JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.145.54.172

209.145.54.172 was found in our database!

This IP was reported 106 times. Confidence of Abuse is 100%: ?

100%

ISP	Contabo Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS40021
Hostname(s)	vmi3343239.contaboserver.net
Domain Name	contabo.com
Country	🇺🇸 United States of America
City	St. Louis, Missouri

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.145.54.172

Whois 209.145.54.172

IP Abuse Reports for 209.145.54.172:

This IP address has been reported a total of 106 times from 58 distinct sources. 209.145.54.172 was first reported on June 28th 2026, and the most recent report was 22 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 Blinker73	2026-06-29 03:10:58 (22 minutes ago)	2026-06-28T10:53 kernel: OUT= SRC=209.145.54.172 LEN=40 TOS=0x08 PREC=0x20 TTL=239 ID=42710 PR ... show more 2026-06-28T10:53 kernel: OUT= SRC=209.145.54.172 LEN=40 TOS=0x08 PREC=0x20 TTL=239 ID=42710 PROTO=TCP SPT=52068 DPT=3322 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-28T16:48 kernel: OUT= SRC=209.145.54.172 LEN=40 TOS=0x08 PREC=0x20 TTL=239 ID=52484 PROTO=TCP SPT=52068 DPT=6666 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-28T17:01 kernel: OUT= SRC=209.145.54.172 LEN=40 TOS=0x08 PREC=0x20 TTL=239 ID=36608 PROTO=TCP SPT=52068 DPT=4444 WINDOW=1024 RES=0x00 SYN URGP= show less	Port Scan
🇺🇸 xmission.com	2026-06-29 02:57:55 (35 minutes ago)	Blocked by UFW (TCP on 1111) Source port: 52068 TTL: 246 Packet length: 40 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 1111) Source port: 52068 TTL: 246 Packet length: 40 TOS: 0x00 This report (for 209.145.54.172) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 evvsk	2026-06-29 02:48:34 (44 minutes ago)	1122/tcp	Port Scan
🇩🇪 Admins@FBN	2026-06-29 02:46:01 (47 minutes ago)	IPS:drop <match> dstport=9922	Brute-Force Exploited Host
🇩🇪 dispaisyenterprises	2026-06-29 02:45:49 (47 minutes ago)	Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 7777 [1] TCP Reported by DisPaisy ... show more Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 7777 [1] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 donarev419	2026-06-29 02:34:25 (58 minutes ago)	Port scan detected on port 2022 (connection without data transfer)	Port Scan
🇫🇮 Yachiyo Runami	2026-06-29 02:14:07 (1 hour ago)	Port Scan on Honeypot \| Ports: 2222/SSH-alt \| Proto: TCP(1) \| Flags: all SYN \| TTL: 238 \| Len: 44B \| ... show more Port Scan on Honeypot \| Ports: 2222/SSH-alt \| Proto: TCP(1) \| Flags: all SYN \| TTL: 238 \| Len: 44B \| Win: 1024(1) \| rDNS: vmi3343239.contaboserver.net \| F2B/ufw-honeypot@2026-06-29T02:14:07Z show less	Port Scan Hacking
🇩🇪 Justin F. \| AS204464	2026-06-29 02:09:39 (1 hour ago)	Honeypot [nx-infrastructure]: Empty payload (likely service probe); 6006 [1] TCP Reported by: Justin ... show more Honeypot [nx-infrastructure]: Empty payload (likely service probe); 6006 [1] TCP Reported by: Justin F. show less	Port Scan
🇭🇰 pengpeng	2026-06-29 02:07:51 (1 hour ago)	monitor: on ser162528253480 \| port: 6666 \| ttl: 241 script: github.com/sefinek/UFW-AbuseIPDB-Report ... show more monitor: on ser162528253480 \| port: 6666 \| ttl: 241 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-29 02:06:58 (1 hour ago)	Blocked by UFW (TCP on 9022) Source port: 52068 TTL: 244 Packet length: 40 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 9022) Source port: 52068 TTL: 244 Packet length: 40 TOS: 0x00 This report (for 209.145.54.172) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 vtchost.com	2026-06-29 01:53:11 (1 hour ago)	Jun 29 03:53:11 vtchost kernel: [239548.704122] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:41:75:31:c0:69:1 ... show more Jun 29 03:53:11 vtchost kernel: [239548.704122] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:41:75:31:c0:69:11:cd:47:2d:08:00 SRC=209.145.54.172 DST=161.97.181.152 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=62082 PROTO=TCP SPT=52068 DPT=2022 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 Axel	2026-06-29 01:18:21 (2 hours ago)	Blocked by UFW on LAXHH [7722/tcp] \| SPT: 52068 \| TTL: 244 \| LEN: 40 \| TOS: 0x00 • Reported by: gith ... show more Blocked by UFW on LAXHH [7722/tcp] \| SPT: 52068 \| TTL: 244 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2026-06-29 01:12:48 (2 hours ago)	tcp port scan (9 or more attempts)	Port Scan
Anonymous	2026-06-29 00:34:36 (2 hours ago)	Drop from IP address 209.145.54.172 to tcp-port 6001	Port Scan
🇺🇸 bigscoots.com	2026-06-29 00:33:41 (2 hours ago)	(sshd) Failed SSH login from 209.145.54.172 (US/United States/vmi3343239.contaboserver.net): 5 in th ... show more (sshd) Failed SSH login from 209.145.54.172 (US/United States/vmi3343239.contaboserver.net): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jun 28 19:33:36 14977 sshd[12098]: Did not receive identification string from 209.145.54.172 port 60740 Jun 28 19:33:36 14977 sshd[12100]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.145.54.172 user=root Jun 28 19:33:36 14977 sshd[12118]: Invalid user ftpuser from 209.145.54.172 port 61068 Jun 28 19:33:36 14977 sshd[12121]: Invalid user test from 209.145.54.172 port 61020 Jun 28 19:33:36 14977 sshd[12142]: Invalid user ubuntu from 209.145.54.172 port 61246 show less	Brute-Force SSH

Showing 1 to 15 of 106 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 2a06:4880:a000::bb

🇨🇳 223.104.84.77

🇳🇱 176.65.148.2

🇮🇳 167.71.228.234

🇳🇱 91.92.40.176

🇺🇸 44.232.85.252

🇧🇪 198.235.24.176

🇳🇱 185.242.226.93

🇩🇪 172.253.1.215

🇩🇪 165.227.147.215

🇹🇭 165.154.51.27

🇧🇩 103.189.11.53

🇮🇩 103.168.44.87

🇺🇿 84.54.71.50

🇺🇸 47.251.244.237

🇧🇷 34.39.133.180

🇨🇳 220.202.112.223

🇨🇳 218.106.33.54

🇲🇽 187.216.224.85

🇨🇳 182.61.35.204