Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Kaunas

Region: Kaunas

Country: Republic of Lithuania

Internet Service Provider: Tele Asia Limited

Hostname: unknown

Organization: Tele Asia Limited

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
Rude login attack (3 tries in 1d)
2020-02-12 01:33:33
attackbotsspam
Rude login attack (3 tries in 1d)
2020-02-02 23:03:54
attack
2019-12-24 dovecot_login authenticator failed for \(User\) \[45.125.66.193\]: 535 Incorrect authentication data \(set_id=standby\)
2019-12-24 dovecot_login authenticator failed for \(User\) \[45.125.66.193\]: 535 Incorrect authentication data \(set_id=aileen\)
2019-12-24 dovecot_login authenticator failed for \(User\) \[45.125.66.193\]: 535 Incorrect authentication data \(set_id=columbus\)
2019-12-25 05:17:12
attackspam
Rude login attack (5 tries in 1d)
2019-12-07 02:09:38
Comments on same subnet:
IP Type Details Datetime
45.125.66.22 attackbots
(ftpd) Failed FTP login from 45.125.66.22 (LT/Republic of Lithuania/-): 5 in the last 3600 secs; Ports: 20,21; Direction: in; Trigger: LF_FTPD; Logs: Oct 14 01:10:24 hostingremote proftpd[702140]: 0.0.0.0 (45.125.66.22[45.125.66.22]) - USER akttrading (Login failed): Incorrect password
Oct 14 01:10:25 hostingremote proftpd[702141]: 0.0.0.0 (45.125.66.22[45.125.66.22]) - USER akttrading.com: no such user found from 45.125.66.22 [45.125.66.22] to 88.99.147.18:21
Oct 14 01:10:25 hostingremote proftpd[702142]: 0.0.0.0 (45.125.66.22[45.125.66.22]) - USER admin@akttrading.com: no such user found from 45.125.66.22 [45.125.66.22] to 88.99.147.18:21
Oct 14 01:10:25 hostingremote proftpd[702144]: 0.0.0.0 (45.125.66.22[45.125.66.22]) - USER akttrading@akttrading.com: no such user found from 45.125.66.22 [45.125.66.22] to 88.99.147.18:21
Oct 14 01:10:25 hostingremote proftpd[702145]: 0.0.0.0 (45.125.66.22[45.125.66.22]) - USER akttradi: no such user found from 45.125.66.22 [45.125.66.22] to 88.99.147.18:21
2020-10-14 03:56:58
45.125.66.22 attackspambots
proto=tcp  .  spt=61669  .  dpt=110  .  src=45.125.66.22  .  dst=xx.xx.4.1  .       Found on   Github Combined on 3 lists      (58)
2020-10-13 19:17:53
45.125.66.21 attackspambots
Tried our host z.
2020-09-28 02:06:03
45.125.66.21 attackbots
Tried our host z.
2020-09-27 18:10:29
45.125.66.137 attackspambots
lfd: (smtpauth) Failed SMTP AUTH login from 45.125.66.137 (mex.creativityconsultation.com): 5 in the last 3600 secs - Wed Aug 29 11:51:07 2018
2020-09-26 08:00:09
45.125.66.137 attackbots
lfd: (smtpauth) Failed SMTP AUTH login from 45.125.66.137 (mex.creativityconsultation.com): 5 in the last 3600 secs - Wed Aug 29 11:51:07 2018
2020-09-26 01:15:10
45.125.66.137 attackspambots
lfd: (smtpauth) Failed SMTP AUTH login from 45.125.66.137 (mex.creativityconsultation.com): 5 in the last 3600 secs - Wed Aug 29 11:51:07 2018
2020-09-25 16:52:35
45.125.66.26 attackbotsspam
Firewall Dropped Connection
2020-08-26 02:29:25
45.125.66.22 attackbots
(ftpd) Failed FTP login from 45.125.66.22 (LT/Republic of Lithuania/-): 10 in the last 3600 secs
2020-08-13 19:49:57
45.125.66.205 attackspam
[2020-06-17 08:05:13] NOTICE[1273][C-00001dce] chan_sip.c: Call from '' (45.125.66.205:5070) to extension '442037697412' rejected because extension not found in context 'public'.
[2020-06-17 08:05:13] SECURITY[1288] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-06-17T08:05:13.562-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="442037697412",SessionID="0x7f31c02f97a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.125.66.205/5070",ACLName="no_extension_match"
[2020-06-17 08:05:13] NOTICE[1273][C-00001dcf] chan_sip.c: Call from '' (45.125.66.205:5070) to extension '00442037697412' rejected because extension not found in context 'public'.
[2020-06-17 08:05:13] SECURITY[1288] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-06-17T08:05:13.905-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="00442037697412",SessionID="0x7f31c02f97a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.125.66.2
...
2020-06-17 20:44:21
45.125.66.204 attackbotsspam
[portscan] tcp/81 [alter-web/web-proxy]
*(RWIN=1024)(04301449)
2020-05-01 01:46:02
45.125.66.168 attack
Rude login attack (7 tries in 1d)
2020-02-16 08:11:35
45.125.66.212 attack
Rude login attack (6 tries in 1d)
2020-02-16 08:07:45
45.125.66.68 attack
Rude login attack (4 tries in 1d)
2020-02-16 08:01:43
45.125.66.231 attackbots
Rude login attack (4 tries in 1d)
2020-02-16 07:59:20
Whois info:
b
Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.125.66.193
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43821
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.125.66.193.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019042000 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Sun Apr 21 02:11:59 +08 2019
;; MSG SIZE  rcvd: 117

