This IP address has been reported a total of
6
times from
5 distinct
sources.
45.61.163.210 was first reported on
October 23rd 2026 , and the most recent report was
1 day ago France
with 4
reports;
Austria
with 1
report;
Poland
with 1
report.
The most common categories in these recent reports were:
Port Scan
5
times;
Web App Attack
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇵🇱
bart@
2026-10-24 00:44:17
(1 day ago)
Automated scan detection against redacted protected targets. Hits=1; port 443 proto 6 detection dark ...
show more
Automated scan detection against redacted protected targets. Hits=1; port 443 proto 6 detection dark_ip
show less
Port Scan
🇫🇷
sbocquet
2026-10-24 00:24:23
(1 day ago)
Port 443 scanned from 45.61.163.210:45995.
Port Scan
🇫🇷
EvoX
2026-10-23 22:17:21
(1 day ago)
🛡️ Honeypot [bsts-tpot-sensor]: Unauthorized traffic (247 bytes of payload); 8000 [4], 8888 [4] TCP
Port Scan
🇦🇹
hxsain
2026-10-23 16:34:13
(1 day ago)
Blocked by UFW on fr2 [8000/tcp] | SPT: 53248 | TTL: 237 | LEN: 44 | TOS: 0x00 • Reported by: github ...
show more
Blocked by UFW on fr2 [8000/tcp] | SPT: 53248 | TTL: 237 | LEN: 44 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇫🇷
sthoyer.de
2026-10-23 11:17:29
(1 day ago)
45.61.163.210 - - [23/Oct/2026:13:17:28 +0200] "GET /owa/auth/logon.aspx HTTP/1.1" 302 794 "-" "Mozi ...
show more
45.61.163.210 - - [23/Oct/2026:13:17:28 +0200] "GET /owa/auth/logon.aspx HTTP/1.1" 302 794 "-" "Mozilla/5.0 scanfleet/1.0"
45.61.163.210 - - [23/Oct/2026:13:17:28 +0200] "GET /global-protect/prelogin.esp HTTP/1.1" 302 794 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
45.61.163.210 - - [23/Oct/2026:13:17:28 +0200] "GET /owa/auth/logon.aspx HTTP/1.1" 302 794 "-" "Mozilla/5.0 scanfleet/1.0"
...
show less
Web App Attack
🇫🇷
sthoyer.de
2026-10-23 10:55:41
(1 day ago)
Oct 23 12:55:39 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd: ...
show more
Oct 23 12:55:39 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=45.61.163.210 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x20 TTL=56 ID=44500 DF PROTO=TCP SPT=37940 DPT=8080 WINDOW=64240 RES=0x00 SYN URGP=0
Oct 23 12:55:39 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=45.61.163.210 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x20 TTL=56 ID=53545 DF PROTO=TCP SPT=32842 DPT=8888 WINDOW=64240 RES=0x00 SYN URGP=0
Oct 23 12:55:39 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=45.61.163.210 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x20 TTL=56 ID=38468 DF PROTO=TCP SPT=41744 DPT=8443 WINDOW=64240 RES=0x00 SYN URGP=0
Oct 23 12:55:39 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=45.61.163.210 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x20 TTL=56 ID=2409 DF PROTO=TCP SPT=52752 DPT=8000 WINDOW=
...
show less
Port Scan
Showing 1 to
6
of 6 reports
