JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.128.199.47

45.128.199.47 was found in our database!

This IP was reported 155 times. Confidence of Abuse is 57%: ?

57%

ISP	VPN Consumer Amsterdam, The Netherlands
Usage Type	Data Center/Web Hosting/Transit
ASN	AS62240
Domain Name	vpnconsumer.com
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.128.199.47

Whois 45.128.199.47

IP Abuse Reports for 45.128.199.47:

This IP address has been reported a total of 155 times from 77 distinct sources. 45.128.199.47 was first reported on April 7th 2022, and the most recent report was 39 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 maxpower	2026-06-18 19:29:27 (39 minutes ago)	(aggressive_scanner) REGOLA 9 - Aggressive Web Scanner 45.128.199.47 (-): 1 in the last 3600 secs; P ... show more (aggressive_scanner) REGOLA 9 - Aggressive Web Scanner 45.128.199.47 (-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 45.128.199.47 - - [18/Jun/2026:21:29:11 +0200] "GET /wp-content/plugins/enhanced-text-widget/analyst/src/403.php HTTP/2.0" 404 75557 "https://samitecnopetrol.it/wp-content/plugins/enhanced-text-widget/analyst/src/403.php" "Go-http-client/2.0" "-" host=www.samitecnopetrol.it show less	Port Scan
🇳🇱 Site.eu	2026-06-18 09:41:18 (10 hours ago)	Excessive 404/403 errors	Brute-Force
🇩🇪 FeG Deutschland	2026-06-18 08:56:44 (11 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇫🇷 masterguru	2026-06-18 01:03:14 (19 hours ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-195) show less	Bad Web Bot
🇳🇱 homeshowdomain.nl	2026-06-09 21:59:39 (1 week ago)	Auto-ban: >3000 req/min op 2026-06-09	Web App Attack SSH Hacking
🇳🇱 i-turnradio.nl	2026-06-09 06:19:05 (1 week ago)	2026-06-09 @ 08:19:05 (CET) ~ Blocked for trying to access: /wp-includes/js/tinymce/langs/	Web App Attack
🇳🇱 i-turnradio.nl	2026-06-09 06:02:36 (1 week ago)	2026-06-09 @ 08:02:36 (CET) ~ Blocked for trying to access: /well-known/config.php	Web App Attack
🇳🇱 i-turnradio.nl	2026-06-09 05:45:18 (1 week ago)	2026-06-09 @ 07:45:18 (CET) ~ Blocked for trying to access: /wp-includes/ID3/	Web App Attack
🇯🇵 demonsword	2026-06-08 08:38:31 (1 week ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: api.cyberghostvpn.com:443 show less	Open Proxy Port Scan
🇺🇸 TPI-Abuse	2026-05-22 18:29:25 (3 weeks ago)	(mod_security) mod_security (id:225170) triggered by 45.128.199.47 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 45.128.199.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 22 14:29:19.175776 2026] [security2:error] [pid 19893:tid 19893] [client 45.128.199.47:29463] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|guarinofurnituredesigns.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "guarinofurnituredesigns.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahCgf-B56ew8FBspX4gAxwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 raph	2026-05-02 02:23:52 (1 month ago)	[Wordpress] crawler /wp-admin/, /wp-content/, etc.	Bad Web Bot Web App Attack
🇫🇷 Octopuce	2026-04-30 10:59:11 (1 month ago)	Aggressive web search of vulnerable pages: /cgi-bin/install.php /wp-content/wso.php /class.api.php / ... show more Aggressive web search of vulnerable pages: /cgi-bin/install.php /wp-content/wso.php /class.api.php /wp-includes/certificates/wp-login.php /wp-c ... show less	Web App Attack
Anonymous	2026-04-29 10:08:25 (1 month ago)	<comment>	Web App Attack
🇺🇸 TPI-Abuse	2026-04-29 08:01:38 (1 month ago)	(mod_security) mod_security (id:234930) triggered by 45.128.199.47 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:234930) triggered by 45.128.199.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 29 04:01:32.731469 2026] [security2:error] [pid 11804:tid 11804] [client 45.128.199.47:43579] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\/lib\\\\/php\\\\/connector\\\\.minimal\\\\.php$" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/27_Apps_WPPlugin.conf"] [line "6778"] [id "234930"] [rev "2"] [msg "COMODO WAF: File upload vulnerability in the file manager plugin before 6.9 for WordPress (CVE-2020-25213)\|\|www.laboquimia.es\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "www.laboquimia.es"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "afG63Hax9b0lgkKvPnGcygAAABE"], referer: http://www.laboquimia.es/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-29 00:11:14 (1 month ago)	(mod_security) mod_security (id:234930) triggered by 45.128.199.47 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:234930) triggered by 45.128.199.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 28 20:11:10.708153 2026] [security2:error] [pid 14816:tid 14816] [client 45.128.199.47:42179] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\/lib\\\\/php\\\\/connector\\\\.minimal\\\\.php$" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/27_Apps_WPPlugin.conf"] [line "6778"] [id "234930"] [rev "2"] [msg "COMODO WAF: File upload vulnerability in the file manager plugin before 6.9 for WordPress (CVE-2020-25213)\|\|dmasoftlab.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "dmasoftlab.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "afFMnjfehtj6lxkxOsv67gAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 155 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 2620:171:f4:f0::234

🇹🇼 198.235.24.36

🇩🇪 144.31.81.21

🇩🇪 144.31.63.181

🇷🇴 80.94.95.242

🇳🇱 45.148.10.152

🇹🇼 35.234.50.101

🇳🇱 2a06:a880:5:74ca::1

🇨🇳 203.88.38.80

🇱🇹 158.173.79.179

🇺🇸 153.66.28.132

🇩🇪 147.45.112.157

🇩🇪 144.31.194.61

🇫🇷 91.196.152.215

🇷🇴 80.94.92.167

🇳🇱 45.198.224.115

🇳🇱 45.142.193.122

🇺🇸 43.135.135.17

🇨🇳 39.105.85.43

🇺🇸 20.29.56.192