JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.131.194.116

45.131.194.116 was found in our database!

This IP was reported 197 times. Confidence of Abuse is 21%: ?

21%

ISP	VPN-Consumer-US
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	falco-networks.com
Country	🇺🇸 United States of America
City	San Francisco, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.131.194.116

Whois 45.131.194.116

IP Abuse Reports for 45.131.194.116:

This IP address has been reported a total of 197 times from 99 distinct sources. 45.131.194.116 was first reported on November 24th 2020, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Kejult	2026-10-13 23:45:39 (1 week ago)	Honeypot Finding: verified TCP multi-port scan/probing; 3 application-level events across 2 target p ... show more Honeypot Finding: verified TCP multi-port scan/probing; 3 application-level events across 2 target ports and 2 source port(s). Ports: 80/HTTP, 443/HTTPS. Sensors: Tanner, H0neytr4p. show less	Port Scan
Anonymous	2026-10-13 12:23:22 (1 week ago)	45.131.194.116 - - [13/Oct/2026:15:21:56 +0300] "POST /wp-json/batch/v1 HTTP/1.1" 404 262 45.131.194 ... show more 45.131.194.116 - - [13/Oct/2026:15:21:56 +0300] "POST /wp-json/batch/v1 HTTP/1.1" 404 262 45.131.194.116 - - [13/Oct/2026:15:22:21 +0300] "GET /.env.prod HTTP/1.1" 403 248 45.131.194.116 - - [13/Oct/2026:15:23:21 +0300] "GET /awsconfig.json HTTP/1.1" 404 260 show less	Bad Web Bot
🇩🇪 Jochen Pretli	2026-09-26 23:52:44 (3 weeks ago)	connection to honeypot	Email Spam Port Scan
Anonymous	2026-09-20 19:05:13 (1 month ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇺🇸 TPI-Abuse	2026-08-03 22:40:58 (2 months ago)	(mod_security) mod_security (id:234930) triggered by 45.131.194.116 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:234930) triggered by 45.131.194.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 03 18:40:50.532166 2026] [security2:error] [pid 2111938:tid 2111938] [client 45.131.194.116:29667] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\/lib\\\\/php\\\\/connector\\\\.minimal\\\\.php$" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/27_Apps_WPPlugin.conf"] [line "6778"] [id "234930"] [rev "2"] [msg "COMODO WAF: File upload vulnerability in the file manager plugin before 6.9 for WordPress (CVE-2020-25213)\|\|cityofportales.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "cityofportales.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "anEY8rvAyupimNAPbRl1HAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-30 20:10:09 (2 months ago)	wp admin page access attempt ...	Hacking Web App Attack
🇩🇪 FeG Deutschland	2026-07-29 12:32:06 (2 months ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247	Exploited Host Web App Attack
🇩🇪 LRob	2026-07-29 11:31:11 (2 months ago)	CrowdSec: crowdsecurity/http-cve-probing \| req: //wp-json/batch/v1 \| UA: Mozilla/5.0 (Windows NT 10. ... show more CrowdSec: crowdsecurity/http-cve-probing \| req: //wp-json/batch/v1 \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 show less	Web App Attack
🇩🇪 4server	2026-07-22 23:51:14 (2 months ago)	[ThuJul2301:51:08.3898292026][security2:error][pid718645:tid718660][client45.131.194.116:0]ModSecuri ... show more [ThuJul2301:51:08.3898292026][security2:error][pid718645:tid718660][client45.131.194.116:0]ModSecurity:Accessdeniedwithcode403$phase1$.Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"feldenkraisticino.ch\"][uri\"/xmlrpc.php\"][unique_id\"amFXbCD3UAIq8BYDS-31pwAAAQQ\"] show less	Port Scan Brute-Force Web App Attack
Anonymous	2026-07-21 16:55:16 (3 months ago)	(wordpress) Failed wordpress login from 45.131.194.116 (US/United States/-)	Brute-Force
Anonymous	2026-07-21 09:12:50 (3 months ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
Anonymous	2026-07-19 02:02:44 (3 months ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇫🇷 Baking333	2026-07-18 18:02:42 (3 months ago)	[redacted] 45.131.194.116 - - [18/Jul/2026:19:02:40 +0100] "GET //wp-includes/ID3/[redacted] HTTP/1. ... show more [redacted] 45.131.194.116 - - [18/Jul/2026:19:02:40 +0100] "GET //wp-includes/ID3/[redacted] HTTP/1.1" 302 6778 0/60089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" [redacted] 45.131.194.116 - - [18/Jul/2026:19:02:41 +0100] "GET /[redacted]?rsd HTTP/1.1" 302 1559 0/45094 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" show less	Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-07-18 16:56:51 (3 months ago)	Try to access /xmlrpc.php?rsd	Web App Attack
🇩🇪 ghostwarriors	2026-07-18 15:50:16 (3 months ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 197 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 147.185.132.104

🇹🇷 78.135.111.63

🇧🇪 34.34.160.116

🇧🇪 198.235.24.151

🇳🇱 195.178.110.227

🇳🇬 165.154.11.48

🇵🇱 162.158.172.142

🇩🇪 151.243.11.137

🇩🇪 151.243.11.136

🇺🇸 136.66.158.66

🇹🇷 92.44.246.137

🇫🇷 85.217.140.8

🇷🇴 80.94.95.115

🇺🇸 66.228.47.252

🇵🇱 45.138.12.43

🇧🇩 27.147.143.141

🇵🇱 194.180.49.123

🇨🇳 171.104.81.195

🇸🇬 150.109.16.200

🇳🇱 95.211.247.209