45.136.109.31 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Germany

Internet Service Provider: ComTrade LLC

Hostname: unknown

Organization: unknown

Usage Type: Commercial

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found	2019-09-30 18:08:25
attackbots	Sep 16 10:21:59 mc1 kernel: \[1172668.431942\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.31 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=42521 PROTO=TCP SPT=55850 DPT=588 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 16 10:22:06 mc1 kernel: \[1172675.984983\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.31 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=49690 PROTO=TCP SPT=55850 DPT=662 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 16 10:29:24 mc1 kernel: \[1173114.093369\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.31 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=16274 PROTO=TCP SPT=55850 DPT=793 WINDOW=1024 RES=0x00 SYN URGP=0 ...	2019-09-16 17:01:49
attackbots	Sep 15 19:50:08 mc1 kernel: \[1120360.224223\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.31 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=803 PROTO=TCP SPT=47648 DPT=297 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 15 19:52:14 mc1 kernel: \[1120486.119804\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.31 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=55446 PROTO=TCP SPT=47648 DPT=578 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 15 19:52:59 mc1 kernel: \[1120530.332741\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.31 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=20098 PROTO=TCP SPT=47648 DPT=739 WINDOW=1024 RES=0x00 SYN URGP=0 ...	2019-09-16 01:59:42
attack	Multiport scan : 88 ports scanned 6 7 14 33 37 49 57 66 68 76 80 87 88 104 111 118 123 124 147 154 166 178 184 185 238 250 269 281 285 314 317 334 387 403 420 429 438 439 452 455 470 478 481 482 485 489 497 502 528 533 540 545 555 564 604 616 621 639 651 679 682 683 689 701 721 725 731 746 757 769 788 796 807 826 827 845 859 876 887 890 895 917 921 935 947 957 966 996	2019-09-14 02:33:34
attackbots	Sep 12 05:53:59 h2177944 kernel: \[1136940.823995\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.109.31 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=56992 PROTO=TCP SPT=44477 DPT=339 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 12 06:18:25 h2177944 kernel: \[1138406.759079\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.109.31 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=47091 PROTO=TCP SPT=44477 DPT=211 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 12 06:30:24 h2177944 kernel: \[1139126.246940\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.109.31 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=18661 PROTO=TCP SPT=44477 DPT=684 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 12 06:31:52 h2177944 kernel: \[1139213.348227\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.109.31 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=41160 PROTO=TCP SPT=44477 DPT=1 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 12 06:48:59 h2177944 kernel: \[1140240.096892\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.109.31 DST=85.214.117.9 LEN=4	2019-09-12 12:51:06
attackbots	Sep 10 17:57:38 lenivpn01 kernel: \[363862.749729\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:2f:6c:1b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.31 DST=195.201.121.15 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=46047 PROTO=TCP SPT=58988 DPT=1 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 10 18:01:30 lenivpn01 kernel: \[364095.448285\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:2f:6c:1b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.31 DST=195.201.121.15 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=20197 PROTO=TCP SPT=58988 DPT=902 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 10 18:07:35 lenivpn01 kernel: \[364459.798184\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:2f:6c:1b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.31 DST=195.201.121.15 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=10039 PROTO=TCP SPT=58988 DPT=582 WINDOW=1024 RES=0x00 SYN URGP=0 ...	2019-09-11 00:15:13

Comments on same subnet:

