JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.198.224.81

45.198.224.81 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 100%: ?

100%

ISP	VPSVAULT.HOST LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS215925
Domain Name	vpsvault.host
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.198.224.81

Whois 45.198.224.81

IP Abuse Reports for 45.198.224.81:

This IP address has been reported a total of 37 times from 29 distinct sources. 45.198.224.81 was first reported on May 26th 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 security.rdmc.fr	2026-06-13 05:50:06 (3 hours ago)	Port Scan Attack proto:TCP src:49589 dst:873	Port Scan
Anonymous	2026-06-13 04:48:12 (4 hours ago)	unsolicited connect TCP dport 20000 (sport 45658)	Hacking
🇺🇸 xmission.com	2026-06-12 13:06:21 (20 hours ago)	Blocked by UFW (TCP on 4000) Source port: 49580 TTL: 235 Packet length: 44 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 4000) Source port: 49580 TTL: 235 Packet length: 44 TOS: 0x00 This report (for 45.198.224.81) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 evvsk	2026-06-12 07:00:41 (1 day ago)	1812/tcp	Port Scan
🇩🇪 Da_tschek	2026-06-10 19:01:38 (2 days ago)	Port scanning	Port Scan Hacking
🇮🇳 Mr.Singh	2026-06-10 03:30:22 (3 days ago)	NFT blocked 45.198.224.81 after 19 rejections on 10-Jun-2026.	Port Scan Brute-Force
🇦🇹 urnilxfgbez	2026-06-09 22:45:00 (3 days ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇷🇴 abuse_IP_reporter	2026-06-09 09:45:21 (3 days ago)	Jun 9 12:24:52 server UFW BLOCK SRC=45.198.224.81 PROTO=TCP SPT=55535 DPT=5666	Port Scan
🇺🇸 podril1ak2.ru	2026-06-09 05:16:09 (4 days ago)	Blocked by UFW on reporterUS [61616/tcp] \| SPT: 42167 \| TTL: 246 \| LEN: 44 \| TOS: 0x00 • Reported by ... show more Blocked by UFW on reporterUS [61616/tcp] \| SPT: 42167 \| TTL: 246 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇭🇺 DumaNet	2026-06-09 04:55:00 (4 days ago)	Web app attack attempts, scanning for vulnerability. Date: 2026 Jun 09. 00:08:28 Source IP: 45.198 ... show more Web app attack attempts, scanning for vulnerability. Date: 2026 Jun 09. 00:08:28 Source IP: 45.198.224.81 Portion of the log(s): 45.198.224.81 - [09/Jun/2026:00:08:28 +0200] "GET /cgi-bin/luci HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 45.198.224.81 - [09/Jun/2026:00:08:28 +0200] "GET /BRS_netgear_success.html HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 45.198.224.81 - [09/Jun/2026:00:08:28 +0200] "GET /currentsetting.htm HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 45.198.224.81 - [09/Jun/2026:00:08:28 +0200] "GET /multi_login.html HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 45.198.224.81 - [09/Jun/2026:00:08:28 +0200] "GET /axis-cgi/ show less	Web App Attack
🇩🇪 Da_tschek	2026-06-08 19:00:22 (4 days ago)	Port scanning	Port Scan Hacking
🇩🇪 ut-addicted.com	2026-06-08 14:44:42 (4 days ago)	\[Mon Jun 08 16:44:39.609307 2026\] \[:error\] \[pid 4178:tid 139785874171648\] \[client 45.198.224. ... show more \[Mon Jun 08 16:44:39.609307 2026\] \[:error\] \[pid 4178:tid 139785874171648\] \[client 45.198.224.81:46210\] \[client 45.198.224.81\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded \(Total Score: 6\)"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "78.46.187.162"\] \[uri "/"\] \[unique_id "aibVV6FnR4x0-uivaL03JgAAAQM"\] show less	Brute-Force Web App Attack
🇩🇪 sdos.es	2026-06-08 10:00:08 (4 days ago)	"Multiple/Conflicting Connection Header Data Found - keep-alive, close"	Web App Attack
🇫🇷 Hostynet	2026-06-08 06:04:12 (5 days ago)	Port scan detected by MikroTik PSD matcher (21 distinct destination ports in 3 seconds from single s ... show more Port scan detected by MikroTik PSD matcher (21 distinct destination ports in 3 seconds from single source). Source automatically blacklisted for 1 week. show less	Port Scan
🇫🇷 Hostynet	2026-06-07 05:59:12 (6 days ago)	Port scan detected by MikroTik PSD matcher (21 distinct destination ports in 3 seconds from single s ... show more Port scan detected by MikroTik PSD matcher (21 distinct destination ports in 3 seconds from single source). Source automatically blacklisted for 1 week. show less	Port Scan

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 194.187.179.100

🇬🇧 192.248.150.180

🇩🇪 165.245.240.3

🇸🇬 159.65.2.17

🇨🇳 113.57.5.139

🇰🇷 112.216.108.62

🇺🇸 66.132.186.187

🇺🇸 52.167.144.18

🇫🇮 35.228.236.90

🇨🇱 34.176.207.218

🇬🇧 193.163.125.166

🇲🇽 187.191.48.5

🇷🇺 185.182.65.219

🇨🇭 179.43.146.227

🇹🇭 110.49.6.37

🇺🇸 108.181.4.175

🇷🇴 80.94.92.182

🇧🇬 78.128.112.30

🇺🇸 54.213.79.179

🇳🇱 45.148.10.152