JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.91.20.11

45.91.20.11 was found in our database!

This IP was reported 150 times. Confidence of Abuse is 31%: ?

31%

ISP	VPN Consumer Milan, Italy
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Domain Name	vpnconsumer.com
Country	🇮🇹 Italy
City	Milan, Lombardy

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.91.20.11

Whois 45.91.20.11

IP Abuse Reports for 45.91.20.11:

This IP address has been reported a total of 150 times from 67 distinct sources. 45.91.20.11 was first reported on July 21st 2022, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 WeCloudit-Anti-Abuse	2026-08-16 14:41:44 (6 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇹🇷 neron	2026-08-09 00:29:21 (2 weeks ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
🇺🇸 jcbriar	2026-08-05 06:44:03 (2 weeks ago)	CSRF or other malfeasance	Hacking Web App Attack
🇱🇻 garmtech.com	2026-08-03 13:49:01 (2 weeks ago)	IM360 WAF: WordPress wp2shell REST batch endpoint before 7.0.2 or 6.9.5 (CVE-2026-63030) MV:0	Hacking
🇹🇷 neron	2026-08-01 06:16:14 (3 weeks ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
🇵🇱 sefinek.net	2026-07-02 10:13:14 (1 month ago)	Triggered Cloudflare WAF (firewallCustom) from IT. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (G ... show more Triggered Cloudflare WAF (firewallCustom) from IT. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (GET) \| Endpoint: /genshin-stella-mod \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.3 Safari/605.1.15 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2026-06-30 06:08:28 (1 month ago)	45.91.20.11 - - [30/Jun/2026:08:08:18 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3106 "-" "Mozilla/5.0 ( ... show more 45.91.20.11 - - [30/Jun/2026:08:08:18 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3106 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.91.20.11 - - [30/Jun/2026:08:08:19 +0200] "POST /xmlrpc.php HTTP/1.1" 200 2915 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.91.20.11 - - [30/Jun/2026:08:08:22 +0200] "POST /xmlrpc.php HTTP/1.1" 200 368 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.91.20.11 - - [30/Jun/2026:08:08:24 +0200] "POST /xmlrpc.php HTTP/1.1" 200 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.91.20.11 - - [30/Jun/2026:08:08:27 +0200] "POST /xmlrpc.php HTTP/1.1" 200 17296 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945. ... show less	Brute-Force Web App Attack
🇬🇧 consul.to	2026-06-28 09:23:07 (1 month ago)	Web attack/malicious scanning detected	Web App Attack
Anonymous	2026-06-28 03:58:00 (1 month ago)	45.91.20.11 - - [28/Jun/2026:00:57:59 -0300] "GET /wp-content/plugins/aatdgetgdg/main.php HTTP/1.1" ... show more 45.91.20.11 - - [28/Jun/2026:00:57:59 -0300] "GET /wp-content/plugins/aatdgetgdg/main.php HTTP/1.1" 404 1185 "-" "Go-http-client/1.1" 45.91.20.11 - - [28/Jun/2026:00:57:59 -0300] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 404 1185 "-" "Go-http-client/1.1" 45.91.20.11 - - [28/Jun/2026:00:57:59 -0300] "GET /wp-content/plugins/StylePlugin/up.php HTTP/1.1" 404 1185 "-" "Go-http-client/1.1" ... show less	Port Scan
🇫🇷 Octopuce	2026-06-24 07:18:31 (1 month ago)	Aggressive web search of vulnerable pages: /wp-content/themes/builder-and-developer/inc/tgm/error.ph ... show more Aggressive web search of vulnerable pages: /wp-content/themes/builder-and-developer/inc/tgm/error.php /wp-content/themes/theme-check/theme-chec ... show less	Web App Attack
🇫🇮 YF	2026-06-22 21:00:51 (2 months ago)	WordPress directory enumeration	Web App Attack
🇩🇪 Viveronese	2026-06-15 09:36:00 (2 months ago)	HTTP vulnerability scanning	Web App Attack
Anonymous	2026-06-15 04:01:13 (2 months ago)	Multiple, malicious web requests detected	Port Scan Hacking
🇺🇦 URAN Publishing Service	2026-06-15 01:00:21 (2 months ago)	45.91.20.11 - - [15/Jun/2026:04:00:20 +0300] "GET /wp-admin/maint/index.php HTTP/1.1" 404 706 "-" "G ... show more 45.91.20.11 - - [15/Jun/2026:04:00:20 +0300] "GET /wp-admin/maint/index.php HTTP/1.1" 404 706 "-" "Go-http-client/1.1" 45.91.20.11 - - [15/Jun/2026:04:00:21 +0300] "GET /wp-admin/js/index.php HTTP/1.1" 404 706 "-" "Go-http-client/1.1" ... show less	Web App Attack
🇮🇩 Burayot	2026-06-14 21:28:11 (2 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 45.91.20.11 (IT/Italy/-): 2 in the ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 45.91.20.11 (IT/Italy/-): 2 in the last 3600 secs show less	Web App Attack

Showing 1 to 15 of 150 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 203.192.211.180

🇩🇪 194.88.98.83

🇨🇱 190.20.155.151

🇺🇸 172.217.46.156

🇨🇦 165.227.42.100

🇫🇮 147.185.133.77

🇨🇳 115.197.85.24

🇳🇱 45.148.10.37

🇬🇧 35.203.210.160

🇺🇸 2607:f8b0:4001:c6c::12d

🇨🇴 181.61.84.26

🇮🇳 150.107.241.129

🇧🇷 131.196.204.232

🇺🇸 100.29.192.90

🇲🇰 79.125.220.165

🇺🇸 72.215.32.216

🇳🇱 45.148.10.25

🇬🇧 35.203.211.117

🇷🇴 2.57.122.238

🇬🇧 2a06:4880:c000::f3