IP	Type	Details	Datetime
45.136.109.219	attackspambots	ET CINS Active Threat Intelligence Poor Reputation IP group 26 - port: 6000 proto: tcp cat: Misc Attackbytes: 60	2020-08-19 23:39:13
45.136.109.219	attackspam	slow and persistent scanner	2020-08-17 20:34:11
45.136.109.251	attackbotsspam	Port scanning [3 denied]	2020-08-14 14:18:15
45.136.109.219	attackbots	TCP (SYN) 45.136.109.219:50230 -> port 53, len 44	2020-08-07 08:11:38
45.136.109.219	attackbotsspam	[Tue Aug 04 17:47:28 2020] - DDoS Attack From IP: 45.136.109.219 Port: 41096	2020-08-06 18:31:50
45.136.109.219	attack	TCP (SYN) 45.136.109.219:43869 -> port 53, len 44	2020-08-05 23:34:34
45.136.109.158	attack	Unauthorized connection attempt detected from IP address 45.136.109.158 to port 3389	2020-07-22 15:39:59
45.136.109.87	attack	BruteForce RDP attempts from 45.136.109.175	2020-07-17 14:21:12
45.136.109.158	attack	SmallBizIT.US 2 packets to tcp(3389,3391)	2020-07-07 12:28:14
45.136.109.158	attackbots	Unauthorized connection attempt detected from IP address 45.136.109.158 to port 4489 [T]	2020-07-05 22:47:55
45.136.109.175	attackspambots	Icarus honeypot on github	2020-07-02 08:25:18
45.136.109.251	attackbots	Multiport scan : 15 ports scanned 2888 3381 3382 3402 3420 3501 3502 4003 4018 5909 7926 8093 9000 9261 9833	2020-06-21 07:47:48
45.136.109.219	attackbots	ET CINS Active Threat Intelligence Poor Reputation IP group 27 - port: 6389 proto: TCP cat: Misc Attack	2020-06-06 08:47:05
45.136.109.222	attackspam	Mar 22 03:57:09 src: 45.136.109.222 signature match: "BACKDOOR NetSphere Connection attempt" (sid: 100044) tcp port: 30100	2020-03-22 12:01:46
45.136.109.222	attackbotsspam	Mar 18 22:14:16 src: 45.136.109.222 signature match: "BACKDOOR Subseven connection attempt" (sid: 100207) tcp port: 27374	2020-03-19 06:22:33

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.136.109.31
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11493
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.136.109.31.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019091000 1800 900 604800 86400

;; Query time: 12 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Wed Sep 11 00:14:36 CST 2019
;; MSG SIZE  rcvd: 117

