JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

45.148.10.38

Recent Activity

Abuse confidence score ?

100% Critical

486 reports

270 reporters · latest 4 days ago

ISP	TECHOFF SRV LIMITED
Usage Type	Data Center/Web Hosting/Transit
ASN	AS48090
Domain Name	dmzhost.co
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 45.148.10.38

Export CSV

This IP address has been reported a total of 486 times from 270 distinct sources. 45.148.10.38 was first reported on November 19th 2020, and the most recent report was 4 days ago. In the last 60 days, the top reporter locations were: Germany with 57 reports; United States of America with 44 reports; Netherlands with 35 reports. The most common categories in these recent reports were: Web App Attack 178 times; Brute-Force 95 times; Bad Web Bot 61 times; Hacking 39 times; DDoS Attack 15 times; Other 41 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 neron	2026-10-21 16:34:59 (4 days ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇹🇷 neron	2026-10-20 08:00:21 (5 days ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇩🇪 xavier-momain.eu	2026-10-05 01:27:54 (2 weeks ago)	CrowdSec ban — scenario: ssh:bruteforce \| report #2	Brute-Force SSH
🇮🇱 spd.co.il	2026-10-01 21:01:35 (3 weeks ago)	Web application attack detected	Hacking Web App Attack
🇨🇭 🇨🇭 Hosting	2026-10-01 05:10:25 (3 weeks ago)	Automated WAF report: 100-125 blocked requests from this IP detected by our WAF.	Bad Web Bot Web App Attack
🇩🇪 ISPLtd	2026-09-30 07:29:31 (3 weeks ago)	Sep 30 04:29:30 45.148.10.38 TCP SPT=46250 DPT=443 SYN Sep 30 04:29:30 45.148.10.38 TCP SPT=46258 DP ... show more Sep 30 04:29:30 45.148.10.38 TCP SPT=46250 DPT=443 SYN Sep 30 04:29:30 45.148.10.38 TCP SPT=46258 DPT=443 SYN Sep 30 04:29:30 45.148.10.38 TCP SPT=46264 DPT=443 SYN Sep ... show less	DDoS Attack
🇺🇸 antlac1	2026-09-30 04:22:01 (3 weeks ago)	crowdsecurity/http-crawl-non_statics	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-09-30 02:10:37 (3 weeks ago)	(mod_security) mod_security (id:210730) triggered by 45.148.10.38 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 45.148.10.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 22:10:22.240412 2026] [security2:error] [pid 2265:tid 2265] [client 45.148.10.38:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|betiqos.com\|F\|2"] [data ".config"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "betiqos.com"] [uri "/blazor.config"] [unique_id "arxvjtj6__lZ66OsPuz-ngAAACQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-09-30 00:06:04 (3 weeks ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 Matthew Ping	2026-09-29 23:15:01 (3 weeks ago)	Excessive connections (DDoS/flood) blocked by CSF CT_LIMIT on dedicated.	DDoS Attack Brute-Force
🇧🇷 radardatelecom	2026-09-29 22:26:04 (3 weeks ago)	Blocked by Radar da Telecom firewall — abuseipdb	Bad Web Bot Web App Attack
🇸🇪 vaia.cloud	2026-09-29 21:40:01 (3 weeks ago)	crowdsecurity/http-wordpress_wpconfig	Brute-Force Web App Attack
🇫🇮 NoaQT	2026-09-29 18:38:31 (3 weeks ago)	2026-09-29T18:38:27.023180+00:00 ingress-1 haproxy[16887]: 45.148.10.38:37588 [29/Sep/2026:18:38:27. ... show more 2026-09-29T18:38:27.023180+00:00 ingress-1 haproxy[16887]: 45.148.10.38:37588 [29/Sep/2026:18:38:27.022] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 76/76/0/0/0 0/0 "GET /post-sitemap.xml HTTP/1.1" 2026-09-29T18:38:27.091293+00:00 ingress-1 haproxy[16887]: 45.148.10.38:16650 [29/Sep/2026:18:38:27.090] https_in https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 77/77/0/0/0 0/0 "GET /page-sitemap.xml HTTP/1.1" 2026-09-29T18:38:27.129683+00:00 ingress-1 haproxy[16887]: 45.148.10.38:50346 [29/Sep/2026:18:38:27.129] https_in https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 77/77/0/0/0 0/0 "GET /category-sitemap.xml HTTP/1.1" 2026-09-29T18:38:31.247016+00:00 ingress-1 haproxy[16887]: 45.148.10.38:37588 [29/Sep/2026:18:38:31.245] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 78/78/0/0/0 0/0 "GET /.git/HEAD HTTP/1.1" 2026-09-29T18:38:31.318151+00:00 ingress-1 haproxy[16887]: 45.148.10.38:37588 [29/Sep/2026:18:38:31.317] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- ... show less	DDoS Attack
🇳🇱 Alt255	2026-09-29 17:20:55 (3 weeks ago)	[ti-05al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apac ... show more [ti-05al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 45.148.10.38 - - [29/Sep/2026:19:20:43 +0200] "GET /rw-check-df9172577891bea8.htm HTTP/2.0" 404 1920 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 45.148.10.38 - - [29/Sep/2026:19:20:43 +0200] "GET /rw-probe-37edea6ea1466aa4.html HTTP/2.0" 404 1920 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 45.148.10.38 - - [29/Sep/2026:19:20:44 +0200] "GET /.auto.tfvars HTTP/2.0" 404 1878 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 45.148.10.38 - - [29/Sep/2026:19:20:44 +0200] "GET /.auto.tfvars.json H ... show less	Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-09-29 17:02:30 (3 weeks ago)	Web attack/malicious scanning detected	Web App Attack

Showing 1 to 15 of 486 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 69.5.169.211

🇮🇷 212.33.198.41

🇺🇸 209.141.47.217

🇺🇸 205.210.31.14

🇭🇰 152.32.210.59

🇺🇸 147.185.132.204

🇪🇸 113.30.149.218

🇭🇰 107.150.123.48

🇺🇸 43.159.134.133

🇻🇳 42.1.65.89

🇩🇪 4.182.219.135

🇸🇪 217.208.90.253

🇨🇾 213.7.220.67

🇰🇷 210.178.106.164

🇧🇪 198.235.24.242

🇦🇷 190.196.253.8

🇦🇷 186.158.146.59

🇫🇮 147.185.133.152

🇺🇸 130.131.162.12

🇺🇸 107.150.105.153