45.136.109.95 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Germany

Internet Service Provider: ComTrade LLC

Hostname: unknown

Organization: unknown

Usage Type: Commercial

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbots	Multiport scan : 10 ports scanned 3364 3371 3372 3375 3377 3384 3388 3391 3395 3396	2019-12-11 06:54:51
attackspam	12/04/2019-23:57:38.623806 45.136.109.95 Protocol: 6 ET SCAN NMAP -sS window 1024	2019-12-05 13:06:22
attack	12/01/2019-13:38:35.985165 45.136.109.95 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 40	2019-12-02 03:43:56
attack	Portscan or hack attempt detected by psad/fwsnort	2019-11-30 23:11:49
attackbots	11/28/2019-12:49:46.863890 45.136.109.95 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 40	2019-11-29 01:59:42
attackspambots	11/27/2019-19:36:02.048773 45.136.109.95 Protocol: 6 ET SCAN NMAP -sS window 1024	2019-11-28 08:59:30
attack	Unauthorized connection attempt from IP address 45.136.109.95 on Port 3389(RDP)	2019-11-27 17:58:49
attackspam	11/26/2019-12:41:45.668476 45.136.109.95 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 42	2019-11-26 20:33:10
attack	ET CINS Active Threat Intelligence Poor Reputation IP group 33 - port: 3371 proto: TCP cat: Misc Attack	2019-11-26 02:24:51
attackspambots	11/24/2019-13:53:23.379988 45.136.109.95 Protocol: 6 ET SCAN NMAP -sS window 1024	2019-11-25 02:55:02
attackbots	Portscan or hack attempt detected by psad/fwsnort	2019-11-24 15:00:40
attack	45.136.109.95 was recorded 109 times by 32 hosts attempting to connect to the following ports: 3383,3381,3382,3388,3379,3368,3361,3399,3396,3378,3363,3395,3375,3385,3384,3398,3360,3373,3387,3374,3367,3386,3365,3393,3369,3376,3391,3389,3371,3377,3380,3370,3392,3394. Incident counter (4h, 24h, all-time): 109, 697, 10238	2019-11-22 03:18:36
attackspam	11/19/2019-18:20:55.746839 45.136.109.95 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 40	2019-11-20 07:25:46
attack	11/19/2019-09:46:20.550512 45.136.109.95 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 40	2019-11-19 23:18:18
attack	11/18/2019-22:55:09.883916 45.136.109.95 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 42	2019-11-19 06:22:27
attackbotsspam	11/17/2019-15:23:11.769395 45.136.109.95 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 40	2019-11-18 04:37:08
attackspambots	Portscan or hack attempt detected by psad/fwsnort	2019-11-14 15:32:55
attack	11/12/2019-07:53:33.257933 45.136.109.95 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 42	2019-11-12 15:07:59
attack	11/11/2019-23:44:08.042992 45.136.109.95 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 42	2019-11-12 06:57:11
attackspam	TCP 3389 (RDP)	2019-11-11 01:02:56
attack	11/10/2019-07:33:20.049605 45.136.109.95 Protocol: 6 ET SCAN NMAP -sS window 1024	2019-11-10 20:41:42
attackbots	11/08/2019-08:52:08.150154 45.136.109.95 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 42	2019-11-08 16:05:46
attackbotsspam	11/07/2019-19:06:04.110759 45.136.109.95 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 40	2019-11-08 08:25:18
attackspambots	11/06/2019-11:39:42.032804 45.136.109.95 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 40	2019-11-07 01:19:49
attackspambots	Nov 6 06:50:09 h2177944 kernel: \[5895047.672265\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.109.95 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=46554 PROTO=TCP SPT=48022 DPT=3399 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 6 07:17:47 h2177944 kernel: \[5896705.266391\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.109.95 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=42578 PROTO=TCP SPT=48022 DPT=3374 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 6 07:17:53 h2177944 kernel: \[5896711.325657\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.109.95 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=18354 PROTO=TCP SPT=48022 DPT=3354 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 6 07:21:27 h2177944 kernel: \[5896925.825704\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.109.95 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=48139 PROTO=TCP SPT=48022 DPT=3352 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 6 07:29:54 h2177944 kernel: \[5897432.417203\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.109.95 DST=85.214.117.9	2019-11-06 15:10:05
attackspambots	Nov 6 06:14:24 mc1 kernel: \[4303564.823461\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.95 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=5863 PROTO=TCP SPT=48022 DPT=3385 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 6 06:23:08 mc1 kernel: \[4304088.770931\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.95 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=26683 PROTO=TCP SPT=48022 DPT=3382 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 6 06:23:22 mc1 kernel: \[4304103.105272\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.95 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=31332 PROTO=TCP SPT=48022 DPT=3398 WINDOW=1024 RES=0x00 SYN URGP=0 ...	2019-11-06 13:28:57
attackbots	11/03/2019-15:57:55.828970 45.136.109.95 Protocol: 6 ET SCAN NMAP -sS window 1024	2019-11-04 06:00:48
attackbotsspam	11/03/2019-11:55:51.453575 45.136.109.95 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 42	2019-11-03 18:59:57
attackspambots	11/03/2019-01:29:38.840420 45.136.109.95 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 40	2019-11-03 13:47:13
attackbots	ET CINS Active Threat Intelligence Poor Reputation IP group 31 - port: 3399 proto: TCP cat: Misc Attack	2019-11-03 13:01:05

