Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Germany

Internet Service Provider: ComTrade LLC

Hostname: unknown

Organization: unknown

Usage Type: Commercial

Comments:
Type Details Datetime
attack
3389BruteforceFW22
2019-11-25 00:25:45
attack
3389BruteforceStormFW22
2019-11-03 03:47:48
Comments on same subnet:
IP Type Details Datetime
45.136.108.22 attackspambots
45.136.108.22 - - [31/Aug/2020:07:28:26 -0500] "- / HTTP/1.0" 400 219 000 0 0 0 15 282 0 0 0 NONE FIN FIN ERR_INVALID_REQ
2020-09-01 04:38:43
45.136.108.22 attack
Unauthorized connection attempt from IP address 45.136.108.22 on port 993
2020-08-29 02:06:36
45.136.108.24 attackspambots
SSH login attempts.
2020-08-22 23:35:58
45.136.108.22 attackspambots
Fail2Ban Ban Triggered
2020-08-19 09:11:16
45.136.108.65 attack
[14/Aug/2020:05:14:56 -0400] "\x03" Blank UA
2020-08-16 04:36:35
45.136.108.67 attack
Unauthorized connection attempt detected from IP address 45.136.108.67 to port 2261 [T]
2020-08-16 04:36:18
45.136.108.24 attackspam
Unauthorized connection attempt detected from IP address 45.136.108.24 to port 4453 [T]
2020-08-14 02:36:09
45.136.108.65 attackbotsspam
Unauthorized connection attempt detected from IP address 45.136.108.65 to port 968 [T]
2020-08-14 02:12:50
45.136.108.66 attackbotsspam
Unauthorized connection attempt detected from IP address 45.136.108.66 to port 1723 [T]
2020-08-14 02:12:33
45.136.108.68 attack
Unauthorized connection attempt detected from IP address 45.136.108.68 to port 3424 [T]
2020-08-14 02:12:09
45.136.108.22 attackbotsspam
Port scan detected
2020-08-14 01:49:56
45.136.108.67 attackspambots
Unauthorized connection attempt detected from IP address 45.136.108.67 to port 2925 [T]
2020-08-14 01:49:28
45.136.108.62 attack
Unauthorized connection attempt detected from IP address 45.136.108.62 to port 9055 [T]
2020-08-14 01:07:35
45.136.108.80 attackspambots
2020-08-12T12:42:42Z - RDP login failed multiple times. (45.136.108.80)
2020-08-12 22:09:08
45.136.108.18 attack
RDP brute forcing (r)
2020-08-04 21:39:59
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.136.108.14
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33843
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.136.108.14.			IN	A

;; AUTHORITY SECTION:
.			147	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019110201 1800 900 604800 86400

