JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.131.194.193

45.131.194.193 was found in our database!

This IP was reported 251 times. Confidence of Abuse is 54%: ?

54%

ISP	VPN-Consumer-US
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	falco-networks.com
Country	🇺🇸 United States of America
City	San Francisco, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.131.194.193

Whois 45.131.194.193

IP Abuse Reports for 45.131.194.193:

This IP address has been reported a total of 251 times from 117 distinct sources. 45.131.194.193 was first reported on January 24th 2023, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 neron	2026-08-03 08:29:42 (2 weeks ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
🇹🇷 neron	2026-08-02 02:16:22 (2 weeks ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
🇹🇷 neron	2026-07-27 02:19:46 (3 weeks ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
🇹🇷 neron	2026-07-24 15:30:03 (3 weeks ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
🇮🇳 evicky2002	2026-07-24 06:00:00 (4 weeks ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇫🇷 masterguru	2026-07-24 00:23:28 (4 weeks ago)	Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-201)	Hacking Web App Attack
🇩🇪 Vegascosmetics	2026-07-24 00:07:44 (4 weeks ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after sensitive config/credentials exposure ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after sensitive config/credentials exposure probe. Evidence: AttackPattern: /\.env (Match: /.env) show less	Hacking Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-23 13:00:39 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 45.131.194.193 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.131.194.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 09:00:32.402203 2026] [security2:error] [pid 2821874:tid 2821874] [client 45.131.194.193:29387] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "trucksystems.com.mx"] [uri "/.env"] [unique_id "amIQcG3VFm6lF6YvZhc_swAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 BlueWire Hosting	2026-07-23 12:19:14 (4 weeks ago)	Probing websites for vulnerabilities	Web App Attack
🇩🇪 todix	2026-07-23 11:36:12 (4 weeks ago)	Web App Attack Exploid from 45.131.194.193	Web App Attack
🇺🇸 TPI-Abuse	2026-07-23 08:37:44 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 45.131.194.193 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.131.194.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 04:37:40.229174 2026] [security2:error] [pid 2093642:tid 2093750] [client 45.131.194.193:41289] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "econpage.com"] [uri "/.env"] [unique_id "amHS1D4uGTHeXjSxd-l-hAAAAIo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-23 05:53:18 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 45.131.194.193 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.131.194.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 01:53:11.143580 2026] [security2:error] [pid 209197:tid 209197] [client 45.131.194.193:50595] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "alexlacruz.com"] [uri "/.env"] [unique_id "amGsRze2zgkkYYGwq8LeZAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-23 05:33:27 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 45.131.194.193 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.131.194.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 01:33:22.727898 2026] [security2:error] [pid 2130948:tid 2130948] [client 45.131.194.193:34663] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fiestadj.com.mx"] [uri "/.env"] [unique_id "amGnoiQxAcPaNLYOiC1u3QAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-23 04:50:07 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 45.131.194.193 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.131.194.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 00:50:02.774953 2026] [security2:error] [pid 1604814:tid 1604814] [client 45.131.194.193:31237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "davidwoodard.com"] [uri "/.env"] [unique_id "amGdenZ-XKr0D8DudnVqDwAAAD0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-23 04:28:32 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 45.131.194.193 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 45.131.194.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 00:28:25.095541 2026] [security2:error] [pid 1720182:tid 1720182] [client 45.131.194.193:26019] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.doctorbalog.com"] [uri "/.env"] [unique_id "amGYaUAwAwhafcTDPvcazgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 251 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 221.131.2.3

🇨🇳 218.26.205.154

🇦🇷 190.2.127.182

🇧🇷 131.100.242.102

🇮🇳 122.187.229.129

🇫🇮 65.108.64.32

🇰🇿 37.151.92.31

🇲🇾 202.165.25.8

🇺🇿 198.163.193.149

🇬🇧 135.136.20.12

🇨🇳 111.26.177.216

🇸🇪 109.238.140.87

🇳🇱 91.92.40.171

🇺🇸 64.62.156.33

🇳🇱 45.156.87.254

🇺🇸 38.106.235.75

🇹🇭 118.194.251.141

🇨🇦 85.217.149.24

🇳🇱 45.153.34.144

🇬🇧 31.14.254.108