JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.128.199.52

45.128.199.52 was found in our database!

This IP was reported 155 times. Confidence of Abuse is 54%: ?

54%

ISP	VPN Consumer Amsterdam, The Netherlands
Usage Type	Data Center/Web Hosting/Transit
ASN	AS62240
Domain Name	vpnconsumer.com
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.128.199.52

Whois 45.128.199.52

IP Abuse Reports for 45.128.199.52:

This IP address has been reported a total of 155 times from 77 distinct sources. 45.128.199.52 was first reported on October 23rd 2022, and the most recent report was 43 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-06-18 00:58:42 (43 minutes ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-195) show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-17 08:21:57 (17 hours ago)	(mod_security) mod_security (id:210492) triggered by 45.128.199.52 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 45.128.199.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 04:21:50.103728 2026] [security2:error] [pid 20798:tid 20798] [client 45.128.199.52:51991] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "salernospizza.com"] [uri "/wp-content/uploads/wp-config.php"] [unique_id "ajJZHn8u-IMQadDatSiWKgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-06-09 22:03:33 (1 week ago)	Auto-ban: >3000 req/min op 2026-06-09	Web App Attack SSH Hacking
🇳🇱 i-turnradio.nl	2026-06-09 06:18:09 (1 week ago)	2026-06-09 @ 08:18:08 (CET) ~ Blocked for trying to access: /wp-admin/link/	Web App Attack
🇳🇱 i-turnradio.nl	2026-06-09 06:02:26 (1 week ago)	2026-06-09 @ 08:02:26 (CET) ~ Blocked for trying to access: /wp-admin/wp-config-backup.php	Web App Attack
🇳🇱 i-turnradio.nl	2026-06-09 05:44:07 (1 week ago)	2026-06-09 @ 07:44:06 (CET) ~ Blocked for trying to access: /wp-includes/theme-compat/	Web App Attack
🇯🇵 demonsword	2026-06-08 08:56:48 (1 week ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: www.expressapisv2.net:443 show less	Open Proxy Port Scan
🇩🇪 LRob.fr	2026-06-05 06:30:02 (1 week ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot
🇺🇸 Epimetheus	2026-05-05 22:42:23 (1 month ago)	Zombie network / Bot scanner detected: [GET] /wp-content/uploads/fusion-forms/ [GET] /wp-json/ [GET ... show more Zombie network / Bot scanner detected: [GET] /wp-content/uploads/fusion-forms/ [GET] /wp-json/ [GET] /wp-content/plugins/plugin/ [GET] /wp-includes/js/dist/development/ [GET] /wp-includes/blocks/pullquote/ [GET] /wp-includes/blocks/archives/ [GET] /wp-content/plugins/js-support-ticket/ [GET] /Requests/Exception/ [GET] /wp-includes/block-bindings/ [GET] /wp-includes/sodium_compat/lib/ [GET] /blog/ [GET] /wp-includes/blocks/group/ [GET] /wp-includes/assets/wp-includes/assets/ [GET] /admin/controller/extension/extension/ [GET] /wp-admin/css/colors/coffee/ [GET] /blog/wp-admin/ [GET] /wp-content/plugins/dummyyummy/ [GET] /wp-admin/css/ [GET] /wp-includes/rest-api/endpoints/ [GET] /wp-includes/ID3/ [GET] /wp-content/x/ [GET] /wp-includes/js/ [GET] /wp-admin/css/colors/midnight/ [GET] /wp-content/plugins/elementor/ [GET] /wp-content/plugins/ [GET] /wp-content/plugins/linkpreview/ [GET] /wp-content/plugins/seoplugins/ [GET] /wp-admin/maint/ [GET] /wp-content/plugins/envato-mar ...(Truncated) show less	Bad Web Bot Exploited Host Web App Attack
🇫🇷 Octopuce	2026-05-02 05:27:15 (1 month ago)	Aggressive web search of vulnerable pages: /wp-content/plugins/hello-plus/classes/ehp-sarang.php /wp ... show more Aggressive web search of vulnerable pages: /wp-content/plugins/hello-plus/classes/ehp-sarang.php /wp-content/plugins/so-pinyin-slugs/inc/main_j ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-05-02 03:09:47 (1 month ago)	(mod_security) mod_security (id:234930) triggered by 45.128.199.52 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:234930) triggered by 45.128.199.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 01 23:09:40.202199 2026] [security2:error] [pid 17895:tid 17895] [client 45.128.199.52:36717] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\/lib\\\\/php\\\\/connector\\\\.minimal\\\\.php$" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/27_Apps_WPPlugin.conf"] [line "6778"] [id "234930"] [rev "2"] [msg "COMODO WAF: File upload vulnerability in the file manager plugin before 6.9 for WordPress (CVE-2020-25213)\|\|listings.cruisingforsex.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "listings.cruisingforsex.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "afVq9M1n6bJtBOimw2513gAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 raph	2026-05-02 02:23:59 (1 month ago)	[Wordpress] crawler /wp-admin/, /wp-content/, etc.	Bad Web Bot Web App Attack
🇧🇾 lns.bz	2026-05-01 13:32:25 (1 month ago)	Too many 404 requests [BY]	Web App Attack
🇩🇪 raph	2026-04-28 07:49:49 (1 month ago)	[Wordpress] crawler /wp-admin/, /wp-content/, etc.	Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2026-04-27 21:38:50 (1 month ago)	45.128.199.52 - - [28/Apr/2026:00:38:50 +0300] "GET /wp-content/plugins/miniorange-malware-protectio ... show more 45.128.199.52 - - [28/Apr/2026:00:38:50 +0300] "GET /wp-content/plugins/miniorange-malware-protection/handler/about.php HTTP/1.1" 404 715 "-" "Go-http-client/1.1" 45.128.199.52 - - [28/Apr/2026:00:38:50 +0300] "GET /wp-content/plugins/mtodm/index.php HTTP/1.1" 404 715 "-" "Go-http-client/1.1" ... show less	Web App Attack

Showing 1 to 15 of 155 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 191.210.73.33

🇧🇷 189.51.33.187

🇧🇷 189.51.32.47

🇮🇩 182.1.132.101

🇺🇸 162.216.150.85

🇺🇸 162.216.149.116

🇵🇭 120.28.196.245

🇮🇩 114.10.47.235

🇸🇪 83.226.56.106

🇫🇷 62.138.14.123

🇫🇮 62.60.251.50

🇳🇱 51.158.205.203

🇧🇷 45.160.230.15

🇺🇸 35.254.244.123

🇺🇸 35.233.143.60

🇬🇧 2a06:4880:2000::39

🇺🇸 205.210.31.54

🇬🇧 195.140.214.29

🇧🇷 189.51.35.0

🇧🇷 189.51.32.159