JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

45.8.148.228

Neutral Activity

Abuse confidence score ?

0% Low Risk

12 reports

3 reporters · latest 8 months ago

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi2648599.contaboserver.net
Domain Name	contabo.com
Country	🇩🇪 Germany
City	Karlsruhe, Baden-Wurttemberg

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

45.8.148.228 has been reported 12 times. The most recent report is from 8 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 45.8.148.228

Export CSV

This IP address has been reported a total of 12 times from 3 distinct sources. 45.8.148.228 was first reported on July 11th 2025, and the most recent report was 8 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 wolfemium	2026-01-31 20:39:00 (8 months ago)	45.8.148.228 - - [31/Jan/2026:22:32:59 +0200] "GET /public/index.php?s=/index/qrcode/download/url/L2 ... show more 45.8.148.228 - - [31/Jan/2026:22:32:59 +0200] "GET /public/index.php?s=/index/qrcode/download/url/L2V0Yy9wYXNzd2Q= HTTP/1.1" 502 150 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.6 Safari/605.1.15" 45.8.148.228 - - [31/Jan/2026:22:33:19 +0200] "GET /images/logo/logo-eoffice.php HTTP/1.1" 502 150 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:86.0) Gecko/20100101 Firefox/86.0" 45.8.148.228 - - [31/Jan/2026:22:36:16 +0200] "GET /index.php?sl=../../../../../../../etc/passwd%00 HTTP/1.1" 502 150 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.2 Safari/605.1.15" 45.8.148.228 - - [31/Jan/2026:22:36:36 +0200] "GET /login-x.php HTTP/1.1" 502 552 "-" "Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 45.8.148.228 - - [31/Jan/2026:22:36:46 +0200] "GET /wp-content/plugins/advanced-text-widget/advancedtext.php?page=%3C%2Fscript%3E ... show less	DDoS Attack
🇫🇮 Mr-Money	2025-09-02 03:51:57 (1 year ago)	45.8.148.228 - - [02/Sep/2025:05:50:31 +0200] "GET /ssl-vpn/getconfig.esp?client-type=1&protocol-ver ... show more 45.8.148.228 - - [02/Sep/2025:05:50:31 +0200] "GET /ssl-vpn/getconfig.esp?client-type=1&protocol-version=p1&app-version=3.0.1-10&clientos=Linux&os-version=linux-64&hmac-algo=sha1%2Cmd5&enc-algo=aes-128-cbc%2Caes-256-cbc&authcookie=12cea70227d3aafbf25082fac1b6f51d&portal=us-vpn-gw-N&user=%3Csvg%20xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%22%3E%3Cscript%3Eprompt%28%22XSS%22%29%3C%2Fscript%3E%3C%2Fsvg%3E&domain=%28empty_domain%29&computer=computer HTTP/1.1" 200 3672 "-" "Mozilla/5.0 (Mac OS X 13_2) AppleWebKit/537.36 (KHTML, like Gecko) Edge/101.0 Safari/537.36" 45.8.148.228 - - [02/Sep/2025:05:50:31 +0200] "GET /ssl-vpn/getconfig.esp?client-type=1&protocol-version=p1&app-version=3.0.1-10&clientos=Linux&os-version=linux-64&hmac-algo=sha1%2Cmd5&enc-algo=aes-128-cbc%2Caes-256-cbc&authcookie=12cea70227d3aafbf25082fac1b6f51d&portal=us-vpn-gw-N&user=%3Csvg%20xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%22%3E%3Cscript%3Eprompt%28%22XSS%22%29%3C%2Fscript%3E%3C%2Fsvg%3E&domain=%28empty_d ... show less	Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
🇫🇮 Mr-Money	2025-08-20 02:49:31 (1 year ago)	45.8.148.228 - - [20/Aug/2025:04:43:33 +0200] "GET /auth/failure?provider=<svg/onload=alert('XSS-CVE ... show more 45.8.148.228 - - [20/Aug/2025:04:43:33 +0200] "GET /auth/failure?provider=<svg/onload=alert('XSS-CVE-2025-48954')> HTTP/1.1" 404 3751 "-" "Mozilla/5.0 (Fedora; Linux i686; rv:128.0) Gecko/20100101 Firefox/128.0" 45.8.148.228 - - [20/Aug/2025:04:44:43 +0200] "GET /auth/failure?provider=<svg/onload=alert('XSS-CVE-2025-48954')> HTTP/1.1" 404 3704 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.2 Safari/605.1.15" 45.8.148.228 - - [20/Aug/2025:04:49:31 +0200] "GET /auth/failure?provider=<svg/onload=alert('XSS-CVE-2025-48954')> HTTP/1.1" 403 3625 "-" "Mozilla/5.0 (Debian; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0" ... show less	Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
