JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.132.115.130

45.132.115.130 was found in our database!

This IP was reported 98 times. Confidence of Abuse is 85%: ?

85%

ISP	VPN Consumer Dallas, United States of America
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396356
Domain Name	vpnconsumer.com
Country	🇺🇸 United States of America
City	Dallas, Texas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.132.115.130

Whois 45.132.115.130

IP Abuse Reports for 45.132.115.130:

This IP address has been reported a total of 98 times from 60 distinct sources. 45.132.115.130 was first reported on December 18th 2020, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 SpaceHost-Server	2026-07-15 22:30:05 (1 day ago)		Brute-Force Web App Attack
🇫🇷 SpaceHost-Server	2026-07-14 22:29:44 (2 days ago)		Brute-Force Web App Attack
Anonymous	2026-07-14 04:12:09 (2 days ago)	Fail2Ban: WordPress brute-force attack detected.	Bad Web Bot Web App Attack
🇵🇱 sefinek.net	2026-07-13 21:32:56 (3 days ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (G ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (GET) \| Endpoint: /wp-login.php \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.6045.159 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇳🇱 Site.eu	2026-07-13 12:31:12 (3 days ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇩🇪 FeG Deutschland	2026-07-11 10:58:04 (5 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257	Exploited Host Web App Attack
🇷🇺 Deynekin.com	2026-07-08 18:48:54 (1 week ago)	This IP address has been identified as part of a botnet infrastructure used by threat actors, indica ... show more This IP address has been identified as part of a botnet infrastructure used by threat actors, indicating automated and malicious activity. show less	Fraud Orders Web App Attack SSH Web Spam FTP Brute-Force Phishing Email Spam Port Scan Brute-Force Exploited Host Hacking SQL Injection
🇫🇷 masterguru	2026-07-08 00:06:53 (1 week ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-195)	Hacking Bad Web Bot
🇺🇸 Matthew Ping	2026-07-07 13:45:02 (1 week ago)	ModSecurity rule 949110 triggered on banks. Web application attack blocked by CSF/LFD.	Web App Attack Hacking
🇺🇸 zwebvigil	2026-07-07 12:15:12 (1 week ago)	45.132.115.130 [07/Jul/2026:05:15:08 -0700] "GET /web/config.js HTTP/1.1" 404 2691 "-" port=27919 " ... show more 45.132.115.130 [07/Jul/2026:05:15:08 -0700] "GET /web/config.js HTTP/1.1" 404 2691 "-" port=27919 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36" "-" "-" "<ipaddr>" 854 45.132.115.130 [07/Jul/2026:05:15:09 -0700] "GET /src/config.js HTTP/1.1" 404 2691 "-" port=27919 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36" "-" "-" "<ipaddr>" 535 45.132.115.130 [07/Jul/2026:05:15:09 -0700] "GET /src/api/config.js HTTP/1.1" 404 2699 "-" port=27919 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36" "-" "-" "<ipaddr>" 803 45.132.115.130 [07/Jul/2026:05:15:10 -0700] "GET /web/api/config.js HTTP/1.1" 404 2699 "-" port=27919 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36" "-" "-" "<ipaddr>" 766 45.132.1 show less	Web App Attack
🇳🇵 Nanak011	2026-07-07 10:01:52 (1 week ago)	Path Traversal / Information Disclosure Attempt: A path traversal attempt was made to access a devel ... show more Path Traversal / Information Disclosure Attempt: A path traversal attempt was made to access a development environment configuration file, indicating sensitive information disclosure. show less	Web App Attack Hacking
🇳🇱 bazter.pro	2026-07-07 09:53:28 (1 week ago)	45.132.115.130 - - [07/Jul/2026:09:53:27 +0000] "GET /__tests__/test-become/.env HTTP/1.1" 404 436 " ... show more 45.132.115.130 - - [07/Jul/2026:09:53:27 +0000] "GET /__tests__/test-become/.env HTTP/1.1" 404 436 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" ... show less	Port Scan Brute-Force Bad Web Bot Web App Attack SSH
🇫🇮 oh.mg	2026-07-06 15:46:20 (1 week ago)	[Mon Jul 06 17:46:19.903884 2026] [security2:error] [pid 2906202:tid 2906224] [client 45.132.115.130 ... show more [Mon Jul 06 17:46:19.903884 2026] [security2:error] [pid 2906202:tid 2906224] [client 45.132.115.130:24747] [client 45.132.115.130] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "95.216.72.247"] [uri "/.env"] [unique_id "akvNy4eXN3OExJ2esNb7rwAAABM"] [Mon Jul 06 17:46:20.216173 2026] [security2:error] [pid 2906202:tid 2906225] [client 45.132.115.130:24747] [client 45.132.115.130] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [ver "OWASP_CRS/4.10.0-dev"] [t ... show less	Web App Attack Bad Web Bot
🇺🇸 Starburst SysOp Team	2026-07-06 01:09:32 (1 week ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-stl2-13)	Hacking Bad Web Bot
🇩🇪 iNetWorker	2026-07-05 18:11:42 (1 week ago)	trolling for resource vulnerabilities	Web App Attack

Showing 1 to 15 of 98 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.177

172.17.4.70

🇳🇱 160.119.71.92

🇨🇳 150.255.45.104

🇰🇷 121.133.110.250

🇸🇬 104.248.159.127

🇫🇷 85.217.140.32

🇧🇬 78.128.112.30

🇺🇸 66.132.195.27

🇨🇳 58.212.237.237

🇺🇸 45.131.194.223

🇬🇧 35.203.211.107

🇫🇷 35.180.211.32

🇺🇸 34.218.48.116

🇺🇸 13.217.10.138

🇷🇺 5.129.247.215

🇺🇸 216.25.89.92

🇮🇶 195.85.223.220

🇬🇧 194.50.235.136

🇺🇸 185.88.102.215