45.156.128.209
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- INAP-AMS-1
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS211680
- Hostname(s)
- sh-ams-nl-gd12-wk103d.internet-census.org
- Domain Name
- bitsight.com
- Country
- 🇳🇱 Netherlands
- City
- Amsterdam, North Holland
Abuse Reports
Total reports
107 from
60 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇩🇪 Jochen Pretli |
connection to honeypot
|
Email Spam Port Scan | |
| 🇩🇪 D3vNu11 |
Level: (LOW): Scan Source via CitrixHoneypot IOC Country: Portugal 1x -> Target Country: Ashburn, USA HTTPS
|
Port Scan Hacking Web App Attack | |
| 🇩🇪 KPS |
Portscan-P
|
Port Scan | |
| 🇫🇷 uthul |
T-Pot honeypot: 3 hits on ports [8000, 8080] (automated)
|
Port Scan Web App Attack | |
| 🇳🇱 StopAbuse |
tcp/80
|
Port Scan | |
| 🇵🇱 Kolobrzeg |
Repeated protocol probing of VNC relay service port (unknown commands, silent or malformed connections), blocked after repeated attempts. Last seen 2026-11-13 07:48 UTC. Automated detection. AS211680 Sistemas Informaticos, S.A..
|
Port Scan | |
| 🇺🇸 MPL |
tcp ports: 5000,443 (2 or more attempts)
|
Port Scan | |
| 🇮🇱 Ilop |
[v5-99] Port scan: 3 packet(s) from 45.156.128.209 to 3 distinct destination ports (5000,4000,1880) blocked at the perimeter (automated sensor)
|
Port Scan | |
| 🇺🇸 NetVexor |
Attack source identified and submitted via NetVexor BGP Blackhole Network
|
Port Scan Hacking Brute-Force | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 80)
Source port: 27021
TTL: 240
Packet length: 40
TOS: 0x08
This report (for 45.156.128.209) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan Web App Attack | |
| Anonymous |
Drop from IP address 45.156.128.209 to tcp-port 80
|
Port Scan | |
| 🇫🇷 EvoX |
🛡️ Honeypot [bsts-tpot-sensor]: HTTP/1.1 request on 8081
GET /json/version
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36
Accept: */*
Accept-Encoding: gzip; 8081 [1] TCP
|
Hacking Bad Web Bot | |
| 🇵🇾 armandosaucedo.me |
Threat Intelligence via ARMTI, Web Attack: GET /json/version
|
Web App Attack | |
| 🇳🇱 VMHeaven.io |
Blocked by UFW [4000/tcp]
Source port: 23348
TTL: 244
Packet length: 40
|
Port Scan | |
| 🇩🇪 xserverx.ru |
[UFW SCAN!!!!] SRC=45.156.128.209 LEN=40 TOS=0x08 PREC=0x20 TTL=246 PROTO=TCP SPT=22518 DPT=8000 WINDOW=1024 RES=0x00 SYN URGP=0
...
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown