JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.132.195.223

45.132.195.223 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 54%: ?

54%

ISP	VPN Consumer Luxembourgh, Luxembourgh
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206804
Domain Name	vpnconsumer.com
Country	🇱🇺 Luxembourg
City	Luxembourg, Luxembourg

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.132.195.223

Whois 45.132.195.223

IP Abuse Reports for 45.132.195.223:

This IP address has been reported a total of 15 times from 11 distinct sources. 45.132.195.223 was first reported on June 28th 2026, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 consul.to	2026-07-08 18:11:49 (6 days ago)	Web attack/malicious scanning detected	Web App Attack
🇧🇪 cmbplf	2026-07-08 12:36:22 (1 week ago)	36 requests with user_agent.original AppleCoreMedia/1.0.0.23A344 (Macintosh; U; Intel Mac OS X 14_0 ... show more 36 requests with user_agent.original AppleCoreMedia/1.0.0.23A344 (Macintosh; U; Intel Mac OS X 14_0; da_dk) 36 requests with user_agent.original Mozilla/5.0 (X11; U; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Ubuntu Chromium/115.0.5738.217 Chrome/115.0.5738.217 Safari/537.36 32 requests with user_agent.original Mozilla/5.0 (X11; Linux x86_64; SMARTEMB Build/3.12.9076) AppleWebKit/537.36 (KHTML, like Gecko) Chromium/103.0.5060.129 Chrome/103.0.5060.129 Safari/537.36 29 requests with user_agent.original Mozilla/5.0 (Linux; Android 13; SAMSUNG SM-T220) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/23.0 Chrome/115.0.0.0 Mobile Safari/537.36 28 requests with user_agent.original Dalvik/2.1.0 (Linux; U; Android 11; Tibuta_MasterPad-E100 Build/RP1A.201005.006) 27 requests with user_agent.original Mozilla/5.0 (Linux; Android 9) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/119.0.6045.66 Mobile DuckDuckGo/1 Lilo/1.2.3 Safari/537.36 27 requests with user_agent.original Mozilla/5.0 (X show less	Brute-Force Bad Web Bot
🇬🇧 consul.to	2026-07-05 16:29:26 (1 week ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 stinpriza	2026-07-03 16:26:59 (1 week ago)	Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 10:08:56 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 45.132.195.223 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 45.132.195.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 06:08:49.360510 2026] [security2:error] [pid 14963:tid 15042] [client 45.132.195.223:27977] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.trulyoriginalpurpleoctopus.art\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.trulyoriginalpurpleoctopus.art"] [uri "/wp-json/wp/v2/users"] [unique_id "akeKMRgGZ2FEIYYGgIb0EgAAAZI"], referer: https://www.facebook.com/ show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-03 02:24:18 (1 week ago)	"GET /wp-content/themes/seotheme/db.php?u HTTP/1.1"	Hacking Web App Attack
🇺🇸 ipblock.com	2026-07-02 22:57:00 (1 week ago)	IPBlock protected site ID [4055-d][s=03]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
🇮🇩 sockominfo	2026-07-02 15:00:52 (1 week ago)	Access to sensitive files detected w/ specific boundary.. Threat Score: 4.9/10 (MEDIUM). Confidence: ... show more Access to sensitive files detected w/ specific boundary.. Threat Score: 4.9/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 2.9/10 (Low). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-02 14:00:52 (1 week ago)	Access to sensitive files detected w/ specific boundary.. Threat Score: 5/10 (MEDIUM). Confidence: 4 ... show more Access to sensitive files detected w/ specific boundary.. Threat Score: 5/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 2.9/10 (Low). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-02 13:00:53 (1 week ago)	Access to sensitive files detected w/ specific boundary.. Threat Score: 5.1/10 (MEDIUM). Confidence: ... show more Access to sensitive files detected w/ specific boundary.. Threat Score: 5.1/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 2.9/10 (Low). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-02 12:00:08 (1 week ago)	Access to sensitive files detected w/ specific boundary.. Threat Score: 5.6/10 (MEDIUM). Reported by ... show more Access to sensitive files detected w/ specific boundary.. Threat Score: 5.6/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 securejdprop	2026-07-02 11:27:14 (1 week ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent. Ip 45.132.195.223 per ... show more This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent. Ip 45.132.195.223 performed 'crowdsecurity/http-bad-user-agent' (2 events over 389.434827ms) at 2026-07-02 11:27:11.762226423 +0000 UTC show less	Hacking Web App Attack Bad Web Bot
🇮🇩 Burayot	2026-07-02 11:15:12 (1 week ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 45.132.195.223 (LU/Luxembourg/-): 2 ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 45.132.195.223 (LU/Luxembourg/-): 2 in the last 3600 secs show less	Web App Attack
🇺🇸 island-freaks.com	2026-07-02 06:35:12 (1 week ago)	Attack Type: WordPress Exploit Bot attempt on /wp-content/themes/seotheme/db.php?u \| DNS 45.132.195. ... show more Attack Type: WordPress Exploit Bot attempt on /wp-content/themes/seotheme/db.php?u \| DNS 45.132.195.223 \| Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36 show less	Port Scan Hacking Bad Web Bot Exploited Host Web App Attack
🇫🇷 masterguru	2026-06-28 14:56:11 (2 weeks ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 45.132.195.223 (GB/United Kingdom/-): 1 in the ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 45.132.195.223 (GB/United Kingdom/-): 1 in the last 3600 secs (0-196) show less	Hacking

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇷 176.239.252.216

🇺🇸 172.200.228.35

🇻🇳 103.82.21.8

🇺🇸 2607:f8b0:4004:c07::125

🇧🇪 198.235.24.176

🇲🇰 185.193.240.246

🇮🇳 117.200.92.113

🇨🇦 85.217.149.74

🇺🇸 71.6.233.236

🇩🇪 65.111.31.223

🇱🇹 62.60.130.219

🇬🇧 35.176.251.255

🇫🇷 194.113.235.89

🇲🇰 188.44.20.33

🇺🇸 71.27.86.44

🇺🇸 64.23.193.0

🇺🇸 34.9.53.48

🇳🇱 5.188.87.30

🇹🇼 198.235.24.126

🇵🇱 176.53.159.197