4.161.45.216

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
43% Elevated
44 reports
33 reporters · latest 1 week ago
ISP
Microsoft Corporation
Usage Type
Data Center/Web Hosting/Transit
ASN
AS8075
Domain Name
microsoft.com
Country
🇦🇪 United Arab Emirates
City
Dubai, Dubai
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
44 from 33 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇭🇰 Hong Kong 6 🇨🇳 China 2 🇩🇪 Germany 2
Most common categories Port Scan 17 Brute-Force 11 Hacking 4 Web App Attack 2 SSH 2
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇷🇺 kkn
Oct 29 16:13:56 mikrotikbsl firewall,info port_scan_add input: in:ether1-wan out:(unknown 0), src-mac e0:00:84:be:be:de, proto TCP (SYN), 4.161.45.216:39970->:125, len 40 ...
Port Scan
Anonymous
SSH brute force: repeated failed logins and invalid usernames. Reported by fail2ban.
Brute-Force SSH
🇨🇳 SA19999
Auto-report: brute_force | sources=["peer-sync"] | Fox honeypot cluster
Web App Attack
🇺🇸 avgsmoe
Connection to a honeypot port. Automated report (firemon).
Port Scan
🇩🇪 Jochen Pretli
connection to honeypot
Email Spam Port Scan
🇭🇰 sandra361
Port Scan
🇭🇰 sandra361
Port scan detected: 6 attempts across 1 port (13168). | Evidence: REAPER_TARPIT: IN=eth0 SRC=4.161.45.216 LEN=44 TOS=0x14 PREC=0x00 TTL=43 ID=21232 DF PROTO=TCP SPT=37060 DPT=13168 WINDOW=64240 RES=0x00 ACK PSH URGP=0
Port Scan
🇭🇰 CyberFox
28577/tcp,28569/tcp,28584/tcp,28570/tcp,28581/tcp,28571/tcp,28579/tcp,28572/tcp,28583/tcp,28574/tcp,28573/tcp,28580/tcp,28575/tcp,28576/tcp,28578/tcp,28582/tcp (16 or more attempts)
Port Scan
🇹🇷 Threat.live
Port Scan Detected
Port Scan
🇯🇵 demonsword
Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: api.ipify.org:443
Open Proxy Port Scan
Anonymous
2026-09-27 23:01:21 warning[3053580]: host unknown[4.161.45.216]: unauthorized access attempted: tcp/91
Port Scan Brute-Force
Anonymous
183/tcp,181/tcp,178/tcp,179/tcp,187/tcp,180/tcp,192/tcp,191/tcp,185/tcp,184/tcp,188/tcp,186/tcp,193/tcp,190/tcp,189/tcp,182/tcp (16 or more attempts)
Port Scan
🇭🇰 sandra361
Port Scan
🇦🇹 CTK
Customer Site (WELS SM)
Brute-Force
🇻🇳 scuslon
RdpGuard detected brute-force attempt on RDP
Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇩🇪 212.227.126.131
🇸🇬 206.189.91.238
🇩🇪 203.188.189.213
🇺🇸 47.251.45.104
🇲🇽 206.135.12.147
🇧🇷 187.92.28.238
🇪🇨 186.101.49.211
🇫🇷 169.58.194.20
🇸🇦 145.82.84.39
🇺🇸 136.111.220.144
🇩🇪 104.28.193.122
🇫🇷 104.28.42.21
🇺🇸 216.158.95.148
🇪🇸 196.196.164.249
🇵🇱 172.68.159.148
🇺🇸 170.168.241.58
🇩🇪 159.69.205.3
🇺🇸 157.230.179.200
🇨🇳 111.192.49.84
🇺🇸 109.105.209.19
feedback