Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Germany

Internet Service Provider: ComTrade LLC

Hostname: unknown

Organization: unknown

Usage Type: Commercial

Comments:
Type Details Datetime
attackspambots
firewall-block, port(s): 3454/tcp, 3487/tcp, 3520/tcp, 3546/tcp, 3833/tcp, 3892/tcp, 3945/tcp, 3970/tcp, 4046/tcp, 4150/tcp, 4152/tcp, 4216/tcp, 4219/tcp, 4314/tcp, 4321/tcp, 4336/tcp, 4472/tcp, 4494/tcp, 4553/tcp, 4653/tcp
2019-10-14 03:58:43
attackbotsspam
Port scan on 6 port(s): 3488 3681 4272 4528 4569 4583
2019-10-08 01:14:36
Comments on same subnet:
IP Type Details Datetime
45.136.109.219 attackspambots
ET CINS Active Threat Intelligence Poor Reputation IP group 26 - port: 6000 proto: tcp cat: Misc Attackbytes: 60
2020-08-19 23:39:13
45.136.109.219 attackspam
slow and persistent scanner
2020-08-17 20:34:11
45.136.109.251 attackbotsspam
Port scanning [3 denied]
2020-08-14 14:18:15
45.136.109.219 attackbots
 TCP (SYN) 45.136.109.219:50230 -> port 53, len 44
2020-08-07 08:11:38
45.136.109.219 attackbotsspam
[Tue Aug 04 17:47:28 2020] - DDoS Attack From IP: 45.136.109.219 Port: 41096
2020-08-06 18:31:50
45.136.109.219 attack
 TCP (SYN) 45.136.109.219:43869 -> port 53, len 44
2020-08-05 23:34:34
45.136.109.158 attack
Unauthorized connection attempt detected from IP address 45.136.109.158 to port 3389
2020-07-22 15:39:59
45.136.109.87 attack
BruteForce RDP attempts from 45.136.109.175
2020-07-17 14:21:12
45.136.109.158 attack
SmallBizIT.US 2 packets to tcp(3389,3391)
2020-07-07 12:28:14
45.136.109.158 attackbots
Unauthorized connection attempt detected from IP address 45.136.109.158 to port 4489 [T]
2020-07-05 22:47:55
45.136.109.175 attackspambots
Icarus honeypot on github
2020-07-02 08:25:18
45.136.109.251 attackbots
Multiport scan : 15 ports scanned 2888 3381 3382 3402 3420 3501 3502 4003 4018 5909 7926 8093 9000 9261 9833
2020-06-21 07:47:48
45.136.109.219 attackbots
ET CINS Active Threat Intelligence Poor Reputation IP group 27 - port: 6389 proto: TCP cat: Misc Attack
2020-06-06 08:47:05
45.136.109.222 attackspam
Mar 22 03:57:09 src: 45.136.109.222 signature match: "BACKDOOR NetSphere Connection attempt" (sid: 100044) tcp port: 30100
2020-03-22 12:01:46
45.136.109.222 attackbotsspam
Mar 18 22:14:16 src: 45.136.109.222 signature match: "BACKDOOR Subseven connection attempt" (sid: 100207) tcp port: 27374
2020-03-19 06:22:33
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.136.109.248
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51008
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.136.109.248.			IN	A

;; AUTHORITY SECTION:
.			495	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019100702 1800 900 604800 86400

