 16255:tid 16255] ... show more (mod_security) mod_security (id:225170) triggered by 45.83.216.28 (28.216.83.45.opticnet.bergon.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 27 17:18:19.120144 2026] [security2:error] [pid 16255:tid 16255] [client 45.83.216.28:64236] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|vespaitaliancafe.matteozacchino.dev\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vespaitaliancafe.matteozacchino.dev"] [uri "/wp-json/wp/v2/users/me"] [unique_id "armIG3Fc2rHpcWS1v3DfcAAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2026-09-27 16:02:25 (1 month ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257	Exploited Host Web App Attack
🇩🇪 BlueWire Hosting	2026-09-27 14:32:19 (1 month ago)	Probing websites for vulnerabilities	Web App Attack SQL Injection
🇷🇴 SpamStopper	2026-09-27 13:31:05 (1 month ago)	Fail2Ban - WP Spoofing	Port Scan Brute-Force Web App Attack
🇳🇿 Tripwire	2026-09-27 02:41:14 (1 month ago)	Wordpress login attempts	Brute-Force Web App Attack
🇩🇪 FeG Deutschland	2026-09-26 04:59:24 (1 month ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 27	Exploited Host Web App Attack
🇲🇽 octageeks.com	2026-09-26 04:13:27 (1 month ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇺🇸 鬼影233	2026-09-24 14:41:55 (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36	Bad Web Bot

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

172.26.240.224

🇳🇱 77.67.26.63

🇱🇹 62.60.134.148

🇭🇰 49.213.6.30

🇺🇸 24.144.117.45

🇩🇪 185.192.21.82

🇺🇸 172.248.233.154

172.21.179.195

🇩🇪 167.94.146.59

🇺🇸 167.71.95.94

🇺🇸 104.248.125.150

🇵🇰 103.191.122.83

🇻🇳 103.53.158.121

🇺🇸 67.205.134.138

🇨🇳 60.29.41.58

🇮🇪 54.155.168.200

🇮🇳 34.47.152.236

🇺🇸 23.92.26.28

🇺🇸 23.92.26.16

🇬🇧 13.42.19.152