Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Germany

Internet Service Provider: IPv4 Superhub Limited

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackbots
May 22 15:55:09 nextcloud sshd\[26114\]: Invalid user agt from 45.134.147.80
May 22 15:55:09 nextcloud sshd\[26114\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.134.147.80
May 22 15:55:11 nextcloud sshd\[26114\]: Failed password for invalid user agt from 45.134.147.80 port 46030 ssh2
2020-05-23 02:42:43
Comments on same subnet:
IP Type Details Datetime
45.134.147.120 attackbots
Jul 12 11:04:51 XXX sshd[53636]: Invalid user zhangdy from 45.134.147.120 port 51732
2020-07-12 20:10:34
45.134.147.70 attackbotsspam
Jul  9 16:31:50 server1 sshd\[20346\]: Failed password for invalid user ysw from 45.134.147.70 port 48702 ssh2
Jul  9 16:36:07 server1 sshd\[21804\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.134.147.70  user=mail
Jul  9 16:36:08 server1 sshd\[21804\]: Failed password for mail from 45.134.147.70 port 46050 ssh2
Jul  9 16:40:31 server1 sshd\[23238\]: Invalid user d from 45.134.147.70
Jul  9 16:40:31 server1 sshd\[23238\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.134.147.70 
...
2020-07-10 06:45:29
45.134.147.120 attack
'Fail2Ban'
2020-07-08 12:05:10
45.134.147.120 attack
Jun 29 06:53:33 smtp sshd[8930]: Failed password for r.r from 45.134.147.120 port 54210 ssh2
Jun 29 07:08:23 smtp sshd[11081]: Invalid user kelvin from 45.134.147.120
Jun 29 07:08:25 smtp sshd[11081]: Failed password for invalid user kelvin from 45.134.147.120 port 48080 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=45.134.147.120
2020-07-06 07:40:43
45.134.147.182 attack
Invalid user oracle from 45.134.147.182 port 50586
2020-07-01 12:02:26
45.134.147.120 attackbotsspam
21 attempts against mh-ssh on water
2020-06-29 16:54:34
45.134.147.104 attackbots
2020-04-16T08:11:00.240314mail.thespaminator.com sshd[19810]: Invalid user tg from 45.134.147.104 port 38614
2020-04-16T08:11:02.595786mail.thespaminator.com sshd[19810]: Failed password for invalid user tg from 45.134.147.104 port 38614 ssh2
...
2020-04-17 01:30:26
45.134.147.83 attackbots
Mar 20 08:04:50 vserver sshd\[29267\]: Invalid user ftp_test from 45.134.147.83Mar 20 08:04:52 vserver sshd\[29267\]: Failed password for invalid user ftp_test from 45.134.147.83 port 46958 ssh2Mar 20 08:13:52 vserver sshd\[29417\]: Invalid user kiban01 from 45.134.147.83Mar 20 08:13:53 vserver sshd\[29417\]: Failed password for invalid user kiban01 from 45.134.147.83 port 53682 ssh2
...
2020-03-20 15:24:10
45.134.147.249 attackspam
Mar 11 17:37:36 josie sshd[31987]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.134.147.249  user=r.r
Mar 11 17:37:39 josie sshd[31987]: Failed password for r.r from 45.134.147.249 port 36448 ssh2
Mar 11 17:37:39 josie sshd[31988]: Received disconnect from 45.134.147.249: 11: Bye Bye
Mar 11 17:45:11 josie sshd[927]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.134.147.249  user=r.r
Mar 11 17:45:14 josie sshd[927]: Failed password for r.r from 45.134.147.249 port 44058 ssh2
Mar 11 17:45:14 josie sshd[929]: Received disconnect from 45.134.147.249: 11: Bye Bye
Mar 11 17:48:01 josie sshd[1402]: Invalid user 1 from 45.134.147.249
Mar 11 17:48:01 josie sshd[1402]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.134.147.249 
Mar 11 17:48:03 josie sshd[1402]: Failed password for invalid user 1 from 45.134.147.249 port 26760 ssh2
Mar 11 17:48:03 ........
-------------------------------
2020-03-13 17:59:56
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.134.147.80
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33632
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.134.147.80.			IN	A

;; AUTHORITY SECTION:
.			536	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020052201 1800 900 604800 86400

