Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Nürnberg

Region: Bavaria

Country: Russian Federation

Internet Service Provider: ComTrade LLC

Hostname: unknown

Organization: unknown

Usage Type: Commercial

Comments:
Type Details Datetime
attackspam
Sep 19 17:26:09 mc1 kernel: \[193231.239593\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.38 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=10549 PROTO=TCP SPT=48678 DPT=6813 WINDOW=1024 RES=0x00 SYN URGP=0 
Sep 19 17:26:44 mc1 kernel: \[193266.273497\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.38 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=43172 PROTO=TCP SPT=48678 DPT=6094 WINDOW=1024 RES=0x00 SYN URGP=0 
Sep 19 17:27:55 mc1 kernel: \[193337.346494\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.38 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=50351 PROTO=TCP SPT=48678 DPT=6796 WINDOW=1024 RES=0x00 SYN URGP=0 
...
2019-09-20 01:24:42
attackspambots
Sep 10 18:28:50 lenivpn01 kernel: \[365734.849668\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:2f:6c:1b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.38 DST=195.201.121.15 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=25337 PROTO=TCP SPT=50516 DPT=6006 WINDOW=1024 RES=0x00 SYN URGP=0 
Sep 10 18:34:22 lenivpn01 kernel: \[366066.642794\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:2f:6c:1b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.38 DST=195.201.121.15 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=17398 PROTO=TCP SPT=50516 DPT=6800 WINDOW=1024 RES=0x00 SYN URGP=0 
Sep 10 18:36:12 lenivpn01 kernel: \[366176.962211\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:2f:6c:1b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.38 DST=195.201.121.15 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=48492 PROTO=TCP SPT=50516 DPT=6074 WINDOW=1024 RES=0x00 SYN URGP=0 
Sep 10 21:04:16 lenivpn01 kernel: \[375060.613315\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:2f:6c:1b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.38 DST=195.201.121.15 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=
...
2019-09-12 00:39:37
attack
09/09/2019-00:56:59.024470 45.136.109.38 Protocol: 6 ET SCAN NMAP -sS window 1024
2019-09-09 13:53:41
attackbots
09/08/2019-05:38:12.116651 45.136.109.38 Protocol: 6 ET SCAN NMAP -sS window 1024
2019-09-08 18:15:58
attack
09/07/2019-20:07:43.812755 45.136.109.38 Protocol: 6 ET SCAN NMAP -sS window 1024
2019-09-08 10:18:45
Comments on same subnet:
IP Type Details Datetime
45.136.109.219 attackspambots
ET CINS Active Threat Intelligence Poor Reputation IP group 26 - port: 6000 proto: tcp cat: Misc Attackbytes: 60
2020-08-19 23:39:13
45.136.109.219 attackspam
slow and persistent scanner
2020-08-17 20:34:11
45.136.109.251 attackbotsspam
Port scanning [3 denied]
2020-08-14 14:18:15
45.136.109.219 attackbots
 TCP (SYN) 45.136.109.219:50230 -> port 53, len 44
2020-08-07 08:11:38
45.136.109.219 attackbotsspam
[Tue Aug 04 17:47:28 2020] - DDoS Attack From IP: 45.136.109.219 Port: 41096
2020-08-06 18:31:50
45.136.109.219 attack
 TCP (SYN) 45.136.109.219:43869 -> port 53, len 44
2020-08-05 23:34:34
45.136.109.158 attack
Unauthorized connection attempt detected from IP address 45.136.109.158 to port 3389
2020-07-22 15:39:59
45.136.109.87 attack
BruteForce RDP attempts from 45.136.109.175
2020-07-17 14:21:12
45.136.109.158 attack
SmallBizIT.US 2 packets to tcp(3389,3391)
2020-07-07 12:28:14
45.136.109.158 attackbots
Unauthorized connection attempt detected from IP address 45.136.109.158 to port 4489 [T]
2020-07-05 22:47:55
45.136.109.175 attackspambots
Icarus honeypot on github
2020-07-02 08:25:18
45.136.109.251 attackbots
Multiport scan : 15 ports scanned 2888 3381 3382 3402 3420 3501 3502 4003 4018 5909 7926 8093 9000 9261 9833
2020-06-21 07:47:48
45.136.109.219 attackbots
ET CINS Active Threat Intelligence Poor Reputation IP group 27 - port: 6389 proto: TCP cat: Misc Attack
2020-06-06 08:47:05
45.136.109.222 attackspam
Mar 22 03:57:09 src: 45.136.109.222 signature match: "BACKDOOR NetSphere Connection attempt" (sid: 100044) tcp port: 30100
2020-03-22 12:01:46
45.136.109.222 attackbotsspam
Mar 18 22:14:16 src: 45.136.109.222 signature match: "BACKDOOR Subseven connection attempt" (sid: 100207) tcp port: 27374
2020-03-19 06:22:33
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.136.109.38
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4177
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.136.109.38.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019090701 1800 900 604800 86400