Host info

Host 31.109.136.45.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 31.109.136.45.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
114.234.216.221	attackspam	2019-11-05 16:37:18 SMTP protocol synchronization error (input sent without waiting for greeting): rejected connection from H=[114.234.216.221]:2216 I=[192.147.25.65]:25 input="QUIT " 2019-11-05 16:37:30 H=(hxybgu.edu) [114.234.216.221]:2476 I=[192.147.25.65]:25 sender verify fail for : Unrouteable address 2019-11-05 16:37:30 H=(hxybgu.edu) [114.234.216.221]:2476 I=[192.147.25.65]:25 F= rejected RCPT : Sender verify failed ...	2019-11-06 07:45:50
210.217.24.254	attackspambots	2019-11-05T23:14:24.245916abusebot-5.cloudsearch.cf sshd\[32118\]: Invalid user bjorn from 210.217.24.254 port 53042 2019-11-05T23:14:24.250649abusebot-5.cloudsearch.cf sshd\[32118\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.217.24.254	2019-11-06 07:44:02
129.204.210.40	attackspam	Nov 5 12:51:12 sachi sshd\[4741\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.210.40 user=root Nov 5 12:51:14 sachi sshd\[4741\]: Failed password for root from 129.204.210.40 port 47132 ssh2 Nov 5 12:55:30 sachi sshd\[5050\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.210.40 user=root Nov 5 12:55:32 sachi sshd\[5050\]: Failed password for root from 129.204.210.40 port 57370 ssh2 Nov 5 12:59:54 sachi sshd\[5411\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.210.40 user=root	2019-11-06 07:12:59
183.203.170.242	attackbotsspam	Nov 5 23:37:27 ns3367391 proftpd[6364]: 127.0.0.1 (183.203.170.242[183.203.170.242]) - USER yourdailypornvideos: no such user found from 183.203.170.242 [183.203.170.242] to 37.187.78.186:21 Nov 5 23:37:28 ns3367391 proftpd[6367]: 127.0.0.1 (183.203.170.242[183.203.170.242]) - USER yourdailypornvideos: no such user found from 183.203.170.242 [183.203.170.242] to 37.187.78.186:21 ...	2019-11-06 07:47:44
96.84.177.225	attack	Nov 6 01:06:43 site1 sshd\[27022\]: Failed password for root from 96.84.177.225 port 34370 ssh2Nov 6 01:09:46 site1 sshd\[27280\]: Invalid user mainville from 96.84.177.225Nov 6 01:09:48 site1 sshd\[27280\]: Failed password for invalid user mainville from 96.84.177.225 port 38100 ssh2Nov 6 01:12:59 site1 sshd\[27931\]: Invalid user admin from 96.84.177.225Nov 6 01:13:01 site1 sshd\[27931\]: Failed password for invalid user admin from 96.84.177.225 port 41828 ssh2Nov 6 01:16:13 site1 sshd\[28063\]: Failed password for root from 96.84.177.225 port 45540 ssh2 ...	2019-11-06 07:39:23
13.75.69.108	attack	Nov 6 00:20:20 meumeu sshd[5852]: Failed password for root from 13.75.69.108 port 10456 ssh2 Nov 6 00:24:05 meumeu sshd[6346]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.75.69.108 Nov 6 00:24:06 meumeu sshd[6346]: Failed password for invalid user adv from 13.75.69.108 port 49828 ssh2 ...	2019-11-06 07:35:52
193.70.32.148	attack	Nov 5 18:39:20 debian sshd\[7847\]: Invalid user rpm from 193.70.32.148 port 58678 Nov 5 18:39:20 debian sshd\[7847\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.70.32.148 Nov 5 18:39:22 debian sshd\[7847\]: Failed password for invalid user rpm from 193.70.32.148 port 58678 ssh2 ...	2019-11-06 07:43:16
83.15.183.137	attackspam	Nov 5 23:42:03 MK-Soft-VM7 sshd[22432]: Failed password for root from 83.15.183.137 port 42082 ssh2 ...	2019-11-06 07:13:38
201.28.8.163	attackspambots	2019-11-05T23:29:56.062280abusebot-6.cloudsearch.cf sshd\[24097\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.28.8.163 user=root	2019-11-06 07:36:48
168.121.133.6	attackbots	2019-11-05T23:11:15.310857abusebot-3.cloudsearch.cf sshd\[30398\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.121.133.6 user=root	2019-11-06 07:15:38
51.254.220.20	attack	2019-11-05T23:16:55.016099shield sshd\[18753\]: Invalid user abc123!@\# from 51.254.220.20 port 56096 2019-11-05T23:16:55.020442shield sshd\[18753\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.ip-51-254-220.eu 2019-11-05T23:16:57.077467shield sshd\[18753\]: Failed password for invalid user abc123!@\# from 51.254.220.20 port 56096 ssh2 2019-11-05T23:20:31.103806shield sshd\[19378\]: Invalid user q1w2e3 from 51.254.220.20 port 46749 2019-11-05T23:20:31.108399shield sshd\[19378\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.ip-51-254-220.eu	2019-11-06 07:21:37
1.193.160.164	attack	Nov 5 12:50:48 php1 sshd\[23464\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.193.160.164 user=root Nov 5 12:50:50 php1 sshd\[23464\]: Failed password for root from 1.193.160.164 port 9040 ssh2 Nov 5 12:55:00 php1 sshd\[23868\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.193.160.164 user=root Nov 5 12:55:02 php1 sshd\[23868\]: Failed password for root from 1.193.160.164 port 28829 ssh2 Nov 5 12:59:13 php1 sshd\[24700\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.193.160.164 user=root	2019-11-06 07:20:20
158.69.196.76	attackspam	$f2bV_matches	2019-11-06 07:49:13
58.87.69.177	attackbots	Nov 5 23:29:06 vps58358 sshd\[6304\]: Invalid user vonderhaar from 58.87.69.177Nov 5 23:29:08 vps58358 sshd\[6304\]: Failed password for invalid user vonderhaar from 58.87.69.177 port 37255 ssh2Nov 5 23:33:45 vps58358 sshd\[6327\]: Invalid user mo from 58.87.69.177Nov 5 23:33:47 vps58358 sshd\[6327\]: Failed password for invalid user mo from 58.87.69.177 port 56537 ssh2Nov 5 23:38:23 vps58358 sshd\[6369\]: Invalid user shop from 58.87.69.177Nov 5 23:38:25 vps58358 sshd\[6369\]: Failed password for invalid user shop from 58.87.69.177 port 47589 ssh2 ...	2019-11-06 07:20:05
103.28.44.41	attackbots	Unauthorised access (Nov 6) SRC=103.28.44.41 LEN=40 TTL=241 ID=34585 TCP DPT=1433 WINDOW=1024 SYN	2019-11-06 07:23:27

Recently Reported IPs

93.230.174.236	118.96.67.1	219.133.8.48	118.116.196.15
126.151.225.11	181.250.112.164	86.120.116.82	92.70.221.210
150.129.170.235	210.146.35.140	199.116.227.75	206.158.231.216
188.50.55.48	218.253.50.36	108.214.94.39	58.140.96.190
49.14.168.190	113.34.211.141	94.161.44.84	186.134.168.98