Host info
Host 193.66.125.45.in-addr.arpa not found: 2(SERVFAIL)
Nslookup info:
;; Got SERVFAIL reply from 67.207.67.3, trying next server
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 193.66.125.45.in-addr.arpa: SERVFAIL

Related IP info:
Related comments:
IP Type Details Datetime
185.176.27.178 attackspam
Splunk® : port scan detected:
Aug 27 01:30:58 testbed kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=82:c6:52:d1:6e:53:64:c3:d6:0b:ef:f0:08:00 SRC=185.176.27.178 DST=104.248.11.191 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=49116 PROTO=TCP SPT=57701 DPT=8718 WINDOW=1024 RES=0x00 SYN URGP=0
2019-08-27 13:48:00
212.13.103.211 attackbots
Aug 27 07:39:06 dedicated sshd[14394]: Invalid user admin from 212.13.103.211 port 54424
2019-08-27 14:00:03
188.166.72.240 attackspambots
Aug 27 05:53:11 *** sshd[27507]: User root from 188.166.72.240 not allowed because not listed in AllowUsers
2019-08-27 13:54:01
109.224.37.85 attackbots
2019-08-26 18:35:45 H=(losipallets.it) [109.224.37.85]:55183 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBLCSS)
2019-08-26 18:35:46 H=(losipallets.it) [109.224.37.85]:55183 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBLCSS)
2019-08-26 18:35:46 H=(losipallets.it) [109.224.37.85]:55183 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBLCSS)
...
2019-08-27 13:19:24
117.69.46.172 attackspam
Brute force SMTP login attempts.
2019-08-27 13:24:24
218.56.138.164 attackbotsspam
Aug 26 19:41:41 lcdev sshd\[11719\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.56.138.164  user=root
Aug 26 19:41:43 lcdev sshd\[11719\]: Failed password for root from 218.56.138.164 port 52588 ssh2
Aug 26 19:47:14 lcdev sshd\[12177\]: Invalid user i-heart from 218.56.138.164
Aug 26 19:47:14 lcdev sshd\[12177\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.56.138.164
Aug 26 19:47:16 lcdev sshd\[12177\]: Failed password for invalid user i-heart from 218.56.138.164 port 39262 ssh2
2019-08-27 13:49:42
51.38.150.109 attack
Aug 27 05:06:54 MK-Soft-VM5 sshd\[3250\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.150.109  user=sshd
Aug 27 05:06:56 MK-Soft-VM5 sshd\[3250\]: Failed password for sshd from 51.38.150.109 port 33846 ssh2
Aug 27 05:06:59 MK-Soft-VM5 sshd\[3250\]: Failed password for sshd from 51.38.150.109 port 33846 ssh2
...
2019-08-27 13:22:30
141.98.81.111 attackspambots
Invalid user admin from 141.98.81.111 port 54343
2019-08-27 13:44:36
13.57.201.35 attackspambots
2019-08-27T01:37:35.299414abusebot-3.cloudsearch.cf sshd\[22582\]: Invalid user webusers from 13.57.201.35 port 45710
