JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.91.23.90

45.91.23.90 was found in our database!

This IP was reported 128 times. Confidence of Abuse is 26%: ?

26%

ISP	VPN Consumer Montreal, Canada
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	vpnconsumer.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.91.23.90

Whois 45.91.23.90

IP Abuse Reports for 45.91.23.90:

This IP address has been reported a total of 128 times from 65 distinct sources. 45.91.23.90 was first reported on June 7th 2022, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 neron	2026-08-15 15:06:48 (5 days ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
Anonymous	2026-07-13 12:18:43 (1 month ago)	[osotir.org] httpd-suspicious-path: sites=www.logosparakliseos.gr; logs=/var/log/httpd/domains/logos ... show more [osotir.org] httpd-suspicious-path: sites=www.logosparakliseos.gr; logs=/var/log/httpd/domains/logosparakliseos.gr.log; samples=/wp-content/themes/fukasawa/inc/classes/403.php \| /wp-content/plugins/hello-plus/classes/ehp-sarang.php \| /wp-content/plugins/so-pinyin-slugs/inc/main_json.php show less	Hacking Web App Attack
🇬🇷 setupgr	2026-07-13 09:21:50 (1 month ago)	(mod_security) mod_security (id:1000001) triggered by 45.91.23.90 (CA/Canada/Quebec/Mascouche/-/[AS2 ... show more (mod_security) mod_security (id:1000001) triggered by 45.91.23.90 (CA/Canada/Quebec/Mascouche/-/[AS212238 CDNEXT]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Mon Jul 13 12:21:47.014703 2026] [security2:error] [pid 3028:tid 3188] [client 45.91.23.90:22877] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/db.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "103"] [id "1000001"] [msg "Bad file blocked: /wp-content/themes/pridmag/db.php"] [severity "CRITICAL"] [tag "security"] [hostname "sea-sound.com"] [uri "/wp-content/themes/pridmag/db.php"] [unique_id "alSuK2zIjd68k1ygCGrKmgAAA1c"] show less	Port Scan
🇩🇪 FeG Deutschland	2026-07-13 06:26:25 (1 month ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 127	Exploited Host Web App Attack
🇩🇪 IVski	2026-07-13 05:09:24 (1 month ago)	IVski WAF \| WordPress scanner detected - probing wp-content, xmlrpc or wp-login	Port Scan Brute-Force Web App Attack
🇩🇪 filstal.org	2026-07-13 02:34:39 (1 month ago)	Web reconnaissance detected: automated probing for sensitive files, backup archives, admin panels an ... show more Web reconnaissance detected: automated probing for sensitive files, backup archives, admin panels and known vulnerability paths. show less	Hacking Brute-Force Web App Attack
Anonymous	2026-06-23 07:26:22 (1 month ago)	45.91.23.90 - - [23/Jun/2026:07:26:21 +0000] "GET /wp-content/plugins/StylePlugin/up.php HTTP/1.1" 4 ... show more 45.91.23.90 - - [23/Jun/2026:07:26:21 +0000] "GET /wp-content/plugins/StylePlugin/up.php HTTP/1.1" 404 2767 "http://alien.net.au/wp-content/plugins/StylePlugin/up.php" "Go-http-client/1.1" ... show less	Bad Web Bot Web App Attack
🇩🇪 Vegascosmetics	2026-06-23 06:57:16 (1 month ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after PHP/webshell probe. Vegas Security	DDoS Attack Hacking Exploited Host
🇫🇷 rellik	2026-06-18 20:50:00 (2 months ago)	Mass Scanning Critical Files, Potential Part of BotNet	Hacking DDoS Attack Brute-Force Web App Attack
🇺🇦 URAN Publishing Service	2026-06-18 20:12:21 (2 months ago)	45.91.23.90 - - [18/Jun/2026:23:12:19 +0300] "GET /wp-content/plugins/so-pinyin-slugs/inc/main_json. ... show more 45.91.23.90 - - [18/Jun/2026:23:12:19 +0300] "GET /wp-content/plugins/so-pinyin-slugs/inc/main_json.php HTTP/1.1" 404 712 "-" "Go-http-client/1.1" 45.91.23.90 - - [18/Jun/2026:23:12:20 +0300] "GET /wp-content/plugins/filester/assets/css/404.php HTTP/1.1" 404 712 "-" "Go-http-client/1.1" ... show less	Web App Attack
🇦🇺 aranguren.org	2026-06-05 05:48:58 (2 months ago)	45.91.23.90 - - [05/Jun/2026:15:48:56 +1000] "GET /wp-content/plugins/admin.php HTTP/1.1" 404 995 "- ... show more 45.91.23.90 - - [05/Jun/2026:15:48:56 +1000] "GET /wp-content/plugins/admin.php HTTP/1.1" 404 995 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.91.23.90 - - [05/Jun/2026:15:48:57 +1000] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 404 995 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.91.23.90 - - [05/Jun/2026:15:48:57 +1000] "GET /wp-l0gin.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.91.23.90 - - [05/Jun/2026:15:48:57 +1000] "GET /wp-includes/js/jquery/suggest.php HTTP/1.1" 404 995 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.91.23.90 - - [05/Jun/2026:15:48:58 +1000] "GET /new.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.91.23.90 - - ... show less	Bad Web Bot
Anonymous	2026-06-02 19:48:32 (2 months ago)	Multiple, malicious web requests detected	Port Scan Hacking
🇺🇸 Major Hostility	2026-06-01 15:45:52 (2 months ago)	"GET /aa.php HTTP/1.1" 404 "GET /index2.php HTTP/1.1" 404 "GET /wp-content/themes/hello-element/foot ... show more "GET /aa.php HTTP/1.1" 404 "GET /index2.php HTTP/1.1" 404 "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 404 "GET /wp-admin/network/admin.php HTTP/1.1" 404 "GET /.well-known/pki-validation/2index.php HTTP/1.1" 404 "GET /wp-content/languages/plugins.php HTTP/1.1" 404 "GET /shell.php HTTP/1.1" 404 "GET /.well-known/content.php HTTP/1.1" 404 "GET /wp-includes/Text/about.php HTTP/1.1" 404 "GET /wp-admin/network/atomlib.php HTTP/1.1" 404 "GET /.well-known/install.php HTTP/1.1" 404 "GET /hehe.php HTTP/1.1" 404 "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 404 "GET /css/slider.php HTTP/1.1" 404 "GET /dir.php HTTP/1.1" 404 "GET /wp-includes/css/atomlib.php HTTP/1.1" 404 "GET %2 show less	Web App Attack
🇫🇷 masterguru	2026-06-01 12:41:29 (2 months ago)	Too much 404 requests in 1 minute. Operator GE matched 10 at IP:block_script. (46020-193)	Hacking
🇫🇷 dynamix	2026-05-23 14:57:39 (2 months ago)	Multiple WAF Violations	Web App Attack

Showing 1 to 15 of 128 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 210.118.224.138

🇨🇳 182.88.7.124

🇫🇷 172.68.234.49

🇩🇪 167.172.168.90

🇺🇸 143.198.141.235

🇭🇰 123.58.213.128

🇺🇸 76.186.74.80

🇺🇸 98.93.248.22

🇩🇪 92.113.19.6

🇷🇴 81.181.129.252

🇻🇪 201.243.109.26

🇧🇷 189.27.74.36

🇮🇷 185.208.180.23

🇺🇦 176.103.15.169

🇺🇸 173.255.223.115

🇸🇬 172.253.211.21

🇺🇸 162.216.149.228

🇩🇪 139.19.117.197

🇹🇭 118.193.56.149

🇨🇳 101.43.22.57