Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Germany

Internet Service Provider: ComTrade LLC

Hostname: unknown

Organization: unknown

Usage Type: Commercial

Comments:
Type Details Datetime
attack
MultiHost/MultiPort Probe, Scan, Hack -
2019-11-25 18:01:54
attackbotsspam
MultiHost/MultiPort Probe, Scan, Hack -
2019-11-24 17:06:16
attackbotsspam
MultiHost/MultiPort Probe, Scan, Hack -
2019-11-18 02:22:35
attack
MultiHost/MultiPort Probe, Scan, Hack -
2019-11-13 00:17:23
attackbots
CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found
2019-11-06 16:39:53
Comments on same subnet:
IP Type Details Datetime
45.136.109.219 attackspambots
ET CINS Active Threat Intelligence Poor Reputation IP group 26 - port: 6000 proto: tcp cat: Misc Attackbytes: 60
2020-08-19 23:39:13
45.136.109.219 attackspam
slow and persistent scanner
2020-08-17 20:34:11
45.136.109.251 attackbotsspam
Port scanning [3 denied]
2020-08-14 14:18:15
45.136.109.219 attackbots
 TCP (SYN) 45.136.109.219:50230 -> port 53, len 44
2020-08-07 08:11:38
45.136.109.219 attackbotsspam
[Tue Aug 04 17:47:28 2020] - DDoS Attack From IP: 45.136.109.219 Port: 41096
2020-08-06 18:31:50
45.136.109.219 attack
 TCP (SYN) 45.136.109.219:43869 -> port 53, len 44
2020-08-05 23:34:34
45.136.109.158 attack
Unauthorized connection attempt detected from IP address 45.136.109.158 to port 3389
2020-07-22 15:39:59
45.136.109.87 attack
BruteForce RDP attempts from 45.136.109.175
2020-07-17 14:21:12
45.136.109.158 attack
SmallBizIT.US 2 packets to tcp(3389,3391)
2020-07-07 12:28:14
45.136.109.158 attackbots
Unauthorized connection attempt detected from IP address 45.136.109.158 to port 4489 [T]
2020-07-05 22:47:55
45.136.109.175 attackspambots
Icarus honeypot on github
2020-07-02 08:25:18
45.136.109.251 attackbots
Multiport scan : 15 ports scanned 2888 3381 3382 3402 3420 3501 3502 4003 4018 5909 7926 8093 9000 9261 9833
2020-06-21 07:47:48
45.136.109.219 attackbots
ET CINS Active Threat Intelligence Poor Reputation IP group 27 - port: 6389 proto: TCP cat: Misc Attack
2020-06-06 08:47:05
45.136.109.222 attackspam
Mar 22 03:57:09 src: 45.136.109.222 signature match: "BACKDOOR NetSphere Connection attempt" (sid: 100044) tcp port: 30100
2020-03-22 12:01:46
45.136.109.222 attackbotsspam
Mar 18 22:14:16 src: 45.136.109.222 signature match: "BACKDOOR Subseven connection attempt" (sid: 100207) tcp port: 27374
2020-03-19 06:22:33
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.136.109.174
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 16645
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.136.109.174.			IN	A

;; AUTHORITY SECTION:
.			296	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019110600 1800 900 604800 86400

