JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

45.9.149.154

Neutral Activity

Abuse confidence score ?

0% Low Risk

176 reports

76 reporters · latest 3 months ago

ISP	Nice IT Customers Network
Usage Type	Data Center/Web Hosting/Transit
ASN	AS49447
Domain Name	as49447.net
Country	🇳🇱 Netherlands
City	Dronten, Flevoland

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

45.9.149.154 has been reported 176 times. The most recent report is from 3 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 45.9.149.154

Export CSV

This IP address has been reported a total of 176 times from 76 distinct sources. 45.9.149.154 was first reported on June 22nd 2024, and the most recent report was 3 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-06-26 05:53:22 (3 months ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇩🇪 Luhte	2026-05-26 18:21:48 (4 months ago)	Unsolicited TCP connection from 45.9.149.154 to port 0 at 2026-05-26T18:21:47Z. Source IP completed ... show more Unsolicited TCP connection from 45.9.149.154 to port 0 at 2026-05-26T18:21:47Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring. show less	Port Scan Hacking
🇩🇪 Luhte	2026-05-26 12:35:29 (4 months ago)	Unsolicited TCP connection from 45.9.149.154 to port 0 at 2026-05-26T12:35:29Z. Source IP completed ... show more Unsolicited TCP connection from 45.9.149.154 to port 0 at 2026-05-26T12:35:29Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring. show less	Port Scan Hacking
🇩🇪 Luhte	2026-05-25 18:53:51 (4 months ago)	Unsolicited TCP connection from 45.9.149.154 to port 0 at 2026-05-25T18:53:51Z. Source IP completed ... show more Unsolicited TCP connection from 45.9.149.154 to port 0 at 2026-05-25T18:53:51Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring. show less	Port Scan Hacking
🇩🇪 Luhte	2026-05-25 10:29:16 (4 months ago)	Unsolicited TCP connection from 45.9.149.154 to port 0 at 2026-05-25T10:29:15Z. Source IP completed ... show more Unsolicited TCP connection from 45.9.149.154 to port 0 at 2026-05-25T10:29:15Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring. show less	Port Scan Hacking
🇩🇪 keep_out	2026-05-19 15:35:04 (4 months ago)	traefik ...	Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-05-18 09:44:55 (4 months ago)	Multiple WAF Violations	Web App Attack
🇦🇷 Bruno	2026-05-14 23:17:50 (5 months ago)	Port Scanner: 45.9.149.154	Port Scan
🇹🇷 0xi	2026-05-13 11:00:45 (5 months ago)	Malicious scanning and attack activity detected (24 attempts). Targeted ports: 2222, 2345, 11211. Tr ... show more Malicious scanning and attack activity detected (24 attempts). Targeted ports: 2222, 2345, 11211. Triggered sensors: P0f, Honeytrap, Suricata. Observed via distributed honeypot network. show less	Port Scan
🇺🇸 donarev419	2026-05-12 02:15:32 (5 months ago)	Connection to port 8888 with data transfer. Data preview: GET /debug/pprof/symbol HTTP/1.1 Host: 67 ... show more Connection to port 8888 with data transfer. Data preview: GET /debug/pprof/symbol HTTP/1.1 Host: 67.215.244.172:8888 User-Agent: Mozilla/5.0 (compatible; fo show less	Port Scan Hacking
🇺🇸 donarev419	2026-05-12 01:51:50 (5 months ago)	Port scan detected on port 9200 (connection without data transfer)	Port Scan
🇩🇰 castipo	2026-05-12 01:47:37 (5 months ago)	nginx-env :: 45.9.149.154 - - [12/May/2026:08:47:36 +0700] "GET /cgi-bin/[host] HTTP/1.1" 301 162 "- ... show more nginx-env :: 45.9.149.154 - - [12/May/2026:08:47:36 +0700] "GET /cgi-bin/[host] HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; fofa/1.0; +https://[host]/)" host="[ip]" cfip="-" cfray="-" 45.9.149.154 - - [12/May/2026:08:47:36 +0700] "GET /cgi-bin/welcome HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; fofa/1.0; +https://[host]/)" host="[ip]" cfip="-" cfray="-" show less	IoT Targeted Web App Attack Port Scan Hacking
🇫🇮 kumiko	2026-05-11 15:21:24 (5 months ago)	[2026-05-11 18:21:23] Unauthorized port scan/probing (3 times on ports 1646, 2000, 8000) Blocked by ... show more [2026-05-11 18:21:23] Unauthorized port scan/probing (3 times on ports 1646, 2000, 8000) Blocked by UFW show less	Port Scan
🇫🇮 kumiko	2026-05-11 14:59:48 (5 months ago)	[2026-05-11 17:59:47] Unauthorized port scan/probing (3 times on ports 5001, 6000, 8082) Blocked by ... show more [2026-05-11 17:59:47] Unauthorized port scan/probing (3 times on ports 5001, 6000, 8082) Blocked by UFW show less	Port Scan
🇸🇰 GOVCERT	2026-05-11 01:35:26 (5 months ago)	Excessive Firewall Denies	DDoS Attack Web Spam

Showing 1 to 15 of 176 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇭 209.99.190.215

🇵🇭 192.133.66.182

🇩🇪 185.30.32.176

🇺🇸 163.192.127.54

🇺🇸 147.185.132.9

🇷🇺 109.184.79.213

🇮🇩 69.5.20.205

🇲🇾 47.250.10.55

🇬🇧 35.203.211.23

🇨🇦 192.65.20.6

🇰🇷 175.201.85.209

🇹🇼 125.229.194.81

🇨🇳 115.200.4.123

🇩🇪 57.129.120.143

🇩🇪 47.245.141.153

🇯🇵 47.245.38.88

🇷🇴 2.57.121.112

🇯🇲 208.163.32.33

🇺🇸 170.106.153.232

🇳🇱 109.160.32.126