JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.95.243.143

45.95.243.143 was found in our database!

This IP was reported 135 times. Confidence of Abuse is 0%: ?

ISP	VPN Consumer Vienna, Austria
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	vpnconsumer.com
Country	🇦🇹 Austria
City	Vienna, State of Vienna

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.95.243.143

Whois 45.95.243.143

IP Abuse Reports for 45.95.243.143:

This IP address has been reported a total of 135 times from 62 distinct sources. 45.95.243.143 was first reported on July 25th 2022, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 SUNDAY Technologies	2026-07-09 15:13:12 (1 month ago)	... Jul 9 17:13:10 drop SRC=45.95.243.143 LEN=60 PROTO=TCP DPT=8080 ACK=0 WINDOW=64240 S ... show more ... Jul 9 17:13:10 drop SRC=45.95.243.143 LEN=60 PROTO=TCP DPT=8080 ACK=0 WINDOW=64240 SYN URGP=0 MARK=0x0 show less	Port Scan
🇫🇷 masterguru	2026-07-02 07:27:44 (2 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 45.95.243.143 (AT/Austria/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 45.95.243.143 (AT/Austria/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇺🇸 TPI-Abuse	2026-06-30 16:07:50 (2 months ago)	(mod_security) mod_security (id:212620) triggered by 45.95.243.143 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:212620) triggered by 45.95.243.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 12:07:43.290885 2026] [security2:error] [pid 25473:tid 25571] [client 45.95.243.143:32795] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<script\\\\b" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "65"] [id "212620"] [rev "4"] [msg "COMODO WAF: Cross-site Scripting (XSS) Attack\|\|mecconsultant.com\|F\|2"] [data "Matched Data: <script found within REQUEST_URI: /projects.php?pageid=\\x22><script>alert(string.fromcharcode(88,83,83))</script>&galleryid=4"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "mecconsultant.com"] [uri "/projects.php"] [unique_id "akPpz1WYNxJmCH1dXemUXQAAAFI"], referer: http://mecconsultant.com/projects.php?pageid="><script >alert(String.fromCharCode(88,83,83))</script>&galleryid=4 show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-25 02:19:28 (2 months ago)	[25/Jun/2026:05:19:27 +0300] 178235396714.393942 45.95.243.143 26833 148.251.76.218 443 [25/Jun/2026 ... show more [25/Jun/2026:05:19:27 +0300] 178235396714.393942 45.95.243.143 26833 148.251.76.218 443 [25/Jun/2026:05:19:27 +0300] 178235396747.689714 45.95.243.143 26833 148.251.76.218 443 show less	Web App Attack
🇷🇺 sms.ru	2026-06-08 23:19:18 (2 months ago)	/wp-admin/css/colors/blue/gold.php	Web App Attack
🇫🇷 Octopuce	2026-06-06 03:53:12 (2 months ago)	Aggressive web search of vulnerable pages: /tiny.php /wp-admin/js/widgets/autoload_classmap.php /the ... show more Aggressive web search of vulnerable pages: /tiny.php /wp-admin/js/widgets/autoload_classmap.php /themes.php /wp-themes.php /wp-content/plugins/ ... show less	Web App Attack
🇺🇦 URAN Publishing Service	2026-06-06 02:02:27 (2 months ago)	45.95.243.143 - - [06/Jun/2026:05:02:26 +0300] "GET /wp-content/plugins/ioxi/ HTTP/1.1" 404 478 "-" ... show more 45.95.243.143 - - [06/Jun/2026:05:02:26 +0300] "GET /wp-content/plugins/ioxi/ HTTP/1.1" 404 478 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.95.243.143 - - [06/Jun/2026:05:02:26 +0300] "GET /blog/wp-content/ HTTP/1.1" 404 478 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" ... show less	Web App Attack
🇺🇸 Matthew Ping	2026-05-27 10:00:03 (3 months ago)	ModSecurity rule 949110 triggered on wp3. Web application attack blocked by CSF/LFD.	Web App Attack Hacking
🇳🇱 maxxsense	2026-05-26 12:42:12 (3 months ago)	(wordpress) Failed wordpress login from 45.95.243.143 (AT/Austria/-)	Brute-Force
Anonymous	2026-05-04 12:00:22 (3 months ago)	[redacted] 45.95.243.143 - - [04/May/2026:13:55:48 +0200] "GET /wp-includes/js/crop/admin.php HTTP/1 ... show more [redacted] 45.95.243.143 - - [04/May/2026:13:55:48 +0200] "GET /wp-includes/js/crop/admin.php HTTP/1.1" 404 17678 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" [redacted] 45.95.243.143 - - [04/May/2026:13:55:51 +0200] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 404 17678 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" [redacted] 45.95.243.143 - - [04/May/2026:13:56:02 +0200] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 404 17678 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" [redacted] 45.95.243.143 - - [04/May/2026:13:56:04 +0200] "GET /wp-includes/IXR/admin.php HTTP/1.1" 404 17678 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" [redacted] 45.95.243.143 - - [04/May/2026:13:56:06 +0200] "GET /wp-admin/js/index.php ... show less	Hacking Web App Attack
🇱🇻 garmtech.com	2026-04-21 15:40:41 (4 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 18-40.45.95.243.143.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 18-40.45.95.243.143.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇱🇻 garmtech.com	2026-04-21 09:55:07 (4 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 12-55.45.95.243.143.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 12-55.45.95.243.143.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇳🇱 Savvii	2026-03-30 02:06:51 (5 months ago)	10 attempts against mh-misc-ban on eris	Web App Attack
🇸🇬 Cloudkul Cloudkul	2026-03-05 04:20:24 (5 months ago)	Attempted Brute Force on our application	Brute-Force Web App Attack
🇸🇪 vaia.cloud	2026-03-03 05:03:13 (6 months ago)	trying wp-login.php/xmlrpc.php 150 times in 1 minutes	Brute-Force Web App Attack

Showing 1 to 15 of 135 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.19

🇬🇧 193.163.125.60

🇮🇸 187.14.81.202

🇺🇸 187.14.55.172

🇧🇷 186.238.210.226

🇺🇦 185.255.237.170

🇳🇱 185.93.89.21

🇺🇸 173.249.217.19

🇺🇸 147.185.132.91

🇩🇪 116.202.18.223

🇮🇳 103.101.108.201

🇺🇸 89.34.79.60

🇷🇺 81.22.51.64

🇱🇹 62.60.130.219

🇺🇸 47.254.25.10

🇺🇸 46.110.132.164

🇨🇳 27.155.172.13

🇭🇰 199.45.154.191

🇬🇧 193.163.125.252

🇨🇦 178.93.200.108