Comments on same subnet:

IP	Type	Details	Datetime
45.136.109.219	attackspambots	ET CINS Active Threat Intelligence Poor Reputation IP group 26 - port: 6000 proto: tcp cat: Misc Attackbytes: 60	2020-08-19 23:39:13
45.136.109.219	attackspam	slow and persistent scanner	2020-08-17 20:34:11
45.136.109.251	attackbotsspam	Port scanning [3 denied]	2020-08-14 14:18:15
45.136.109.219	attackbots	TCP (SYN) 45.136.109.219:50230 -> port 53, len 44	2020-08-07 08:11:38
45.136.109.219	attackbotsspam	[Tue Aug 04 17:47:28 2020] - DDoS Attack From IP: 45.136.109.219 Port: 41096	2020-08-06 18:31:50
45.136.109.219	attack	TCP (SYN) 45.136.109.219:43869 -> port 53, len 44	2020-08-05 23:34:34
45.136.109.158	attack	Unauthorized connection attempt detected from IP address 45.136.109.158 to port 3389	2020-07-22 15:39:59
45.136.109.87	attack	BruteForce RDP attempts from 45.136.109.175	2020-07-17 14:21:12
45.136.109.158	attack	SmallBizIT.US 2 packets to tcp(3389,3391)	2020-07-07 12:28:14
45.136.109.158	attackbots	Unauthorized connection attempt detected from IP address 45.136.109.158 to port 4489 [T]	2020-07-05 22:47:55
45.136.109.175	attackspambots	Icarus honeypot on github	2020-07-02 08:25:18
45.136.109.251	attackbots	Multiport scan : 15 ports scanned 2888 3381 3382 3402 3420 3501 3502 4003 4018 5909 7926 8093 9000 9261 9833	2020-06-21 07:47:48
45.136.109.219	attackbots	ET CINS Active Threat Intelligence Poor Reputation IP group 27 - port: 6389 proto: TCP cat: Misc Attack	2020-06-06 08:47:05
45.136.109.222	attackspam	Mar 22 03:57:09 src: 45.136.109.222 signature match: "BACKDOOR NetSphere Connection attempt" (sid: 100044) tcp port: 30100	2020-03-22 12:01:46
45.136.109.222	attackbotsspam	Mar 18 22:14:16 src: 45.136.109.222 signature match: "BACKDOOR Subseven connection attempt" (sid: 100207) tcp port: 27374	2020-03-19 06:22:33

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.136.109.95
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32254
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.136.109.95.			IN	A

;; AUTHORITY SECTION:
.			547	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019091802 1800 900 604800 86400

;; Query time: 129 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Sep 19 18:57:36 CST 2019
;; MSG SIZE  rcvd: 117

