JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.137.81.103

45.137.81.103 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 48%: ?

48%

ISP	RapidSeedbox Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS210644
Domain Name	aeza.ru
Country	🇸🇪 Sweden
City	Stockholm, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.137.81.103

Whois 45.137.81.103

IP Abuse Reports for 45.137.81.103:

This IP address has been reported a total of 16 times from 11 distinct sources. 45.137.81.103 was first reported on July 2nd 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇴 iulianh	2026-07-19 23:42:38 (1 week ago)	143,993	Brute-Force SSH
🇩🇪 xortex	2026-07-19 15:59:06 (1 week ago)	sent several mails to non existent mailboxes, brute force attack	Email Spam Brute-Force
🇫🇮 notelseit	2026-07-18 09:50:49 (1 week ago)	2026-07-18T11:50:41.343642+02:00 mail dovecot: auth-worker(3214235): conn unix:auth-worker (pid=3204 ... show more 2026-07-18T11:50:41.343642+02:00 mail dovecot: auth-worker(3214235): conn unix:auth-worker (pid=3204387,uid=110): auth-worker<66>: sql([email protected],45.137.81.103,<bXksm99WMtwtiVFn>): Password mismatch 2026-07-18T11:50:43.368075+02:00 mail dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=45.137.81.103, lip=65.21.131.50, TLS, session=<bXksm99WMtwtiVFn> 2026-07-18T11:50:43.561169+02:00 mail dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=45.137.81.103, lip=65.21.131.50, session=<DP5Nm99WUt0tiVFn> 2026-07-18T11:50:47.705164+02:00 mail dovecot: auth-worker(3214235): conn unix:auth-worker (pid=3204387,uid=110): auth-worker<67>: sql([email protected],45.137.81.103,<SnRQm99WXN0tiVFn>): Password mismatch 2026-07-18T11:50:49.229258+02:00 mail dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 at ... show less	Brute-Force Email Spam
🇺🇸 xmission.com	2026-07-17 13:23:40 (1 week ago)	Blocked by UFW (TCP on 993) Source port: 53810 TTL: 103 Packet length: 52 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 993) Source port: 53810 TTL: 103 Packet length: 52 TOS: 0x08 This report (for 45.137.81.103) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-07-16 23:30:18 (1 week ago)	Authentication failure	Brute-Force
Anonymous	2026-07-14 00:21:03 (2 weeks ago)	Web App Attack, Hacking	Hacking Web App Attack
🇺🇸 TurboTechieSystems	2026-07-13 16:12:44 (2 weeks ago)	2026-07-13T11:12:25.241611-05:00 dovecot: imap-login: Disconnected: Connection closed auth failed ... show more 2026-07-13T11:12:25.241611-05:00 dovecot: imap-login: Disconnected: Connection closed auth failed , TLS, 2026-07-13T11:12:31.377646-05:00 dovecot: imap-login: Disconnected: Connection closed auth failed, : , 2026-07-13T11:12:38.323030-05:00 dovecot: imap-login: Disconnected: Connection closed auth failed, : , TLS, 2026-07-13T11:12:40.464167-05:00 dovecot: imap-login: Disconnected: Connection closed auth failed , 2026-07-13T11:12:43.386826-05:00 dovecot: imap-login: Disconnected: Connection closed auth failed , TLS, show less	Brute-Force
🇫🇮 notelseit	2026-07-13 12:28:56 (2 weeks ago)	2026-07-13T14:28:48.830373+02:00 mail dovecot: auth-worker(2297456): conn unix:auth-worker (pid=2227 ... show more 2026-07-13T14:28:48.830373+02:00 mail dovecot: auth-worker(2297456): conn unix:auth-worker (pid=2227166,uid=110): auth-worker<22>: sql([email protected],45.137.81.103,<ZSZ3O31WpeItiVFn>): Password mismatch 2026-07-13T14:28:50.355623+02:00 mail dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=45.137.81.103, lip=65.21.131.50, TLS, session=<ZSZ3O31WpeItiVFn> 2026-07-13T14:28:50.532122+02:00 mail dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=45.137.81.103, lip=65.21.131.50, session=<ocaQO31WB+MtiVFn> 2026-07-13T14:28:54.642208+02:00 mail dovecot: auth-worker(2297456): conn unix:auth-worker (pid=2227166,uid=110): auth-worker<23>: sql([email protected],45.137.81.103,<1L+SO31WC+MtiVFn>): Password mismatch 2026-07-13T14:28:56.166222+02:00 mail dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 6 secs): u ... show less	Brute-Force Email Spam
Anonymous	2026-07-12 09:08:02 (2 weeks ago)	...	Brute-Force
🇺🇸 xmission.com	2026-07-12 07:48:06 (2 weeks ago)	Blocked by UFW (TCP on 143) Source port: 58417 TTL: 110 Packet length: 52 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 143) Source port: 58417 TTL: 110 Packet length: 52 TOS: 0x00 This report (for 45.137.81.103) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇮🇩 sockominfo	2026-07-09 08:00:53 (3 weeks ago)	Zimbra: Login failures from malicious IP: 45.137.81.103. Threat Score: 6.3/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 45.137.81.103. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-09 07:00:09 (3 weeks ago)	Zimbra: Login failures from malicious IP: 45.137.81.103. Threat Score: 6/10 (MEDIUM). Reported by Ta ... show more Zimbra: Login failures from malicious IP: 45.137.81.103. Threat Score: 6/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇳🇱 maxxsense	2026-07-09 04:35:19 (3 weeks ago)	45.137.81.103 (SE/Sweden/-), 12 distributed imapd attacks on account [redacted]	Brute-Force
🇸🇬 pusathosting.com	2026-07-03 22:55:04 (3 weeks ago)	imap1 failed login	Brute-Force
🇺🇸 xmission.com	2026-07-03 16:42:01 (3 weeks ago)	Blocked by UFW (TCP on 143) Source port: 52131 TTL: 117 Packet length: 52 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 143) Source port: 52131 TTL: 117 Packet length: 52 TOS: 0x00 This report (for 45.137.81.103) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 179.40.112.10

🇯🇵 124.155.125.131

🇨🇳 220.180.171.157

🇺🇸 216.126.237.106

🇨🇳 210.13.99.66

🇩🇪 193.124.20.245

🇺🇸 147.185.132.187

🇻🇳 116.110.15.224

🇦🇺 103.208.219.38

🇰🇿 82.200.240.33

🇳🇱 82.196.12.132

🇩🇪 77.110.107.153

🇲🇾 47.250.93.74

🇳🇱 5.61.209.44

🇴🇲 5.37.97.8

🇪🇸 207.188.158.216

🇭🇰 203.198.129.123

🇷🇺 195.209.50.216

🇦🇴 193.163.125.246

🇺🇸 192.236.168.195