;; Query time: 149 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat May 23 02:42:40 CST 2020
;; MSG SIZE  rcvd: 117
Host info
Host 80.147.134.45.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 80.147.134.45.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
93.72.114.171 attackbotsspam
[Sun Sep 06 21:11:18 2020] - Syn Flood From IP: 93.72.114.171 Port: 53999
2020-09-07 08:20:58
49.88.112.69 attackspambots
Sep  7 00:59:52 server sshd[33345]: Failed password for root from 49.88.112.69 port 32205 ssh2
Sep  7 00:59:54 server sshd[33345]: Failed password for root from 49.88.112.69 port 32205 ssh2
Sep  7 02:00:08 server sshd[61797]: Failed password for root from 49.88.112.69 port 61967 ssh2
2020-09-07 08:29:57
167.248.133.20 attackspam
 TCP (SYN) 167.248.133.20:50945 -> port 1311, len 44
2020-09-07 08:41:00
104.131.15.189 attack
2020-09-07T00:30:29.676854amanda2.illicoweb.com sshd\[46851\]: Invalid user admin from 104.131.15.189 port 51793
2020-09-07T00:30:29.679729amanda2.illicoweb.com sshd\[46851\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=gcore.io
2020-09-07T00:30:31.445078amanda2.illicoweb.com sshd\[46851\]: Failed password for invalid user admin from 104.131.15.189 port 51793 ssh2
2020-09-07T00:37:06.502877amanda2.illicoweb.com sshd\[47293\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=gcore.io  user=root
2020-09-07T00:37:08.769963amanda2.illicoweb.com sshd\[47293\]: Failed password for root from 104.131.15.189 port 57667 ssh2
...
2020-09-07 08:48:22
121.101.132.241 attack
Lines containing failures of 121.101.132.241 (max 1000)
Sep  5 19:14:34 localhost sshd[25609]: User r.r from 121.101.132.241 not allowed because listed in DenyUsers
Sep  5 19:14:34 localhost sshd[25609]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.101.132.241  user=r.r
Sep  5 19:14:35 localhost sshd[25609]: Failed password for invalid user r.r from 121.101.132.241 port 41154 ssh2
Sep  5 19:14:36 localhost sshd[25609]: Received disconnect from 121.101.132.241 port 41154:11: Bye Bye [preauth]
Sep  5 19:14:36 localhost sshd[25609]: Disconnected from invalid user r.r 121.101.132.241 port 41154 [preauth]
Sep  5 19:20:14 localhost sshd[28703]: User r.r from 121.101.132.241 not allowed because listed in DenyUsers
Sep  5 19:20:14 localhost sshd[28703]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.101.132.241  user=r.r


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=121.101
2020-09-07 08:12:48
106.13.190.84 attackspambots
Sep  7 00:33:33 game-panel sshd[4839]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.190.84
Sep  7 00:33:35 game-panel sshd[4839]: Failed password for invalid user arijit from 106.13.190.84 port 59224 ssh2
Sep  7 00:43:33 game-panel sshd[5378]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.190.84
2020-09-07 08:45:28
193.203.214.80 attackbots
Sep  6 23:57:54 vm0 sshd[13719]: Failed password for root from 193.203.214.80 port 48844 ssh2
...
2020-09-07 08:21:20
164.77.117.10 attackbotsspam
2020-09-07T02:25:15.338410hostname sshd[25704]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.77.117.10
2020-09-07T02:25:15.319350hostname sshd[25704]: Invalid user toor from 164.77.117.10 port 42954
2020-09-07T02:25:17.012964hostname sshd[25704]: Failed password for invalid user toor from 164.77.117.10 port 42954 ssh2
...
2020-09-07 08:47:57
123.30.249.49 attackbotsspam
Sep  7 02:49:09 itv-usvr-02 sshd[9409]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.30.249.49  user=root
Sep  7 02:53:25 itv-usvr-02 sshd[9591]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.30.249.49  user=root
Sep  7 02:57:32 itv-usvr-02 sshd[9738]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.30.249.49  user=root
2020-09-07 08:14:50
193.203.214.164 attackbots
Sep  6 23:00:01 [host] sshd[27312]: Invalid user b
Sep  6 23:00:01 [host] sshd[27312]: pam_unix(sshd:
Sep  6 23:00:03 [host] sshd[27312]: Failed passwor
2020-09-07 08:42:07
167.248.133.31 attackspam
Fail2Ban Ban Triggered
2020-09-07 08:38:45
66.205.156.117 attack
...
2020-09-07 08:33:22
91.240.118.100 attack
This IP is associated with RDP abuse. It was found in a paste by https://twitter.com/RdpSnitch - https://pastebin.com/NKEewsvT  
For more information, or to report interesting/incorrect findings, contact us - bot@tines.io
2020-09-07 08:44:16
91.135.193.146 attackspam
Honeypot attack, port: 445, PTR: PTR record not found
2020-09-07 08:31:51
172.104.242.173 attackbotsspam
Multiport scan : 4 ports scanned 8332 8333 9001 9090
2020-09-07 08:10:11

Recently Reported IPs

208.27.25.141 159.58.193.96 147.190.161.80 43.244.236.49
126.42.35.171 190.98.84.133 157.51.196.38 157.51.81.181
49.236.213.252 43.232.46.87 86.45.145.20 4.84.23.9
183.89.215.49 220.134.15.245 150.136.245.74 138.197.69.184
205.119.75.223 101.121.56.103 134.122.103.0 37.120.192.25