;; Query time: 103 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Nov 03 03:47:45 CST 2019
;; MSG SIZE  rcvd: 117
Host info
Host 14.108.136.45.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 14.108.136.45.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
159.203.83.37 attackbotsspam
Failed password for root from 159.203.83.37 port 45453 ssh2
Invalid user before from 159.203.83.37 port 33964
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.83.37
Failed password for invalid user before from 159.203.83.37 port 33964 ssh2
Invalid user bahuvidha from 159.203.83.37 port 50707
2019-11-10 17:47:18
94.23.24.213 attackspambots
Nov  8 05:12:22 xm3 sshd[8390]: Failed password for r.r from 94.23.24.213 port 48722 ssh2
Nov  8 05:12:22 xm3 sshd[8390]: Received disconnect from 94.23.24.213: 11: Bye Bye [preauth]
Nov  8 05:19:12 xm3 sshd[20916]: Failed password for r.r from 94.23.24.213 port 58222 ssh2
Nov  8 05:19:12 xm3 sshd[20916]: Received disconnect from 94.23.24.213: 11: Bye Bye [preauth]
Nov  8 05:22:34 xm3 sshd[29638]: Failed password for r.r from 94.23.24.213 port 41246 ssh2
Nov  8 05:22:34 xm3 sshd[29638]: Received disconnect from 94.23.24.213: 11: Bye Bye [preauth]
Nov  8 05:25:53 xm3 sshd[4334]: Failed password for r.r from 94.23.24.213 port 52484 ssh2
Nov  8 05:25:53 xm3 sshd[4334]: Received disconnect from 94.23.24.213: 11: Bye Bye [preauth]
Nov  8 05:29:43 xm3 sshd[9950]: Failed password for r.r from 94.23.24.213 port 35490 ssh2
Nov  8 05:29:43 xm3 sshd[9950]: Received disconnect from 94.23.24.213: 11: Bye Bye [preauth]
Nov  8 05:32:54 xm3 sshd[18651]: Failed password for invalid user........
-------------------------------
2019-11-10 17:24:20
181.49.254.230 attackspambots
leo_www
2019-11-10 17:12:51
88.214.26.45 attackbotsspam
11/10/2019-10:11:38.527550 88.214.26.45 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 96
2019-11-10 17:35:48
61.92.169.178 attack
Nov 10 00:26:01 mockhub sshd[25888]: Failed password for sys from 61.92.169.178 port 51094 ssh2
...
2019-11-10 17:18:39
220.130.178.36 attack
Nov 10 02:39:38 plusreed sshd[18031]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.130.178.36  user=root
Nov 10 02:39:40 plusreed sshd[18031]: Failed password for root from 220.130.178.36 port 50466 ssh2
...
2019-11-10 17:33:47
106.13.58.170 attackbotsspam
Nov 10 05:57:41 firewall sshd[5218]: Failed password for invalid user teampspeak from 106.13.58.170 port 50586 ssh2
Nov 10 06:02:45 firewall sshd[5399]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.58.170  user=root
Nov 10 06:02:47 firewall sshd[5399]: Failed password for root from 106.13.58.170 port 57800 ssh2
...
2019-11-10 17:41:23
193.33.111.217 attackbotsspam
Nov 10 08:29:38 vpn01 sshd[25315]: Failed password for root from 193.33.111.217 port 57290 ssh2
...
2019-11-10 17:15:40
124.244.79.131 attackbots
BURG,WP GET /wp-login.php
2019-11-10 17:42:08
222.186.175.202 attackbots
Nov 10 10:16:46 minden010 sshd[11871]: Failed password for root from 222.186.175.202 port 17060 ssh2
Nov 10 10:16:50 minden010 sshd[11871]: Failed password for root from 222.186.175.202 port 17060 ssh2
Nov 10 10:16:53 minden010 sshd[11871]: Failed password for root from 222.186.175.202 port 17060 ssh2
Nov 10 10:17:00 minden010 sshd[11871]: error: maximum authentication attempts exceeded for root from 222.186.175.202 port 17060 ssh2 [preauth]
...
2019-11-10 17:18:13
41.76.149.164 attackbotsspam
SSH Bruteforce attempt
2019-11-10 17:30:02
167.114.227.94 attack
ENG,DEF GET /w00tw00t.at.ISC.SANS.DFind:)
2019-11-10 17:14:28
185.9.3.48 attack
Nov  9 23:00:50 web1 sshd\[27133\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.9.3.48  user=root
Nov  9 23:00:51 web1 sshd\[27133\]: Failed password for root from 185.9.3.48 port 55890 ssh2
Nov  9 23:04:21 web1 sshd\[27432\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.9.3.48  user=root
Nov  9 23:04:23 web1 sshd\[27432\]: Failed password for root from 185.9.3.48 port 36792 ssh2
Nov  9 23:07:56 web1 sshd\[27773\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.9.3.48  user=root
2019-11-10 17:10:53
36.155.115.95 attackspambots
Nov  8 17:38:52 xb0 sshd[15994]: Failed password for invalid user dm from 36.155.115.95 port 53915 ssh2
Nov  8 17:38:52 xb0 sshd[15994]: Received disconnect from 36.155.115.95: 11: Bye Bye [preauth]
Nov  8 17:53:37 xb0 sshd[16505]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.155.115.95  user=r.r
Nov  8 17:53:39 xb0 sshd[16505]: Failed password for r.r from 36.155.115.95 port 47846 ssh2
Nov  8 17:53:40 xb0 sshd[16505]: Received disconnect from 36.155.115.95: 11: Bye Bye [preauth]
Nov  8 17:59:03 xb0 sshd[18437]: Failed password for invalid user test from 36.155.115.95 port 35697 ssh2
Nov  8 17:59:03 xb0 sshd[18437]: Received disconnect from 36.155.115.95: 11: Bye Bye [preauth]
Nov  8 18:04:11 xb0 sshd[21194]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.155.115.95  user=r.r
Nov  8 18:04:13 xb0 sshd[21194]: Failed password for r.r from 36.155.115.95 port 51782 ssh2
Nov  8 18:04:14........
-------------------------------
2019-11-10 17:46:02
198.108.66.212 attackspam
Honeypot hit.
2019-11-10 17:46:51

Recently Reported IPs

196.49.111.116 168.69.18.33 123.240.192.121 192.170.221.104
197.217.22.36 177.200.66.239 86.111.230.37 57.22.66.215
142.165.28.190 162.40.223.52 123.187.201.210 3.49.67.241
117.184.192.93 192.235.235.79 68.26.99.253 211.195.89.127
216.155.119.209 57.255.252.182 104.64.91.26 182.71.244.226