JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 199.45.154.49

199.45.154.49 was found in our database!

This IP was reported 3,900 times. Confidence of Abuse is 100%: ?

100%

ISP	Censys, Inc.
Usage Type	Commercial
ASN	AS398722
Hostname(s)	49.154.45.199.censys-scanner.com
Domain Name	censys.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 199.45.154.49

Whois 199.45.154.49

IP Abuse Reports for 199.45.154.49:

This IP address has been reported a total of 3,900 times from 576 distinct sources. 199.45.154.49 was first reported on March 25th 2023, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 SSP	2026-08-16 19:40:30 (1 hour ago)	Automatically generated from firewall_v2 logs on Server_ID: MIAPX1 Category: Port Scan Occurrences ... show more Automatically generated from firewall_v2 logs on Server_ID: MIAPX1 Category: Port Scan Occurrences: 21 Unique Ports: 20 Destination Ports: 10051, 7581, 9594, 13613, 8009, 17500, 53, 13457, 4085, 21, 7775, 4083, 1046, 4190, 8362, 5432, 9154, 5201, 4082, 5723 First Seen: 2026-08-10 05:00 UTC Last Seen: 2026-08-16 19:40 UTC show less	Port Scan
🇵🇱 sefinek.net	2026-08-16 19:40:23 (1 hour ago)	Honeypot hit: Empty payload (likely service probe); 8159 [1] TCP Reported by: https://github.com/sef ... show more Honeypot hit: Empty payload (likely service probe); 8159 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇳🇱 VMHeaven.io	2026-08-16 17:38:29 (3 hours ago)	Blocked by UFW [9001/tcp] Source port: 59504 TTL: 50 Packet length: 60	Port Scan
🇦🇺 LiftUp Hosting	2026-08-16 16:03:58 (4 hours ago)	Honeypot hit: Empty payload (likely service probe); 1311 [1] TCP	Port Scan
🇨🇭 pingusurmars	2026-08-16 15:55:49 (4 hours ago)	Blocked by UFW on amperetwo [8080/tcp] Source port: 43880 TTL: 49 Packet length: 60 TOS: 0x00 This ... show more Blocked by UFW on amperetwo [8080/tcp] Source port: 43880 TTL: 49 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇧🇷 diego	2026-08-16 14:49:00 (5 hours ago)	[rede-arem1] 08/16/2026-11:49:00.500848, 199.45.154.49, Protocol: 6, ET DROP Dshield Block Listed So ... show more [rede-arem1] 08/16/2026-11:49:00.500848, 199.45.154.49, Protocol: 6, ET DROP Dshield Block Listed Source group 1 show less	Hacking
🇺🇸 sefinek.net	2026-08-16 14:20:14 (6 hours ago)	Blocked by UFW on NY01 [18340/tcp] \| SPT: 52156 \| TTL: 50 \| LEN: 60 \| TOS: 0x00 • Reported by: githu ... show more Blocked by UFW on NY01 [18340/tcp] \| SPT: 52156 \| TTL: 50 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇦 celestialcity	2026-08-16 13:26:19 (7 hours ago)	Blocked by UFW on celestialcityna [8088/tcp] \| SPT: 37280 \| TTL: 44 \| LEN: 60 \| TOS: 0x08 • Reported ... show more Blocked by UFW on celestialcityna [8088/tcp] \| SPT: 37280 \| TTL: 44 \| LEN: 60 \| TOS: 0x08 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 dusfor72	2026-08-16 12:17:09 (8 hours ago)	aggressive portscan ...	Port Scan
🇮🇩 helouism	2026-08-16 10:30:48 (10 hours ago)	Fail2Ban: Blocked by UFW for port scanning.	Port Scan
🇩🇪 guldkage	2026-08-16 10:27:34 (10 hours ago)	Unauthorized connection attempt detected from IP address 199.45.154.49 to port 445 (ger-03) [m]	Brute-Force Exploited Host
Anonymous	2026-08-16 10:18:07 (10 hours ago)	199.45.154.49 - - [16/Aug/2026:12:17:52 +0200] "GET / HTTP/1.1" 400 248 "-" "Mozilla/5.0 (compatible ... show more 199.45.154.49 - - [16/Aug/2026:12:17:52 +0200] "GET / HTTP/1.1" 400 248 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" "-" 199.45.154.49 - - [16/Aug/2026:12:17:54 +0200] "PRI * HTTP/2.0" 400 150 "-" "-" "-" 199.45.154.49 - - [16/Aug/2026:12:18:07 +0200] "GET /sitemap.xml HTTP/1.1" 400 248 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" "-" ... show less	Hacking Web App Attack
🇺🇸 mutebot.net	2026-08-16 09:54:31 (10 hours ago)	SRC=199.45.154.49, PROTO=TCP, SPT=50356, DPT=21 SRC=199.45.154.49, PROTO=TCP, SPT=50356, DPT=21 SRC= ... show more SRC=199.45.154.49, PROTO=TCP, SPT=50356, DPT=21 SRC=199.45.154.49, PROTO=TCP, SPT=50356, DPT=21 SRC=199.45.154.49, PROTO=TCP, SPT=50356, DPT=21 SRC=199.45.154.49, PROTO=TCP, SPT=50356, DPT=21 show less	Port Scan
🇩🇪 Progetto1	2026-08-16 02:46:02 (17 hours ago)	Detected via HAProxyScanner at 2026-08-16 02:46:01 UTC on destination port WEB (80/443). Repeated sc ... show more Detected via HAProxyScanner at 2026-08-16 02:46:01 UTC on destination port WEB (80/443). Repeated scan / connection. show less	Port Scan Hacking Brute-Force
Anonymous	2026-08-16 01:49:24 (18 hours ago)	27 hits, proto=tcp, ports=443	Port Scan Hacking

Showing 1 to 15 of 3900 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 222.107.156.227

🇺🇦 212.3.100.186

🇺🇸 72.52.161.175

🇩🇪 69.5.169.14

🇷🇺 62.122.195.14

🇲🇽 38.254.16.62

🇧🇪 9.160.163.135

🇰🇷 218.51.148.194

🇳🇱 195.178.110.137

🇷🇴 193.32.162.84

🇺🇸 162.241.130.19

🇺🇸 136.109.230.167

🇨🇳 114.220.238.21

🇧🇪 198.235.24.229

🇳🇱 195.178.110.217

🇨🇳 180.153.236.170

🇰🇿 95.56.38.168

🇩🇪 93.214.221.98

🇩🇪 82.139.195.104

🇧🇪 35.205.133.255