JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.131.193.196

45.131.193.196 was found in our database!

This IP was reported 81 times. Confidence of Abuse is 62%: ?

62%

ISP	VPN-Consumer-US
Usage Type	Data Center/Web Hosting/Transit
ASN	AS262287
Domain Name	expressvpn.com
Country	🇺🇸 United States of America
City	Miami, Florida

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.131.193.196

Whois 45.131.193.196

IP Abuse Reports for 45.131.193.196:

This IP address has been reported a total of 81 times from 46 distinct sources. 45.131.193.196 was first reported on March 4th 2023, and the most recent report was 22 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 FeG Deutschland	2026-08-10 21:48:15 (22 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247	Exploited Host Web App Attack
Anonymous	2026-08-08 04:22:53 (3 days ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
Anonymous	2026-08-06 22:06:29 (4 days ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇩🇪 ger-stg-sifi1	2026-08-06 08:23:00 (5 days ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇫🇷 Baking333	2026-08-06 06:53:15 (5 days ago)	[redacted] 45.131.193.196 - - [06/Aug/2026:07:53:12 +0100] "GET /[redacted] HTTP/1.1" 302 6763 0/200 ... show more [redacted] 45.131.193.196 - - [06/Aug/2026:07:53:12 +0100] "GET /[redacted] HTTP/1.1" 302 6763 0/200229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; rv:143.0) Gecko/20100101 Firefox/143.0" [redacted] 45.131.193.196 - - [06/Aug/2026:07:53:13 +0100] "GET /wp-admin/ HTTP/1.1" 301 5825 0/364 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/129.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack
🇩🇪 neckaralb-admin.de	2026-08-05 17:43:35 (6 days ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
Anonymous	2026-08-03 15:52:04 (1 week ago)	Bot / scanning and/or hacking attempts: POST /wp-login.php HTTP/1.1, GET /wp-login.php?redirect_to=h ... show more Bot / scanning and/or hacking attempts: POST /wp-login.php HTTP/1.1, GET /wp-login.php?redirect_to=https%3A%2F%2Ffrontaalpodium.com%, GET /wp-admin/index.php HTTP/1.1 show less	Hacking Web App Attack
🇺🇸 lostswordfish.com	2026-08-01 10:02:06 (1 week ago)	Wordfence waf block on registrymatters	Web App Attack
🇩🇪 LRob	2026-07-24 13:25:09 (2 weeks ago)	CrowdSec: lrob/wp-login-slow-bf \| req: /wp-login.php \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10 ... show more CrowdSec: lrob/wp-login-slow-bf \| req: /wp-login.php \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15 show less	Brute-Force Web App Attack
🇦🇺 screwlooseit.com.au	2026-07-24 12:40:36 (2 weeks ago)	Blocked by CSF 13 firewall - Rule: WPLOGIN NL/Netherlands/-	Web App Attack
🇮🇹 CoreTech srl	2026-07-24 02:33:57 (2 weeks ago)	cloudlinux2 fail2ban: 2026-07-24 04:30:16,682 fail2ban.filter [1589]: INFO [plesk-modsecu ... show more cloudlinux2 fail2ban: 2026-07-24 04:30:16,682 fail2ban.filter [1589]: INFO [plesk-modsecurity] Found 86.97.67.180 - 2026-07-24 04:30:16cloudlinux2 fail2ban: 2026-07-24 04:30:42,133 fail2ban.filter [1589]: INFO [plesk-wordpress] Found 45.131.193.196 - 2026-07-24 04:30:41cloudlinux2 fail2ban: 2026-07-24 04:30:37,922 fail2ban.filter [1589]: INFO [plesk-wordpress] Found 45.131.193.173 - 2026-07-24 04:30:37cloudlinux2 fail2ban: 2026-07-24 04:30:37,626 