Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Germany

Internet Service Provider: ComTrade LLC

Hostname: unknown

Organization: unknown

Usage Type: Commercial

Comments:
Type Details Datetime
attackbots
45.136.109.243 was recorded 5 times by 5 hosts attempting to connect to the following ports: 3389. Incident counter (4h, 24h, all-time): 5, 43, 2034
2019-11-15 08:53:20
attack
45.136.109.243 was recorded 57 times by 19 hosts attempting to connect to the following ports: 53391,13390,8999,11389,2022,7069,11001,13388,51389,55139,6655,6689,20301,10534,9005,9988,8689,8489,9835,56789,55389,8189,8000,6969,8338,9189,9999,65535,54320,7889,7777,8339,4500,9983,7289,8789,7000,23813,6889,9856,1337,30001,4006,10005,10162,8082,13389. Incident counter (4h, 24h, all-time): 57, 420, 1062
2019-11-11 16:22:35
Comments on same subnet:
IP Type Details Datetime
45.136.109.219 attackspambots
ET CINS Active Threat Intelligence Poor Reputation IP group 26 - port: 6000 proto: tcp cat: Misc Attackbytes: 60
2020-08-19 23:39:13
45.136.109.219 attackspam
slow and persistent scanner
2020-08-17 20:34:11
45.136.109.251 attackbotsspam
Port scanning [3 denied]
2020-08-14 14:18:15
45.136.109.219 attackbots
 TCP (SYN) 45.136.109.219:50230 -> port 53, len 44
2020-08-07 08:11:38
45.136.109.219 attackbotsspam
[Tue Aug 04 17:47:28 2020] - DDoS Attack From IP: 45.136.109.219 Port: 41096
2020-08-06 18:31:50
45.136.109.219 attack
 TCP (SYN) 45.136.109.219:43869 -> port 53, len 44
2020-08-05 23:34:34
45.136.109.158 attack
Unauthorized connection attempt detected from IP address 45.136.109.158 to port 3389
2020-07-22 15:39:59
45.136.109.87 attack
BruteForce RDP attempts from 45.136.109.175
2020-07-17 14:21:12
45.136.109.158 attack
SmallBizIT.US 2 packets to tcp(3389,3391)
2020-07-07 12:28:14
45.136.109.158 attackbots
Unauthorized connection attempt detected from IP address 45.136.109.158 to port 4489 [T]
2020-07-05 22:47:55
45.136.109.175 attackspambots
Icarus honeypot on github
2020-07-02 08:25:18
45.136.109.251 attackbots
Multiport scan : 15 ports scanned 2888 3381 3382 3402 3420 3501 3502 4003 4018 5909 7926 8093 9000 9261 9833
2020-06-21 07:47:48
45.136.109.219 attackbots
ET CINS Active Threat Intelligence Poor Reputation IP group 27 - port: 6389 proto: TCP cat: Misc Attack
2020-06-06 08:47:05
45.136.109.222 attackspam
Mar 22 03:57:09 src: 45.136.109.222 signature match: "BACKDOOR NetSphere Connection attempt" (sid: 100044) tcp port: 30100
2020-03-22 12:01:46
45.136.109.222 attackbotsspam
Mar 18 22:14:16 src: 45.136.109.222 signature match: "BACKDOOR Subseven connection attempt" (sid: 100207) tcp port: 27374
2020-03-19 06:22:33
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.136.109.243
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7174
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.136.109.243.			IN	A

;; AUTHORITY SECTION:
.			570	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019111100 1800 900 604800 86400

