JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.131.194.12

45.131.194.12 was found in our database!

This IP was reported 212 times. Confidence of Abuse is 45%: ?

45%

ISP	VPN-Consumer-US
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	falco-networks.com
Country	🇺🇸 United States of America
City	San Francisco, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.131.194.12

Whois 45.131.194.12

IP Abuse Reports for 45.131.194.12:

This IP address has been reported a total of 212 times from 99 distinct sources. 45.131.194.12 was first reported on December 12th 2020, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 dealpickeal	2026-07-31 16:15:11 (1 day ago)	Unauthorized authentication attempt against our Microsoft Entra ID tenant. Source IP: 45.131.194. ... show more Unauthorized authentication attempt against our Microsoft Entra ID tenant. Source IP: 45.131.194.12 Application: Azure Active Directory PowerShell Event time (UTC): 7/28/2026 17:31 Error code: 50053 Result: Sign-in was blocked because it came from an IP address with malicious activity Destination service: login.microsoftonline.com Destination port: TCP 443 Activity is consistent with automated password spraying, credential stuffing, or brute-force authentication attempts. show less	Brute-Force Hacking
🇺🇸 dealpickeal	2026-07-29 12:47:21 (4 days ago)	Unauthorized authentication attempt against our Microsoft Entra ID tenant. Source IP: 45.131.194. ... show more Unauthorized authentication attempt against our Microsoft Entra ID tenant. Source IP: 45.131.194.12 Application: Azure Active Directory PowerShell Event time (UTC): 7/28/2026 17:31 Error code: 50053 Result: Sign-in was blocked because it came from an IP address with malicious activity Destination service: login.microsoftonline.com Destination port: TCP 443 Activity is consistent with automated password spraying, credential stuffing, or brute-force authentication attempts. show less	Brute-Force Hacking
🇵🇹 Subnet Shadow Specter	2026-07-27 21:38:39 (5 days ago)	[Security] [Category: Bot Masquerading] FCrDNS mismatch detected. [IP Address]: 45.131.194.12 claime ... show more [Security] [Category: Bot Masquerading] FCrDNS mismatch detected. [IP Address]: 45.131.194.12 claimed a fake identity but failed forward-confirmed reverse DNS verification. Automated scraping via spoofed User-Agent `compatible; Googlebot/2.1`. [Action]: IP block initiated. [User-Agent]: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) [IoA Datetime]: 2026-07-27 22:38:38 UTC +1. show less	Port Scan Hacking Spoofing Bad Web Bot Web App Attack
🇩🇪 neckaralb-admin.de	2026-07-27 10:35:19 (6 days ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇩🇪 filstal.org	2026-07-26 07:21:02 (1 week ago)	CrowdSec: crowdsecurity/http-cve-probing	Port Scan Hacking
🇺🇸 lostswordfish.com	2026-07-19 12:18:04 (2 weeks ago)	Wordfence waf block on 1105merrystreet	Web App Attack
