JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 181.215.45.159

181.215.45.159 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 69%: ?

69%

ISP	IPXO
Usage Type	Data Center/Web Hosting/Transit
ASN	AS199829
Hostname(s)	ip-181-215-45-159.astralcloud.com.br
Domain Name	ipxo.com
Country	🇧🇷 Brazil
City	Sao Paulo, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 181.215.45.159

Whois 181.215.45.159

IP Abuse Reports for 181.215.45.159:

This IP address has been reported a total of 19 times from 15 distinct sources. 181.215.45.159 was first reported on August 9th 2025, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Yepngo	2026-08-29 13:55:39 (3 days ago)	2026-08-29T15:50:41.625130+02:00 ns3006402 kernel: [UFW BLOCK] IN=eno1 OUT= MAC=f0:79:59:6e:bf:2b:00 ... show more 2026-08-29T15:50:41.625130+02:00 ns3006402 kernel: [UFW BLOCK] IN=eno1 OUT= MAC=f0:79:59:6e:bf:2b:00:ff:ff:ff:ff:fb:08:00 SRC=181.215.45.159 DST=151.80.47.9 LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=46394 DF PROTO=TCP SPT=44010 DPT=25565 WINDOW=65535 RES=0x00 SYN URGP=0 2026-08-29T15:55:38.767756+02:00 ns3006402 kernel: [UFW BLOCK] IN=eno1 OUT= MAC=f0:79:59:6e:bf:2b:00:ff:ff:ff:ff:fb:08:00 SRC=181.215.45.159 DST=151.80.47.9 LEN=60 TOS=0x00 PREC=0x00 TTL=37 ID=53933 DF PROTO=TCP SPT=62429 DPT=25565 WINDOW=64660 RES=0x00 SYN URGP=0 2026-08-29T15:55:38.767756+02:00 ns3006402 kernel: [UFW BLOCK] IN=eno1 OUT= MAC=f0:79:59:6e:bf:2b:00:ff:ff:ff:ff:fb:08:00 SRC=181.215.45.159 DST=151.80.47.9 LEN=60 TOS=0x00 PREC=0x00 TTL=37 ID=53933 DF PROTO=TCP SPT=62429 DPT=25565 WINDOW=64660 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇩🇪 london2038.com	2026-08-29 13:55:25 (3 days ago)	Connection atttempts against closed TCP ports Aug 29 15:50:26 BLOCK SRC=181.215.45.159 LEN=60 TOS=0x ... show more Connection atttempts against closed TCP ports Aug 29 15:50:26 BLOCK SRC=181.215.45.159 LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=51979 DF PROTO=TCP SPT=60721 DPT=25565 WINDOW=64240 RES=0x00 SYN Aug 29 15:50:26 BLOCK SRC=181.215.45.159 LEN=60 TOS=0x00 PREC=0x00 TTL=59 ID=53642 DF PROTO=TCP SPT=60263 DPT=25565 WINDOW=64860 RES=0x00 SYN Aug 29 15:55:24 BLOCK SRC=181.215.45.159 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=44048 DF PROTO=TCP SPT=37826 DPT=25565 WINDOW=64240 RES=0x00 SYN show less	Port Scan
Anonymous	2026-08-29 05:45:41 (3 days ago)	Portscan: TCP/25565 (9x), TCP/58145	Port Scan
🇩🇪 reznekcs	2026-08-29 05:01:48 (3 days ago)	Blocked by UFW firewall	Brute-Force
🇧🇷 cibersecoptidata	2026-08-29 02:51:00 (3 days ago)	Port scan / Unsolicited traffic.	Port Scan
