JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 167.172.106.45

167.172.106.45 was found in our database!

This IP was reported 33 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 167.172.106.45

Whois 167.172.106.45

IP Abuse Reports for 167.172.106.45:

This IP address has been reported a total of 33 times from 25 distinct sources. 167.172.106.45 was first reported on February 15th 2023, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 security.rdmc.fr	2026-06-03 09:14:56 (1 month ago)	Port Scan Attack proto:TCP src:53511 dst:631	Port Scan
🇫🇷 gooko	2026-05-11 09:07:11 (2 months ago)	SSH brute-force attack detected by fail2ban jail 'sshd'	Brute-Force SSH
🇲🇳 Public CSIRT/CC of Mongolia	2026-05-05 18:56:40 (2 months ago)	Honeypot hit: HTTP/1.1 request on 4000 GET / User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:142.0) ... show more Honeypot hit: HTTP/1.1 request on 4000 GET / User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate; 4000 [2] TCP show less	Web App Attack
Anonymous	2026-05-05 14:47:52 (2 months ago)	PAD: ModSec_Scanner! detected	Bad Web Bot
🇫🇷 vincent_EUDIER	2026-02-10 18:40:02 (5 months ago)	ET SCAN Suspicious inbound to Oracle SQL port 1521	Port Scan
🇺🇦 llighthunter	2025-11-11 16:05:32 (8 months ago)	Nov 5 10:54:09 mail dovecot: imap-login: Disconnected (disconnected before auth was ready, waited 0 ... show more Nov 5 10:54:09 mail dovecot: imap-login: Disconnected (disconnected before auth was ready, waited 0 secs): user=<>, rip=167.172.106.45, lip=192.168.1.80, TLS handshaking: read(size=1026) failed: Connection reset by peer, session=<X69xF9VC63qnrGot> Nov 5 10:54:15 mail dovecot: imap-login: Disconnected (no auth attempts in 6 secs): user=<>, rip=167.172.106.45, lip=192.168.1.80, TLS handshaking: SSL_accept() failed: error:1420918C:SSL routines:tls_early_post_process_client_hello:version too low, session=<RmjNF9VCn0CnrGot> Nov 5 10:54:16 mail dovecot: imap-login: Disconnected (no auth attempts in 1 secs): user=<>, rip=167.172.106.45, lip=192.168.1.80, TLS handshaking: Connection closed, session=<uifoF9VCI3+nrGot> show less	Port Scan Hacking Spoofing
🇺🇦 llighthunter	2025-11-10 07:14:33 (8 months ago)	Nov 5 10:54:09 mail dovecot: imap-login: Disconnected (disconnected before auth was ready, waited 0 ... show more Nov 5 10:54:09 mail dovecot: imap-login: Disconnected (disconnected before auth was ready, waited 0 secs): user=<>, rip=167.172.106.45, lip=192.168.1.80, TLS handshaking: read(size=1026) failed: Connection reset by peer, session=<X69xF9VC63qnrGot> Nov 5 10:54:15 mail dovecot: imap-login: Disconnected (no auth attempts in 6 secs): user=<>, rip=167.172.106.45, lip=192.168.1.80, TLS handshaking: SSL_accept() failed: error:1420918C:SSL routines:tls_early_post_process_client_hello:version too low, session=<RmjNF9VCn0CnrGot> Nov 5 10:54:16 mail dovecot: imap-login: Disconnected (no auth attempts in 1 secs): user=<>, rip=167.172.106.45, lip=192.168.1.80, TLS handshaking: Connection closed, session=<uifoF9VCI3+nrGot> show less	Port Scan Hacking Spoofing
