JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.43.63.37

45.43.63.37 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 51%: ?

51%

ISP	UCLOUD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS135377
Domain Name	ucloud.cn
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.43.63.37

Whois 45.43.63.37

IP Abuse Reports for 45.43.63.37:

This IP address has been reported a total of 14 times from 11 distinct sources. 45.43.63.37 was first reported on April 4th 2026, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 xveil	2026-07-20 12:37:52 (6 hours ago)	2026-07-20T19:37:50.139048 mail-honeypot postfix/submission/smtpd[5270]: warning: unknown[45.43.63.3 ... show more 2026-07-20T19:37:50.139048 mail-honeypot postfix/submission/smtpd[5270]: warning: unknown[45.43.63.37]: SASL PLAIN authentication failed: authentication failure ... show less	Brute-Force
Anonymous	2026-07-20 03:02:49 (15 hours ago)	IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/nginx-req-limit-exceeded; Action=ban; E ... show more IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/nginx-req-limit-exceeded; Action=ban; Events=6; Hosts=incognet.io; Paths=/?fiis=PzyxPxC2A,/?jve=dy2zIVPUbS,/?kncjud=UzEfLGL,/?uolshc=CKqc8,/actuator/health?aojmd=YOtMA0Bvaer,/default.aspx; Country=SG; ASN=135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED show less	DDoS Attack
Anonymous	2026-07-19 15:05:12 (1 day ago)	IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/appsec-vpatch; Action=ban; Events=2; Co ... show more IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/appsec-vpatch; Action=ban; Events=2; Country=SG; ASN=135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED show less	Hacking
🇮🇹 Inartis	2026-07-17 06:38:46 (3 days ago)	Jul 17 08:38:39 mail1 dovecot: imap-login: Disconnected (auth failed, 1 attempts in 9 secs): user=<g ... show more Jul 17 08:38:39 mail1 dovecot: imap-login: Disconnected (auth failed, 1 attempts in 9 secs): user=<[email protected]>, method=PLAIN, rip=45.43.63.37, lip=93.39.247.192, TLS: Connection closed, session=<ckUQzshWFJ8tKz8l> Jul 17 08:38:45 mail1 dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 8 secs): user=<[email protected]>, method=PLAIN, rip=45.43.63.37, lip=93.39.247.192, TLS, session=<pnNyzshWZLQtKz8l> ... show less	Port Scan Brute-Force
🇮🇩 sockominfo	2026-07-16 06:00:52 (4 days ago)	Zimbra: Login failures from malicious IP: 45.43.63.37. Threat Score: 6.2/10 (MEDIUM). Confidence: 40 ... show more Zimbra: Login failures from malicious IP: 45.43.63.37. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-16 05:00:54 (4 days ago)	Zimbra: Login failures from malicious IP: 45.43.63.37. Threat Score: 6.3/10 (MEDIUM). Confidence: 40 ... show more Zimbra: Login failures from malicious IP: 45.43.63.37. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
Anonymous	2026-07-16 04:30:54 (4 days ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force
🇮🇩 sockominfo	2026-07-16 04:00:09 (4 days ago)	Zimbra: Login failures from malicious IP: 45.43.63.37. Threat Score: 6/10 (MEDIUM). Reported by Tang ... show more Zimbra: Login failures from malicious IP: 45.43.63.37. Threat Score: 6/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-07-15 15:36:39 (5 days ago)	HTTP flood against /retreat-corp on Apache webserver	Brute-Force
🇺🇸 oncord	2026-07-02 10:23:53 (2 weeks ago)	Form spam	Web Spam
🇩🇪 EGP Abuse Dept	2026-06-29 07:05:56 (3 weeks ago)	Scanning for port/service exploits on tpc-004.mach3builders.nl	Port Scan Hacking
🇮🇹 VHosting	2026-06-29 05:43:01 (3 weeks ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇫🇷 MatStef132	2026-05-21 15:51:14 (1 month ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot
🇮🇳 liveaspankaj	2026-04-04 22:08:14 (3 months ago)	DDoS attack: 133 requests in 5m (GET / or repair.php).	DDoS Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇱 176.53.159.198

🇺🇸 162.217.100.196

🇳🇵 150.107.107.162

🇵🇰 119.157.134.205

🇨🇳 115.192.0.133

🇫🇷 91.231.89.30

🇫🇷 85.217.140.40

🇬🇧 45.133.173.45

🇺🇸 34.71.30.159

🇨🇳 8.152.99.77

🇷🇴 193.32.162.9

🇻🇪 190.97.237.94

🇧🇷 177.125.187.45

🇺🇸 172.217.117.4

🇺🇸 172.202.30.101

🇸🇬 135.136.42.3

🇩🇪 82.165.149.155

🇧🇷 45.183.232.168

🇺🇸 40.124.175.184

🇮🇳 34.131.116.186