JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 200.162.145.57

200.162.145.57 was found in our database!

This IP was reported 64 times. Confidence of Abuse is 100%: ?

100%

ISP	ExpressVPN
Usage Type	Data Center/Web Hosting/Transit
ASN	AS62240
Domain Name	expressvpn.com
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 200.162.145.57

Whois 200.162.145.57

IP Abuse Reports for 200.162.145.57:

This IP address has been reported a total of 64 times from 36 distinct sources. 200.162.145.57 was first reported on May 27th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 andreighitan	2026-06-02 19:58:13 (1 day ago)	Coordinated attack against 84.46.253.134. Webshell scanning, credential harvesting (.env, wp-config, ... show more Coordinated attack against 84.46.253.134. Webshell scanning, credential harvesting (.env, wp-config, .git), PHP vuln scanning. Active June 2 2026. ZAC Bayern ref BY0257-500359-26/8. show less	Web App Attack Brute-Force
🇩🇪 4server	2026-06-01 17:14:50 (2 days ago)	[MonJun0119:14:45.7572742026][security2:error][pid3046748:tid3046774][client200.162.145.57:0]ModSecu ... show more [MonJun0119:14:45.7572742026][security2:error][pid3046748:tid3046774][client200.162.145.57:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\\|wget\\|python\\|nikto\\|sqlmap\\|acunetix\\|fimap\\|dirbuster\\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"www.solaristech.ch.136-243-54-122.cpanel.site\"][uri\"/.git/HEAD\"][unique_id\"ah2-BRbyxfdITy4bN-zm5QAAAAo\"] show less	Port Scan Brute-Force Web App Attack
🇨🇭 4server	2026-06-01 11:35:53 (2 days ago)	[MonJun0113:35:39.8377672026][security2:error][pid375550:tid375758][client200.162.145.57:0]ModSecuri ... show more [MonJun0113:35:39.8377672026][security2:error][pid375550:tid375758][client200.162.145.57:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"364\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"sarand.ch.81-17-25-250.cpanel.site\"][uri\"/.git/HEAD\"][unique_id\"ah1uiz4s9Zt9aE0v9WNzjwAAABQ\"] show less	Hacking Web App Attack
🇫🇷 masterguru	2026-05-31 18:21:58 (3 days ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 200.162.145.57 (US/United States/-): ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 200.162.145.57 (US/United States/-): 2 in the last 3600 secs (0-193) show less	Hacking
🇩🇪 louis77	2026-05-31 07:53:57 (3 days ago)	Sensitive file access attempt - Path: /.git/HEAD, Method: GET, UA: Python-urllib/3.10	Web App Attack Hacking
🇸🇬 securejdprop	2026-05-31 06:31:39 (4 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing. crowdsecurity/http-probing	Hacking Web App Attack
🇫🇷 YF	2026-05-30 18:31:22 (4 days ago)	Git HEAD exposure probe	Web App Attack
🇧🇪 sid3windr	2026-05-30 18:28:39 (4 days ago)	GET /.git/HEAD (Tarpitted for 19m44s, wasted 69.49kB)	Web App Attack
🇩🇪 Blexyel	2026-05-30 16:40:15 (4 days ago)	200.162.145.57 - - [30/May/2026:18:40:15 +0200] "GET /.git/config HTTP/1.1" 301 169 "-" "Python-urll ... show more 200.162.145.57 - - [30/May/2026:18:40:15 +0200] "GET /.git/config HTTP/1.1" 301 169 "-" "Python-urllib/3.10" "pingusmc.org" ... show less	Brute-Force Web App Attack
Anonymous	2026-05-30 16:32:00 (4 days ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
🇩🇪 pltcldvlpr	2026-05-30 06:33:57 (5 days ago)	CMS/framework probe: 200.162.145.57 - - [30/May/2026:08:33:57 +0200] "GET /.git/HEAD HTTP/1.1" 301 1 ... show more CMS/framework probe: 200.162.145.57 - - [30/May/2026:08:33:57 +0200] "GET /.git/HEAD HTTP/1.1" 301 178 "-" "Python-urllib/3.10" asn=62240 org="Clouvider Limited" country=US ... show less	Web App Attack
🇮🇩 Burayot	2026-05-30 01:47:34 (5 days ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 200.162.145.57 (GB/United Kingdom/-) ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 200.162.145.57 (GB/United Kingdom/-): 1 in the last 3600 secs show less	Web App Attack
🇫🇷 mrcrassi	2026-05-29 22:09:34 (5 days ago)	Triggered Cloudflare WAF (bic) from NL. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint ... show more Triggered Cloudflare WAF (bic) from NL. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /.git/HEAD UA: Python-urllib/3.10 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 4server	2026-05-29 17:47:58 (5 days ago)	[FriMay2919:47:53.0891822026][security2:error][pid2549269:tid2549403][client200.162.145.57:0]ModSecu ... show more [FriMay2919:47:53.0891822026][security2:error][pid2549269:tid2549403][client200.162.145.57:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\\|wget\\|python\\|nikto\\|sqlmap\\|acunetix\\|fimap\\|dirbuster\\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"www.ecosuber.com.136-243-54-122.cpanel.site\"][uri\"/.git/HEAD\"][unique_id\"ahnRSR_XOuTuYEoUmSN1FgAAAMA\"] show less	Port Scan Brute-Force Web App Attack
🇩🇪 bescared	2026-05-29 16:36:13 (5 days ago)	F2B - Malicious activity detected. URL Probing. -8ff06ede-	Hacking Bad Web Bot Web App Attack

Showing 1 to 15 of 64 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 201.17.216.187

🇺🇦 192.162.134.3

🇺🇸 162.216.149.122

🇪🇸 162.158.122.172

🇺🇸 152.32.205.153

🇫🇷 91.231.89.169

🇨🇦 85.217.149.56

🇮🇳 49.43.108.175

🇳🇱 45.148.10.21

🇨🇳 180.165.29.129

🇫🇮 147.185.133.126

🇧🇷 138.255.157.62

🇧🇬 91.191.209.198

🇺🇸 195.184.76.174

🇳🇱 176.65.149.203

🇱🇾 156.38.41.104

🇫🇮 147.185.133.249

🇨🇳 106.117.117.17

🇺🇸 103.144.28.85

🇵🇪 38.25.98.57