JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

45.134.225.48

Recent Activity

Abuse Confidence Score

100% Critical

1,534 reports

487 reporters · latest 3 days ago

ISP: Colocatel Datacenter
Usage Type: Data Center/Web Hosting/Transit
ASN: AS213438
Domain Name: colocatel.com
Country: 🇩🇪 Germany
City: Aachen, North Rhine-Westphalia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

1,534 from 487 distinct reporters

First reported

March 4th 2026

Most recent report

3 days ago

Last 60 days

Top reporter locations 🇩🇪 Germany 342 🇺🇸 United States of America 255 🇫🇷 France 126

Most common categories Web App Attack 830 Brute-Force 371 Bad Web Bot 267 Hacking 179 Port Scan 88

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 ghostwarriors	2026-10-31 08:21:44 (3 days ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇫🇮 Rauno Asp	2026-10-31 02:01:22 (3 days ago)	Automated .env credentials scanning attempt detected by honeypot on elbasanapartments.al	Web App Attack
🇵🇰 sbk97 (https://sayor.net)	2026-10-27 02:30:09 (1 week ago)	SAYOR honeypot: observed attack /zxq-nonexistent-7381.env	Brute-Force
🇩🇪 ghostwarriors	2026-10-27 00:21:27 (1 week ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇬🇧 openstrike.co.uk	2026-10-26 06:14:07 (1 week ago)	302 attacks on config grabbing URLs (type 2), config grabbing URLs, VC URLs, site downloads (type 2), password/key grabbing URLs, env grabbing URLs, PHP URLs, site downloads: GET /config/secrets.yml HTTP/1.1 GET /.htaccess HTTP/1.1 GET /.git/HEAD HTT ... show more 302 attacks on config grabbing URLs (type 2), config grabbing URLs, VC URLs, site downloads (type 2), password/key grabbing URLs, env grabbing URLs, PHP URLs, site downloads: GET /config/secrets.yml HTTP/1.1 GET /.htaccess HTTP/1.1 GET /.git/HEAD HTTP/1.1 GET /demo HTTP/1.1 GET /.vscode/sftp.json HTTP/1.1 GET /.env.vault HTTP/1.1 GET /vendor/autoload.php HTTP/1.1 GET /db.sql HTTP/1.1 show less	Hacking Web App Attack
🇫🇷 SpaceHost-Server	2026-10-25 23:22:42 (1 week ago)		Brute-Force Web App Attack
🇳🇱 Savvii	2026-10-25 18:30:01 (1 week ago)	20 attempts against mh-misbehave-ban on burne	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dwmp	2026-10-25 17:06:04 (1 week ago)	[25/Oct/2026:18:06:03.053913 +0100] at42-6OA7yG7Y_RqGP8bFAAAAA0 45.134.225.48 56248 38.242.227.117 7081 [25/Oct/2026:18:06:03.060677 +0100] at42-_n6w7cxlkED6pKBqQAAAEg 45.134.225.48 56214 38.242.227.117 7081 [25/Oct/2026:18:06:03.071044 +0100] at42-_ ... show more [25/Oct/2026:18:06:03.053913 +0100] at42-6OA7yG7Y_RqGP8bFAAAAA0 45.134.225.48 56248 38.242.227.117 7081 [25/Oct/2026:18:06:03.060677 +0100] at42-_n6w7cxlkED6pKBqQAAAEg 45.134.225.48 56214 38.242.227.117 7081 [25/Oct/2026:18:06:03.071044 +0100] at42-_n6w7cxlkED6pKBqgAAAEI 45.134.225.48 56250 38.242.227.117 7081 ... show less	Brute-Force SSH
🇺🇸 MatCat	2026-10-25 17:05:10 (1 week ago)	Banned by fail2ban: apache-webprobe	Port Scan Bad Web Bot
🇺🇸 Mundo Bueno	2026-10-25 16:59:54 (1 week ago)	[ISILIA Protection v2.3] Tentative d'accès: /.env.old [RATE LIMITED - 1800s quarantine] \| Pays: DE \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36	Hacking Web App Attack
🇧🇾 lns.bz	2026-10-25 16:54:21 (1 week ago)	Too many 404 requests [BY]	Web App Attack
Anonymous	2026-10-25 16:52:07 (1 week ago)	Port Scan detected from 45.134.225.48 (NL/The Netherlands/-). 5 hits in the last 25 seconds	Brute-Force Port Scan
🇺🇸 TPI-Abuse	2026-10-25 16:08:20 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 45.134.225.48 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 12:08:06.681871 2026] [security2:error] [pid 8835:tid 8835] [client 45.134.225.48:0] ModSecu ... show more (mod_security) mod_security (id:210492) triggered by 45.134.225.48 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 12:08:06.681871 2026] [security2:error] [pid 8835:tid 8835] [client 45.134.225.48:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.apworldhistoryexamprep.com"] [uri "/.env"] [unique_id "at4pZsjTPZBGv6PffGHa6QAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 hchristo	2026-10-25 15:55:15 (1 week ago)	[Sun Oct 25 16:55:13.073932 2026] [authz_core:error] [pid 6907:tid 6916] [remote 45.134.225.48:59624] AH01630: client denied by server configuration: /var/www/hchristo/htdocs/crafterversum.de/forum.crafterversum.de/.git.bak [Sun Oct 25 16:55:13.74073 ... show more [Sun Oct 25 16:55:13.073932 2026] [authz_core:error] [pid 6907:tid 6916] [remote 45.134.225.48:59624] AH01630: client denied by server configuration: /var/www/hchristo/htdocs/crafterversum.de/forum.crafterversum.de/.git.bak [Sun Oct 25 16:55:13.740737 2026] [authz_core:error] [pid 6907:tid 6933] [remote 45.134.225.48:59624] AH01630: client denied by server configuration: /var/www/hchristo/htdocs/crafterversum.de/forum.crafterversum.de/.git.bak [Sun Oct 25 16:55:13.742017 2026] [authz_core:error] [pid 6907:tid 6939] [remote 45.134.225.48:59624] AH01630: client denied by server configuration: /var/www/hchristo/htdocs/crafterversum.de/forum.crafterversum.de/.git.bak [Sun Oct 25 16:55:13.845117 2026] [authz_core:error] [pid 6907:tid 6954] [remote 45.134.225.48:59624] AH01630: client denied by server configuration: /var/www/hchristo/htdocs/crafterversum.de/forum.crafterversum.de/.git.bak [Sun Oct 25 16:55:14.408430 2026] [authz_core:error] [pid 6907:tid 6916] [remote 45.134.225.48:59736] AH ... show less	Brute-Force
🇳🇱 Savvii	2026-10-25 15:53:05 (1 week ago)	20 attempts against mh-misbehave-ban on choy	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 1534 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇬🇧 185.247.137.20

🇺🇸 162.245.218.42

🇺🇸 151.241.118.107

🇭🇰 138.199.62.65

🇺🇸 137.184.20.104

🇺🇸 107.172.124.74

🇺🇸 100.36.86.121

🇳🇱 64.205.72.188

🇺🇸 64.62.197.158

🇺🇸 172.252.238.63

🇺🇸 172.252.216.17

🇺🇸 172.252.44.204

🇭🇰 172.71.214.209

🇨🇦 146.190.255.4

🇺🇸 119.12.207.123

🇯🇵 96.126.130.106

🇰🇷 85.155.176.63

🇫🇷 82.102.18.188

🇺🇸 72.215.33.52

🇳🇱 64.205.72.237