JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.131.195.28

45.131.195.28 was found in our database!

This IP was reported 267 times. Confidence of Abuse is 84%: ?

84%

ISP	VPN Consumer Secaucus, NJ, USA
Usage Type	Data Center/Web Hosting/Transit
ASN	AS62240
Domain Name	vpnconsumer.com
Country	🇺🇸 United States of America
City	Secaucus, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.131.195.28

Whois 45.131.195.28

IP Abuse Reports for 45.131.195.28:

This IP address has been reported a total of 267 times from 125 distinct sources. 45.131.195.28 was first reported on February 28th 2021, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Site.eu	2026-08-12 01:02:18 (5 days ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇺🇸 xmission.com	2026-08-09 04:56:27 (1 week ago)	Blocked by UFW (TCP on 51413) Source port: 36141 TTL: 112 Packet length: 52 TOS: 0x08 This report ( ... show more Blocked by UFW (TCP on 51413) Source port: 36141 TTL: 112 Packet length: 52 TOS: 0x08 This report (for 45.131.195.28) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-08-08 11:03:27 (1 week ago)	Blocked by UFW (TCP on 51413) Source port: 60612 TTL: 112 Packet length: 52 TOS: 0x08 This report ( ... show more Blocked by UFW (TCP on 51413) Source port: 60612 TTL: 112 Packet length: 52 TOS: 0x08 This report (for 45.131.195.28) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 FeG Deutschland	2026-08-05 18:16:58 (1 week ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247	Exploited Host Web App Attack
🇮🇳 evicky2002	2026-08-04 06:00:00 (1 week ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇮🇹 CoreTech srl	2026-08-04 00:38:57 (1 week ago)	cloudlinux2 fail2ban: 2026-08-04 02:34:07,101 fail2ban.actions [1475]: NOTICE [plesk-wordpre ... show more cloudlinux2 fail2ban: 2026-08-04 02:34:07,101 fail2ban.actions [1475]: NOTICE [plesk-wordpress] Unban 45.131.195.17cloudlinux2 fail2ban: 2026-08-04 02:35:51,943 fail2ban.filter [1475]: INFO [plesk-wordpress] Found 209.87.169.200 - 2026-08-04 02:35:51cloudlinux2 fail2ban: 2026-08-04 02:35:56,299 fail2ban.filter [1475]: INFO [plesk-wordpress] Found 209.87.169.200 - 2026-08-04 02:35:55cloudlinux2 fail2ban: 2026-08-04 02:37:08,155 fail2ban.filter [1475]: INFO [plesk-wordpress] Found 209.87.169.191 - 2026-08-04 02:37:07cloudlinux2 fail2ban: 2026-08-04 02:37:12,077 fail2ban.filter [1475]: INFO [plesk-wordpress] Found 209.87.169.191 - 2026-08-04 02:37:11cloudlinux2 fail2ban: 2026-08-04 02:38:04,886 fail2ban.filter [1475]: INFO [plesk-modsecurity] Found 210.186.159.153 - 2026-08-04 02:38:04cloudlinux2 fail2ban: 2026-08-04 02:38:20,194 fail2ban.actions [1475]: NOTICE [plesk-modsecurity] Unban 138.197.175.250cloudlinux2 fail2ban: 2026-08-04 02:38:35 show less	Web App Attack
🇺🇸 xmission.com	2026-08-03 04:53:14 (2 weeks ago)	Blocked by UFW (TCP on 60973) Source port: 16713 TTL: 112 Packet length: 52 TOS: 0x08 This report ( ... show more Blocked by UFW (TCP on 60973) Source port: 16713 TTL: 112 Packet length: 52 TOS: 0x08 This report (for 45.131.195.28) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇦 KIsmay	2026-08-03 03:22:52 (2 weeks ago)	Aug 2 23:22:23 www4 WPAudit[398311]: 45.131.195.28 terencegower.com "Mozilla/5.0 (Macintosh; Intel ... show more Aug 2 23:22:23 www4 WPAudit[398311]: 45.131.195.28 terencegower.com "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" root:root FAIL Aug 2 23:22:25 www4 WPAudit[398311]: 45.131.195.28 terencegower.com "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" alan:12345678 FAIL Aug 2 23:22:33 www4 WPAudit[398311]: 45.131.195.28 terencegower.com "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1; rv:119.0) Gecko/20100101 Firefox/119.0" nora85:nora85 FAIL Aug 2 23:22:45 www4 WPAudit[398311]: 45.131.195.28 terencegower.com "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" nora85:password FAIL Aug 2 23:22:51 www4 WPAudit[398311]: 45.131.195.28 terencegower.com "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" nora85:123456 FAIL ... show less	Brute-Force Web App Attack
