JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 192.3.154.45

192.3.154.45 was found in our database!

This IP was reported 464 times. Confidence of Abuse is 67%: ?

67%

ISP	HostPapa
Usage Type	Data Center/Web Hosting/Transit
ASN	AS36352
Hostname(s)	192-3-154-45-host.colocrossing.com
Domain Name	hostpapa.com
Country	🇺🇸 United States of America
City	Buffalo, New York

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 192.3.154.45

Whois 192.3.154.45

IP Abuse Reports for 192.3.154.45:

This IP address has been reported a total of 464 times from 41 distinct sources. 192.3.154.45 was first reported on February 17th 2021, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 bescared	2026-07-23 06:29:56 (1 day ago)	F2B - Malicious activity detected. URL Probing. -c0423ad6-	Hacking Web App Attack
🇩🇪 acadeova	2026-07-20 15:52:18 (3 days ago)	🚨 Recon detected (nft drop) SRC=192.3.154.45 Observed=TCP dpt=8443 in=enp0s6 ttl=52 Time=recent(jour ... show more 🚨 Recon detected (nft drop) SRC=192.3.154.45 Observed=TCP dpt=8443 in=enp0s6 ttl=52 Time=recent(journalctl: 10 minutes ago) Assessment=Generic scanning / reconnaissance (PORT_SCAN) show less	Port Scan
🇩🇪 joharikop	2026-07-20 11:52:43 (3 days ago)	Nginx: credential/secret file probe (/.env, /.git, /.aws etc). Automated ban via fail2ban nginx-cred ... show more Nginx: credential/secret file probe (/.env, /.git, /.aws etc). Automated ban via fail2ban nginx-credential-probes jail. show less	Web App Attack
Anonymous	2026-07-18 04:04:09 (6 days ago)	IP & Port Scan.	SSH Port Scan Brute-Force
🇩🇪 banankicks	2026-07-18 02:56:56 (6 days ago)	Unauthorized connection attempt detected from IP address 192.3.154.45 to port 8080 (banankicks-serve ... show more Unauthorized connection attempt detected from IP address 192.3.154.45 to port 8080 (banankicks-server) [s] show less	Brute-Force Exploited Host
🇦🇹 centurion	2026-07-18 01:59:32 (6 days ago)	Blocked by UFW on ns03 [80/tcp] Source port: 42256 TTL: 51 Packet length: 60 TOS: 0x00 This report ... show more Blocked by UFW on ns03 [80/tcp] Source port: 42256 TTL: 51 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇩🇪 check-the-sum.fr	2026-07-17 01:25:56 (1 week ago)	Port Scanning	Port Scan
🇩🇪 HoneyPotFRI	2026-07-16 23:31:17 (1 week ago)	192.3.154.45 - - [17/Jul/2026:01:31:01 +0200] "x16x03x01x02x00x01x00x01xFCx03x03xBExF1]x8Ex0Fx05kxE3 ... show more 192.3.154.45 - - [17/Jul/2026:01:31:01 +0200] "x16x03x01x02x00x01x00x01xFCx03x03xBExF1]x8Ex0Fx05kxE3x9Bx92pxA94ax92x9AaxDBxDDx12x1CxE6xA5oxFFx01_oxEEx932: xA4xEAxAFy ... show less	Bad Web Bot Web App Attack
🇩🇪 wiredalter	2026-07-11 01:01:35 (1 week ago)	Blocked by UFW on dVPS [8443/tcp] Source Port: 42044 TTL: 54 Packet Length: 60 TOS: 0x00 Analyzed b ... show more Blocked by UFW on dVPS [8443/tcp] Source Port: 42044 TTL: 54 Packet Length: 60 TOS: 0x00 Analyzed by https://ip.wiredalter.com show less	Port Scan Brute-Force
