JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.67.221.104

45.67.221.104 was found in our database!

This IP was reported 375 times. Confidence of Abuse is 28%: ?

28%

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi2031864.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.67.221.104

Whois 45.67.221.104

IP Abuse Reports for 45.67.221.104:

This IP address has been reported a total of 375 times from 206 distinct sources. 45.67.221.104 was first reported on January 2nd 2023, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 FeG Deutschland	2026-10-02 21:58:04 (2 weeks ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 247	Exploited Host Web App Attack
🇫🇷 masterguru	2026-10-02 21:15:28 (2 weeks ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 45.67.221.104 (DE/Germany/vmi2031864.contabose ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 45.67.221.104 (DE/Germany/vmi2031864.contaboserver.net): 1 in the last 3600 secs (0-196) show less	Hacking
🇧🇷 cibersecoptidata	2026-09-24 02:53:29 (3 weeks ago)	Port scan / Unsolicited traffic.	Port Scan
🇮🇪 RoboSOC	2026-09-17 18:31:24 (4 weeks ago)	React Server Components Remote Code Execution Vulnerability, PTR: vmi2031864.contaboserver.net.	Hacking
🇫🇮 as211431.net	2026-09-17 09:22:32 (1 month ago)	Triggered Cloudflare WAF (firewallCustom) from FR. Action taken: BLOCK Protocol: HTTP/1.1 (POST meth ... show more Triggered Cloudflare WAF (firewallCustom) from FR. Action taken: BLOCK Protocol: HTTP/1.1 (POST method) Endpoint: / UA: Mozilla/5.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇭 SOC [GOLINE SA]	2026-09-16 18:01:54 (1 month ago)	FortiGate IPS: React.Server.Components.react-flight.Remote.Code.Execution (severity high)	Hacking
🇩🇪 Shivakumar Gurumurthy	2023-02-11 18:34:30 (3 years ago)	2023-01-30 14:19:11,930 fail2ban.actions [336505]: NOTICE [sshd] Ban 45.67.221.104 2023-01-3 ... show more 2023-01-30 14:19:11,930 fail2ban.actions [336505]: NOTICE [sshd] Ban 45.67.221.104 2023-01-30 14:19:11,930 fail2ban.actions [336505]: NOTICE [sshd] Ban 45.67.221.104 2023-01-30 14:19:11,930 fail2ban.actions [336505]: NOTICE [sshd] Ban 45.67.221.104 ... show less	Brute-Force SSH
🇯🇵 zwh	2023-02-01 18:39:56 (3 years ago)	SSH Brute-Force	Brute-Force SSH
🇫🇷 LTM	2023-02-01 12:20:01 (3 years ago)	SSH - Attempt to login using invalid or illegal credential	Port Scan Brute-Force SSH
🇺🇸 Nepgfurmixpro	2023-02-01 04:41:43 (3 years ago)	SSH Login Attack	Port Scan Brute-Force SSH
🇨🇦 paltaman	2023-02-01 02:19:59 (3 years ago)	2023-01-31T23:18:39.945786devel sshd[8550]: pam_unix(sshd:auth): authentication failure; logname= ui ... show more 2023-01-31T23:18:39.945786devel sshd[8550]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=vmi1133620.contaboserver.net user=root 2023-01-31T23:18:42.173284devel sshd[8550]: Failed password for root from 45.67.221.104 port 39218 ssh2 2023-01-31T23:19:58.451594devel sshd[10301]: Invalid user hxht from 45.67.221.104 port 39364 show less	Brute-Force SSH
🇩🇪 ps-center	2023-02-01 02:19:07 (3 years ago)	HHV: Brutforce ssh Login	Brute-Force
🇨🇭 ALPHANET	2023-02-01 00:05:00 (3 years ago)	Invalid user XXX from 45.67.221.104 port 37746	Brute-Force SSH
🇰🇷 edisonjwa	2023-01-31 21:43:34 (3 years ago)	2023-02-01T06:42:08.074655debian sshd[888641]: pam_unix(sshd:auth): authentication failure; logname= ... show more 2023-02-01T06:42:08.074655debian sshd[888641]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.67.221.104 user=root 2023-02-01T06:42:10.643316debian sshd[888641]: Failed password for root from 45.67.221.104 port 35432 ssh2 2023-02-01T06:43:31.962388debian sshd[888667]: Invalid user dev from 45.67.221.104 port 35566 2023-02-01T06:43:31.965476debian sshd[888667]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.67.221.104 2023-02-01T06:43:33.927545debian sshd[888667]: Failed password for invalid user dev from 45.67.221.104 port 35566 ssh2 ... show less	Port Scan Brute-Force SSH
🇺🇸 tradenet	2023-01-31 19:59:54 (3 years ago)	2023-01-31T13:57:04.180855server2.ebullit.com sshd[10111]: Failed password for root from 45.67.221.1 ... show more 2023-01-31T13:57:04.180855server2.ebullit.com sshd[10111]: Failed password for root from 45.67.221.104 port 51598 ssh2 2023-01-31T13:58:26.014429server2.ebullit.com sshd[11367]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=vmi1133620.contaboserver.net user=root 2023-01-31T13:58:28.390690server2.ebullit.com sshd[11367]: Failed password for root from 45.67.221.104 port 51740 ssh2 2023-01-31T13:59:51.714000server2.ebullit.com sshd[12572]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=vmi1133620.contaboserver.net user=root 2023-01-31T13:59:53.453179server2.ebullit.com sshd[12572]: Failed password for root from 45.67.221.104 port 51882 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 375 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 2402:800:61ac:d171:5980:70f1:7e2d:d6a1

🇺🇸 216.25.89.99

🇲🇽 187.216.224.85

🇺🇸 172.252.122.156

🇺🇸 172.121.76.12

🇺🇸 156.244.151.44

🇮🇩 103.160.205.37

🇴🇲 37.40.228.22

🇺🇸 35.245.16.101

🇺🇸 216.25.89.90

🇮🇩 163.7.6.114

🇳🇱 152.42.143.147

🇮🇹 101.56.192.189

🇺🇸 73.43.2.186

🇮🇹 64.190.76.14

🇳🇱 45.148.10.188

🇺🇸 45.61.187.220

🇺🇸 20.127.210.132

🇮🇳 8.231.96.172

🇺🇸 216.25.89.89