🇲🇹 Malta	2026-08-02 02:54:27 (2 weeks ago)	45.131.195.28 - - [02/Aug/2026:04:54:27 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Macintosh ... show more 45.131.195.28 - - [02/Aug/2026:04:54:27 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15" show less	Hacking Web App Attack
🇩🇪 neckaralb-admin.de	2026-08-01 22:29:08 (2 weeks ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇫🇷 COMAITE	2026-08-01 10:23:17 (2 weeks ago)	CMS (WordPress or Joomla) brute force attempt.	Web App Attack
🇳🇱 Site.eu	2026-08-01 09:58:42 (2 weeks ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇫🇮 KnightIndustries	2026-08-01 06:16:44 (2 weeks ago)	2026-08-01T08:16:39.903870+02:00 milkyway wordpress(learncryptography.pw)[1457483]: Authentication a ... show more 2026-08-01T08:16:39.903870+02:00 milkyway wordpress(learncryptography.pw)[1457483]: Authentication attempt for unknown user rouptin from 45.131.195.28 2026-08-01T08:16:41.805976+02:00 milkyway wordpress(learncryptography.pw)[1457483]: Authentication attempt for unknown user GuaUserWa3 from 45.131.195.28 2026-08-01T08:16:44.144866+02:00 milkyway wordpress(learncryptography.pw)[1457483]: Authentication attempt for unknown user gateway from 45.131.195.28 ... show less	Brute-Force Web App Attack
🇫🇮 KnightIndustries	2026-08-01 05:15:36 (2 weeks ago)	2026-08-01T07:15:24.845216+02:00 milkyway wordpress(learncryptography.pw)[1458465]: Authentication f ... show more 2026-08-01T07:15:24.845216+02:00 milkyway wordpress(learncryptography.pw)[1458465]: Authentication failure for mystic from 45.131.195.28 2026-08-01T07:15:28.026830+02:00 milkyway wordpress(learncryptography.pw)[1458465]: Authentication failure for mystic from 45.131.195.28 2026-08-01T07:15:35.992217+02:00 milkyway wordpress(learncryptography.pw)[1458465]: Authentication failure for mystic from 45.131.195.28 ... show less	Brute-Force Web App Attack
🇺🇸 Jason Howell	2026-07-31 17:00:40 (2 weeks ago)	45.131.195.28 - - [31/Jul/2026:11:12:07 -0500] "GET /wp-admin/edit.php HTTP/1.1" 302 4436 "https://g ... show more 45.131.195.28 - - [31/Jul/2026:11:12:07 -0500] "GET /wp-admin/edit.php HTTP/1.1" 302 4436 "https://gannonpool.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15" 45.131.195.28 - - [31/Jul/2026:11:12:11 -0500] "GET /wp-login.php?redirect_to=https%3A%2F%2Fgannonpool.com%2Fwp-admin%2Fedit.php&reauth=1 HTTP/1.1" 200 4927 "https://gannonpool.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15" 45.131.195.28 - - [31/Jul/2026:11:12:15 -0500] "POST /wp-login.php HTTP/1.1" 503 19535 "https://gannonpool.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15" 45.131.195.28 - - [31/Jul/2026:12:00:36 -0500] "GET /wp-admin/edit.php HTTP/1.1" 302 4436 "https://gannonpool.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Ge ... show less	Web App Attack

Showing 1 to 15 of 267 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 20.1.169.243

🇦🇺 223.27.18.80

🇩🇪 213.209.159.210

🇹🇼 198.235.24.73

🇹🇼 198.235.24.42

🇬🇧 193.176.29.3

🇨🇳 183.197.72.3

🇺🇸 172.217.116.4

🇬🇧 152.32.198.210

🇫🇮 147.185.133.55

🇺🇸 147.185.132.49

🇺🇸 136.114.160.56

🇺🇸 91.230.168.211

🇫🇷 91.196.152.86

🇷🇺 89.113.139.51

🇳🇱 89.21.67.159

🇳🇴 87.120.104.75

🇱🇹 77.90.185.79

🇩🇪 69.5.169.41

🇺🇦 46.200.48.27