🇮🇹 CoreTech srl	2026-07-16 03:33:57 (2 weeks ago)	cloudlinux2 fail2ban: 2026-07-16 05:28:52,540 fail2ban.filter [1812]: INFO [plesk-wordpre ... show more cloudlinux2 fail2ban: 2026-07-16 05:28:52,540 fail2ban.filter [1812]: INFO [plesk-wordpress] Found 45.131.194.12 - 2026-07-16 05:28:51cloudlinux2 fail2ban: 2026-07-16 05:28:48,218 fail2ban.filter [1812]: INFO [plesk-wordpress] Found 45.131.194.12 - 2026-07-16 05:28:47cloudlinux2 fail2ban: 2026-07-16 05:30:03,378 fail2ban.filter [1812]: INFO [plesk-wordpress] Found 144.79.132.192 - 2026-07-16 05:30:03cloudlinux2 fail2ban: 2026-07-16 05:30:02,508 fail2ban.filter [1812]: INFO [plesk-wordpress] Found 167.71.80.124 - 2026-07-16 05:29:59cloudlinux2 fail2ban: 2026-07-16 05:30:02,517 fail2ban.filter [1812]: INFO [plesk-wordpress] Found 167.71.80.124 - 2026-07-16 05:29:59cloudlinux2 fail2ban: 2026-07-16 05:30:29,565 fail2ban.actions [1812]: NOTICE [plesk-wordpress] Ban 173.239.214.229cloudlinux2 fail2ban: 2026-07-16 05:30:29,572 fail2ban.filter [1812]: INFO [recidive] Found 173.239.214.229 - 2026-07-16 05:30:29cloudlinux2 fail2ban: 2026-07-16 05 show less	Web App Attack
Anonymous	2026-07-16 01:44:44 (2 weeks ago)	[server.tmg.gr] wp-login-spray-user: sites=eleea.gr; samples=target_user=admin \| distinct_ips=11 \| t ... show more [server.tmg.gr] wp-login-spray-user: sites=eleea.gr; samples=target_user=admin \| distinct_ips=11 \| total_fails=25 show less	Hacking Web App Attack
🇩🇪 neckaralb-admin.de	2026-07-16 00:20:59 (2 weeks ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇫🇷 matthieul.dev	2026-06-22 17:10:31 (1 month ago)	Blocked by os-abuseipdb; 12 hits, proto=tcp,udp, ports=64120	Port Scan Brute-Force
🇩🇰 swrlly	2026-06-14 20:08:25 (1 month ago)	2 unauthorized webserver connections (30d)	Web App Attack
🇳🇱 e.fierstra	2026-06-14 06:52:37 (1 month ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2026-06-10 06:20:28 (1 month ago)	45.131.194.12 - - [10/Jun/2026:09:20:27 +0300] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 4 ... show more 45.131.194.12 - - [10/Jun/2026:09:20:27 +0300] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 404 714 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.131.194.12 - - [10/Jun/2026:09:20:28 +0300] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 404 714 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" ... show less	Web App Attack
🇩🇪 gadix	2026-06-08 13:35:01 (1 month ago)	45.131.194.12 - - [08/Jun/2026:11:47:53 +0200] "POST /wp-login.php HTTP/1.1" 200 16401 "-" "Mozilla/ ... show more 45.131.194.12 - - [08/Jun/2026:11:47:53 +0200] "POST /wp-login.php HTTP/1.1" 200 16401 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; rv:143.0) Gecko/20100101 Firefox/143.0" 45.131.194.12 - - [08/Jun/2026:14:32:32 +0200] "POST /wp-login.php HTTP/1.1" 200 16401 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15" 45.131.194.12 - - [08/Jun/2026:15:35:00 +0200] "POST /wp-login.php HTTP/1.1" 200 16398 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) ... show less	Web App Attack
🇫🇷 Octopuce	2026-06-05 19:40:07 (1 month ago)	Aggressive web search of vulnerable pages: /wp-login.php /wp-includes/customize/index.php /wp-admin/ ... show more Aggressive web search of vulnerable pages: /wp-login.php /wp-includes/customize/index.php /wp-admin/shell20211028.php /natural.php /item.php /f ... show less	Web App Attack

Showing 1 to 15 of 212 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 2404:6800:4003:c03::123

🇮🇪 207.254.71.129

🇿🇦 196.41.207.112

🇬🇧 83.106.98.2

🇺🇸 65.49.1.95

🇮🇹 5.59.248.234

🇧🇷 200.175.61.207

🇺🇸 162.216.149.5

🇷🇺 109.188.122.54

🇨🇳 106.12.86.201

🇺🇸 66.132.172.236

🇮🇷 2.180.32.104

🇺🇸 216.25.89.149

🇳🇱 213.176.26.22

🇧🇷 200.50.220.254

🇬🇧 193.163.125.20

🇮🇩 182.8.225.222

🇺🇸 173.214.169.88

🇰🇪 154.70.40.173

🇮🇳 122.174.46.227