45.140.185.109

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
68 reports
50 reporters · latest 17 hours ago
ISP
Contabo GmbH
Usage Type
Data Center/Web Hosting/Transit
ASN
AS51167
Hostname(s)
vmi2593069.contaboserver.net
Domain Name
contabo.com
Country
🇫🇷 France
City
Lauterbourg, Grand Est
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
68 from 50 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 12 🇺🇸 United States of America 11 🇧🇷 Brazil 6
Most common categories Port Scan 57 Hacking 10 Brute-Force 9 Web App Attack 8 DDoS Attack 3
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇧🇷 cibersecoptidata
Port scan / Unsolicited traffic.
Port Scan
🇬🇧 thetomtaylor.co.uk
Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [ice01,ice02,mx01,mx02,mx03,wa01,wa02]
Hacking Brute-Force Bad Web Bot Web App Attack
🇩🇪 phil2k
Port Scan
🇩🇪 Jochen Pretli
connection to honeypot
Email Spam Port Scan
🇺🇸 freehosts.eu
Blocked by UFW [5174/tcp] | SPT: 35287 | TTL: 245 | LEN: 40 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇨🇳 CyberFox
4200/tcp (1 or more attempts)
Port Scan
🇳🇵 radheykrishna.com.np
Nov 13 20:17:05 kernel: [3485562.019388] [UFW BLOCK] IN=ens160 OUT= SRC=45.140.185.109 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=54321 PROTO=TCP SPT=45954 DPT=4200 WINDOW=65535 RES=0x00 SYN URGP=0 ...
Port Scan
🇲🇳 Public CSIRT/CC of Mongolia
Honeypot hit: Empty payload (likely service probe); 5173 [2], 3000 [2], 5174 [2], 3001 [2], 4173 [2], 1234 [2] TCP
Port Scan
🇦🇺 LiftUp Hosting
Honeypot hit: Empty payload (likely service probe); 5173 [2], 5174 [2], 3001 [2], 3002 [2], 1234 [2], 5175 [2] TCP
Port Scan
🇺🇸 donarev419
Connection to port 4200 with data transfer. Data preview: GET /@vite/client HTTP/1.1 Host: 198.23.188.201:4200 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win
Port Scan Hacking
🇫🇷 AmStaff
Honeypot: web exploitation attempts. Targeted ports: 1234, 3000, 3001, 3002, 4173, 4200.
Port Scan Web App Attack
🇩🇪 reznekcs
Blocked by UFW firewall
Brute-Force
🇫🇷 uthul
T-Pot honeypot: 235 hits on ports [3001, 4200, 5174, 8080] (automated)
Port Scan Web App Attack
🇧🇷 diego
[probe-smbits-188-16] 2026-11-13 04:56:47, Client: 45.140.185.109, Protocol: 6, Unauthorized activity to HTTP: GET /@vite/client
Web App Attack
🇷🇺 Panamaaa
Port scan detected; Brute-force attack detected
Port Scan Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 172.212.203.125
🇩🇪 167.94.145.21
🇺🇸 70.93.0.61
🇺🇸 24.31.36.72
🇺🇸 13.219.1.233
🇺🇸 216.25.90.4
🇺🇸 205.210.31.49
🇨🇳 180.184.61.83
🇫🇮 147.185.133.227
🇨🇳 120.219.84.13
🇨🇳 118.145.239.129
🇨🇳 114.237.175.212
🇸🇬 85.203.21.155
🇧🇬 78.128.113.74
🇺🇸 65.49.1.69
🇧🇪 34.22.204.254
🇧🇷 205.210.31.232
🇺🇬 196.250.64.56
🇺🇸 195.184.76.214
🇺🇸 195.184.76.137
feedback