🇺🇦 llighthunter	2025-11-09 06:47:55 (8 months ago)	Nov 5 10:54:09 mail dovecot: imap-login: Disconnected (disconnected before auth was ready, waited 0 ... show more Nov 5 10:54:09 mail dovecot: imap-login: Disconnected (disconnected before auth was ready, waited 0 secs): user=<>, rip=167.172.106.45, lip=192.168.1.80, TLS handshaking: read(size=1026) failed: Connection reset by peer, session=<X69xF9VC63qnrGot> Nov 5 10:54:15 mail dovecot: imap-login: Disconnected (no auth attempts in 6 secs): user=<>, rip=167.172.106.45, lip=192.168.1.80, TLS handshaking: SSL_accept() failed: error:1420918C:SSL routines:tls_early_post_process_client_hello:version too low, session=<RmjNF9VCn0CnrGot> Nov 5 10:54:16 mail dovecot: imap-login: Disconnected (no auth attempts in 1 secs): user=<>, rip=167.172.106.45, lip=192.168.1.80, TLS handshaking: Connection closed, session=<uifoF9VCI3+nrGot> show less	Port Scan Hacking Spoofing
Anonymous	2025-11-09 00:14:49 (8 months ago)	Aggressive web scan	SQL Injection Bad Web Bot Web App Attack
🇭🇰 www.winos.me	2025-11-08 02:46:39 (8 months ago)	stream fail	Web App Attack
🇺🇦 llighthunter	2025-11-08 02:02:33 (8 months ago)	Nov 5 10:54:09 mail dovecot: imap-login: Disconnected (disconnected before auth was ready, waited 0 ... show more Nov 5 10:54:09 mail dovecot: imap-login: Disconnected (disconnected before auth was ready, waited 0 secs): user=<>, rip=167.172.106.45, lip=192.168.1.80, TLS handshaking: read(size=1026) failed: Connection reset by peer, session=<X69xF9VC63qnrGot> Nov 5 10:54:15 mail dovecot: imap-login: Disconnected (no auth attempts in 6 secs): user=<>, rip=167.172.106.45, lip=192.168.1.80, TLS handshaking: SSL_accept() failed: error:1420918C:SSL routines:tls_early_post_process_client_hello:version too low, session=<RmjNF9VCn0CnrGot> Nov 5 10:54:16 mail dovecot: imap-login: Disconnected (no auth attempts in 1 secs): user=<>, rip=167.172.106.45, lip=192.168.1.80, TLS handshaking: Connection closed, session=<uifoF9VCI3+nrGot> show less	Port Scan Hacking Spoofing
🇸🇪 SkyDancer	2025-11-07 22:33:49 (8 months ago)	Multiple login attempts via RDP and/or SSH using wrong credentials. Attack automatically blocked by ... show more Multiple login attempts via RDP and/or SSH using wrong credentials. Attack automatically blocked by SkyDancer Ai via interface. show less	Hacking Brute-Force SSH
🇫🇷 bgg	2025-11-07 21:31:37 (8 months ago)	Nov 7 22:31:36 nanopirate sshd[1643088]: refused connect from 167.172.106.45 (167.172.106.45) ...	Brute-Force SSH
🇿🇦 voolik.com	2025-11-07 19:40:58 (8 months ago)	2025-11-07T21:40:41.885019+02:00 bla016-truserv-jhb1-001 sshd[2251498]: refused connect from 167.172 ... show more 2025-11-07T21:40:41.885019+02:00 bla016-truserv-jhb1-001 sshd[2251498]: refused connect from 167.172.106.45 (167.172.106.45) 2025-11-07T21:40:47.257632+02:00 bla016-truserv-jhb1-001 sshd[2251716]: refused connect from 167.172.106.45 (167.172.106.45) 2025-11-07T21:40:52.433105+02:00 bla016-truserv-jhb1-001 sshd[2251943]: refused connect from 167.172.106.45 (167.172.106.45) 2025-11-07T21:40:57.615326+02:00 bla016-truserv-jhb1-001 sshd[2252297]: refused connect from 167.172.106.45 (167.172.106.45) ... show less	Brute-Force SSH
🇳🇱 i-turnradio.nl	2025-11-07 19:11:56 (8 months ago)	2025-11-07 @ 20:11:56 (CET) ~ Blocked based on risk assessment and prior abuse reports	Web App Attack

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.116

🇪🇨 190.152.187.213

🇺🇸 162.216.150.38

🇺🇸 65.49.20.67

🇺🇸 47.77.217.62

🇬🇧 35.203.211.181

🇧🇷 190.9.89.163

🇺🇸 162.216.150.16

🇺🇸 154.92.23.249

🇫🇮 147.185.133.217

🇺🇸 128.203.204.199

🇮🇩 103.253.245.222

🇬🇧 101.36.97.88

🇳🇱 91.92.40.202

🇫🇷 85.204.70.114

🇺🇸 47.251.81.110

🇩🇪 45.86.202.36

🇪🇸 217.61.226.49

🇺🇸 198.98.56.227

🇧🇷 186.194.15.134