JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.131.193.242

45.131.193.242 was found in our database!

This IP was reported 95 times. Confidence of Abuse is 67%: ?

67%

ISP	VPN-Consumer-US
Usage Type	Data Center/Web Hosting/Transit
ASN	AS262287
Domain Name	expressvpn.com
Country	🇺🇸 United States of America
City	Miami, Florida

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.131.193.242

Whois 45.131.193.242

IP Abuse Reports for 45.131.193.242:

This IP address has been reported a total of 95 times from 46 distinct sources. 45.131.193.242 was first reported on June 15th 2024, and the most recent report was 17 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 OptimusGO	2026-07-29 00:26:33 (17 hours ago)	Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Time ... show more Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Timestamp: 2026-07-29 01:26:32 UTC Log evidence: 45.131.193.242 - - [29/Jul/2026:01:26:31 +0100] "GET /__tests__/test-become/.env HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 45.131.193.242 - - [29/Jul/2026:01:26:32 +0100] "GET / HTTP/1.1" 200 615 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36" 45.131.193.242 - - [29/Jul/2026:01:26:32 +0100] "GET /frontend_dev.php/$ HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36" show less	Port Scan Brute-Force
🇫🇷 Entalpi.net	2026-07-28 17:16:40 (1 day ago)	Repeated requests against sensitive web endpoints	Web App Attack
🇺🇸 chronos	2026-07-28 11:50:49 (1 day ago)	[AUTORAVALT][[28/07/2026 - 08:50:48 -03:00 UTC] Attack from [45.131.193.242] Action: BLocKed DDoS A ... show more [AUTORAVALT][[28/07/2026 - 08:50:48 -03:00 UTC] Attack from [45.131.193.242] Action: BLocKed DDoS Attack -> Participating in distributed denial-of-service. Phishing -> Phishing websites and/or email. Web Spam -> Comment/forum spam, HTTP referer spam, or other CMS spam. Blog Spam -> CMS blog comment spam. Web App Attack -> Attempts to probe for or exploit insta] ... show less	DDoS Attack Phishing Web Spam Blog Spam Web App Attack
🇩🇪 ramazan	2026-07-28 10:14:54 (1 day ago)	Fail2Ban: nginx-4xx \| Failures: 10 \| Log: /assets/config.production.json /assets/configs.json /confi ... show more Fail2Ban: nginx-4xx \| Failures: 10 \| Log: /assets/config.production.json /assets/configs.json /config.dev.json /config.development.json /config.json show less	Web App Attack Hacking
🇺🇸 whatda	2026-07-28 04:32:46 (1 day ago)	HTTP tarpit triggered at /.git/config. Scanner trapped for ~30s. UA: Mozilla/5.0 (Windows NT 10.0; W ... show more HTTP tarpit triggered at /.git/config. Scanner trapped for ~30s. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Sa show less	Bad Web Bot Web App Attack
🇺🇸 Vianpyro	2026-07-28 02:51:19 (1 day ago)	Honeypot: 8 request(s) in 0 min. Paths: /, /.git/config, /.git/index. Method(s): GET,POST. UA: pytho ... show more Honeypot: 8 request(s) in 0 min. Paths: /, /.git/config, /.git/index. Method(s): GET,POST. UA: python-requests/2.32.5. ASN: 262287 (VPN-Consumer-US). show less	Web App Attack Bad Web Bot Hacking
🇮🇹 CoreTech srl	2026-07-23 21:53:57 (5 days ago)	cloudlinux2 fail2ban: 2026-07-23 23:49:04,472 fail2ban.filter [1589]: INFO [plesk-wordpre ... show more cloudlinux2 fail2ban: 2026-07-23 23:49:04,472 fail2ban.filter [1589]: INFO [plesk-wordpress] Found 185.251.19.173 - 2026-07-23 23:49:04cloudlinux2 fail2ban: 2026-07-23 23:49:08,881 fail2ban.filter [1589]: INFO [plesk-wordpress] Found 185.251.19.173 - 2026-07-23 23:49:08cloudlinux2 fail2ban: 2026-07-23 23:49:18,020 fail2ban.filter [1589]: INFO [plesk-wordpress] Found 45.131.193.242 - 2026-07-23 23:49:17cloudlinux2 fail2ban: 2026-07-23 23:50:30,752 fail2ban.filter [1589]: INFO [plesk-modsecurity] Found 190.43.78.77 - 2026-07-23 23:50:30cloudlinux2 fail2ban: 2026-07-23 23:50:38,662 fail2ban.filter [1589]: INFO [plesk-wordpress] Found 65.108.36.152 - 2026-07-23 23:50:38cloudlinux2 fail2ban: 2026-07-23 23:50:54,091 fail2ban.filter [1589]: INFO [plesk-wordpress] Found 45.131.193.193 - 2026-07-23 23:50:53cloudlinux2 fail2ban: 2026-07-23 23:50:54,374 fail2ban.filter [1589]: INFO [plesk-wordpress] Found 45.131.193.199 - 2026-07-23 23:50:53clo show less	Web App Attack
🇩🇪 Ba-Yu	2026-07-21 19:49:41 (1 week ago)	WordPress bruteforce	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇱🇻 garmtech.com	2026-07-21 03:46:14 (1 week ago)	IM360 WAF: Prohibited WordPress username login/registration	Web App Attack
🇦🇺 screwlooseit.com.au	2026-07-20 23:49:26 (1 week ago)	Blocked by CSF 13 firewall - Rule: WPLOGIN NL/Netherlands/-	Web App Attack
🇺🇸 NerdyMcNerderson	2026-07-17 00:10:22 (1 week ago)	MarekCloud auto-ban: PHP scanner: GET /wp-login.php	Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2026-07-07 17:34:03 (3 weeks ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247	Exploited Host Web App Attack
🇫🇷 tecnicorioja	2026-06-27 22:01:02 (1 month ago)	wp-login attack [27/Jun/2026:03:54:40	Brute-Force Web App Attack
🇺🇸 sailor	2026-06-16 15:00:00 (1 month ago)	WP login attack	Web App Attack Hacking
🇩🇪 LRob	2026-06-16 12:00:15 (1 month ago)	WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail	Brute-Force Web App Attack

Showing 1 to 15 of 95 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.199.165.83

🇺🇸 157.245.93.143

🇺🇸 136.38.6.182

🇳🇱 91.92.47.90

🇳🇱 45.148.10.147

🇮🇷 31.214.248.58

🇨🇳 218.203.220.2

🇮🇳 172.253.222.214

🇺🇸 157.245.248.2

🇺🇸 147.185.132.30

🇧🇩 103.112.54.86

🇶🇦 37.208.189.24

🇸🇬 20.188.119.16

🇰🇷 1.234.27.159

🇮🇹 2a00:1450:4025:1807::127

🇳🇱 195.178.110.53

🇺🇸 172.202.95.21

🇨🇦 158.69.55.148

🇨🇳 113.87.82.150

🇷🇺 90.188.37.93