JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.198.224.27

45.198.224.27 was found in our database!

This IP was reported 844 times. Confidence of Abuse is 100%: ?

100%

ISP	VPSVAULT.HOST LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS215925
Domain Name	vpsvault.host
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.198.224.27

Whois 45.198.224.27

IP Abuse Reports for 45.198.224.27:

This IP address has been reported a total of 844 times from 293 distinct sources. 45.198.224.27 was first reported on August 29th 2026, and the most recent report was 1 minute ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 leasj	2026-08-31 14:28:29 (1 minute ago)	Observed malicious network activity confirmed via internal security review.	Hacking
🇺🇸 Mark--	2026-08-31 14:08:45 (21 minutes ago)	Unauthorized connection attempt detected port 8080	Hacking
🇫🇷 Felisse	2026-08-31 13:54:53 (35 minutes ago)	CrowdSec ban: crowdsecurity/unifi-flood-detection (duration: 63h57m35s)	Port Scan
🇵🇱 Kierownik223	2026-08-31 13:23:09 (1 hour ago)	{"level":"info","ts":1788126984.673747,"logger":"http.log.access.log15","msg":"handled request","req ... show more {"level":"info","ts":1788126984.673747,"logger":"http.log.access.log15","msg":"handled request","request":{"remote_ip":"45.198.224.27","remote_port":"56018","client_ip":"45.198.224.27","proto":"HTTP/1.1","method":"GET","uri":"/login","headers":{"Accept-Encoding":["gzip"],"User-Agent":["Go-http-client/1.1"],"Connection":["close"]}},"bytes_read":0,"user_id":"","duration":0.000468243,"size":1245,"status":404,"resp_headers":{"Content-Type":["text/html; charset=utf-8"],"Last-Modified":["Sun, 02 Aug 2026 16:45:14 GMT"],"Content-Length":["1245"],"Server":["Microsoft-IIS/10.0"],"X-Powered-By":["ASP.NET"],"Accept-Ranges":["bytes"],"Vary":["Accept-Encoding"],"Etag":["\"dkelymhcxix0yl\""]}} ... show less	Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-08-31 12:28:21 (2 hours ago)	Blocked by UFW (TCP on 80) Source port: 57963 TTL: 239 Packet length: 40 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 80) Source port: 57963 TTL: 239 Packet length: 40 TOS: 0x08 This report (for 45.198.224.27) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇲🇿 delsio	2026-08-31 12:16:23 (2 hours ago)	AS37697 ntopng observed inbound attack; alert=Live Flow High Score; source=45.198.224.27; destinatio ... show more AS37697 ntopng observed inbound attack; alert=Live Flow High Score; source=45.198.224.27; destination=169.255.132.189; destination_port=80; score=100; action=bgp_blackhole_and_flowspec_discard; block_duration=18000s; reason=repeated high-score sensitive-port hits=3 dsts=1 port=80 show less	Port Scan
🇩🇪 Admins@FBN	2026-08-31 12:13:54 (2 hours ago)	FW-PortScan: Traffic Blocked srcport=39809 dstport=80	Port Scan
🇧🇷 diego	2026-08-31 12:09:29 (2 hours ago)	[rede-top188] 08/31/2026-09:09:29.830294, 45.198.224.27, Protocol: 6, ET DROP Dshield Block Listed S ... show more [rede-top188] 08/31/2026-09:09:29.830294, 45.198.224.27, Protocol: 6, ET DROP Dshield Block Listed Source group 1 show less	Hacking
🇺🇸 xmission.com	2026-08-31 12:07:37 (2 hours ago)	Blocked by UFW (TCP on 18080) Source port: 41534 TTL: 239 Packet length: 40 TOS: 0x08 This report ( ... show more Blocked by UFW (TCP on 18080) Source port: 41534 TTL: 239 Packet length: 40 TOS: 0x08 This report (for 45.198.224.27) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 hxsain	2026-08-31 12:06:25 (2 hours ago)	Blocked by UFW on pbcd1 [18080/tcp] \| SPT: 46148 \| TTL: 240 \| LEN: 40 \| TOS: 0x00 • Reported by: git ... show more Blocked by UFW on pbcd1 [18080/tcp] \| SPT: 46148 \| TTL: 240 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 celestialcity	2026-08-31 12:02:22 (2 hours ago)	Blocked by UFW on celestialcityeu [18080/tcp] \| SPT: 35471 \| TTL: 248 \| LEN: 40 \| TOS: 0x00 • Report ... show more Blocked by UFW on celestialcityeu [18080/tcp] \| SPT: 35471 \| TTL: 248 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 iNetWorker	2026-08-31 12:00:29 (2 hours ago)	firewall-block, port(s): 8888/tcp, 18080/tcp	Port Scan
🇨🇭 pingusurmars	2026-08-31 12:00:14 (2 hours ago)	Blocked by UFW on amperetwo [18080/tcp] Source port: 58376 TTL: 247 Packet length: 40 TOS: 0x00 Thi ... show more Blocked by UFW on amperetwo [18080/tcp] Source port: 58376 TTL: 247 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇱 ovallevelasquezanibal	2026-08-31 12:00:12 (2 hours ago)	Detectado por Wazuh SIEM en api-ux.com \| Alertas: 7 \| Nivel max: 5 \| Agentes: web-apiux-2025 \| Web s ... show more Detectado por Wazuh SIEM en api-ux.com \| Alertas: 7 \| Nivel max: 5 \| Agentes: web-apiux-2025 \| Web server 400 error code. show less	Port Scan Hacking
🇫🇷 geot	2026-08-31 11:57:28 (2 hours ago)	GET /login HTTP/1.1 POST /goform/formJsonAjaxReq HTTP/1.1	Bad Web Bot Web App Attack

Showing 1 to 15 of 844 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 144.123.76.190

🇮🇩 103.205.82.50

🇧🇪 34.77.182.141

🇲🇽 189.217.130.86

🇵🇰 175.107.228.215

🇺🇸 103.143.10.140

🇺🇸 91.230.168.237

🇺🇸 66.240.223.208

🇨🇳 60.29.128.122

🇺🇸 40.119.43.185

🇺🇸 4.148.1.90

🇺🇸 195.184.76.18

🇱🇻 194.165.17.13

🇳🇱 185.223.235.25

🇺🇸 134.209.223.214

🇨🇳 123.191.130.54

🇨🇬 102.129.84.76

🇷🇴 92.118.39.223

🇫🇷 91.196.152.46

🇺🇸 74.215.30.240