5.199.169.45

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
50% Elevated
32 reports
30 reporters · latest 1 day ago
ISP
UAB Cherry Servers
Usage Type
Data Center/Web Hosting/Transit
ASN
AS16125
Hostname(s)
ip-5-199-169-45.004.ptr.cherryservers.net
Domain Name
cherryservers.com
Country
🇱🇹 Lithuania
City
Siauliai, Siauliai
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
32 from 30 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 6 🇫🇷 France 2 🇺🇸 United States of America 1
Most common categories Port Scan 6 Hacking 2 Brute-Force 2 Exploited Host 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 numberstorm
Port Scan
🇩🇪 comped
RDP brute-force / credential stuffing: 3 failed Windows logons (Event ID 4625) against 3 of our servers (NL), first seen 2026-11-07 08:55 UTC. Blocked automatically.
Brute-Force
🇫🇷 uthul
T-Pot honeypot: 71 hits on ports [3389] (automated)
Port Scan Brute-Force
🇩🇪 hotzmatic
Suricata IDS: GPL INFO MS Remote Desktop Request RDP (6 events observed on private honeypot sensor)
Hacking
🇩🇪 Mailguard-FRD
1794040431 - 11/07/2026 09:33:51 Host: 5.199.169.45/5.199.169.45 Port: 3389 TCP Blocked ...
Port Scan
🇺🇸 donarev419
Connection to port 3389 with data transfer. Data preview: 
Port Scan Hacking
🇩🇪 jann
Honeypot: connection to unused port 3389 at 2026-11-07 08:30:03 UTC. No service runs there, any connection is unsolicited scanning.
Port Scan
🇫🇷 Coco Bongo
1794040189 - 11/07/2026 09:29:49 Host: 5.199.169.45/5.199.169.45 Port: 3389 TCP Blocked ...
Port Scan
🇩🇪 guldkage
Unauthorized connection attempt detected from IP address 5.199.169.45 to port 3389 (ger-01) [RDP]
Exploited Host
Anonymous
| Multiple SQL injection attempts from same source ip.(multiple servers)
Hacking SQL Injection Web App Attack
🇺🇸 TPI-Abuse
Brute-Force Bad Web Bot Web App Attack
🇱🇹 NotACaptcha
webserver:80 [12/Jul/2024] "GET http://www.google.com/ HTTP/1.0" 200 408 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
Web App Attack
Anonymous
Aggressive web scan
Web App Attack
🇩🇪 xyz.rip
WAF Violation...
Hacking Web App Attack
🇬🇧 Kingletit
Malicious links in web form data. Port 443
Web Spam Bad Web Bot

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇷 205.210.31.167
🇺🇸 172.56.39.48
🇮🇳 171.76.110.219
🇮🇱 129.159.152.145
🇨🇳 124.31.106.94
🇳🇱 109.160.32.169
🇸🇬 107.155.56.227
🇺🇸 82.24.234.230
🇩🇪 46.101.108.169
🇺🇸 217.217.47.229
🇺🇸 217.217.47.76
🇺🇸 217.217.47.29
🇩🇪 202.61.242.125
🇧🇪 198.235.24.223
🇺🇦 176.103.15.188
🇵🇱 172.64.198.202
🇨🇦 167.99.187.245
🇺🇸 157.230.91.240
🇭🇰 119.246.189.200
🇹🇳 102.110.11.48
feedback