Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: ChinaNet Ningxia Province Network

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attackspam
Unauthorized connection attempt detected from IP address 106.45.0.45 to port 8000 [J]
2020-01-27 17:38:30
Comments on same subnet:
IP Type Details Datetime
106.45.0.198 attack
Detected by ModSecurity. Host header is an IP address, Request URI: /
2020-08-07 18:17:55
106.45.0.182 attackspam
Unauthorized connection attempt detected from IP address 106.45.0.182 to port 443
2020-07-25 20:37:03
106.45.0.43 attackspam
Unauthorized connection attempt detected from IP address 106.45.0.43 to port 8081 [J]
2020-03-02 20:37:01
106.45.0.168 attackbots
Unauthorized connection attempt detected from IP address 106.45.0.168 to port 8899 [J]
2020-03-02 17:15:57
106.45.0.111 attackbotsspam
Unauthorized connection attempt detected from IP address 106.45.0.111 to port 22 [J]
2020-03-02 15:06:55
106.45.0.255 attack
Unauthorized connection attempt detected from IP address 106.45.0.255 to port 22 [J]
2020-03-02 15:06:35
106.45.0.52 attack
Unauthorized connection attempt detected from IP address 106.45.0.52 to port 443 [J]
2020-02-05 09:42:09
106.45.0.64 attackbots
Unauthorized connection attempt detected from IP address 106.45.0.64 to port 8089 [T]
2020-01-29 17:45:51
106.45.0.208 attack
Unauthorized connection attempt detected from IP address 106.45.0.208 to port 8081 [T]
2020-01-29 17:45:22
106.45.0.171 attack
Unauthorized connection attempt detected from IP address 106.45.0.171 to port 8888 [J]
2020-01-29 10:31:04
106.45.0.112 attackspam
Unauthorized connection attempt detected from IP address 106.45.0.112 to port 8000 [J]
2020-01-27 14:48:50
106.45.0.56 attackspam
Unauthorized connection attempt detected from IP address 106.45.0.56 to port 8081 [J]
2020-01-27 00:51:09
106.45.0.77 attackbots
Unauthorized connection attempt detected from IP address 106.45.0.77 to port 8081 [J]
2020-01-27 00:19:12
106.45.0.97 attackbots
Unauthorized connection attempt detected from IP address 106.45.0.97 to port 80 [J]
2020-01-20 20:37:58
106.45.0.202 attack
Unauthorized connection attempt detected from IP address 106.45.0.202 to port 80 [J]
2020-01-19 14:48:25
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.45.0.45
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17500
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.45.0.45.			IN	A

;; AUTHORITY SECTION:
.			401	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020012700 1800 900 604800 86400

;; Query time: 106 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jan 27 17:38:24 CST 2020
;; MSG SIZE  rcvd: 115
Host info
Host 45.0.45.106.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 45.0.45.106.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
45.178.99.12 attackbots
Sep  4 18:53:37 mellenthin postfix/smtpd[29055]: NOQUEUE: reject: RCPT from unknown[45.178.99.12]: 554 5.7.1 Service unavailable; Client host [45.178.99.12] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/45.178.99.12; from= to= proto=ESMTP helo=<[45.178.99.12]>
2020-09-05 04:58:24
218.92.0.211 attackspambots
Sep  4 21:29:29 onepixel sshd[1781119]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.211  user=root
Sep  4 21:29:31 onepixel sshd[1781119]: Failed password for root from 218.92.0.211 port 13946 ssh2
Sep  4 21:29:29 onepixel sshd[1781119]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.211  user=root
Sep  4 21:29:31 onepixel sshd[1781119]: Failed password for root from 218.92.0.211 port 13946 ssh2
Sep  4 21:29:35 onepixel sshd[1781119]: Failed password for root from 218.92.0.211 port 13946 ssh2
2020-09-05 05:32:22
121.160.139.118 attackspambots
Invalid user wanglj from 121.160.139.118 port 48152
2020-09-05 05:26:25
49.232.86.244 attack
Too many connections or unauthorized access detected from Arctic banned ip
2020-09-05 05:22:47
82.221.131.5 attackspambots
Unauthorised connection attempt detected at AUO NODE 4. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)
2020-09-05 04:58:07
122.51.80.81 attackspambots
Sep  4 18:36:50 rush sshd[19946]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.80.81
Sep  4 18:36:51 rush sshd[19946]: Failed password for invalid user user from 122.51.80.81 port 43052 ssh2
Sep  4 18:38:36 rush sshd[20019]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.80.81
...
2020-09-05 05:27:35
24.76.121.101 attackspam
Honeypot attack, port: 5555, PTR: S0106889e681b91c0.wp.shawcable.net.
2020-09-05 05:26:06
144.217.19.8 attack
Sep  4 18:53:29 ns381471 sshd[27088]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.217.19.8
Sep  4 18:53:31 ns381471 sshd[27088]: Failed password for invalid user darwin from 144.217.19.8 port 20960 ssh2
2020-09-05 05:01:05
200.46.205.136 attack
200.46.205.136 - - [04/Sep/2020:17:53:20 +0100] "POST /wp-login.php HTTP/1.1" 200 2345 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
200.46.205.136 - - [04/Sep/2020:17:53:22 +0100] "POST /wp-login.php HTTP/1.1" 200 2350 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
200.46.205.136 - - [04/Sep/2020:17:53:23 +0100] "POST /xmlrpc.php HTTP/1.1" 200 247 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-09-05 05:08:02
182.23.67.49 attackbots
Sep  4 18:47:09 lnxmysql61 sshd[9690]: Failed password for root from 182.23.67.49 port 32894 ssh2
Sep  4 18:47:09 lnxmysql61 sshd[9690]: Failed password for root from 182.23.67.49 port 32894 ssh2
2020-09-05 05:24:53
193.227.16.35 attack
1 attempts against mh-modsecurity-ban on comet
2020-09-05 05:23:35
45.142.120.121 attack
Sep  4 22:14:16 gospond postfix/smtpd[3206]: warning: unknown[45.142.120.121]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2020-09-05 05:20:21
212.70.149.20 attackspam
Rude login attack (2789 tries in 1d)
2020-09-05 05:16:58
112.17.182.19 attackspam
Sep  4 18:14:56 rush sshd[19115]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.17.182.19
Sep  4 18:14:58 rush sshd[19115]: Failed password for invalid user test5 from 112.17.182.19 port 36035 ssh2
Sep  4 18:17:12 rush sshd[19152]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.17.182.19
...
2020-09-05 04:57:36
187.10.231.238 attackspam
Sep  4 20:09:33 ns382633 sshd\[25436\]: Invalid user test from 187.10.231.238 port 54266
Sep  4 20:09:33 ns382633 sshd\[25436\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.10.231.238
Sep  4 20:09:34 ns382633 sshd\[25436\]: Failed password for invalid user test from 187.10.231.238 port 54266 ssh2
Sep  4 20:19:28 ns382633 sshd\[27157\]: Invalid user ec2-user from 187.10.231.238 port 55164
Sep  4 20:19:28 ns382633 sshd\[27157\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.10.231.238
2020-09-05 05:07:03

Recently Reported IPs

178.252.170.194 178.136.215.33 44.234.140.15 178.22.117.102
177.158.252.42 177.76.207.217 177.63.222.73 252.152.18.102
175.211.38.245 175.184.166.200 175.184.164.67 54.246.124.172
171.12.10.32 163.53.83.185 159.203.133.182 5.238.212.237
223.18.238.162 205.206.50.222 236.157.47.15 31.108.140.183