JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.148.10.67

45.148.10.67 was found in our database!

This IP was reported 36,786 times. Confidence of Abuse is 100%: ?

100%

ISP	TECHOFF SRV LIMITED
Usage Type	Data Center/Web Hosting/Transit
ASN	AS48090
Domain Name	dmzhost.co
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.148.10.67

Whois 45.148.10.67

IP Abuse Reports for 45.148.10.67:

This IP address has been reported a total of 36,786 times from 1,871 distinct sources. 45.148.10.67 was first reported on February 5th 2021, and the most recent report was 30 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 alexdudgeon	2026-09-01 11:28:35 (30 minutes ago)	2026-08-31 22:42:56,119 fail2ban.actions [564124]: NOTICE [apache-modsecurity] Ban 45.148.10 ... show more 2026-08-31 22:42:56,119 fail2ban.actions [564124]: NOTICE [apache-modsecurity] Ban 45.148.10.67 2026-09-01 02:13:53,527 fail2ban.actions [564124]: NOTICE [apache-modsecurity] Ban 45.148.10.67 2026-09-01 03:55:20,727 fail2ban.actions [564124]: NOTICE [apache-modsecurity] Ban 45.148.10.67 2026-09-01 10:50:25,852 fail2ban.actions [564124]: NOTICE [apache-modsecurity] Ban 45.148.10.67 2026-09-01 12:28:34,121 fail2ban.actions [564124]: NOTICE [apache-modsecurity] Ban 45.148.10.67 ... show less	Brute-Force
🇳🇴 tmiland	2026-09-01 11:19:10 (39 minutes ago)	(nginx_444) Nginx 444 45.148.10.67 (-): 5 in the last 3600 secs; IP: 45.148.10.67; Ports: ; Directi ... show more (nginx_444) Nginx 444 45.148.10.67 (-): 5 in the last 3600 secs; IP: 45.148.10.67; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 45.148.10.67 - - [01/Sep/2026:13:19:02 +0200] "GET /.env.local HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.148.10.67 - - [01/Sep/2026:13:19:03 +0200] "GET /.env.production HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.148.10.67 - - [01/Sep/2026:13:19:03 +0200] "GET /.env.production.local HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.148.10.67 - - [01/Sep/2026:13:19:03 +0200] "GET /.env.prod HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.148.10.67 - - [01/Sep/2026:13:19:04 +0200] "GET /.env.dev HTTP/1.1" 444 0 show less	Brute-Force
🇵🇱 Budyn	2026-09-01 09:33:05 (2 hours ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: app.sweetpuddingtrap.online \| URI: /.git/HEAD \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
Anonymous	2026-09-01 09:18:02 (2 hours ago)	FortiWeb WAF: 1464 attacks detected. Threat Score: 727400. Types: Client Management(732), Block IP L ... show more FortiWeb WAF: 1464 attacks detected. Threat Score: 727400. Types: Client Management(732), Block IP List(732). Origin: Netherlands. show less	Web App Attack
🇨🇭 YF	2026-09-01 08:37:14 (3 hours ago)	Environment file probe	Web App Attack
🇸🇬 simpeg-adm.bandung.go.id	2026-09-01 06:32:26 (5 hours ago)	...	Web Spam Brute-Force Web App Attack
🇺🇸 kosada.com	2026-09-01 06:30:55 (5 hours ago)	Repeated requests for suspicious nonexistent URLs, for example: /.env.production (HTTP port 443)	Web App Attack
🇫🇮 ☠\|ʂɧąɖơῳ\|☠	2026-09-01 06:24:11 (5 hours ago)	[2026-09-01 06:24:11 UTC] Vulnerability/exploit scanning detected from 45.148.10.67 () PATHS: unknow ... show more [2026-09-01 06:24:11 UTC] Vulnerability/exploit scanning detected from 45.148.10.67 () PATHS: unknown show less	Bad Web Bot Web App Attack
Anonymous	2026-09-01 06:12:26 (5 hours ago)		Web App Attack
🇵🇱 Budyn	2026-09-01 05:14:20 (6 hours ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: cluster.budyn.xyz \| URI: /.git/HEAD \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇨🇭 🇨🇭 Hosting	2026-09-01 05:10:20 (6 hours ago)	Automated WAF report: 600-700 blocked requests from this IP detected by our WAF.	Bad Web Bot Web App Attack
🇸🇬 securejdprop	2026-09-01 03:58:41 (7 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus D ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus DROP Listed Traffic Inbound group 8). show less	Hacking Web App Attack
🇩🇪 TheDjRider	2026-09-01 03:46:51 (8 hours ago)	CrowdSec detected Web application reconnaissance. Scenario: local/framework-recon. Automatic ban tri ... show more CrowdSec detected Web application reconnaissance. Scenario: local/framework-recon. Automatic ban triggered. Detection time (UTC): 2026-09-01T03:46:50.238184486Z. Context: http_status=200 show less	Web App Attack
🇩🇪 janbro	2026-09-01 03:35:36 (8 hours ago)	Automated attempt to access sensitive configuration files.	Port Scan Hacking Web App Attack
🇩🇪 Zydzy	2026-09-01 03:21:05 (8 hours ago)	Automated attack detected. Server: 95.140.154.181. Jail: nginx-exploit.	Web App Attack

Showing 1 to 15 of 36786 reports

1
2
3
4
5
6
7
8
9
10
...
2452
2453
›

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2604:a880:0:202a::b42:e000

🇺🇸 164.90.134.109

🇮🇹 91.80.143.173

🇺🇸 66.234.152.113

🇰🇷 211.218.157.166

🇺🇸 207.90.244.6

🇺🇸 205.210.31.17

🇺🇿 195.158.6.38

🇺🇸 147.182.252.200

🇫🇷 143.244.57.118

🇷🇪 102.35.163.4

🇫🇷 91.231.89.224

🇫🇷 91.231.89.78

🇫🇷 91.231.89.17

🇪🇸 46.24.30.118

🇪🇸 34.175.238.95

🇦🇺 34.151.176.148

🇹🇼 34.80.19.90

🇨🇳 223.89.226.85

🇫🇮 147.185.133.231