🇫🇮 Mr-Money	2025-08-19 22:59:35 (1 year ago)	45.8.148.228 - - [20/Aug/2025:00:48:51 +0200] "GET /images.listener.php?uri=1&mailattach=..././.../. ... show more 45.8.148.228 - - [20/Aug/2025:00:48:51 +0200] "GET /images.listener.php?uri=1&mailattach=..././..././..././..././..././epasswdtc/ppasswdasswd HTTP/1.1" 404 3465 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.4 Safari/605.1.15" 45.8.148.228 - - [20/Aug/2025:00:59:34 +0200] "GET /images.listener.php?uri=1&mailattach=..././..././..././..././..././epasswdtc/ppasswdasswd HTTP/1.1" 404 3464 "-" "Mozilla/5.0 (Mac OS X 13_2) AppleWebKit/537.36 (KHTML, like Gecko) Safari/129.0 Safari/537.36" 45.8.148.228 - - [20/Aug/2025:00:59:34 +0200] "GET /images.listener.php?uri=1&mailattach=..././..././..././..././..././epasswdtc/ppasswdasswd HTTP/1.1" 404 3464 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" ... show less	Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
🇫🇮 Mr-Money	2025-08-19 21:44:39 (1 year ago)	45.8.148.228 - - [19/Aug/2025:23:36:38 +0200] "GET /images.listener.php?uri=1&mailattach=..././.../. ... show more 45.8.148.228 - - [19/Aug/2025:23:36:38 +0200] "GET /images.listener.php?uri=1&mailattach=..././..././..././..././..././epasswdtc/ppasswdasswd HTTP/1.1" 404 3531 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0" 45.8.148.228 - - [19/Aug/2025:23:37:43 +0200] "GET /images.listener.php?uri=1&mailattach=..././..././..././..././..././epasswdtc/ppasswdasswd HTTP/1.1" 404 3462 "-" "Mozilla/5.0 (CentOS; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 45.8.148.228 - - [19/Aug/2025:23:44:38 +0200] "GET /images.listener.php?uri=1&mailattach=..././..././..././..././..././epasswdtc/ppasswdasswd HTTP/1.1" 404 3530 "-" "Mozilla/5.0 (Knoppix; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" ... show less	Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
🇩🇪 Mr-Money	2025-08-15 18:32:36 (1 year ago)	45.8.148.228 - - [15/Aug/2025:20:32:35 +0200] "GET /?ru&filter=%3C%2Fscript%3E%3Cscript%3Ealert(docu ... show more 45.8.148.228 - - [15/Aug/2025:20:32:35 +0200] "GET /?ru&filter=%3C%2Fscript%3E%3Cscript%3Ealert(document.domain)%3C%2Fscript%3E HTTP/1.1" 301 3697 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5 Safari/605.1.15" ... show less	Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
🇫🇮 Mr-Money	2025-08-15 16:25:27 (1 year ago)	45.8.148.228 - - [15/Aug/2025:18:25:19 +0200] "GET /?ru&filter=%3C%2Fscript%3E%3Cscript%3Ealert(docu ... show more 45.8.148.228 - - [15/Aug/2025:18:25:19 +0200] "GET /?ru&filter=%3C%2Fscript%3E%3Cscript%3Ealert(document.domain)%3C%2Fscript%3E HTTP/1.1" 200 3673 "-" "Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.8.148.228 - - [15/Aug/2025:18:25:19 +0200] "GET /?ru&filter=%3C%2Fscript%3E%3Cscript%3Ealert(document.domain)%3C%2Fscript%3E HTTP/1.1" 200 4041 "-" "Mozilla/5.0 (SS; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 45.8.148.228 - - [15/Aug/2025:18:25:26 +0200] "GET /xwiki/bin/view/Main/?xpage=job_status_json&jobId=asdf&translationPrefix=%3Cimg%20src=1%20onerror=alert(document.domain)%3E HTTP/1.1" 200 3673 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.2 Mobile/15E148 Safari/604.1" ... show less	Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
🇩🇪 Mr-Money	2025-08-06 17:14:46 (1 year ago)	45.8.148.228 - - [06/Aug/2025:19:14:45 +0200] "GET /xwiki/bin/view/Main/?xpage=job_status_json&jobId ... show more 45.8.148.228 - - [06/Aug/2025:19:14:45 +0200] "GET /xwiki/bin/view/Main/?xpage=job_status_json&jobId=asdf&translationPrefix=%3Cimg%20src=1%20onerror=alert(document.domain)%3E HTTP/1.1" 404 8837 "-" "Mozilla/5.0 (Debian; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" ... show less	Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
