45.128.199.166

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
28% Elevated
217 reports
94 reporters · latest 13 hours ago
ISP
VPN Consumer Amsterdam, The Netherlands
Usage Type
Data Center/Web Hosting/Transit
ASN
AS62240
Domain Name
vpnconsumer.com
Country
🇳🇱 Netherlands
City
Amsterdam, North Holland
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
217 from 94 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 2 🇨🇭 Switzerland 1 🇩🇪 Germany 1
Most common categories Web App Attack 5 Brute-Force 1 Bad Web Bot 1 Port Scan 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 neckaralb-admin.de
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇨🇭 zynex
URL Probing: /wp-admin/fmadmin.php
Web App Attack
🇸🇪 Mailz1
45.128.199.166 - - [26/Oct/2026:09:56:13 +0100] "GET /crm/.env HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36" ...
Bad Web Bot
🇺🇸 OceanTreasure
tcp/443; Windows Live Writer manifest enumeration: "GET //blog/wp-includes/wlwmanifest.xml" @ 2026-10-01T17:27:53Z [proxy]
Web App Attack
🇫🇷 ✨
Web App Attack
🇺🇸 avgsmoe
CROWDSEC offender. Observed 1 times.
Port Scan Brute-Force Web App Attack
🇺🇸 knock
Knock-Knock honeypot brute-force: HTTP (3 total hits)
Web App Attack
🇦🇺 dyln
Dyls honeypot brute-force: proto8 (4 total hits)
Brute-Force
🇺🇸 knock
Knock-Knock honeypot brute-force: HTTP (3 total hits)
Web App Attack
🇺🇸 drewf.ink
[22:35] Attempted to relay through this host as an open proxy: GET http://www.msftncsi.com/ncsi.txt
Web App Attack
🇺🇸 mc4bbs
Web App Attack Hacking
🇩🇪 FeG Deutschland
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
Exploited Host Web App Attack
🇺🇦 URAN Publishing Service
[21/Aug/2026:04:57:06 +0300] -- 45.128.199.166 Ban reason: Scanner [CMS_GENERIC] | Request: GET /wp-content/plugins/pods/readme.txt HTTP/1.1
Bad Web Bot Web App Attack
🇳🇱 enpepet
GENERAL: parametres: [url:com_icagenda=] UA:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 URL:/media/com_icagenda/
Port Scan Hacking Brute-Force Bad Web Bot
🇫🇷 Octopuce
Aggressive web search of vulnerable pages: /media/com_baforms/ /components/com_baforms/ /media/com_icagenda/ /components/com_icagenda/ /media/c ...
Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 27.201.112.73
🇺🇸 206.189.178.241
🇸🇬 129.221.248.33
🇺🇸 52.159.226.11
🇺🇸 23.95.193.99
🇺🇸 20.171.20.96
🇸🇬 194.5.82.160
🇬🇧 185.216.145.180
🇭🇰 154.221.20.92
🇨🇦 144.217.61.131
🇧🇷 138.122.22.158
🇧🇩 103.136.62.84
🇸🇪 72.56.42.169
🇺🇸 66.240.223.214
🇵🇱 46.149.219.212
🇨🇳 39.144.78.115
🇧🇪 35.210.201.21
🇲🇽 34.51.27.246
🇦🇿 188.253.210.78
🇮🇹 173.83.208.152
feedback