JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.12.3.65

45.12.3.65

Recent Activity

201 reports found in our database

100% ▲ ▲ ▲ Critical

Abuse confidence score ?

ISP

Virtual Systems LLC

Usage Type

Data Center/Web Hosting/Transit

ASN

AS6698

Hostname(s)

dedicated.vsys.host

Domain Name

vsys.host

Country

🇺🇦 Ukraine

City

Kyiv, Kyiv City

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 45.12.3.65:

This IP address has been reported a total of 201 times from 127 distinct sources. 45.12.3.65 was first reported on September 21st 2024, and the most recent report was 1 day ago. In the last 60 days, the top reporter locations were: United States of America with 43 reports; Germany with 29 reports; France with 12 reports. The most common categories in these recent reports were: Web App Attack 103 times; Brute-Force 44 times; Bad Web Bot 36 times; Hacking 34 times; Port Scan 14 times; Other 21 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Rayulcifer	2026-09-01 07:01:33 (1 day ago)	[Sun Aug 02 00:09:12.861083 2026] [authz_core:error] [pid 100672:tid 126188504716992] [client 45.12. ... show more [Sun Aug 02 00:09:12.861083 2026] [authz_core:error] [pid 100672:tid 126188504716992] [client 45.12.3.65:61546] AH01630: client denied by server configuration: proxy:http://localhost:4000/.env-probe-86595da0 [Sun Aug 02 00:09:12.977124 2026] [authz_core:error] [pid 100672:tid 126186399196864] [client 45.12.3.65:61546] AH01630: client denied by server configuration: proxy:http://localhost:4000/.env [Sun Aug 02 00:09:12.977216 2026] [authz_core:error] [pid 100672:tid 126186399196864] [client 45.12.3.65:61546] AH01630: client denied by server configuration: proxy:http://localhost:4000/.env.bak [Sun Aug 02 00:09:12.977264 2026] [authz_core:error] [pid 100672:tid 126186399196864] [client 45.12.3.65:61546] AH01630: client denied by server configuration: proxy:http://localhost:4000/.env.backup [Sun Aug 02 00:09:12.977298 2026] [authz_core:error] [pid 100672:tid 126186399196864] [client 45.12.3.65:61546] AH01630: client denied by server configuration: proxy:http://localhost:4000/.env.old ... show less	Brute-Force SSH
🇺🇸 Rayulcifer	2026-08-27 06:35:59 (6 days ago)	[Sun Aug 02 00:09:12.861083 2026] [authz_core:error] [pid 100672:tid 126188504716992] [client 45.12. ... show more [Sun Aug 02 00:09:12.861083 2026] [authz_core:error] [pid 100672:tid 126188504716992] [client 45.12.3.65:61546] AH01630: client denied by server configuration: proxy:http://localhost:4000/.env-probe-86595da0 [Sun Aug 02 00:09:12.977124 2026] [authz_core:error] [pid 100672:tid 126186399196864] [client 45.12.3.65:61546] AH01630: client denied by server configuration: proxy:http://localhost:4000/.env [Sun Aug 02 00:09:12.977216 2026] [authz_core:error] [pid 100672:tid 126186399196864] [client 45.12.3.65:61546] AH01630: client denied by server configuration: proxy:http://localhost:4000/.env.bak [Sun Aug 02 00:09:12.977264 2026] [authz_core:error] [pid 100672:tid 126186399196864] [client 45.12.3.65:61546] AH01630: client denied by server configuration: proxy:http://localhost:4000/.env.backup [Sun Aug 02 00:09:12.977298 2026] [authz_core:error] [pid 100672:tid 126186399196864] [client 45.12.3.65:61546] AH01630: client denied by server configuration: proxy:http://localhost:4000/.env.old ... show less	Brute-Force SSH
🇺🇸 1cyb3rpunk	2026-08-12 14:16:18 (3 weeks ago)	SecTrace honeypot [43 events 2026-08-03–2026-08-03]. Traps: path_not_found_probe×31, dotenv_probe×6, ... show more SecTrace honeypot [43 events 2026-08-03–2026-08-03]. Traps: path_not_found_probe×31, dotenv_probe×6, config_leak_probe×3, hellpot_tarpit×1, cloud_env_probe×1. Kill-chain stage: probe. Geo: UA/Kyiv. ASN: Virtual Systems LLC. show less	Port Scan Brute-Force Bad Web Bot Web App Attack
🇺🇸 BenTahily	2026-08-07 06:00:04 (3 weeks ago)	Automated scanning/attack against abraj.s00g.com. Types: Credential Theft. Provider (UA-VSYS-2019043 ... show more Automated scanning/attack against abraj.s00g.com. Types: Credential Theft. Provider (UA-VSYS-20190430) failed to respond to abuse report after 72.7h. Ref: ABR-202608040515-512365 show less	Brute-Force