;; Query time: 62 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Sep 08 10:18:30 CST 2019
;; MSG SIZE  rcvd: 117
Host info
Host 38.109.136.45.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 38.109.136.45.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
194.170.189.196 attackbots
SIP/5060 Probe, BF, Hack -
2020-05-23 03:18:24
129.211.55.22 attackspambots
May 22 20:50:01 home sshd[27425]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.55.22
May 22 20:50:03 home sshd[27425]: Failed password for invalid user nkb from 129.211.55.22 port 55342 ssh2
May 22 20:51:28 home sshd[27648]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.55.22
...
2020-05-23 03:16:29
212.83.131.135 attackbotsspam
May 22 22:05:45 hosting sshd[28448]: Invalid user ipc from 212.83.131.135 port 41628
May 22 22:05:45 hosting sshd[28448]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.83.131.135
May 22 22:05:45 hosting sshd[28448]: Invalid user ipc from 212.83.131.135 port 41628
May 22 22:05:46 hosting sshd[28448]: Failed password for invalid user ipc from 212.83.131.135 port 41628 ssh2
May 22 22:20:37 hosting sshd[29862]: Invalid user dys from 212.83.131.135 port 50302
...
2020-05-23 03:33:57
187.8.182.21 attackspam
May 22 20:52:43 debian-2gb-nbg1-2 kernel: \[12432379.654005\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=187.8.182.21 DST=195.201.40.59 LEN=48 TOS=0x00 PREC=0x00 TTL=111 ID=43635 PROTO=TCP SPT=36454 DPT=9090 WINDOW=65535 RES=0x00 SYN URGP=0
2020-05-23 03:31:17
188.166.244.121 attack
Invalid user xks from 188.166.244.121 port 33934
2020-05-23 03:14:01
78.159.97.51 attackspam
Invalid user fmaster from 78.159.97.51 port 38632
2020-05-23 03:29:01
102.68.17.48 attack
May 22 15:06:56 l02a sshd[2038]: Invalid user eeg from 102.68.17.48
May 22 15:06:56 l02a sshd[2038]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.68.17.48 
May 22 15:06:56 l02a sshd[2038]: Invalid user eeg from 102.68.17.48
May 22 15:06:58 l02a sshd[2038]: Failed password for invalid user eeg from 102.68.17.48 port 43006 ssh2
2020-05-23 03:10:31
149.56.99.85 attackspambots
CMS (WordPress or Joomla) login attempt.
2020-05-23 03:11:40
58.209.188.177 attackbotsspam
Unauthorized connection attempt detected from IP address 58.209.188.177 to port 23 [T]
2020-05-23 03:23:24
148.70.72.242 attackbots
May 22 21:31:48 santamaria sshd\[9371\]: Invalid user xhe from 148.70.72.242
May 22 21:31:48 santamaria sshd\[9371\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.72.242
May 22 21:31:50 santamaria sshd\[9371\]: Failed password for invalid user xhe from 148.70.72.242 port 40384 ssh2
...
2020-05-23 03:33:12
103.48.193.7 attack
May 22 15:10:30 home sshd[3884]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.48.193.7
May 22 15:10:32 home sshd[3884]: Failed password for invalid user xme from 103.48.193.7 port 32996 ssh2
May 22 15:14:07 home sshd[4570]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.48.193.7
...
2020-05-23 03:39:04
191.222.136.49 attack
Automatic report - Banned IP Access
2020-05-23 03:21:55
1.11.201.18 attackspambots
May 22 21:27:49 meumeu sshd[128370]: Invalid user rkc from 1.11.201.18 port 34970
May 22 21:27:49 meumeu sshd[128370]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.11.201.18 
May 22 21:27:49 meumeu sshd[128370]: Invalid user rkc from 1.11.201.18 port 34970
May 22 21:27:50 meumeu sshd[128370]: Failed password for invalid user rkc from 1.11.201.18 port 34970 ssh2
May 22 21:30:15 meumeu sshd[128909]: Invalid user omsagent from 1.11.201.18 port 43790
May 22 21:30:15 meumeu sshd[128909]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.11.201.18 
May 22 21:30:15 meumeu sshd[128909]: Invalid user omsagent from 1.11.201.18 port 43790
May 22 21:30:17 meumeu sshd[128909]: Failed password for invalid user omsagent from 1.11.201.18 port 43790 ssh2
May 22 21:32:38 meumeu sshd[129263]: Invalid user xoa from 1.11.201.18 port 52612
...
2020-05-23 03:37:59
87.251.74.196 attack
May 22 21:11:48 debian-2gb-nbg1-2 kernel: \[12433524.170889\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=87.251.74.196 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=22187 PROTO=TCP SPT=57856 DPT=15779 WINDOW=1024 RES=0x00 SYN URGP=0
2020-05-23 03:20:59
114.33.174.68 attackbots
" "
2020-05-23 03:41:56

Recently Reported IPs

46.229.213.118 91.32.192.209 45.76.203.203 104.4.189.248
117.240.172.19 168.48.14.42 112.195.165.23 13.57.193.221
46.229.213.69 167.71.250.105 207.142.243.144 158.145.121.89
173.198.125.241 86.33.21.2 36.4.63.75 129.228.170.90
141.255.20.96 64.251.30.184 171.222.89.102 183.150.149.9