JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.128.199.50

45.128.199.50 was found in our database!

This IP was reported 159 times. Confidence of Abuse is 86%: ?

86%

ISP	VPN Consumer Amsterdam, The Netherlands
Usage Type	Data Center/Web Hosting/Transit
ASN	AS62240
Domain Name	vpnconsumer.com
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.128.199.50

Whois 45.128.199.50

IP Abuse Reports for 45.128.199.50:

This IP address has been reported a total of 159 times from 83 distinct sources. 45.128.199.50 was first reported on March 9th 2022, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-04 19:01:17 (1 hour ago)	(mod_security) mod_security (id:210492) triggered by 45.128.199.50 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 45.128.199.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 15:01:10.148147 2026] [security2:error] [pid 634:tid 634] [client 45.128.199.50:24393] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.peterndudar.com"] [uri "/wp-includes/wp-config.php"] [unique_id "aklYdhh9HuX3oJV43erjWQAAAAE"], referer: http://peterndudar.com/wp-includes/wp-config.php show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Campus France	2026-07-03 21:36:42 (23 hours ago)	[Fri Jul 03 23:36:39.975611 2026] [php:error] [pid 3358513] [client 45.128.199.50:22091] script '/va ... show more [Fri Jul 03 23:36:39.975611 2026] [php:error] [pid 3358513] [client 45.128.199.50:22091] script '/var/www/html/campus-perpignan/fm.php' not found or unable to stat, referer: http://perpignan.radiocampus.org/fm.php [Fri Jul 03 23:36:40.310448 2026] [php:error] [pid 3358513] [client 45.128.199.50:22091] script '/var/www/html/campus-perpignan/wp-includes/speculative8.php' not found or unable to stat, referer: http://perpignan.radiocampus.org/wp-includes/speculative8.php [Fri Jul 03 23:36:40.645750 2026] [php:error] [pid 3358513] [client 45.128.199.50:22091] script '/var/www/html/campus-perpignan/wp-admin/images/admin.php' not found or unable to stat, referer: http://perpignan.radiocampus.org/wp-admin/images/admin.php [Fri Jul 03 23:36:41.771096 2026] [php:error] [pid 3358513] [client 45.128.199.50:22091] script '/var/www/html/campus-perpignan/404.php' not found or unable to stat, referer: http://perpignan.radiocampus.org/404.php [Fri Jul 03 23:36:42.108094 2026] [php:error] [pid 3358513] ... show less	Brute-Force Web App Attack
🇺🇸 kosada.com	2026-07-03 21:19:25 (23 hours ago)	Web vulnerability probing: /wp-admin/js/	Web App Attack
🇧🇪 cmbplf	2026-07-03 18:38:35 (1 day ago)	414 requests with url.path *config.php	Brute-Force Bad Web Bot
🇩🇪 todix	2026-07-02 21:34:13 (1 day ago)	Web App Attack Exploid from 45.128.199.50	Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 05:12:12 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 45.128.199.50 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 45.128.199.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 01:12:06.282421 2026] [security2:error] [pid 12977:tid 12990] [client 45.128.199.50:49707] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "captechinc.com"] [uri "/wp-includes/js/wp-config.php"] [unique_id "akXzJi5EVZrRWIg8zkLhbwAAAEc"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-07-02 04:39:49 (2 days ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-196) show less	Bad Web Bot
🇪🇸 masterguru	2026-07-01 06:24:00 (3 days ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:user-agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:user-agent. (1100000-122) show less	Bad Web Bot
🇫🇷 masterguru	2026-07-01 01:25:10 (3 days ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-195) show less	Bad Web Bot
Anonymous	2026-06-30 22:09:38 (3 days ago)	Banned by Fail2Ban on server	Web App Attack
🇩🇪 DEV-DNS	2026-06-30 11:46:51 (4 days ago)	(apache-scanners) Failed apache-scanners trigger with match [redacted])	Port Scan
🇫🇷 Octopuce	2026-06-30 10:39:17 (4 days ago)	Aggressive web search of vulnerable pages: /wp-wlx.php /wp-includes/blocks/archives/ /wp-content/use ... show more Aggressive web search of vulnerable pages: /wp-wlx.php /wp-includes/blocks/archives/ /wp-content/users.php /wp-includes/blocks/pullquote/ /wp-a ... show less	Web App Attack
🇫🇷 masterguru	2026-06-29 07:23:05 (5 days ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-195) show less	Bad Web Bot
🇩🇪 LRob	2026-06-26 16:45:11 (1 week ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot
🇩🇪 FeG Deutschland	2026-06-23 23:29:14 (1 week ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack

Showing 1 to 15 of 159 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇱 190.44.173.48

🇦🇱 94.156.166.34

🇮🇹 88.147.30.59

🇩🇪 213.209.159.11

🇫🇮 147.185.133.154

🇻🇳 125.212.244.35

🇮🇩 103.253.245.232

🇺🇸 98.157.226.42

🇷🇺 94.25.171.135

🇧🇬 93.94.141.115

🇸🇪 90.228.229.182

🇫🇷 90.63.199.41

🇳🇱 45.148.10.141

🇬🇧 35.203.210.97

🇭🇰 20.205.37.29

🇨🇳 106.13.222.229

🇬🇧 85.121.120.155

🇺🇸 43.130.90.166

🇪🇬 197.199.224.52

🇵🇪 179.6.0.13