45.128.199.44

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
32% Elevated
236 reports
113 reporters · latest 1 week ago
ISP
VPN Consumer Amsterdam, The Netherlands
Usage Type
Data Center/Web Hosting/Transit
ASN
AS62240
Domain Name
vpnconsumer.com
Country
🇳🇱 Netherlands
City
Amsterdam, North Holland
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
236 from 113 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇫🇷 France 4 🇩🇪 Germany 2 🇹🇷 Turkey 2
Most common categories Web App Attack 8 Bad Web Bot 5 Hacking 4 Port Scan 3
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 tsZero
Scan example: path=/wp-admin/.env status=404
Hacking
🇩🇪 HoneyPot-FrPri
45.128.199.44 - - 181.214.99.65 [26/Oct/2026:00:38:08 +0100] "GET /new/.env HTTP/1.1" 404 187 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.3 ...
Bad Web Bot Web App Attack
🇫🇷 Baking333
Bad Web Bot Web App Attack
🇹🇷 neron
CrowdSec blocked: http:scan detected via OPNsense firewall
Hacking Web App Attack
🇹🇷 neron
CrowdSec blocked: http:scan detected via OPNsense firewall
Hacking Web App Attack
🇫🇷 Kejult
Honeypot Finding: repeated TCP service probing on TCP/443 (HTTPS); 3 application-level events across 3 source port(s). Sensor(s): H0neytr4p.
Port Scan
🇺🇸 whatda
HTTP tarpit triggered at /.env.ini. Scanner trapped for ~30s. UA: python-requests/2.34.2
Bad Web Bot Web App Attack
🇨🇦 Vianpyro
Honeypot: 7 request(s) in 720 min. Paths: /.env.example, /.env.json, /.env.prod, /app/phpinfo.php, /profiler.php. Method(s): GET. UA: python-requests/2.34.2. ASN: 62240 (VPN Consumer Amsterdam, The Netherlands).
Hacking Bad Web Bot Web App Attack
🇷🇸 pexodelic
Automated report from web, SSH and FTP server logs: 8 requests probing for exposed secrets (.env, .git, config files). First reported 2026-10-08 02:05 UTC, last reported 2026-10-08 05:05 UTC; counts cover the current log rotation window.
Web App Attack
🇺🇸 whatda
HTTP tarpit triggered at /.env.old. Scanner trapped for ~30s. UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/5
Bad Web Bot Web App Attack
🇫🇷 Kejult
Honeypot Finding: repeated TCP service probing on TCP/80 (HTTP); 2 application-level events across 2 source port(s). Sensor(s): Tanner.
Port Scan
🇫🇷 Kejult
Honeypot Finding: verified TCP multi-port scan/probing; 5 application-level events across 2 target ports and 3 source port(s). Ports: 80/HTTP, 443/HTTPS. Sensors: Tanner, H0neytr4p.
Port Scan
🇺🇦 URAN Publishing Service
[04/Sep/2026:05:29:29 +0300] -- 45.128.199.44 Ban reason: Scanner [CMS_GENERIC] | Request: GET /wp-json/ HTTP/1.1
Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service
[21/Aug/2026:02:51:38 +0300] -- 45.128.199.44 Ban reason: Scanner [CMS_GENERIC] | Request: GET /wp-content/plugins/pods/readme.txt HTTP/1.1
Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service
[19/Aug/2026:23:39:47 +0300] -- 45.128.199.44 Ban reason: Scanner [CMS_GENERIC] | Request: GET /wp-content/plugins/pods/readme.txt HTTP/1.1
Bad Web Bot Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇪🇸 185.23.70.23
🇵🇦 181.178.236.173
🇦🇺 118.210.17.247
🇪🇬 101.46.64.66
🇺🇸 95.155.139.212
🇵🇪 38.25.98.96
🇧🇪 34.14.4.216
🇺🇸 216.25.89.110
🇳🇱 213.209.159.175
🇵🇱 172.64.198.207
🇭🇰 161.81.122.27
🇫🇮 157.22.16.160
🇯🇵 152.32.203.18
🇹🇼 104.199.218.162
🇩🇪 89.27.164.183
🇺🇸 64.62.197.59
feedback