AbuseIPDB » 45.128.199.242

45.128.199.242 was found in our database!

This IP was reported 86 times. Confidence of Abuse is 9%: ?

9%

ISP	VPN Consumer Amsterdam, The Netherlands
Usage Type	Data Center/Web Hosting/Transit
ASN	AS62240
Domain Name	vpnconsumer.com
Country	Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 45.128.199.242

Whois 45.128.199.242

IP Abuse Reports for 45.128.199.242:

This IP address has been reported a total of 86 times from 41 distinct sources. 45.128.199.242 was first reported on July 18th 2022, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
TPI-Abuse	2025-06-18 15:56:32 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 45.128.199.242 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:210730) triggered by 45.128.199.242 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 18 11:56:24.606678 2025] [security2:error] [pid 120719:tid 120719] [client 45.128.199.242:54019] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||usbea.com|F|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "usbea.com"] [uri "/backups/wallet.dat"] [unique_id "aFLhqNjIwIEIFHO-wrpdxwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
Penny Packer	2025-06-13 22:15:36 (1 month ago)	Fail2Ban apache-tripwires	Web App Attack
TPI-Abuse	2025-06-13 05:14:58 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 45.128.199.242 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:210730) triggered by 45.128.199.242 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 13 01:14:51.382610 2025] [security2:error] [pid 2490639:tid 2490639] [client 45.128.199.242:10359] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||barnesandbrower.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "barnesandbrower.com"] [uri "/backups/sql.sql"] [unique_id "aEuzy9jVAPn-j_EW0378nAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
marzzzello	2025-05-15 08:45:51 (2 months ago)	Ports: 15x 23879	Port Scan
mnsf	2025-05-09 05:05:27 (2 months ago)	Too many Status 40X (11)	Brute-Force Web App Attack
bescared	2025-04-20 02:19:41 (2 months ago)	F2B - Malicious activity detected. URL Probing.	Hacking Bad Web Bot Web App Attack
ThreatBook.io	2025-04-14 23:29:27 (3 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/45.128.199.242 2 ... show moreThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/45.128.199.242 2025-04-14 14:25:04 /sendgrid.json 2025-04-14 14:25:58 /tool/view/phpinfo.view.php 2025-04-14 03:54:05 /conf.json 2025-04-14 03:53:59 /config.json 2025-04-14 14:24:36 /enviroments/.env.production 2025-04-14 03:53:45 /shared/.env%20 show less	Web App Attack
diego	2025-04-13 18:02:58 (3 months ago)	Events: TCP SYN Discovery or Flooding, Seen 22 times in the last 10800 seconds	DDoS Attack
Study Bitcoin 🤗	2025-04-07 21:20:19 (3 months ago)	Port probe to tcp/80 (http) [srv128]	Port Scan Bad Web Bot Web App Attack
statistics indonesia	2025-04-03 09:45:57 (3 months ago)	WP Admin Scan Activities	Web App Attack
statistics indonesia	2025-04-02 16:52:05 (3 months ago)	WP Admin Scan Activities	Web App Attack
statistics indonesia	2025-04-01 07:17:10 (3 months ago)	WP Admin Scan Activities	Web App Attack
mnsf	2025-03-31 16:05:38 (3 months ago)	Too many Status 40X (15)	Brute-Force Web App Attack
JimArchon72	2025-03-31 12:15:01 (3 months ago)	2025/03/31 12:11:47 "GET //wp-admin/fmadmin.php HTTP/2.0"	Web App Attack
mnsf	2025-03-30 15:05:22 (3 months ago)	Too many Status 40X (11)	Brute-Force Web App Attack

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