JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.95.243.131

45.95.243.131 was found in our database!

This IP was reported 132 times. Confidence of Abuse is 30%: ?

30%

ISP	VPN Consumer Vienna, Austria
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	vpnconsumer.com
Country	🇦🇹 Austria
City	Vienna, State of Vienna

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.95.243.131

Whois 45.95.243.131

IP Abuse Reports for 45.95.243.131:

This IP address has been reported a total of 132 times from 61 distinct sources. 45.95.243.131 was first reported on July 27th 2022, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 demonsword	2026-07-10 08:38:52 (1 day ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: netiptv.eu:80 show less	Open Proxy Port Scan
🇬🇧 SCLwebadministrator	2026-06-19 10:37:00 (3 weeks ago)	Bruteforce WordPress logins detected with Loginizer	Brute-Force Web App Attack Hacking
🇷🇺 sms.ru	2026-06-08 23:19:21 (1 month ago)	/wp-admin/js/widgets/about.php	Web App Attack
🇫🇷 Octopuce	2026-06-06 03:47:15 (1 month ago)	Aggressive web search of vulnerable pages: /wp-admin/xleet.php /templates/beez3/bypass.php /wp-admin ... show more Aggressive web search of vulnerable pages: /wp-admin/xleet.php /templates/beez3/bypass.php /wp-admin/css/colors/blue/ahax.php /.well-known/admi ... show less	Web App Attack
🇺🇦 URAN Publishing Service	2026-06-06 02:01:48 (1 month ago)	45.95.243.131 - - [06/Jun/2026:05:01:47 +0300] "GET /wp-content/plugins/up/ HTTP/1.1" 404 478 "-" "M ... show more 45.95.243.131 - - [06/Jun/2026:05:01:47 +0300] "GET /wp-content/plugins/up/ HTTP/1.1" 404 478 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.95.243.131 - - [06/Jun/2026:05:01:47 +0300] "GET /wp-admin/includes/ HTTP/1.1" 404 478 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" ... show less	Web App Attack
🇬🇧 consul.to	2026-06-05 21:01:56 (1 month ago)	Web attack/malicious scanning detected	Web App Attack
🇳🇱 Site.eu	2026-06-04 13:33:40 (1 month ago)	Excessive 404/403 errors	Brute-Force
🇬🇧 consul.to	2026-06-04 12:34:47 (1 month ago)	Web attack/malicious scanning detected	Web App Attack
🇳🇱 maxxsense	2026-05-26 12:42:13 (1 month ago)	(wordpress) Failed wordpress login from 45.95.243.131 (AT/Austria/-)	Brute-Force
Anonymous	2026-05-04 12:00:42 (2 months ago)	[redacted] 45.95.243.131 - - [04/May/2026:13:56:17 +0200] "GET /wp-admin/maint/ HTTP/1.1" 404 196 "- ... show more [redacted] 45.95.243.131 - - [04/May/2026:13:56:17 +0200] "GET /wp-admin/maint/ HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" [redacted] 45.95.243.131 - - [04/May/2026:13:56:18 +0200] "GET /wp-admin/images/ HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" [redacted] 45.95.243.131 - - [04/May/2026:13:56:21 +0200] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 404 196 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" [redacted] 45.95.243.131 - - [04/May/2026:13:56:28 +0200] "GET /wp-admin/js/ HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" [redacted] 45.95.243.131 - - [04/May/2026:13:56:34 +0200] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 404 196 "-" "Mozilla/5.0 ... show less	Hacking Web App Attack
🇬🇧 poundawebsiteltd	2026-03-11 08:18:59 (4 months ago)	Web App Attack (ModSecurity Block). Evidence: beanietools.dev:80 45.95.243.131 - - [11/Mar/2026:08:1 ... show more Web App Attack (ModSecurity Block). Evidence: beanietools.dev:80 45.95.243.131 - - [11/Mar/2026:08:18:57 +0000] HEAD /dump.sql HTTP/1.1 403 124 - - show less	Web App Attack
🇫🇷 Octopuce	2026-03-03 09:56:41 (4 months ago)	Aggressive web search of vulnerable pages: /wp-admin/maint/bootstrap.php /themes/zMousse/otuz1.php / ... show more Aggressive web search of vulnerable pages: /wp-admin/maint/bootstrap.php /themes/zMousse/otuz1.php /wp-content/edit-wolf.php /wp-content/plugin ... show less	Web App Attack
🇸🇪 vaia.cloud	2026-03-03 05:03:10 (4 months ago)	trying wp-login.php/xmlrpc.php 134 times in 1 minutes	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-02-27 01:09:34 (4 months ago)	(mod_security) mod_security (id:210730) triggered by 45.95.243.131 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 45.95.243.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 26 20:09:30.737287 2026] [security2:error] [pid 16628:tid 16628] [client 45.95.243.131:25687] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|jussetcotradinglimited.co\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "jussetcotradinglimited.co"] [uri "/backups/dump.sql"] [unique_id "aaDuyoz8QjWTOFsPLnf2ZQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 spamverify.com	2026-02-12 02:56:59 (4 months ago)	Honeypot Hit: Port Scan (80) HTTP	Web Spam Blog Spam Bad Web Bot Web App Attack

Showing 1 to 15 of 132 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 155.103.69.40

🇩🇪 2a09:bac5:280d:246e::3a1:5f

🇵🇱 194.180.49.220

🇻🇪 190.153.105.78

🇳🇱 188.166.94.159

🇷🇺 178.212.12.24

🇵🇱 176.53.159.198

🇭🇰 172.253.5.22

🇳🇵 103.98.130.194

🇮🇳 82.180.145.188

🇺🇸 52.167.144.198

🇸🇬 47.82.13.97

🇸🇬 43.173.181.125

🇧🇪 198.235.24.201

🇨🇷 179.48.248.245

🇺🇸 162.216.150.181

🇺🇸 154.197.57.205

🇺🇸 152.32.207.229

🇺🇸 148.153.121.224

🇫🇮 147.185.133.107