Host info

Host 95.109.136.45.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 95.109.136.45.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
78.188.16.54	attack	1582032253 - 02/18/2020 14:24:13 Host: 78.188.16.54/78.188.16.54 Port: 445 TCP Blocked	2020-02-19 00:37:46
13.66.192.66	attackbots	Feb 18 15:57:26 *** sshd[25834]: User root from 13.66.192.66 not allowed because not listed in AllowUsers	2020-02-19 00:39:21
152.32.72.122	attackspam	Automatic report - Banned IP Access	2020-02-19 00:43:09
192.99.57.32	attack	Feb 18 16:26:08 pornomens sshd\[32064\]: Invalid user ubuntu from 192.99.57.32 port 46462 Feb 18 16:26:08 pornomens sshd\[32064\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.99.57.32 Feb 18 16:26:10 pornomens sshd\[32064\]: Failed password for invalid user ubuntu from 192.99.57.32 port 46462 ssh2 ...	2020-02-19 00:18:16
95.129.178.11	attackbotsspam	firewall-block, port(s): 445/tcp	2020-02-19 00:50:18
222.186.30.57	attack	Failed password for root from 222.186.30.57 port 43092 ssh2 Failed password for root from 222.186.30.57 port 43092 ssh2 Failed password for root from 222.186.30.57 port 43092 ssh2	2020-02-19 00:49:18
83.57.124.3	attack	1582032260 - 02/18/2020 14:24:20 Host: 83.57.124.3/83.57.124.3 Port: 445 TCP Blocked	2020-02-19 00:34:31
103.112.226.142	attackspam	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-19 00:22:17
49.233.138.118	attack	2020-02-18T07:39:47.9019201495-001 sshd[6489]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.138.118 user=operator 2020-02-18T07:39:50.5101211495-001 sshd[6489]: Failed password for operator from 49.233.138.118 port 35746 ssh2 2020-02-18T08:02:49.2152551495-001 sshd[7801]: Invalid user ubuntu from 49.233.138.118 port 55744 2020-02-18T08:02:49.2190041495-001 sshd[7801]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.138.118 2020-02-18T08:02:49.2152551495-001 sshd[7801]: Invalid user ubuntu from 49.233.138.118 port 55744 2020-02-18T08:02:50.8837361495-001 sshd[7801]: Failed password for invalid user ubuntu from 49.233.138.118 port 55744 ssh2 2020-02-18T08:06:49.9284111495-001 sshd[8039]: Invalid user suhao from 49.233.138.118 port 52132 2020-02-18T08:06:49.9323221495-001 sshd[8039]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233......... ------------------------------	2020-02-19 00:27:15
110.45.244.79	attackspambots	Feb 18 14:24:03 v22018076622670303 sshd\[17199\]: Invalid user montana from 110.45.244.79 port 52688 Feb 18 14:24:03 v22018076622670303 sshd\[17199\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.45.244.79 Feb 18 14:24:06 v22018076622670303 sshd\[17199\]: Failed password for invalid user montana from 110.45.244.79 port 52688 ssh2 ...	2020-02-19 00:45:31
167.71.9.180	attackbots	20 attempts against mh-ssh on cloud	2020-02-19 00:51:32
128.199.130.129	attackbots	128.199.130.129 - - [18/Feb/2020:13:23:50 +0000] "POST /wp-login.php HTTP/1.1" 200 6409 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 128.199.130.129 - - [18/Feb/2020:13:23:51 +0000] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-02-19 01:00:11
193.70.88.213	attackspam	Feb 18 16:44:03 legacy sshd[21959]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.70.88.213 Feb 18 16:44:04 legacy sshd[21959]: Failed password for invalid user mariah from 193.70.88.213 port 42632 ssh2 Feb 18 16:47:18 legacy sshd[22113]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.70.88.213 ...	2020-02-19 00:24:13
223.245.213.217	attackbots	Feb 18 14:24:17 grey postfix/smtpd\[28138\]: NOQUEUE: reject: RCPT from unknown\[223.245.213.217\]: 554 5.7.1 Service unavailable\; Client host \[223.245.213.217\] blocked using dul.dnsbl.sorbs.net\; Dynamic IP Addresses See: http://www.sorbs.net/lookup.shtml\?223.245.213.217\; from=\ to=\ proto=ESMTP helo=\ ...	2020-02-19 00:35:59
171.25.193.77	attackspambots	02/18/2020-14:23:56.594293 171.25.193.77 Protocol: 6 ET TOR Known Tor Exit Node Traffic group 16	2020-02-19 00:57:14

Recently Reported IPs

58.132.183.19	46.17.101.235	57.193.80.252	26.251.22.92
43.224.180.206	49.53.246.178	59.136.71.198	187.54.88.213
31.25.158.20	10.93.110.200	95.107.24.3	59.255.123.46
114.220.64.143	1.192.218.141	206.189.158.228	200.46.77.219
191.35.139.49	143.201.77.161	183.141.55.179	180.105.234.14