2019-08-27 13:44:07
104.248.146.110 attack
Aug 27 04:55:55 MK-Soft-VM5 sshd\[3146\]: Invalid user cris from 104.248.146.110 port 46408
Aug 27 04:55:55 MK-Soft-VM5 sshd\[3146\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.146.110
Aug 27 04:55:57 MK-Soft-VM5 sshd\[3146\]: Failed password for invalid user cris from 104.248.146.110 port 46408 ssh2
...
2019-08-27 13:39:08
104.0.143.234 attackspambots
Aug 27 05:02:39 MK-Soft-VM3 sshd\[12606\]: Invalid user ashish from 104.0.143.234 port 49805
Aug 27 05:02:39 MK-Soft-VM3 sshd\[12606\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.0.143.234
Aug 27 05:02:41 MK-Soft-VM3 sshd\[12606\]: Failed password for invalid user ashish from 104.0.143.234 port 49805 ssh2
...
2019-08-27 13:29:32
80.33.245.178 attackbotsspam
Invalid user id from 80.33.245.178 port 52678
2019-08-27 13:26:40
51.158.74.14 attack
Aug 27 02:37:32 root sshd[7222]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.158.74.14 
Aug 27 02:37:34 root sshd[7222]: Failed password for invalid user jules from 51.158.74.14 port 54422 ssh2
Aug 27 02:41:39 root sshd[7310]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.158.74.14 
...
2019-08-27 13:48:36
118.25.124.210 attackbots
Aug 26 15:36:27 web9 sshd\[7454\]: Invalid user cacti from 118.25.124.210
Aug 26 15:36:27 web9 sshd\[7454\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.124.210
Aug 26 15:36:29 web9 sshd\[7454\]: Failed password for invalid user cacti from 118.25.124.210 port 33514 ssh2
Aug 26 15:40:59 web9 sshd\[8329\]: Invalid user gtekautomation from 118.25.124.210
Aug 26 15:40:59 web9 sshd\[8329\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.124.210
2019-08-27 13:53:01
59.72.109.242 attackspam
Aug 26 19:17:39 kapalua sshd\[31289\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.72.109.242  user=root
Aug 26 19:17:41 kapalua sshd\[31289\]: Failed password for root from 59.72.109.242 port 45406 ssh2
Aug 26 19:22:53 kapalua sshd\[31726\]: Invalid user plexuser from 59.72.109.242
Aug 26 19:22:53 kapalua sshd\[31726\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.72.109.242
Aug 26 19:22:55 kapalua sshd\[31726\]: Failed password for invalid user plexuser from 59.72.109.242 port 37308 ssh2
2019-08-27 13:41:22

Recently Reported IPs

178.46.23.241 193.254.231.9 60.173.105.110 98.25.157.112
82.204.141.94 190.64.68.179 128.199.98.103 116.202.25.101
45.71.130.120 151.80.143.240 45.125.66.83 180.113.143.68
78.133.99.34 103.89.91.156 115.132.40.152 154.124.56.234
151.80.140.13 185.222.209.71 87.208.250.120 192.141.163.5