JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.94.31.180

45.94.31.180 was found in our database!

This IP was reported 415 times. Confidence of Abuse is 0%: ?

ISP	1337 Services GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS210558
Hostname(s)	tor-exit-node.powered.by.rdp.sh
Domain Name	as210558.net
Country	🇳🇱 Netherlands
City	Lelystad, Flevoland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.94.31.180

Whois 45.94.31.180

IP Abuse Reports for 45.94.31.180:

This IP address has been reported a total of 415 times from 116 distinct sources. 45.94.31.180 was first reported on February 8th 2024, and the most recent report was 8 months ago.

Old Reports: The most recent abuse report for this IP address is from 8 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 LTM	2025-10-11 06:20:01 (8 months ago)	WebServer - Attempts to exploit	Hacking Brute-Force Web App Attack
🇸🇮 borisperc	2025-08-03 10:48:24 (11 months ago)		Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack
🇮🇹 LTM	2025-02-17 07:20:01 (1 year ago)	WebServer - Attempts to exploit	Hacking Brute-Force Web App Attack
🇩🇪 PaulSep	2024-11-20 13:53:38 (1 year ago)	2024-11-20T14:53:37+01:00 [redacted] 45.94.31.180 - - [20/Nov/2024:14:53:35 +0100] "GET /mon-compte ... show more 2024-11-20T14:53:37+01:00 [redacted] 45.94.31.180 - - [20/Nov/2024:14:53:35 +0100] "GET /mon-compte/ HTTP/1.1" 302 51930 "https://[redacted]/wp/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" show less	Hacking
🇺🇸 TPI-Abuse	2024-11-20 03:30:44 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 45.94.31.180 (tor-exit-node.powered.by.rdp.sh): ... show more (mod_security) mod_security (id:210492) triggered by 45.94.31.180 (tor-exit-node.powered.by.rdp.sh): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 19 22:30:40.872775 2024] [security2:error] [pid 16449:tid 16449] [client 45.94.31.180:52090] [client 45.94.31.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "proses-hr.com"] [uri "/wp-config.php_old2017"] [unique_id "Zz1X4NZwKUV68Gd7MU15tgAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 strzonnek	2024-11-19 19:44:03 (1 year ago)	attack on webform	Brute-Force Web App Attack
🇦🇺 MAGIC	2024-11-19 15:02:26 (1 year ago)	VM5 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇦🇺 oncord	2024-11-19 14:58:51 (1 year ago)	Form spam	Web Spam
🇺🇸 TPI-Abuse	2024-11-19 05:20:20 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 45.94.31.180 (tor-exit-node.powered.by.rdp.sh): ... show more (mod_security) mod_security (id:210730) triggered by 45.94.31.180 (tor-exit-node.powered.by.rdp.sh): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 19 00:20:12.118670 2024] [security2:error] [pid 4043:tid 4043] [client 45.94.31.180:48342] [client 45.94.31.180] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|procigar.net\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "procigar.net"] [uri "/.sql"] [unique_id "ZzwgDMPtUpmQmSEYUqNbZwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 strzonnek	2024-11-18 17:54:08 (1 year ago)	attack on webform	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2024-11-18 12:29:21 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 45.94.31.180 (tor-exit-node.powered.by.rdp.sh): ... show more (mod_security) mod_security (id:210492) triggered by 45.94.31.180 (tor-exit-node.powered.by.rdp.sh): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 18 07:29:14.096547 2024] [security2:error] [pid 16738:tid 16935] [client 45.94.31.180:37076] [client 45.94.31.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mcdonaldmountainranch.com"] [uri "/wp-config.php8"] [unique_id "ZzszGqFsY5b7JLKJOKAjIQAAARY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 strzonnek	2024-11-17 16:48:16 (1 year ago)	attack on webform	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2024-11-17 11:08:47 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 45.94.31.180 (tor-exit-node.powered.by.rdp.sh): ... show more (mod_security) mod_security (id:210492) triggered by 45.94.31.180 (tor-exit-node.powered.by.rdp.sh): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 17 06:08:40.567549 2024] [security2:error] [pid 20014:tid 20014] [client 45.94.31.180:60604] [client 45.94.31.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jesussotoca.com"] [uri "/wp-config.php.save"] [unique_id "ZznOuGUZ9IdChGb1Zif4cwAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-17 05:15:17 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 45.94.31.180 (tor-exit-node.powered.by.rdp.sh): ... show more (mod_security) mod_security (id:210492) triggered by 45.94.31.180 (tor-exit-node.powered.by.rdp.sh): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 17 00:15:08.833676 2024] [security2:error] [pid 16258:tid 16346] [client 45.94.31.180:47442] [client 45.94.31.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.iacsb.com"] [uri "/.git/config"] [unique_id "Zzl73O40P1Vg-RZB8oEULwAAAcc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-17 00:02:29 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 45.94.31.180 (tor-exit-node.powered.by.rdp.sh): ... show more (mod_security) mod_security (id:210492) triggered by 45.94.31.180 (tor-exit-node.powered.by.rdp.sh): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 16 19:02:25.397533 2024] [security2:error] [pid 17453:tid 17453] [client 45.94.31.180:49070] [client 45.94.31.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "furbabieslivesmatter.com"] [uri "/wp-config.php__"] [unique_id "ZzkykWGZefYtqCMvellKbwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 415 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 103.250.10.18

🇮🇳 103.89.136.111

🇺🇸 66.240.205.34

🇯🇵 52.140.193.66

🇺🇸 2607:f8b0:400e:c1e::122

🇧🇷 187.50.226.182

🇷🇴 80.94.92.120

🇺🇸 71.27.86.44

🇺🇸 68.225.62.203

🇬🇧 35.203.211.44

🇰🇷 218.157.205.171

🇵🇱 176.53.159.197

🇨🇳 121.204.171.7

🇺🇸 69.73.187.130

🇮🇹 5.249.144.192

🇹🇷 188.119.26.40

🇫🇷 91.196.152.196

🇺🇸 63.46.42.51

🇺🇸 20.51.243.7

🇮🇷 2.182.231.178