;; Query time: 104 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Nov 06 16:39:49 CST 2019
;; MSG SIZE  rcvd: 118
Host info
Host 174.109.136.45.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 174.109.136.45.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
205.217.237.29 attackbotsspam
5555/tcp
[2019-07-12]1pkt
2019-07-12 21:04:40
113.10.244.173 attack
WordPress login Brute force / Web App Attack on client site.
2019-07-12 20:31:18
188.75.179.90 attackspam
Brute force attempt
2019-07-12 20:51:12
218.156.38.130 attackbots
MultiHost/MultiPort Probe, Scan, Hack -
2019-07-12 20:59:21
142.93.22.180 attackspam
Jul 12 12:19:40 ip-172-31-1-72 sshd\[22605\]: Invalid user shamim from 142.93.22.180
Jul 12 12:19:40 ip-172-31-1-72 sshd\[22605\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.22.180
Jul 12 12:19:43 ip-172-31-1-72 sshd\[22605\]: Failed password for invalid user shamim from 142.93.22.180 port 41562 ssh2
Jul 12 12:24:45 ip-172-31-1-72 sshd\[22744\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.22.180  user=root
Jul 12 12:24:47 ip-172-31-1-72 sshd\[22744\]: Failed password for root from 142.93.22.180 port 42430 ssh2
2019-07-12 20:34:18
106.13.98.92 attackbotsspam
Jul 12 08:39:19 plusreed sshd[27016]: Invalid user gpadmin from 106.13.98.92
...
2019-07-12 20:52:50
182.61.18.17 attackspambots
Jul 12 08:45:39 vps200512 sshd\[21500\]: Invalid user ftpuser from 182.61.18.17
Jul 12 08:45:39 vps200512 sshd\[21500\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.18.17
Jul 12 08:45:41 vps200512 sshd\[21500\]: Failed password for invalid user ftpuser from 182.61.18.17 port 36664 ssh2
Jul 12 08:51:45 vps200512 sshd\[21658\]: Invalid user opc from 182.61.18.17
Jul 12 08:51:45 vps200512 sshd\[21658\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.18.17
2019-07-12 20:56:42
51.75.201.55 attack
2019-07-12T12:00:25.354718hub.schaetter.us sshd\[14864\]: Invalid user zope from 51.75.201.55
2019-07-12T12:00:25.393765hub.schaetter.us sshd\[14864\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=55.ip-51-75-201.eu
2019-07-12T12:00:27.212713hub.schaetter.us sshd\[14864\]: Failed password for invalid user zope from 51.75.201.55 port 46660 ssh2
2019-07-12T12:05:00.505823hub.schaetter.us sshd\[14907\]: Invalid user loop from 51.75.201.55
2019-07-12T12:05:00.574355hub.schaetter.us sshd\[14907\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=55.ip-51-75-201.eu
...
2019-07-12 20:44:38
14.63.167.192 attackbots
Jul 12 13:07:30 localhost sshd\[18957\]: Invalid user ian from 14.63.167.192 port 54832
Jul 12 13:07:30 localhost sshd\[18957\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.63.167.192
...
2019-07-12 20:25:11
14.3.12.191 attackspambots
445/tcp
[2019-07-12]1pkt
2019-07-12 20:46:37
185.209.0.17 attackspam
2019-07-12T05:18:32.476577stt-1.[munged] kernel: [6954733.408621] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:97:36:58:84:78:ac:57:a8:41:08:00 SRC=185.209.0.17 DST=[mungedIP1] LEN=40 TOS=0x08 PREC=0x20 TTL=241 ID=3685 PROTO=TCP SPT=50485 DPT=5489 WINDOW=1024 RES=0x00 SYN URGP=0 
2019-07-12T05:44:24.560518stt-1.[munged] kernel: [6956285.488063] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:97:36:58:84:78:ac:57:a8:41:08:00 SRC=185.209.0.17 DST=[mungedIP1] LEN=40 TOS=0x08 PREC=0x20 TTL=242 ID=54532 PROTO=TCP SPT=50485 DPT=5490 WINDOW=1024 RES=0x00 SYN URGP=0 
2019-07-12T06:59:00.273825stt-1.[munged] kernel: [6960761.186872] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:97:36:58:84:78:ac:57:a8:41:08:00 SRC=185.209.0.17 DST=[mungedIP1] LEN=40 TOS=0x08 PREC=0x20 TTL=242 ID=10412 PROTO=TCP SPT=50485 DPT=5525 WINDOW=1024 RES=0x00 SYN URGP=0
2019-07-12 20:30:26
109.87.115.220 attackbotsspam
Jul 12 11:42:18 ip-172-31-1-72 sshd\[21575\]: Invalid user ts from 109.87.115.220
Jul 12 11:42:18 ip-172-31-1-72 sshd\[21575\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.87.115.220
Jul 12 11:42:19 ip-172-31-1-72 sshd\[21575\]: Failed password for invalid user ts from 109.87.115.220 port 48292 ssh2
Jul 12 11:47:57 ip-172-31-1-72 sshd\[21682\]: Invalid user simpsons from 109.87.115.220
Jul 12 11:47:57 ip-172-31-1-72 sshd\[21682\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.87.115.220
2019-07-12 20:24:33
111.231.71.157 attackspambots
2019-07-12T12:24:07.306143abusebot-8.cloudsearch.cf sshd\[26792\]: Invalid user rabbitmq from 111.231.71.157 port 37054
2019-07-12 20:43:23
178.128.55.52 attackbots
Jul 12 13:07:34 debian sshd\[22715\]: Invalid user tf2server from 178.128.55.52 port 58139
Jul 12 13:07:34 debian sshd\[22715\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.55.52
...
2019-07-12 20:19:39
220.121.97.43 attackspam
Portscan or hack attempt detected by psad/fwsnort
2019-07-12 20:50:13

Recently Reported IPs

195.154.179.110 185.117.120.26 209.97.188.148 54.236.1.18
139.219.5.139 45.143.220.34 66.249.66.206 45.14.49.211
79.118.55.116 157.52.255.116 36.22.108.44 106.12.84.209
175.142.220.232 129.204.36.144 104.244.76.230 46.182.6.38
62.101.111.45 191.8.11.9 87.169.117.232 14.29.238.225