;; Query time: 99 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Nov 11 16:22:31 CST 2019
;; MSG SIZE  rcvd: 118
Host info
Host 243.109.136.45.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 243.109.136.45.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
117.53.152.104 attackbotsspam
10 attempts against mh-misc-ban on heat.magehost.pro
2019-09-23 00:35:32
128.199.133.201 attackspambots
Sep 22 19:09:51 markkoudstaal sshd[18322]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.133.201
Sep 22 19:09:53 markkoudstaal sshd[18322]: Failed password for invalid user 0000 from 128.199.133.201 port 51861 ssh2
Sep 22 19:14:55 markkoudstaal sshd[18825]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.133.201
2019-09-23 01:19:12
106.52.24.64 attackbots
Sep 22 12:40:43 xtremcommunity sshd\[364573\]: Invalid user automak from 106.52.24.64 port 59146
Sep 22 12:40:43 xtremcommunity sshd\[364573\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.24.64
Sep 22 12:40:44 xtremcommunity sshd\[364573\]: Failed password for invalid user automak from 106.52.24.64 port 59146 ssh2
Sep 22 12:47:29 xtremcommunity sshd\[364721\]: Invalid user madison from 106.52.24.64 port 44618
Sep 22 12:47:29 xtremcommunity sshd\[364721\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.24.64
...
2019-09-23 00:58:04
222.186.15.204 attack
Sep 22 12:30:46 plusreed sshd[25204]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.204  user=root
Sep 22 12:30:48 plusreed sshd[25204]: Failed password for root from 222.186.15.204 port 48168 ssh2
...
2019-09-23 00:34:27
93.157.174.102 attackspambots
Sep 22 16:48:04 venus sshd\[15266\]: Invalid user nagios123 from 93.157.174.102 port 41761
Sep 22 16:48:04 venus sshd\[15266\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.157.174.102
Sep 22 16:48:06 venus sshd\[15266\]: Failed password for invalid user nagios123 from 93.157.174.102 port 41761 ssh2
...
2019-09-23 01:04:14
138.68.128.80 attack
Sep 22 04:52:22 hpm sshd\[2647\]: Invalid user nt from 138.68.128.80
Sep 22 04:52:22 hpm sshd\[2647\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.128.80
Sep 22 04:52:24 hpm sshd\[2647\]: Failed password for invalid user nt from 138.68.128.80 port 48258 ssh2
Sep 22 04:56:33 hpm sshd\[2975\]: Invalid user test from 138.68.128.80
Sep 22 04:56:33 hpm sshd\[2975\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.128.80
2019-09-23 01:03:56
27.13.110.252 attackspambots
Port 3389 Scan
2019-09-23 01:03:25
187.44.113.33 attackbots
Sep 22 12:38:18 plusreed sshd[26887]: Invalid user support from 187.44.113.33
...
2019-09-23 00:55:32
113.11.187.196 attack
RDP Bruteforce
2019-09-23 01:09:08
176.107.131.104 attackspambots
Sep 22 03:14:06 web9 sshd\[5650\]: Invalid user crew from 176.107.131.104
Sep 22 03:14:06 web9 sshd\[5650\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.107.131.104
Sep 22 03:14:08 web9 sshd\[5650\]: Failed password for invalid user crew from 176.107.131.104 port 60857 ssh2
Sep 22 03:18:43 web9 sshd\[6504\]: Invalid user timemachine from 176.107.131.104
Sep 22 03:18:43 web9 sshd\[6504\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.107.131.104
2019-09-23 00:48:17
58.199.164.240 attack
2019-09-20 07:27:14,289 fail2ban.actions        \[946\]: NOTICE  \[sshd\] Ban 58.199.164.240
2019-09-20 07:58:51,000 fail2ban.actions        \[946\]: NOTICE  \[sshd\] Ban 58.199.164.240
2019-09-20 08:30:54,426 fail2ban.actions        \[946\]: NOTICE  \[sshd\] Ban 58.199.164.240
2019-09-20 09:02:38,780 fail2ban.actions        \[946\]: NOTICE  \[sshd\] Ban 58.199.164.240
2019-09-20 09:35:22,932 fail2ban.actions        \[946\]: NOTICE  \[sshd\] Ban 58.199.164.240
...
2019-09-23 01:13:17
123.206.90.149 attackbotsspam
Sep 22 15:47:13 rpi sshd[25570]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.90.149 
Sep 22 15:47:15 rpi sshd[25570]: Failed password for invalid user nouser from 123.206.90.149 port 36864 ssh2
2019-09-23 00:56:25
58.250.161.97 attack
2019-09-15 19:18:19,975 fail2ban.actions        \[946\]: NOTICE  \[sshd\] Ban 58.250.161.97
2019-09-15 19:50:02,327 fail2ban.actions        \[946\]: NOTICE  \[sshd\] Ban 58.250.161.97
2019-09-15 20:22:58,274 fail2ban.actions        \[946\]: NOTICE  \[sshd\] Ban 58.250.161.97
2019-09-15 20:56:05,167 fail2ban.actions        \[946\]: NOTICE  \[sshd\] Ban 58.250.161.97
2019-09-15 21:27:55,321 fail2ban.actions        \[946\]: NOTICE  \[sshd\] Ban 58.250.161.97
...
2019-09-23 01:01:32
193.32.160.136 attackspambots
Sep 22 17:36:50 relay postfix/smtpd\[27190\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.136\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[193.32.160.145\]\>
Sep 22 17:36:50 relay postfix/smtpd\[27190\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.136\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[193.32.160.145\]\>
Sep 22 17:36:50 relay postfix/smtpd\[27190\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.136\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[193.32.160.145\]\>
Sep 22 17:36:50 relay postfix/smtpd\[27190\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.136\]: 554 5.7.1 \: Relay access denied\; from=
...
2019-09-23 00:41:29
222.186.42.15 attack
Sep 22 19:17:19 cvbnet sshd[874]: Failed password for root from 222.186.42.15 port 61940 ssh2
Sep 22 19:17:22 cvbnet sshd[874]: Failed password for root from 222.186.42.15 port 61940 ssh2
2019-09-23 01:22:38

Recently Reported IPs

61.184.253.154 123.124.158.23 59.95.247.150 90.224.136.147
40.65.191.94 178.239.121.197 41.39.43.40 40.73.59.46
163.172.135.197 219.105.247.136 134.209.237.55 129.211.99.69
94.23.42.196 49.35.240.214 82.100.96.93 109.190.196.248
117.222.10.157 178.213.201.147 24.41.138.67 192.41.25.103