🇫🇷 Yepngo	2026-08-29 01:47:30 (3 days ago)	2026-08-29T03:47:29.227787+02:00 ns3006402 kernel: [UFW BLOCK] IN=eno1 OUT= MAC=f0:79:59:6e:bf:2b:00 ... show more 2026-08-29T03:47:29.227787+02:00 ns3006402 kernel: [UFW BLOCK] IN=eno1 OUT= MAC=f0:79:59:6e:bf:2b:00:ff:ff:ff:ff:fb:08:00 SRC=181.215.45.159 DST=151.80.47.9 LEN=60 TOS=0x00 PREC=0x00 TTL=38 ID=24823 DF PROTO=TCP SPT=47517 DPT=25565 WINDOW=65535 RES=0x00 SYN URGP=0 2026-08-29T03:47:29.283148+02:00 ns3006402 kernel: [UFW BLOCK] IN=eno1 OUT= MAC=f0:79:59:6e:bf:2b:00:ff:ff:ff:ff:fb:08:00 SRC=181.215.45.159 DST=151.80.47.9 LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=39723 DF PROTO=TCP SPT=31344 DPT=25565 WINDOW=64800 RES=0x00 SYN URGP=0 2026-08-29T03:47:29.283148+02:00 ns3006402 kernel: [UFW BLOCK] IN=eno1 OUT= MAC=f0:79:59:6e:bf:2b:00:ff:ff:ff:ff:fb:08:00 SRC=181.215.45.159 DST=151.80.47.9 LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=39723 DF PROTO=TCP SPT=31344 DPT=25565 WINDOW=64800 RES=0x00 SYN URGP=0 2026-08-29T03:47:29.651170+02:00 ns3006402 kernel: [UFW BLOCK] IN=eno1 OUT= MAC=f0:79:59:6e:bf:2b:00:ff:ff:ff:ff:fb:08:00 SRC=181.215.45.159 DST=151.80.47.9 LEN=52 TOS=0x00 PREC=0x00 TTL=114 ID=40956 DF ... show less	Port Scan
🇺🇸 schematics.cc	2026-08-29 01:47:10 (3 days ago)	Blocked by on honeypot2 [25565/tcp] \| SPT: 15916 \| TTL: 113 \| LEN: 60 \| TOS: 0x00 • Reported by: abu ... show more Blocked by on honeypot2 [25565/tcp] \| SPT: 15916 \| TTL: 113 \| LEN: 60 \| TOS: 0x00 • Reported by: abuse.terraforge.fun show less	Port Scan
🇺🇸 SSP	2026-08-29 01:25:38 (3 days ago)	Automatically generated from firewall_v2 logs on Server_ID: MIAPX1 Category: Port Scan Occurrences ... show more Automatically generated from firewall_v2 logs on Server_ID: MIAPX1 Category: Port Scan Occurrences: 21 Unique Ports: 1 Destination Ports: 25565 First Seen: 2026-08-29 00:05 UTC Last Seen: 2026-08-29 01:25 UTC show less	Port Scan
🇧🇷 diego	2026-08-29 01:24:34 (3 days ago)	[rede-arem1] Port Scan detected from 181.215.45.159 (BR/Brazil/ip-181-215-45-159.astralcloud.com.b ... show more [rede-arem1] Port Scan detected from 181.215.45.159 (BR/Brazil/ip-181-215-45-159.astralcloud.com.br). 11 hits in the last 296 seconds; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: Aug 28 22:24:08 kernel: Firewall: TCP_IN Blocked* IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=181.215.45.159 DST=0.0.0.x LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=1130 DF PROTO=TCP SPT=13379 DPT=25565 WINDOW=64240 RES=0x00 SYN URGP=0 Aug 28 22:24:08 kernel: Firewall: TCP_IN Blocked IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=181.215.45.159 DST=0.0.0.x LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=60826 DF PROTO=TCP SPT=14836 DPT=25565 WINDOW=32120 RES=0x00 SYN show less	Port Scan
🇫🇷 Yepngo	2026-08-29 01:24:17 (3 days ago)	2026-08-29T03:24:14.378134+02:00 ns3006402 kernel: [UFW BLOCK] IN=eno1 OUT= MAC=f0:79:59:6e:bf:2b:00 ... show more 2026-08-29T03:24:14.378134+02:00 ns3006402 kernel: [UFW BLOCK] IN=eno1 OUT= MAC=f0:79:59:6e:bf:2b:00:ff:ff:ff:ff:fb:08:00 SRC=181.215.45.159 DST=151.80.47.9 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=63793 DF PROTO=TCP SPT=25619 DPT=25565 WINDOW=13600 RES=0x00 SYN URGP=0 2026-08-29T03:24:15.409520+02:00 ns3006402 kernel: [UFW BLOCK] IN=eno1 OUT= MAC=f0:79:59:6e:bf:2b:00:ff:ff:ff:ff:fb:08:00 SRC=181.215.45.159 DST=151.80.47.9 LEN=60 TOS=0x00 PREC=0x00 TTL=100 ID=2226 DF PROTO=TCP SPT=58509 DPT=25565 WINDOW=65535 RES=0x00 SYN