;; Query time: 520 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Oct 08 01:14:33 CST 2019
;; MSG SIZE  rcvd: 118
Host info
Host 248.109.136.45.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 248.109.136.45.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
37.59.37.69 attackspam
Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-09-23T12:02:53Z and 2020-09-23T12:15:26Z
2020-09-23 21:22:34
182.122.0.140 attackbotsspam
Sep 23 15:42:31 sshgateway sshd\[18013\]: Invalid user wordpress from 182.122.0.140
Sep 23 15:42:31 sshgateway sshd\[18013\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.122.0.140
Sep 23 15:42:34 sshgateway sshd\[18013\]: Failed password for invalid user wordpress from 182.122.0.140 port 64344 ssh2
2020-09-23 21:44:35
194.150.214.88 attackbotsspam
Sep 22 18:40:56 tux postfix/smtpd[16838]: connect from 65704.a7e.ru[194.150.214.88]
Sep x@x
Sep 22 18:40:57 tux postfix/smtpd[16838]: disconnect from 65704.a7e.ru[194.150.214.88]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=194.150.214.88
2020-09-23 21:20:21
202.53.15.131 attackspambots
Unauthorized connection attempt from IP address 202.53.15.131 on Port 445(SMB)
2020-09-23 21:26:04
94.25.236.232 attackbots
Unauthorized connection attempt from IP address 94.25.236.232 on Port 445(SMB)
2020-09-23 21:48:11
164.68.114.169 attackspam
Invalid user recepcao from 164.68.114.169 port 51692
2020-09-23 21:40:18
189.192.100.139 attackspambots
Sep 23 06:14:56 OPSO sshd\[5587\]: Invalid user ding from 189.192.100.139 port 43538
Sep 23 06:14:56 OPSO sshd\[5587\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.192.100.139
Sep 23 06:14:58 OPSO sshd\[5587\]: Failed password for invalid user ding from 189.192.100.139 port 43538 ssh2
Sep 23 06:19:01 OPSO sshd\[6080\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.192.100.139  user=root
Sep 23 06:19:03 OPSO sshd\[6080\]: Failed password for root from 189.192.100.139 port 48000 ssh2
2020-09-23 21:28:36
186.47.86.5 attackspambots
Port probing on unauthorized port 445
2020-09-23 21:35:42
219.101.192.141 attackspambots
Sep 21 16:03:16 serwer sshd\[17494\]: Invalid user minecraft from 219.101.192.141 port 33336
Sep 21 16:03:16 serwer sshd\[17494\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.101.192.141
Sep 21 16:03:18 serwer sshd\[17494\]: Failed password for invalid user minecraft from 219.101.192.141 port 33336 ssh2
Sep 21 16:19:58 serwer sshd\[19859\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.101.192.141  user=root
Sep 21 16:20:00 serwer sshd\[19859\]: Failed password for root from 219.101.192.141 port 56808 ssh2
Sep 21 16:25:03 serwer sshd\[20664\]: Invalid user clouduser from 219.101.192.141 port 41188
Sep 21 16:25:03 serwer sshd\[20664\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.101.192.141
Sep 21 16:25:05 serwer sshd\[20664\]: Failed password for invalid user clouduser from 219.101.192.141 port 41188 ssh2
Sep 21 16:29:23 serwer sshd\[212
...
2020-09-23 21:30:07
209.97.183.120 attackbots
209.97.183.120 (GB/United Kingdom/-), 8 distributed sshd attacks on account [admin] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 23 06:43:42 server5 sshd[32391]: Invalid user admin from 103.133.104.215
Sep 23 06:13:16 server5 sshd[18900]: Invalid user admin from 209.97.183.120
Sep 23 06:13:18 server5 sshd[18900]: Failed password for invalid user admin from 209.97.183.120 port 45532 ssh2
Sep 23 06:33:36 server5 sshd[28335]: Invalid user admin from 139.59.29.28
Sep 23 06:33:39 server5 sshd[28335]: Failed password for invalid user admin from 139.59.29.28 port 39686 ssh2
Sep 23 06:43:27 server5 sshd[32068]: Invalid user admin from 103.133.104.215
Sep 23 06:43:29 server5 sshd[32068]: Failed password for invalid user admin from 103.133.104.215 port 57975 ssh2
Sep 23 06:47:14 server5 sshd[1335]: Invalid user admin from 106.54.20.184

IP Addresses Blocked:

103.133.104.215 (VN/Vietnam/-)
2020-09-23 21:54:45
5.188.206.198 attackspambots
Sep 23 14:53:38 websrv1.derweidener.de postfix/smtpd[282729]: warning: unknown[5.188.206.198]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep 23 14:53:38 websrv1.derweidener.de postfix/smtpd[282729]: lost connection after AUTH from unknown[5.188.206.198]
Sep 23 14:53:44 websrv1.derweidener.de postfix/smtpd[282729]: lost connection after AUTH from unknown[5.188.206.198]
Sep 23 14:53:51 websrv1.derweidener.de postfix/smtpd[282744]: lost connection after AUTH from unknown[5.188.206.198]
Sep 23 14:53:57 websrv1.derweidener.de postfix/smtpd[282729]: warning: unknown[5.188.206.198]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2020-09-23 21:38:19
177.156.138.75 attack
Brute-force attempt banned
2020-09-23 21:27:14
191.92.124.82 attack
Sep 23 15:02:31 dev0-dcde-rnet sshd[13904]: Failed password for root from 191.92.124.82 port 38678 ssh2
Sep 23 15:08:16 dev0-dcde-rnet sshd[13930]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.92.124.82
Sep 23 15:08:18 dev0-dcde-rnet sshd[13930]: Failed password for invalid user elasticsearch from 191.92.124.82 port 47810 ssh2
2020-09-23 21:20:50
27.210.139.146 attack
Port Scan: TCP/23
2020-09-23 21:26:46
81.68.209.225 attackspam
Sep 23 15:31:47 vm2 sshd[19778]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.68.209.225
Sep 23 15:31:50 vm2 sshd[19778]: Failed password for invalid user nas from 81.68.209.225 port 40692 ssh2
...
2020-09-23 21:45:30

Recently Reported IPs

195.192.226.180 171.96.232.112 37.120.217.85 27.165.123.87
187.58.191.1 197.249.87.189 93.76.249.193 103.133.107.130
107.189.2.139 80.181.91.195 200.194.30.47 109.202.117.54
82.131.160.70 147.91.199.116 220.184.21.158 36.82.98.208
27.105.197.176 39.3.225.228 192.144.161.40 136.9.11.194