JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.131.193.194

45.131.193.194 was found in our database!

This IP was reported 80 times. Confidence of Abuse is 69%: ?

69%

ISP	VPN-Consumer-US
Usage Type	Data Center/Web Hosting/Transit
ASN	AS262287
Domain Name	expressvpn.com
Country	🇺🇸 United States of America
City	Miami, Florida

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.131.193.194

Whois 45.131.193.194

IP Abuse Reports for 45.131.193.194:

This IP address has been reported a total of 80 times from 45 distinct sources. 45.131.193.194 was first reported on April 3rd 2023, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-20 01:33:56 (1 day ago)	(mod_security) mod_security (id:949110) triggered by 45.131.193.194 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:949110) triggered by 45.131.193.194 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 21:33:48.529310 2026] [security2:error] [pid 20266:tid 20266] [client 45.131.193.194:24639] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "192.64.150.239"] [uri "/api/.env"] [unique_id "aoZZfBKtLYFmXpg67wtsAwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-20 01:05:29 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 45.131.193.194 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.131.193.194 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 21:04:51.712884 2026] [security2:error] [pid 20907:tid 20907] [client 45.131.193.194:36773] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.39"] [uri "/app/config/.env"] [unique_id "aoZSs1A71U5vPbsG34_zrAAAADg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-20 00:34:41 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 45.131.193.194 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.131.193.194 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 20:34:26.203111 2026] [security2:error] [pid 2499:tid 2499] [client 45.131.193.194:45231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.175"] [uri "/apps/.env"] [unique_id "aoZLkjSFNZJsGu7vG6t6JwAAACc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-19 22:00:54 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 45.131.193.194 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.131.193.194 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 18:00:03.708163 2026] [security2:error] [pid 5440:tid 5440] [client 45.131.193.194:43583] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.4"] [uri "/api/.env"] [unique_id "aoYnYzFgdyFE4A6hD_fVKwAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-19 20:40:30 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 45.131.193.194 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.131.193.194 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 16:40:04.178129 2026] [security2:error] [pid 21403:tid 21403] [client 45.131.193.194:25011] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.162"] [uri "/app/config/.env"] [unique_id "aoYUpJNhjQA9ZWXSzKpR4gAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-19 20:12:31 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 45.131.193.194 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.131.193.194 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 16:12:08.296984 2026] [security2:error] [pid 17365:tid 17365] [client 45.131.193.194:20505] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.151.7"] [uri "/vendor/.env"] [unique_id "aoYOGIYkTvQERR_RTURrkwAAACg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-19 19:26:14 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 45.131.193.194 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.131.193.194 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 15:26:05.805670 2026] [security2:error] [pid 30589:tid 30589] [client 45.131.193.194:26421] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.112"] [uri "/new/.env"] [unique_id "aoYDTSYIRsB72dPwImmnZgAAAIQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-19 17:11:16 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 45.131.193.194 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.131.193.194 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 13:10:49.714383 2026] [security2:error] [pid 20716:tid 20716] [client 45.131.193.194:49667] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.49"] [uri "/src/.env"] [unique_id "aoXjmchpL_BRHlv2Pp-khQAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ecs.ge	2026-08-19 12:53:56 (1 day ago)	Automatic Fail2Ban report from jail plesk-modsecurity: multiple matching events detected.	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-08-19 11:58:30 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 45.131.193.194 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.131.193.194 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 07:58:09.993817 2026] [security2:error] [pid 11742:tid 11762] [client 45.131.193.194:57011] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.132"] [uri "/new/.env"] [unique_id "aoWaUcPqcuR6pqFg7LhdQgAAAJA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-19 10:36:06 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 45.131.193.194 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.131.193.194 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 06:35:43.011455 2026] [security2:error] [pid 1311:tid 1311] [client 45.131.193.194:58543] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.66"] [uri "/old/.env"] [unique_id "aoWG_2DLpukbTVcwM_NvNwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-19 09:07:16 (1 day ago)	This IP was detected by CrowdSec triggering crowdsecurity/CVE-2017-9841	Web App Attack
🇺🇸 TPI-Abuse	2026-08-19 08:55:34 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 45.131.193.194 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.131.193.194 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 04:55:18.446578 2026] [security2:error] [pid 24666:tid 24666] [client 45.131.193.194:61091] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.181"] [uri "/vendor/laravel/.env"] [unique_id "aoVvdiF-zua72HqF5sF7KQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-19 04:55:06 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 45.131.193.194 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.131.193.194 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 00:54:57.049611 2026] [security2:error] [pid 28728:tid 28728] [client 45.131.193.194:26395] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.107"] [uri "/conf/.env"] [unique_id "aoU3IQ0M_689fAjmz-EevwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 threatintelligence_bvc	2026-08-14 01:16:08 (1 week ago)		Brute-Force

Showing 1 to 15 of 80 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.105

🇳🇱 193.176.31.243

🇳🇱 193.176.31.220

🇩🇪 172.217.34.24

🇫🇷 172.71.232.122

🇺🇸 162.216.150.121

🇺🇸 137.184.8.173

🇹🇷 95.173.161.147

🇫🇷 85.217.140.37

🇳🇱 81.19.216.83

🇺🇸 64.62.156.18

🇨🇳 59.36.134.127

🇬🇧 45.133.173.25

🇬🇧 35.203.211.250

🇺🇸 34.135.200.178

🇦🇷 186.152.188.6

🇳🇱 185.224.128.14

🇺🇸 172.68.174.154

🇦🇷 143.0.64.216

🇬🇫 109.62.66.117