URGP=0 2026-08-29T03:24:16.417301+02:00 ns3006402 kernel: [UFW BLOCK] IN=eno1 OUT= MAC=f0:79:59:6e:bf:2b:00:ff:ff:ff:ff:fb:08:00 SRC=181.215.45.159 DST=151.80.47.9 LEN=60 TOS=0x00 PREC=0x00 TTL=46 ID=53039 DF PROTO=TCP SPT=14782 DPT=25565 WINDOW=14400 RES=0x00 SYN URGP=0 2026-08-29T03:24:16.781177+02:00 ns3006402 kernel: [UFW BLOCK] IN=eno1 OUT= MAC=f0:79:59:6e:bf:2b:00:ff:ff:ff:ff:fb:08:00 SRC=181.215.45.159 DST=151.80.47.9 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=19821 DF ... show less	Port Scan
🇳🇱 DonAtari	2026-08-29 01:14:00 (3 days ago)	DShield firewall scan - TCP to port 25565	Brute-Force SSH
🇮🇳 Mr.Singh	2026-08-29 00:30:31 (3 days ago)	NFT blocked 181.215.45.159 after 143 rejections on 29-Aug-2026.	Port Scan Brute-Force
🇬🇧 WebNiraj	2026-08-29 00:11:24 (3 days ago)	Port Scan detected from 181.215.45.159 (BR/Brazil/ip-181-215-45-159.astralcloud.com.br). 11 hits i ... show more Port Scan detected from 181.215.45.159 (BR/Brazil/ip-181-215-45-159.astralcloud.com.br). 11 hits in the last 80 seconds [SIGMA] show less	Brute-Force Port Scan
🇩🇪 london2038.com	2026-08-29 00:11:10 (3 days ago)	Connection atttempts against closed TCP ports Aug 29 02:02:47 BLOCK SRC=181.215.45.159 LEN=52 TOS=0x ... show more Connection atttempts against closed TCP ports Aug 29 02:02:47 BLOCK SRC=181.215.45.159 LEN=52 TOS=0x00 PREC=0x00 TTL=118 ID=63533 DF PROTO=TCP SPT=9189 DPT=25565 WINDOW=8192 RES=0x00 SYN Aug 29 02:10:35 BLOCK SRC=181.215.45.159 LEN=52 TOS=0x00 PREC=0x00 TTL=112 ID=50410 DF PROTO=TCP SPT=23903 DPT=25565 WINDOW=65535 RES=0x00 SYN Aug 29 02:11:09 BLOCK SRC=181.215.45.159 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=31276 DF PROTO=TCP SPT=13361 DPT=25565 WINDOW=14600 RES=0x00 SYN show less	Port Scan
🇧🇷 diego	2026-08-29 00:03:19 (3 days ago)	[rede-arem1] Port Scan detected from 181.215.45.159 (BR/Brazil/ip-181-215-45-159.astralcloud.com.b ... show more [rede-arem1] Port Scan detected from 181.215.45.159 (BR/Brazil/ip-181-215-45-159.astralcloud.com.br). 11 hits in the last 236 seconds; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: Aug 28 21:02:53 kernel: Firewall: TCP_IN Blocked* IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=181.215.45.159 DST=0.0.0.x LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=7120 DF PROTO=TCP SPT=38859 DPT=25565 WINDOW=65340 RES=0x00 SYN URGP=0 Aug 28 21:02:53 kernel: Firewall: TCP_IN Blocked IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=181.215.45.159 DST=0.0.0.x LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=35336 DF PROTO=TCP SPT=36383 DPT=25565 WINDOW=14600 RES=0x00 SYN show less	Port Scan

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇮 2a01:4f9:4a:2aa5::2

🇺🇸 152.32.182.41

🇳🇦 105.232.144.1

🇺🇸 66.240.223.214

🇨🇳 36.106.167.0

🇨🇳 223.167.205.109

🇫🇮 147.185.133.193

🇨🇳 124.193.81.23

🇳🇱 89.46.223.232

🇷🇺 212.107.233.209

🇳🇱 192.253.248.215

🇺🇦 185.35.11.46

🇧🇷 179.187.88.58

🇮🇩 69.5.23.222

🇳🇱 45.148.10.157

🇬🇧 34.153.155.245

🇩🇪 212.58.88.226

🇹🇳 165.50.73.56

🇫🇮 157.22.74.147

🇺🇸 71.19.205.138