🇩🇪 niedson	2026-08-05 19:39:22 (4 weeks ago)	Automated scanning for non-existent WordPress/PHP admin panels and configuration files (.env, .git) ... show more Automated scanning for non-existent WordPress/PHP admin panels and configuration files (.env, .git) on a site that serves none of them. Unsolicited and repeated. Reported automatically. show less	Web App Attack
🇯🇵 S.O.B.A. Dev.	2026-08-05 13:47:14 (4 weeks ago)	Web vulnerability scanning	Brute-Force Web Spam Web App Attack
🇦🇺 Klaverstyn	2026-08-05 06:49:38 (4 weeks ago)	Excessive HTTP request rate	Web App Attack
🇿🇦 conure.sh	2026-08-04 12:07:55 (4 weeks ago)	csagent: score 20.8: 404 noise floor x3, secrets grab x2; 1 domain(s) in 0s	Web App Attack
🇧🇪 madeit	2026-08-04 07:41:43 (4 weeks ago)		Web App Attack
🇩🇪 auridh	2026-08-04 03:19:35 (4 weeks ago)	Ip 45.12.3.65 performed 'crowdsecurity/http-sensitive-files' (5 events over 393.372748ms) at 2026-08 ... show more Ip 45.12.3.65 performed 'crowdsecurity/http-sensitive-files' (5 events over 393.372748ms) at 2026-08-04 01:40:21.840215116 +0000 UTC show less	Web App Attack
🇫🇷 cityhunter_rhone	2026-08-04 02:55:01 (4 weeks ago)	Mercurius trap auto report \| source=TRAP_403/TRAP_404 \| last_seen=2026-08-04 04:52:09 \| hits_403=0 \| ... show more Mercurius trap auto report \| source=TRAP_403/TRAP_404 \| last_seen=2026-08-04 04:52:09 \| hits_403=0 \| hits_404=1 \| ip=45.12.3.65 \| sample_uri=/application.properties show less	Port Scan Hacking Web App Attack
🇬🇧 consul.to	2026-08-04 02:36:19 (4 weeks ago)	Web attack/malicious scanning detected	Web App Attack
🇫🇮 000rosiu	2026-08-04 02:22:28 (4 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from UA. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoi ... show more Triggered Cloudflare WAF (firewallCustom) from UA. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoint: /application.properties \| UA: Empty string • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 auridh	2026-08-04 02:16:41 (4 weeks ago)	Ip 45.12.3.65 performed 'crowdsecurity/http-probing' (11 events over 720.580385ms) at 2026-08-04 01: ... show more Ip 45.12.3.65 performed 'crowdsecurity/http-probing' (11 events over 720.580385ms) at 2026-08-04 01:40:21.953444566 +0000 UTC show less	Web App Attack
🇮🇹 CoreTech srl	2026-08-04 01:08:57 (4 weeks ago)	cloudlinux2 fail2ban: 2026-08-04 03:05:35,205 fail2ban.filter [1475]: INFO [plesk-modsecu ... show more cloudlinux2 fail2ban: 2026-08-04 03:05:35,205 fail2ban.filter [1475]: INFO [plesk-modsecurity] Found 3.110.219.7 - 2026-08-04 03:05:35cloudlinux2 fail2ban: 2026-08-04 03:05:35,793 fail2ban.filter [1475]: INFO [plesk-wordpress] Found 173.239.224.170 - 2026-08-04 03:05:35cloudlinux2 fail2ban: 2026-08-04 03:07:22,542 fail2ban.filter [1475]: INFO [plesk-modsecurity] Found 45.12.3.65 - 2026-08-04 03:07:22cloudlinux2 fail2ban: 2026-08-04 03:07:22,555 fail2ban.filter [1475]: INFO [plesk-modsecurity] Found 45.12.3.65 - 2026-08-04 03:07:22cloudlinux2 fail2ban: 2026-08-04 03:07:22,762 fail2ban.actions [1475]: NOTICE [plesk-modsecurity] Ban 45.12.3.65cloudlinux2 fail2ban: 2026-08-04 03:07:22,724 fail2ban.filter [1475]: INFO [plesk-modsecurity] Found 45.12.3.65 - 2026-08-04 03:07:22cloudlinux2 fail2ban: 2026-08-04 03:07:22,573 fail2ban.filter [1475]: INFO [plesk-modsecurity] Found 45.12.3.65 - 2026-08-04 03:07:22cloudlinux2 fail2ban: 2026-08-04 03: show less	Web App Attack

Showing 1 to 15 of 201 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 181.46.197.223

🇦🇺 210.0.90.82

🇹🇳 196.238.158.232

🇺🇸 195.184.76.183

🇧🇷 191.7.96.121

🇳🇱 185.223.235.58

🇸🇬 128.199.109.198

🇨🇳 113.235.154.169

🇺🇸 98.114.16.100

🇫🇷 91.196.152.188

🇺🇸 64.225.123.115

🇨🇳 60.166.83.23

🇳🇱 23.176.184.152

🇺🇸 2604:a880:400:d1:0:4:e8e1:3001

🇰🇷 222.117.176.58

🇧🇷 200.170.248.102

🇦🇷 200.59.89.131

🇺🇸 185.81.144.252

🇦🇷 179.38.142.39

🇺🇸 172.110.223.173