🇫🇮 Mr-Money	2025-08-06 15:26:39 (1 year ago)	45.8.148.228 - - [06/Aug/2025:17:26:38 +0200] "GET /xwiki/bin/view/Main/?xpage=job_status_json&jobId ... show more 45.8.148.228 - - [06/Aug/2025:17:26:38 +0200] "GET /xwiki/bin/view/Main/?xpage=job_status_json&jobId=asdf&translationPrefix=%3Cimg%20src=1%20onerror=alert(document.domain)%3E HTTP/1.1" 200 3673 "-" "Mozilla/5.0 (Windows NT 11.0) AppleWebKit/537.36 (KHTML, like Gecko) Safari/104.0 Safari/537.36" 45.8.148.228 - - [06/Aug/2025:17:26:38 +0200] "GET /xwiki/bin/view/Main/?xpage=job_status_json&jobId=asdf&translationPrefix=%3Cimg%20src=1%20onerror=alert(document.domain)%3E HTTP/1.1" 200 4042 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.1 Mobile/15E148 Safari/604.1" 45.8.148.228 - - [06/Aug/2025:17:26:38 +0200] "GET /xwiki/bin/view/Main/?xpage=distribution&extensionId=%3Cimg%20src=x%20onerror=alert(document.domain)%3E&extensionVersionConstraint=%3Cimg%20src=x%20onerror=alert(document.domain)%3E HTTP/1.1" 200 3672 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0.1 Mobile/15E148 ... show less	Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
🇫🇮 Mr-Money	2025-07-27 02:52:55 (1 year ago)	45.8.148.228 - - [27/Jul/2025:04:51:43 +0200] "GET /ssl-vpn/getconfig.esp?client-type=1&protocol-ver ... show more 45.8.148.228 - - [27/Jul/2025:04:51:43 +0200] "GET /ssl-vpn/getconfig.esp?client-type=1&protocol-version=p1&app-version=3.0.1-10&clientos=Linux&os-version=linux-64&hmac-algo=sha1%2Cmd5&enc-algo=aes-128-cbc%2Caes-256-cbc&authcookie=12cea70227d3aafbf25082fac1b6f51d&portal=us-vpn-gw-N&user=%3Csvg%20xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%22%3E%3Cscript%3Eprompt%28%22XSS%22%29%3C%2Fscript%3E%3C%2Fsvg%3E&domain=%28empty_domain%29&computer=computer HTTP/1.1" 200 3669 "-" "Mozilla/5.0 (Fedora; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 45.8.148.228 - - [27/Jul/2025:04:51:43 +0200] "GET /ssl-vpn/getconfig.esp?client-type=1&protocol-version=p1&app-version=3.0.1-10&clientos=Linux&os-version=linux-64&hmac-algo=sha1%2Cmd5&enc-algo=aes-128-cbc%2Caes-256-cbc&authcookie=12cea70227d3aafbf25082fac1b6f51d&portal=us-vpn-gw-N&user=%3Csvg%20xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%22%3E%3Cscript%3Eprompt%28%22XSS%22%29%3C%2Fscript%3E%3C%2Fsvg%3E&doma ... show less	Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
🇫🇮 Mr-Money	2025-07-26 19:48:15 (1 year ago)	45.8.148.228 - - [26/Jul/2025:21:47:19 +0200] "GET /ssl-vpn/getconfig.esp?client-type=1&protocol-ver ... show more 45.8.148.228 - - [26/Jul/2025:21:47:19 +0200] "GET /ssl-vpn/getconfig.esp?client-type=1&protocol-version=p1&app-version=3.0.1-10&clientos=Linux&os-version=linux-64&hmac-algo=sha1%2Cmd5&enc-algo=aes-128-cbc%2Caes-256-cbc&authcookie=12cea70227d3aafbf25082fac1b6f51d&portal=us-vpn-gw-N&user=%3Csvg%20xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%22%3E%3Cscript%3Eprompt%28%22XSS%22%29%3C%2Fscript%3E%3C%2Fsvg%3E&domain=%28empty_domain%29&computer=computer HTTP/1.1" 200 3669 "-" "Mozilla/5.0 (Ubuntu; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" 45.8.148.228 - - [26/Jul/2025:21:47:19 +0200] "GET /ssl-vpn/getconfig.esp?client-type=1&protocol-version=p1&app-version=3.0.1-10&clientos=Linux&os-version=linux-64&hmac-algo=sha1%2Cmd5&enc-algo=aes-128-cbc%2Caes-256-cbc&authcookie=12cea70227d3aafbf25082fac1b6f51d&portal=us-vpn-gw-N&user=%3Csvg%20xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%22%3E%3Cscript%3Eprompt%28%22XSS%22%29%3C%2Fscript%3E%3C%2Fsvg%3E&domain=%28empty_domain%29&computer= ... show less	Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
🇨🇱 m0nitauruz	2025-07-11 19:07:00 (1 year ago)	Multiple failed sign-in activity from the same ip.address	Brute-Force Web App Attack

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 185.198.240.3

🇫🇷 93.92.20.100

🇺🇸 204.197.161.93

🇹🇼 198.235.24.103

🇺🇸 184.168.21.211

🇻🇳 171.244.201.80

🇺🇸 142.93.118.134

🇨🇳 124.90.52.163

🇦🇱 77.247.89.15

🇨🇳 61.157.206.5

🇺🇸 50.84.211.204

🇺🇸 45.79.104.47

🇨🇳 220.202.112.247

🇳🇱 142.93.230.105

🇨🇳 113.206.146.27

🇺🇸 96.78.175.36

🇷🇺 94.233.127.218

🇳🇱 93.123.109.163

🇫🇷 88.163.183.108

🇺🇸 66.132.224.90