JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

45.131.195.191

Activity Trending Down

Abuse Confidence Score

58% Elevated

297 reports

130 reporters · latest 2 weeks ago

ISP: VPN Consumer Secaucus, NJ, USA
Usage Type: Data Center/Web Hosting/Transit
ASN: AS62240
Domain Name: vpnconsumer.com
Country: 🇺🇸 United States of America
City: Secaucus, New Jersey

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

297 from 130 distinct reporters

First reported

November 5th 2022

Most recent report

2 weeks ago

Last 60 days

Top reporter locations 🇳🇱 Netherlands 10 🇩🇪 Germany 8 🇺🇸 United States of America 5

Most common categories Web App Attack 29 Brute-Force 16 Hacking 4 Exploited Host 3 SSH 3

Old reports The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Viveronese	2026-10-14 03:35:13 (2 weeks ago)	Wordpress vulnerability scanning	Web App Attack
🇳🇱 Site.eu	2026-10-14 02:00:17 (2 weeks ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇺🇸 Ben Schoolland	2026-10-13 22:19:37 (3 weeks ago)	WordPress credential brute-force against chalkwild.com: 4 failed POST /wp-login.php (HTTP 200, login form re-rendered) between 13/Oct/2026:05:04:26 and 13/Oct/2026:08:34:46 UTC, plus 6 GET /wp-admin/ probes that returned 302 to the login page. User-A ... show more WordPress credential brute-force against chalkwild.com: 4 failed POST /wp-login.php (HTTP 200, login form re-rendered) between 13/Oct/2026:05:04:26 and 13/Oct/2026:08:34:46 UTC, plus 6 GET /wp-admin/ probes that returned 302 to the login page. User-Agent rotated across 10 distinct strings from this single address. Part of a coordinated campaign from 49 addresses in 45.131.195.0/24 (240 failed logins today), each pacing itself under per-IP rate thresholds. No successful authentication. show less	Brute-Force Web App Attack
🇩🇪 XICTRON	2026-10-13 19:30:06 (3 weeks ago)	WordPress attack attempt detected by Fail2Ban	Web App Attack
🇨🇦 KIsmay	2026-10-13 17:35:39 (3 weeks ago)	2026-10-13T13:19:11.497707-04:00 www4 WPAudit[2239518]: 45.131.195.191 www.terencegower.com "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" metsys:9ef4e771f297b84303e192c658fae145 FAIL ... show more 2026-10-13T13:19:11.497707-04:00 www4 WPAudit[2239518]: 45.131.195.191 www.terencegower.com "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" metsys:9ef4e771f297b84303e192c658fae145 FAIL 2026-10-13T13:35:10.968486-04:00 www4 WPAudit[2240674]: 45.131.195.191 www.terencegower.com "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" admin:admin123!@# FAIL 2026-10-13T13:35:23.352935-04:00 www4 WPAudit[2239518]: 45.131.195.191 www.terencegower.com "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15" yanz:yanz FAIL 2026-10-13T13:35:32.695725-04:00 www4 WPAudit[2240674]: 45.131.195.191 www.terencegower.com "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" admin:12345 FAIL 2026-10-13T13:35:38.057926-04:00 www4 WPAudit[2239518]: 45.131.19 ... show less	Brute-Force Web App Attack
🇦🇺 screwlooseit.com.au	2026-10-13 06:29:52 (3 weeks ago)	Blocked by CSF 13 firewall - Rule: WPLOGIN NL/Netherlands/-	Web App Attack
Anonymous	2026-10-12 23:38:41 (3 weeks ago)	Banned by Fail2Ban on server	Web App Attack
🇫🇷 dynamix	2026-10-12 12:54:49 (3 weeks ago)	WordPress wp-login.php Brute Force Attack	Brute-Force Web App Attack
🇺🇸 Jason Howell	2026-10-10 21:57:54 (3 weeks ago)	45.131.195.191 - - [10/Oct/2026:16:52:45 -0500] "POST /wp-login.php HTTP/1.1" 200 6092 "https://www.ponderosamobilehomepark.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:121.0) Gecko/20100101 Firefox/121.0" 45.131.195.191 - - ... show more 45.131.195.191 - - [10/Oct/2026:16:52:45 -0500] "POST /wp-login.php HTTP/1.1" 200 6092 "https://www.ponderosamobilehomepark.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:121.0) Gecko/20100101 Firefox/121.0" 45.131.195.191 - - [10/Oct/2026:16:57:47 -0500] "POST /wp-login.php HTTP/1.1" 200 6092 "https://www.ponderosamobilehomepark.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 45.131.195.191 - - [10/Oct/2026:16:57:48 -0500] "GET /wp-admin/index.php HTTP/1.1" 302 500 "https://www.ponderosamobilehomepark.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" 45.131.195.191 - - [10/Oct/2026:16:57:49 -0500] "GET /wp-login.php?redirect_to=https%3A%2F%2Fwww.ponderosamobilehomepark.com%2Fwp-admin%2Findex.php&reauth=1 HTTP/1.1" 200 3736 "https://www.ponderosamobilehomepark.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7 ... show less	Web App Attack
🇺🇸 Jason Howell	2026-10-10 15:50:27 (3 weeks ago)	45.131.195.191 - - [10/Oct/2026:10:34:15 -0500] "GET /wp-admin/edit.php HTTP/1.1" 302 4471 "https://www.barbsgardenandpantry.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/5 ... show more 45.131.195.191 - - [10/Oct/2026:10:34:15 -0500] "GET /wp-admin/edit.php HTTP/1.1" 302 4471 "https://www.barbsgardenandpantry.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 45.131.195.191 - - [10/Oct/2026:10:34:19 -0500] "GET /wp-login.php?redirect_to=https%3A%2F%2Fwww.barbsgardenandpantry.com%2Fwp-admin%2Fedit.php&reauth=1 HTTP/1.1" 200 4116 "https://www.barbsgardenandpantry.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 45.131.195.191 - - [10/Oct/2026:10:50:22 -0500] "GET /wp-admin/edit.php HTTP/1.1" 302 4469 "https://www.barbsgardenandpantry.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 45.131.195.191 - - [10/Oct/2026:10:50:25 -0500] "GET /wp-login.php?redirect_to=https%3A%2F%2Fwww.barbsgardenandpantry.com%2Fwp-admin%2Fedit.php&reauth=1 HTTP/ ... show less	Web App Attack
🇺🇸 jormaster3k	2026-10-10 14:06:42 (3 weeks ago)	Attack against WordPress	Web App Attack
🇨🇦 KIsmay	2026-10-10 04:57:24 (3 weeks ago)	2026-10-09T21:09:58.811668-07:00 ismay WPAudit[4183333]: 45.131.195.191 christinesutherland.com "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" admin:12345678 FAIL 2026-10-09T21:1 ... show more 2026-10-09T21:09:58.811668-07:00 ismay WPAudit[4183333]: 45.131.195.191 christinesutherland.com "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" admin:12345678 FAIL 2026-10-09T21:10:17.571032-07:00 ismay WPAudit[4183333]: 45.131.195.191 christinesutherland.com "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" admin:admindmin FAIL 2026-10-09T21:45:43.698399-07:00 ismay WPAudit[4186486]: 45.131.195.191 christinesutherland.com "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" thomas:thomas2026 FAIL 2026-10-09T21:57:03.215627-07:00 ismay WPAudit[4187173]: 45.131.195.191 christinesutherland.com "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" christinesutherland:password123 FAIL 2026-10-09T21:57:23.575256-07:00 ismay WPAudit[4186495]: 45.131.195.191 c ... show less	Brute-Force Web App Attack
🇳🇱 Alt255	2026-10-09 12:32:02 (3 weeks ago)	[ti-02ra] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail apache-wordpress. Example: 45.131.195.191 - - [09/Oct/2026:14:31:36 +0200] "POST /wp-login.php HTTP/1.1" 200 8030 "https://praktijklavitelle.nl/wp-login.php" "Mozi ... show more [ti-02ra] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail apache-wordpress. Example: 45.131.195.191 - - [09/Oct/2026:14:31:36 +0200] "POST /wp-login.php HTTP/1.1" 200 8030 "https://praktijklavitelle.nl/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 45.131.195.191 - - [09/Oct/2026:14:31:39 +0200] "POST /wp-login.php HTTP/1.1" 200 4026 "https://praktijklavitelle.nl/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 45.131.195.191 - - [09/Oct/2026:14:31:42 +0200] "POST /wp-login.php HTTP/1.1" 200 4022 "https://praktijklavitelle.nl/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.1 ... show less	Brute-Force Web App Attack
🇪🇸 masterguru	2026-10-08 09:02:47 (3 weeks ago)	(wplogin) Failed WordPress login from 45.131.195.191 (US/United States/-): 5 in the last 3600 secs (0-122)	Hacking
🇳🇱 debestelapp	2026-10-04 00:05:04 (4 weeks ago)		Exploited Host

Showing 1 to 15 of 297 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇦🇷 200.189.19.149

🇺🇸 172.173.200.62

🇺🇸 98.204.134.124

🇸🇬 94.231.206.251

🇺🇸 66.132.159.21

🇺🇸 40.124.187.32

🇺🇸 37.19.66.72

🇪🇸 217.160.39.106

🇦🇷 179.60.252.164

🇺🇸 153.75.226.185

🇺🇸 136.144.35.252

🇫🇷 91.196.152.220

🇺🇸 69.76.240.64

🇺🇸 35.185.88.179

🇩🇪 116.203.212.168

🇨🇳 112.46.138.214

🇺🇸 109.105.209.13

🇫🇷 85.217.140.27

🇮🇷 62.133.46.15

🇨🇳 61.155.106.101