JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.95.243.135

45.95.243.135 was found in our database!

This IP was reported 132 times. Confidence of Abuse is 43%: ?

43%

ISP	VPN Consumer Vienna, Austria
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	vpnconsumer.com
Country	🇦🇹 Austria
City	Vienna, State of Vienna

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.95.243.135

Whois 45.95.243.135

IP Abuse Reports for 45.95.243.135:

This IP address has been reported a total of 132 times from 50 distinct sources. 45.95.243.135 was first reported on June 19th 2022, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Site.eu	2026-06-06 13:45:38 (1 day ago)	Excessive 404/403 errors	Brute-Force
🇫🇷 Octopuce	2026-06-06 07:05:33 (1 day ago)	Aggressive web search of vulnerable pages: /bless.php /O-Simple.php /lock360.php /zwso.php /chosen.p ... show more Aggressive web search of vulnerable pages: /bless.php /O-Simple.php /lock360.php /zwso.php /chosen.php /about.php /admin.php /mah.php /.wp/wso. ... show less	Web App Attack
🇺🇦 URAN Publishing Service	2026-06-06 02:03:20 (1 day ago)	45.95.243.135 - - [06/Jun/2026:05:03:19 +0300] "GET /wp-content/themes/hello-element/ HTTP/1.1" 404 ... show more 45.95.243.135 - - [06/Jun/2026:05:03:19 +0300] "GET /wp-content/themes/hello-element/ HTTP/1.1" 404 478 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.95.243.135 - - [06/Jun/2026:05:03:19 +0300] "GET /wp-includes/Text/ HTTP/1.1" 404 478 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" ... show less	Web App Attack
🇳🇱 Site.eu	2026-06-04 13:31:38 (3 days ago)	Excessive 404/403 errors	Brute-Force
🇸🇬 pusathosting.com	2026-06-04 10:09:02 (3 days ago)	24ds22 bruteforce	Brute-Force Web App Attack
🇳🇱 maxxsense	2026-05-26 12:42:13 (1 week ago)	(wordpress) Failed wordpress login from 45.95.243.135 (AT/Austria/-)	Brute-Force
🇯🇵 demonsword	2026-05-14 04:40:52 (3 weeks ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: cute-potato.com:80 show less	Open Proxy Port Scan
🇨🇭 rt	2026-05-08 00:52:36 (4 weeks ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2026-04-21 09:55:06 (1 month ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 12-55.45.95.243.135.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 12-55.45.95.243.135.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇺🇸 TPI-Abuse	2026-03-16 08:31:57 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 45.95.243.135 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 45.95.243.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 16 04:31:48.959368 2026] [security2:error] [pid 25599:tid 25599] [client 45.95.243.135:29417] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|headcount.dev\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "headcount.dev"] [uri "/back/backup.sql"] [unique_id "abe_9CO1YuNL7xi87YQErQAAAB8"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Octopuce	2026-03-03 09:59:27 (3 months ago)	Aggressive web search of vulnerable pages: /wp-content/plugins/wpeazvp/ /wp-content/plugins/zaen/inc ... show more Aggressive web search of vulnerable pages: /wp-content/plugins/wpeazvp/ /wp-content/plugins/zaen/includes/ /wp-content/uploads/revslider/templa ... show less	Web App Attack
🇸🇪 vaia.cloud	2026-03-03 05:03:14 (3 months ago)	trying wp-login.php/xmlrpc.php 122 times in 1 minutes	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-02-24 17:59:58 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 45.95.243.135 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 45.95.243.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 24 12:59:54.242777 2026] [security2:error] [pid 10152:tid 10176] [client 45.95.243.135:59873] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nobletitles.org"] [uri "/backup/sftp-config.json"] [unique_id "aZ3nGtoYmA37rlrtCyLhsQAAAFM"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 gnom4ik	2026-02-21 14:31:39 (3 months ago)	ban-reviewer auto report; ip=45.95.243.135; scenario=http:scan; verdict=valid_ban; confidence=0.85; ... show more ban-reviewer auto report; ip=45.95.243.135; scenario=http:scan; verdict=valid_ban; confidence=0.85; categories=14,15,18,22; active_decisions=1; lookback_decisions=1; nginx_requests=0; appsec_matches=0; auth_events=0; kernel_events=0; signals=IP flagged for 'http:scan' scenario; AbuseIPDB category 14 (Port Scan) is applicable; Decision made within a short time window indicating immediate threat; IP has no active decisions in lookback window, suggesting new threat show less	Port Scan Hacking Brute-Force SSH
🇺🇸 Penny Packer	2026-02-15 13:53:40 (3 months ago)	Fail2Ban apache-tripwires	Web App Attack

Showing 1 to 15 of 132 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 216.226.76.30

🇧🇷 205.210.31.236

🇬🇧 165.154.129.43

🇮🇳 103.165.62.71

🇭🇰 101.36.108.133

🇺🇸 75.102.23.159

🇺🇸 66.132.195.31

🇩🇪 47.245.140.111

🇸🇬 47.84.205.167

🇫🇮 46.62.184.25

🇫🇮 37.27.244.229

🇨🇳 221.228.10.71

🇺🇸 205.210.31.105

🇹🇼 198.235.24.42

🇫🇷 195.154.169.177

🇩🇪 172.70.250.138

🇩🇪 167.94.146.63

🇪🇬 154.182.12.140

🇺🇸 147.185.132.43

🇺🇸 137.184.36.28