Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Russian Federation

Internet Service Provider: Kraspod LLC

Hostname: unknown

Organization: unknown

Usage Type: Commercial

Comments:
Type Details Datetime
attack
Unauthorized connection attempt from IP address 192.145.13.16 on Port 445(SMB)
2020-09-23 22:43:25
attackbots
Unauthorized connection attempt from IP address 192.145.13.16 on Port 445(SMB)
2020-09-23 15:00:37
attackspambots
Unauthorized connection attempt from IP address 192.145.13.16 on Port 445(SMB)
2020-09-23 06:52:14
Comments on same subnet:
IP Type Details Datetime
192.145.13.139 attackspam
Unauthorized connection attempt detected from IP address 192.145.13.139 to port 445 [T]
2020-08-10 19:51:45
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 192.145.13.16
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58592
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;192.145.13.16.			IN	A

;; AUTHORITY SECTION:
.			492	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020092202 1800 900 604800 86400

;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Sep 23 06:52:09 CST 2020
;; MSG SIZE  rcvd: 117
Host info
Host 16.13.145.192.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		100.100.2.138
Address:	100.100.2.138#53

** server can't find 16.13.145.192.in-addr.arpa: NXDOMAIN

Related IP info:
Related comments:
IP Type Details Datetime
51.68.17.217 attackbots
445/tcp
[2019-07-05]1pkt
2019-07-05 12:21:13
218.92.0.188 attack
Jul  5 03:50:09 *** sshd[6685]: User root from 218.92.0.188 not allowed because not listed in AllowUsers
2019-07-05 12:04:44
92.45.61.74 attackbotsspam
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-04 22:19:25,976 INFO [amun_request_handler] PortScan Detected on Port: 445 (92.45.61.74)
2019-07-05 11:38:25
210.211.96.112 attack
Jul  5 03:05:49 MK-Soft-VM5 sshd\[18920\]: Invalid user cron from 210.211.96.112 port 33624
Jul  5 03:05:49 MK-Soft-VM5 sshd\[18920\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.211.96.112
Jul  5 03:05:51 MK-Soft-VM5 sshd\[18920\]: Failed password for invalid user cron from 210.211.96.112 port 33624 ssh2
...
2019-07-05 11:35:52
116.62.217.151 attackbots
Port scan on 1 port(s): 53
2019-07-05 11:41:15
185.48.149.114 attackbotsspam
Jul  5 05:22:13 lnxmail61 sshd[17044]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.48.149.114
2019-07-05 12:07:52
59.99.127.157 attackspam
" "
2019-07-05 12:26:54
45.65.220.171 attackbots
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-04 21:18:51,075 INFO [amun_request_handler] PortScan Detected on Port: 445 (45.65.220.171)
2019-07-05 11:55:04
138.197.162.28 attackbotsspam
Jul  5 03:51:54 hosting sshd[14199]: Invalid user minecraft from 138.197.162.28 port 46454
...
2019-07-05 11:43:36
84.58.57.197 attackspam
Jul  5 00:48:58 ArkNodeAT sshd\[12039\]: Invalid user pi from 84.58.57.197
Jul  5 00:48:58 ArkNodeAT sshd\[12039\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.58.57.197
Jul  5 00:48:59 ArkNodeAT sshd\[12041\]: Invalid user pi from 84.58.57.197
2019-07-05 12:26:02
92.118.160.53 attackbotsspam
firewall-block, port(s): 389/tcp
2019-07-05 11:47:59
218.92.0.173 attack
2019-06-05T00:39:22.609176wiz-ks3 sshd[9901]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.173  user=root
2019-06-05T00:39:24.553359wiz-ks3 sshd[9901]: Failed password for root from 218.92.0.173 port 25259 ssh2
2019-06-05T00:39:28.039159wiz-ks3 sshd[9901]: Failed password for root from 218.92.0.173 port 25259 ssh2
2019-06-05T00:39:22.609176wiz-ks3 sshd[9901]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.173  user=root
2019-06-05T00:39:24.553359wiz-ks3 sshd[9901]: Failed password for root from 218.92.0.173 port 25259 ssh2
2019-06-05T00:39:28.039159wiz-ks3 sshd[9901]: Failed password for root from 218.92.0.173 port 25259 ssh2
2019-06-05T00:39:22.609176wiz-ks3 sshd[9901]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.173  user=root
2019-06-05T00:39:24.553359wiz-ks3 sshd[9901]: Failed password for root from 218.92.0.173 port 25259 ssh2
2019-06-05T00:39:28.03915
2019-07-05 12:05:39
218.92.0.141 attackbotsspam
Jul  5 11:54:47 martinbaileyphotography sshd\[16843\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.141  user=root
Jul  5 11:54:49 martinbaileyphotography sshd\[16843\]: Failed password for root from 218.92.0.141 port 57199 ssh2
Jul  5 11:54:52 martinbaileyphotography sshd\[16843\]: Failed password for root from 218.92.0.141 port 57199 ssh2
Jul  5 11:54:55 martinbaileyphotography sshd\[16843\]: Failed password for root from 218.92.0.141 port 57199 ssh2
Jul  5 11:54:58 martinbaileyphotography sshd\[16843\]: Failed password for root from 218.92.0.141 port 57199 ssh2
...
2019-07-05 12:02:27
103.211.50.3 attackspam
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-04 23:45:43,317 INFO [amun_request_handler] PortScan Detected on Port: 445 (103.211.50.3)
2019-07-05 12:19:32
118.25.208.97 attackspam
Jul  4 23:24:58 localhost sshd[3934]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.208.97
Jul  4 23:25:00 localhost sshd[3934]: Failed password for invalid user lottis from 118.25.208.97 port 55318 ssh2
Jul  4 23:35:33 localhost sshd[4045]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.208.97
Jul  4 23:35:36 localhost sshd[4045]: Failed password for invalid user testftp from 118.25.208.97 port 40364 ssh2
...
2019-07-05 11:42:33

Recently Reported IPs

106.234.200.68 161.35.30.208 181.37.98.170 112.140.185.246
87.97.196.165 61.53.117.129 210.209.197.219 17.75.216.201
23.133.1.76 150.242.21.130 213.5.134.14 77.21.164.14
141.10.69.232 5.97.185.184 91.140.23.178 191.102.198.13
3.49.150.249 36.226.19.164 190.152.213.126 68.175.59.13