fail2ban.filter [1589]: INFO [plesk-wordpress] Found 45.131.193.196 - 2026-07-24 04:30:37cloudlinux2 fail2ban: 2026-07-24 04:30:41,987 fail2ban.filter [1589]: INFO [plesk-wordpress] Found 45.131.193.173 - 2026-07-24 04:30:41cloudlinux2 fail2ban: 2026-07-24 04:31:36,811 fail2ban.filter [1589]: INFO [plesk-modsecurity] Found 36.65.105.230 - 2026-07-24 04:31:36cloudlinux2 fail2ban: 2026-07-24 04:31:58,749 fail2ban.filter [1589]: INFO [plesk-modsecurity] Found 36.65.105.230 - 2026-07-24 04:31:58 show less	Web App Attack
🇮🇹 CoreTech srl	2026-07-23 19:38:56 (2 weeks ago)	cloudlinux2 fail2ban: 2026-07-23 21:36:06,947 fail2ban.filter [1589]: INFO [plesk-wordpre ... show more cloudlinux2 fail2ban: 2026-07-23 21:36:06,947 fail2ban.filter [1589]: INFO [plesk-wordpress] Found 216.73.163.204 - 2026-07-23 21:36:06cloudlinux2 fail2ban: 2026-07-23 21:36:02,835 fail2ban.filter [1589]: INFO [plesk-wordpress] Found 216.73.163.204 - 2026-07-23 21:36:02cloudlinux2 fail2ban: 2026-07-23 21:36:02,853 fail2ban.filter [1589]: INFO [plesk-wordpress] Found 216.73.163.240 - 2026-07-23 21:36:02cloudlinux2 fail2ban: 2026-07-23 21:36:03,138 fail2ban.filter [1589]: INFO [plesk-wordpress] Found 216.73.163.224 - 2026-07-23 21:36:02cloudlinux2 fail2ban: 2026-07-23 21:36:10,881 fail2ban.filter [1589]: INFO [plesk-wordpress] Found 172.98.32.1 - 2026-07-23 21:36:09cloudlinux2 fail2ban: 2026-07-23 21:36:11,254 fail2ban.filter [1589]: INFO [plesk-wordpress] Found 45.131.193.144 - 2026-07-23 21:36:11cloudlinux2 fail2ban: 2026-07-23 21:36:26,632 fail2ban.filter [1589]: INFO [plesk-wordpress] Found 45.131.193.196 - 2026-07-23 21:36:24cloud show less	Web App Attack
🇮🇹 VHosting	2026-07-22 22:05:03 (2 weeks ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇩🇪 Marc	2026-07-18 22:29:22 (3 weeks ago)	45.131.193.196 - - [18/Jul/2026:21:17:30 +0200] "POST /wp-login.php HTTP/1.1" 200 9269 "-" "Mozilla/ ... show more 45.131.193.196 - - [18/Jul/2026:21:17:30 +0200] "POST /wp-login.php HTTP/1.1" 200 9269 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15" 45.131.193.196 - - [18/Jul/2026:23:44:11 +0200] "POST /wp-login.php HTTP/1.1" 200 9267 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15" 45.131.193.196 - - [18/Jul/2026:23:54:34 +0200] "POST /wp-login.php HTTP/1.1" 200 9268 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15" 45.131.193.196 - - [19/Jul/2026:00:23:00 +0200] "POST /wp-login.php HTTP/1.1" 200 7597 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; rv:143.0) Gecko/20100101 Firefox/143.0" 45.131.193.196 - - [19/Jul/2026:00:29:21 +0200] "POST /wp-login.php HTTP/1.1" 200 8543 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; rv:143.0) Gecko/20100101 Firefox/143.0" show less	Brute-Force Web App Attack
🇩🇪 LRob	2026-07-02 00:01:39 (1 month ago)	Repeated attacks detected by Fail2Ban in recidive jail	Hacking

Showing 1 to 15 of 81 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 147.185.132.33

🇷🇴 92.118.39.205

🇷🇴 92.118.39.14

🇱🇻 87.99.87.146

🇫🇷 54.38.1.164

🇷🇴 2.57.122.53

🇳🇱 195.178.110.232

🇳🇱 146.190.230.198

🇸🇮 130.12.182.98

🇺🇸 40.124.175.131

🇩🇪 20.218.66.54

🇧🇷 2804:8d4:37a:5360:7ced:a616:95b7:7546

🇸🇪 192.178.94.30

🇭🇰 165.154.62.197

🇺🇸 146.190.173.66

🇯🇵 137.220.194.100

🇻🇳 113.162.71.148

🇭🇰 103.14.33.129

🇳🇱 77.239.124.237

🇺🇸 66.132.186.233