Anonymous	2026-07-11 00:11:27 (1 week ago)	192.3.154.45 - - [11/Jul/2026:02:11:17 +0200] "\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03\xE2\x09\ ... show more 192.3.154.45 - - [11/Jul/2026:02:11:17 +0200] "\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03\xE2\x09\x08\xF9\x1A\xC2b\xE2;\xEC\xE5TX\xFB\xA6j9/,\xDC}\x1D#V\xA7RO\xE3\xA6>\xD1\x1C \xE3\x07uv\xD6x\xC0\xD5\xEEiJ\xE5\xF0}!\x86\xC2d\xA7\xBB3\xB2\xC2\x08\xC8\xBF(r\x9F:\xA2\xFF\x00$\x13\x02\x13\x03\x13\x01\xC0,\xC00\xC0+\xC0/\xCC\xA9\xCC\xA8\xC0$\xC0(\xC0#\xC0'\x00\x9F\x00\x9E\x00k\x00g\x00\xFF\x01\x00\x01\x8F\x00\x0B\x00\x04\x03\x00\x01\x02\x00" 400 150 "-" "-" "-" 192.3.154.45 - - [11/Jul/2026:02:11:21 +0200] "GET /.env HTTP/1.1" 400 248 "-" "Mozilla/5.0 (compatible; SensitiveFileHunter/1.0)" "-" 192.3.154.45 - - [11/Jul/2026:02:11:27 +0200] "\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03\x9B\xCB\x19\xE6_\xEE\xA3@\xF8@\xA2%$\xE8\x8C\x05\xB3\xA9\x9D\x16/B+on\x02\x86jL\xBCQ\xD3 \xD8t\x11\xE9\x93\xA0o\xD4\xE9\xF7X\x8F\xEF\x1F\xF5?\xBFu+R\x8B\x07E7\xAC\xF6\x02\xFF\xD7\xD24o\x00$\x13\x02\x13\x03\x13\x01\xC0,\xC00\xC0+\xC0/\xCC\xA9\xCC\xA8\xC0$\xC0(\xC0#\xC0'\x00\x9F\x00\x9E\x00k\x00g\x00\xFF\x01\x0 ... show less	Hacking Web App Attack
🇩🇪 centurion	2026-07-10 16:11:07 (1 week ago)	Blocked by UFW on ns02 [443/tcp] Source port: 56218 TTL: 51 Packet length: 60 TOS: 0x00 This report ... show more Blocked by UFW on ns02 [443/tcp] Source port: 56218 TTL: 51 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇩🇪 sandra361	2026-07-08 21:48:02 (2 weeks ago)	Port scan detected: 11 attempts across 4 ports (80,443,8080,8443). \| Evidence: GHOST_SCAN: IN=ens3 S ... show more Port scan detected: 11 attempts across 4 ports (80,443,8080,8443). \| Evidence: GHOST_SCAN: IN=ens3 SRC=192.3.154.45 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=35844 DF PROTO=TCP SPT=56160 DPT=8443 WINDOW=64240 RES=0x00 SYN URGP=0 show less	Port Scan
Anonymous	2026-07-07 05:26:04 (2 weeks ago)	Spraying garbage or empty requests on HTTP/S - [\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03H\x9Eh\x ... show more Spraying garbage or empty requests on HTTP/S - [\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03H\x9Eh\x14\x22\x8D2)\x03D\xC7\x0B\xFF1h2\xED\xDD\xD3a\xD], obvious automated scanner or botnet minion show less	Port Scan Web App Attack
🇩🇪 Axel	2026-07-07 00:36:38 (2 weeks ago)	[2026-07-07 00:36:37 UTC] Honeypot HTTP-Alt connection attempt \| AXFRA HONEYPOT	Web App Attack
Anonymous	2026-07-05 16:39:31 (2 weeks ago)	Spraying garbage or empty requests on HTTP/S - [\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03H\x9Eh\x ... show more Spraying garbage or empty requests on HTTP/S - [\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03H\x9Eh\x14\x22\x8D2)\x03D\xC7\x0B\xFF1h2\xED\xDD\xD3a\xD], obvious automated scanner or botnet minion show less	Port Scan Web App Attack

Showing 1 to 15 of 464 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇴 193.163.125.125

🇺🇸 172.245.106.180

🇻🇳 157.66.224.129

🇨🇳 150.255.49.113

🇺🇸 146.75.223.110

🇨🇳 120.52.19.71

🇻🇳 116.109.216.74

🇫🇷 91.196.152.206

🇩🇪 64.89.163.86

🇧🇷 45.205.1.241

🇷🇸 37.19.108.213

🇿🇦 197.185.184.119

🇲🇾 172.197.168.125

🇩🇪 167.94.145.28

🇫🇮 147.185.133.126

🇨🇳 120.48.80.70

🇨🇳 118.145.246.44

🇸🇬 107.155.56.52

🇸🇪 104.23.221.7

🇫🇷 91.196.152.187