JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.91.20.192

45.91.20.192 was found in our database!

This IP was reported 107 times. Confidence of Abuse is 51%: ?

51%

ISP	VPN Consumer Milan, Italy
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Domain Name	vpnconsumer.com
Country	🇮🇹 Italy
City	Milan, Lombardy

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.91.20.192

Whois 45.91.20.192

IP Abuse Reports for 45.91.20.192:

This IP address has been reported a total of 107 times from 44 distinct sources. 45.91.20.192 was first reported on October 1st 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 marten_o	2026-08-23 07:06:04 (2 days ago)	45.91.20.192 - - [23/Aug/2026:09:06:04 +0200] "GET /tmp/nraks7.php HTTP/1.1" 500 565 "-" "Mozilla/5. ... show more 45.91.20.192 - - [23/Aug/2026:09:06:04 +0200] "GET /tmp/nraks7.php HTTP/1.1" 500 565 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 382 763 ... show less	Web App Attack
🇺🇸 oijon.net	2026-08-23 06:33:12 (2 days ago)	[Sun Aug 23 02:33:06.963356 2026] [php:error] [pid 335839:tid 335839] [client 45.91.20.192:37943] sc ... show more [Sun Aug 23 02:33:06.963356 2026] [php:error] [pid 335839:tid 335839] [client 45.91.20.192:37943] script '/var/www/consus/index.php' not found or unable to stat [Sun Aug 23 02:33:08.465609 2026] [php:error] [pid 335839:tid 335839] [client 45.91.20.192:37943] script '/var/www/consus/index.php' not found or unable to stat [Sun Aug 23 02:33:09.466784 2026] [php:error] [pid 335839:tid 335839] [client 45.91.20.192:37943] script '/var/www/consus/index.php' not found or unable to stat [Sun Aug 23 02:33:10.666065 2026] [php:error] [pid 335839:tid 335839] [client 45.91.20.192:37943] script '/var/www/consus/index.php' not found or unable to stat [Sun Aug 23 02:33:12.260327 2026] [php:error] [pid 335839:tid 335839] [client 45.91.20.192:37943] script '/var/www/consus/index.php' not found or unable to stat ... show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-19 10:18:16 (6 days ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇦🇺 rubixstudios	2026-08-17 02:46:02 (1 week ago)	Excessive HTTP requests consistent with automated attack behaviour detected by Imunify360	DDoS Attack Brute-Force Web App Attack
🇺🇦 URAN Publishing Service	2026-08-16 23:07:20 (1 week ago)	[17/Aug/2026:02:07:20 +0300] -- 45.91.20.192 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp-co ... show more [17/Aug/2026:02:07:20 +0300] -- 45.91.20.192 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp-content/plugins/ubh/ HTTP/1.1 show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-16 12:56:12 (1 week ago)	(mod_security) mod_security (id:240000) triggered by 45.91.20.192 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240000) triggered by 45.91.20.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 08:56:03.843576 2026] [security2:error] [pid 21550:tid 21550] [client 45.91.20.192:44679] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|thehandyfamily.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "thehandyfamily.net"] [uri "/images/stories/themes.php"] [unique_id "aoGzY3BvHqVZocLMEt9DqwAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Octopuce	2026-08-16 09:33:17 (1 week ago)	Aggressive web search of vulnerable pages: /feed/ /templates/beez/ /css/ /assets/ /wp-content/plugin ... show more Aggressive web search of vulnerable pages: /feed/ /templates/beez/ /css/ /assets/ /wp-content/plugins/wp-theme-editor/ /wp-content/plugins/up/ ... show less	Web App Attack
🇬🇧 consul.to	2026-07-22 07:41:19 (1 month ago)	Web attack/malicious scanning detected	Web App Attack
🇪🇸 masterguru	2026-07-17 02:00:45 (1 month ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-122) show less	Bad Web Bot
🇬🇧 consul.to	2026-07-04 20:37:58 (1 month ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 YF	2026-07-01 07:10:31 (1 month ago)	Attaque distribuée subnet	DDoS Attack Web App Attack
🇩🇪 Viveronese	2026-07-01 02:22:44 (1 month ago)	HTTP vulnerability scanning	Web App Attack
🇩🇪 ghostwarriors	2026-07-01 01:50:06 (1 month ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-28 01:17:16 (1 month ago)	Aggressive web scan	Web App Attack
🇪🇸 masterguru	2026-06-22 10:47:05 (2 months ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-122) show less	Bad Web Bot

Showing 1 to 15 of 107 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇭 210.1.31.106

🇺🇸 205.210.31.73

🇫🇷 185.177.72.30

🇨🇳 101.126.69.201

🇳🇱 45.148.10.152

🇷🇴 2.57.121.112

🇺🇸 216.24.219.59

🇨🇦 208.96.233.67

🇰🇷 112.153.4.120

🇭🇰 103.197.71.1

🇺🇸 91.230.168.129

🇩🇪 77.72.131.113

🇲🇾 49.124.148.201

🇦🇺 202.47.1.13

🇺🇸 192.101.68.88

🇫🇮 147.185.133.17

🇨🇳 101.89.141.184

🇵🇱 74.248.24.12

🇬🇧 216.213.188.26

🇵🇦 191.98.196.35