45.227.103.245

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
42% Elevated
28 reports
24 reporters · latest 2 weeks ago
ISP
PRONET FIBRA OPTICA LTDA
Usage Type
Fixed Line ISP
ASN
AS271024
Domain Name
pronetgo.com.br
Country
🇧🇷 Brazil
City
Palmeiras de Goias, Goias
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
28 from 24 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇨🇿 Czechia 3 🇩🇪 Germany 3 🇦🇹 Austria 1
Most common categories Web App Attack 4 Hacking 3 Port Scan 3 Brute-Force 3 SSH 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇨🇿 Countryman
repeated unauthorized VPN login attempt, user sweep
VPN IP Hacking Brute-Force
🇨🇿 lp
Unauthorized VPN login attempts: 1 attempts were recorded from 45.227.103.245 2026-10-30T20:43:00+0100 vpn Access-Reject station: 45.227.103.245
Brute-Force Web App Attack
🇨🇿 lp
Unauthorized VPN login attempts: 1 attempts were recorded from 45.227.103.245 2026-10-30T18:45:14+0100 vpn Access-Reject station: 45.227.103.245
Brute-Force Web App Attack
🇳🇱 EGP Abuse Dept
Unauthorized connection to SSH port 22
Port Scan Hacking SSH
🇦🇹 urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
Anonymous
denied traffic to a honeypot network. destination port 22.
Port Scan Hacking
🇩🇪 FeG Deutschland
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 24
Exploited Host Web App Attack
🇩🇪 Mailguard-FRD
45.227.103.245 [29/Oct/2026:16:42:26 +0100] [redacted].dns.[redacted] "GET /xmlrpc.php HTTP/2.0" 404 170 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 ...
Bad Web Bot Web App Attack
🇫🇮 pavel Karpenko
DDoS Attack
🇮🇳 Parth Maniar
This IP address carried out 2 port scanning attempts on 16-08-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
Port Scan SSH
🇺🇸 MPL
tcp ports: 22,23 (4 or more attempts)
Port Scan
🇩🇪 D3vNu11
Level: (LOW): Known Attacker via Cowrie IOC Country: Brazil 1x -> Target Country: Ashburn, USA SSH
Hacking Brute-Force SSH
Anonymous
2026-08-15T23:39:04.960398+00:00 Germany1 sshd-session[297518]: Connection closed by 45.227.103.245 port 54166 [preauth] 2026-08-15T23:42:29.881697+00:00 Germany1 sshd-session[311060]: Connection closed by 45.227.103.245 port 54009 [preauth] ...
Brute-Force SSH
🇧🇷 noconex
Wazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 45.227.103.245
Port Scan Brute-Force SSH
🇫🇷 sthoyer.de
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇵🇹 85.242.235.251
🇸🇬 43.163.1.6
🇩🇪 17.248.182.235
🇸🇬 104.28.222.47
🇸🇬 104.28.222.46
🇬🇧 35.203.210.198
🇺🇸 20.127.235.39
🇩🇪 17.248.182.226
🇧🇷 201.15.149.254
🇪🇬 197.53.209.84
🇧🇷 187.19.252.189
🇳🇱 185.218.86.12
🇺🇸 145.132.99.22
🇻🇳 113.161.222.150
🇨🇳 113.24.225.180
🇺🇸 98.80.100.123
🇺🇸 96.38.145.151
🇫🇷 91.196.152.180
🇺🇸 66.132.172.241
🇨🇳 42.233.148.28
feedback