JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.140.193.187

45.140.193.187 was found in our database!

This IP was reported 330 times. Confidence of Abuse is 100%: ?

100%

ISP	QNAX LTDA
Usage Type	Data Center/Web Hosting/Transit
ASN	AS268581
Domain Name	qnax.sh
Country	🇧🇷 Brazil
City	Sao Paulo, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.140.193.187

Whois 45.140.193.187

IP Abuse Reports for 45.140.193.187:

This IP address has been reported a total of 330 times from 146 distinct sources. 45.140.193.187 was first reported on February 27th 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 security.rdmc.fr	2026-07-28 14:45:22 (5 hours ago)	Port Scan Attack proto:TCP src:61000 dst:5900	Port Scan
🇫🇷 zulzeen	2026-07-28 12:55:35 (7 hours ago)	[incypit-web] Banned by Fail2ban (Jail: syswarden-portscan)	Port Scan
🇹🇭 Sawasdee	2026-07-26 07:18:04 (2 days ago)	Port Scan ...	Port Scan
🇲🇳 Public CSIRT/CC of Mongolia	2026-07-26 07:16:08 (2 days ago)	Honeypot hit: Empty payload (likely service probe); 5904 [1], 5967 [1], 5933 [1], 5945 [1], 5997 [1] ... show more Honeypot hit: Empty payload (likely service probe); 5904 [1], 5967 [1], 5933 [1], 5945 [1], 5997 [1], 5990 [1] TCP show less	Port Scan
🇧🇷 diego	2026-07-26 07:09:22 (2 days ago)	[rede-44-49] Port Scan detected from 45.140.193.187 (BR/Brazil/-). 11 hits in the last 220 seconds ... show more [rede-44-49] Port Scan detected from 45.140.193.187 (BR/Brazil/-). 11 hits in the last 220 seconds; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: Jul 26 04:07:23 kernel: Firewall: TCP_IN Blocked* IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=45.140.193.187 DST=0.0.0.x LEN=44 TOS=0x00 PREC=0x00 TTL=249 ID=16942 PROTO=TCP SPT=61000 DPT=5946 WINDOW=1025 RES=0x00 SYN URGP=0 Jul 26 04:07:34 kernel: Firewall: TCP_IN Blocked IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=45.140.193.187 DST=0.0.0.x LEN=44 TOS=0x00 PREC=0x00 TTL=249 ID=13770 PROTO=TCP SPT=61000 DPT=5938 WINDOW=1025 RES=0x00 SYN URGP=0 show less	Port Scan
🇧🇷 diego	2026-07-26 06:07:18 (2 days ago)	[rede-44-49] Port Scan detected from 45.140.193.187 (BR/Brazil/-). 11 hits in the last 106 seconds ... show more [rede-44-49] Port Scan detected from 45.140.193.187 (BR/Brazil/-). 11 hits in the last 106 seconds; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: Jul 26 03:05:31 kernel: Firewall: TCP_IN Blocked* IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=45.140.193.187 DST=0.0.0.x LEN=44 TOS=0x00 PREC=0x00 TTL=249 ID=11758 PROTO=TCP SPT=61000 DPT=5981 WINDOW=1025 RES=0x00 SYN URGP=0 Jul 26 03:05:39 kernel: Firewall: TCP_IN Blocked IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=45.140.193.187 DST=0.0.0.x LEN=44 TOS=0x00 PREC=0x00 TTL=249 ID=49739 PROTO=TCP SPT=61000 DPT=5911 WINDOW=1025 RES=0x00 SYN URGP=0 show less	Port Scan
🇺🇸 drewf.ink	2026-07-26 04:26:03 (2 days ago)	[04:26] Connected to VNC honeypot	Hacking Brute-Force
🇺🇸 drewf.ink	2026-07-26 04:09:57 (2 days ago)	[04:09] Port scanning. Port(s) scanned: TCP/5985, TCP/6000	Port Scan
🇪🇸 diegocr	2026-07-26 01:31:55 (2 days ago)	Port sweep. 5 failures on 10 minutes	Port Scan
🇫🇷 manah	2026-07-25 23:00:45 (2 days ago)	Port scan and/or repeated connection to closed ports (daily report)	Port Scan
Anonymous	2026-07-25 22:43:34 (2 days ago)	Tried our host z.	Port Scan Hacking Exploited Host
Anonymous	2026-07-25 17:30:01 (3 days ago)	Heralding honeypot: vnc on port 5900	Brute-Force
🇪🇸 masterguru	2026-07-25 11:55:13 (3 days ago)	Port Scan detected from 45.140.193.187 (BR/Brazil/-). 11 hits in the last 81 seconds (0-122)	Port Scan
🇳🇱 pearbright	2026-07-25 11:15:45 (3 days ago)	2026-07-25T10:52:21.843205+00:00 mercury.fsmail.org.uk kernel: [7333194.818601] [UFW BLOCK] IN=eth0 ... show more 2026-07-25T10:52:21.843205+00:00 mercury.fsmail.org.uk kernel: [7333194.818601] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:f8:97:2d:00:74:83:ef:6b:c8:5d:08:00 SRC=45.140.193.187 DST=37.218.240.130 LEN=44 TOS=0x00 PREC=0x00 TTL=247 ID=54246 PROTO=TCP SPT=61000 DPT=5990 WINDOW=1025 RES=0x00 SYN URGP=0 2026-07-25T10:52:41.416301+00:00 mercury.fsmail.org.uk kernel: [7333214.391332] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:f8:97:2d:00:74:83:ef:6b:c8:5d:08:00 SRC=45.140.193.187 DST=37.218.240.130 LEN=44 TOS=0x00 PREC=0x00 TTL=247 ID=38933 PROTO=TCP SPT=61000 DPT=5933 WINDOW=1025 RES=0x00 SYN URGP=0 2026-07-25T10:55:23.438166+00:00 mercury.fsmail.org.uk kernel: [7333376.414794] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:f8:97:2d:00:74:83:ef:6b:c8:5d:08:00 SRC=45.140.193.187 DST=37.218.240.130 LEN=44 TOS=0x00 PREC=0x00 TTL=247 ID=36384 PROTO=TCP SPT=61000 DPT=5910 WINDOW=1025 RES=0x00 SYN URGP=0 2026-07-25T10:57:50.128593+00:00 mercury.fsmail.org.uk kernel: [7333523.106105] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:f8: ... show less	Port Scan
🇪🇸 masterguru	2026-07-25 10:53:22 (3 days ago)	Port Scan detected from 45.140.193.187 (BR/Brazil/-). 11 hits in the last 296 seconds (0-122)	Port Scan

Showing 1 to 15 of 330 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 201.71.42.21

🇺🇸 3.85.30.112

🇺🇸 209.141.41.212

🇧🇷 205.210.31.208

🇺🇸 165.154.202.254

🇻🇳 152.32.250.21

🇺🇸 147.182.209.130

🇧🇩 103.138.26.155

🇺🇸 85.254.180.90

🇫🇮 80.66.83.43

🇺🇸 72.63.189.223

🇺🇸 66.132.172.112

🇺🇦 31.43.37.163

🇮🇪 213.233.155.150

🇧🇷 205.210.31.206

🇺🇸 189.104.240.29

🇻🇳 171.244.185.149

🇳🇱 171.22.32.152

🇺🇸 162.216.150.143

🇪🇬 156.207.19.180