4.245.8.109

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
41 reports
27 reporters · latest 2 hours ago
ISP
Microsoft Corporation
Usage Type
Data Center/Web Hosting/Transit
ASN
AS8075
Domain Name
microsoft.com
Country
🇳🇱 Netherlands
City
Amsterdam, North Holland
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
41 from 27 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 15 🇫🇷 France 7 🇩🇪 Germany 4
Most common categories Port Scan 37 Hacking 15 Brute-Force 3 Bad Web Bot 1 Phishing 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 MPL
tcp/1433
Port Scan
🇺🇸 Block Rockin' Beats
Attempted connection to TCP port 445 (SMB)
Port Scan
🇩🇪 DasDuo
Attempt on port 1433 (MSSQL) - potential unauthorized database access attempt. Blocked by firewall (unsolicited inbound, no prior outbound connection).
Port Scan Hacking Exploited Host
🇺🇸 xclmp
Unauthorized connection attempts consistent with that of port probing and scanning from 4.245.8.109 were detected at 2026-11-09 15:11:19 UTC. Learn More: https://fia.project-furina.com/report/21514
Port Scan
🇺🇸 azminawwar
[4.245.8.109] triggered by honeypot on port [1433], Timestamp [2026-11-09T11:39:27Z] ) U *
Port Scan Hacking
🇺🇸 drewf.ink
[09:39] Probed the MSSQL honeypot (PRELOGIN handshake only, no login attempt)
Brute-Force Hacking
🇺🇸 MPL
tcp/1433 (2 or more attempts)
Port Scan
🇺🇸 MPL
tcp/1433 (4 or more attempts)
Port Scan
🇳🇱 Tsumugi Kotobuki
Port Scan on Honeypot | Ports: 445/SMB | Proto: TCP(1) | Flags: all SYN | TTL: 239 | Len: 40B | Win: 1024(1) | F2B/ufw-honeypot@2026-11-09T02:57:18Z
Port Scan Hacking
🇫🇷 Kejult
Honeypot Finding: SMB activity on TCP/445; 2 Dionaea events.
Port Scan
🇺🇸 MPL
tcp/1433 (5 or more attempts)
Port Scan
🇺🇸 MPL
tcp/1433
Port Scan
🇧🇷 radardatelecom
Blocked by Radar da Telecom firewall — abuseipdb
Bad Web Bot Web App Attack
🇨🇦 alexbfr
Hacking
🇺🇸 MPL
tcp/1433 (9 or more attempts)
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇮🇹 185.210.159.232
🇱🇹 185.169.4.177
🇺🇸 162.216.149.58
🇹🇭 119.42.96.90
🇬🇧 85.203.36.7
🇨🇳 47.108.39.232
🇩🇪 207.154.220.63
🇦🇷 200.50.155.91
🇳🇱 193.47.62.69
🇮🇳 182.237.13.208
🇺🇸 180.149.5.178
🇧🇷 138.118.178.158
🇺🇸 71.127.199.37
🇧🇪 207.175.165.55
🇪🇹 196.189.45.183
🇩🇪 165.227.167.114
🇮🇳 154.29.231.98
🇺🇸 98.174.59.174
🇷🇺 92.124.207.130
feedback