Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Germany

Internet Service Provider: ComTrade LLC

Hostname: unknown

Organization: unknown

Usage Type: Commercial

Comments:
Type Details Datetime
attackbots
tcp_port_scan, 1001 > threshold 1000, repeats 453 times
2019-11-05 06:48:34
Comments on same subnet:
IP Type Details Datetime
45.136.111.115 attackspambots
RDP brute forcing (r)
2020-02-12 04:59:10
45.136.111.68 attack
Brute-Force Attack
2020-02-09 06:06:34
45.136.111.131 attackspam
Brute-Force Attack
2020-02-09 05:25:10
45.136.111.109 attackbotsspam
Jan  9 15:20:52 debian-2gb-nbg1-2 kernel: \[838965.019442\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.136.111.109 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=181 ID=12894 PROTO=TCP SPT=40032 DPT=33867 WINDOW=1024 RES=0x00 SYN URGP=0
2020-01-09 22:51:58
45.136.111.109 attackspambots
Jan  9 13:47:21 debian-2gb-nbg1-2 kernel: \[833353.752877\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.136.111.109 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=180 ID=49367 PROTO=TCP SPT=40032 DPT=33889 WINDOW=1024 RES=0x00 SYN URGP=0
2020-01-09 20:58:16
45.136.111.109 attack
Jan  3 15:58:09 h2177944 kernel: \[1262092.522476\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.111.109 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=186 ID=27223 PROTO=TCP SPT=48227 DPT=3007 WINDOW=1024 RES=0x00 SYN URGP=0 
Jan  3 15:58:09 h2177944 kernel: \[1262092.522489\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.111.109 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=186 ID=27223 PROTO=TCP SPT=48227 DPT=3007 WINDOW=1024 RES=0x00 SYN URGP=0 
Jan  3 16:33:07 h2177944 kernel: \[1264190.699883\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.111.109 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=186 ID=62098 PROTO=TCP SPT=48227 DPT=3004 WINDOW=1024 RES=0x00 SYN URGP=0 
Jan  3 16:33:07 h2177944 kernel: \[1264190.699897\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.111.109 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=186 ID=62098 PROTO=TCP SPT=48227 DPT=3004 WINDOW=1024 RES=0x00 SYN URGP=0 
Jan  3 16:33:12 h2177944 kernel: \[1264195.130428\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.111.109 DST=85.214.
2020-01-04 00:00:41
45.136.111.109 attack
12/28/2019-06:29:14.241621 45.136.111.109 Protocol: 6 ET SCAN NMAP -sS window 1024
2019-12-28 19:37:56
45.136.111.109 attackbots
Automatic report - Port Scan
2019-12-28 14:01:37
45.136.111.65 attack
Dec 14 09:30:07 debian-2gb-nbg1-2 kernel: \[24593735.530181\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.136.111.65 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=28231 PROTO=TCP SPT=45713 DPT=9094 WINDOW=1024 RES=0x00 SYN URGP=0
2019-12-14 17:04:08
45.136.111.65 attack
Dec 12 08:50:39 debian-2gb-vpn-nbg1-1 kernel: [508219.734117] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=45.136.111.65 DST=78.46.192.101 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=61971 PROTO=TCP SPT=45713 DPT=14350 WINDOW=1024 RES=0x00 SYN URGP=0
2019-12-12 13:58:48
45.136.111.65 attack
Dec 11 11:38:58 debian-2gb-vpn-nbg1-1 kernel: [431921.053048] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=45.136.111.65 DST=78.46.192.101 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=54683 PROTO=TCP SPT=45713 DPT=64337 WINDOW=1024 RES=0x00 SYN URGP=0
2019-12-11 16:59:47
45.136.111.65 attack
Dec  9 20:34:34 debian-2gb-vpn-nbg1-1 kernel: [291261.390516] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=45.136.111.65 DST=78.46.192.101 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=26352 PROTO=TCP SPT=45713 DPT=60385 WINDOW=1024 RES=0x00 SYN URGP=0
2019-12-10 01:43:26
45.136.111.21 attack
firewall-block, port(s): 3319/tcp, 3663/tcp, 3838/tcp
2019-11-23 15:08:04
45.136.111.24 attackspambots
1574317651 - 11/21/2019 07:27:31 Host: 45.136.111.24/45.136.111.24 Port: 6001 TCP Blocked
2019-11-21 16:44:38
45.136.111.21 attackbotsspam
CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found
2019-11-21 07:52:41
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.136.111.112
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 9380
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.136.111.112.			IN	A

;; AUTHORITY SECTION:
.			394	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019110401 1800 900 604800 86400

;; Query time: 61 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Nov 05 06:48:31 CST 2019
;; MSG SIZE  rcvd: 118
Host info
Host 112.111.136.45.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 112.111.136.45.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
118.89.192.39 attackbotsspam
Nov 10 09:29:43 vps691689 sshd[16454]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.192.39
Nov 10 09:29:44 vps691689 sshd[16454]: Failed password for invalid user big123 from 118.89.192.39 port 33744 ssh2
Nov 10 09:35:33 vps691689 sshd[16514]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.192.39
...
2019-11-10 19:05:29
59.145.221.103 attackspam
Nov 10 07:51:23 meumeu sshd[32741]: Failed password for root from 59.145.221.103 port 59842 ssh2
Nov 10 07:56:22 meumeu sshd[5598]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.145.221.103 
Nov 10 07:56:24 meumeu sshd[5598]: Failed password for invalid user sg from 59.145.221.103 port 40994 ssh2
...
2019-11-10 18:49:03
45.237.140.120 attack
$f2bV_matches
2019-11-10 19:13:05
188.165.20.73 attackbots
Nov 10 11:40:11 vps01 sshd[25519]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.165.20.73
Nov 10 11:40:13 vps01 sshd[25519]: Failed password for invalid user lxhawj001 from 188.165.20.73 port 35306 ssh2
2019-11-10 18:49:20
185.176.27.242 attackbotsspam
11/10/2019-11:41:01.589152 185.176.27.242 Protocol: 6 ET DROP Dshield Block Listed Source group 1
2019-11-10 19:01:14
92.222.216.81 attack
$f2bV_matches
2019-11-10 19:20:37
103.207.11.10 attack
" "
2019-11-10 19:17:53
186.71.57.18 attackbots
Nov 10 11:37:24 sticky sshd\[21272\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.71.57.18  user=root
Nov 10 11:37:26 sticky sshd\[21272\]: Failed password for root from 186.71.57.18 port 51972 ssh2
Nov 10 11:41:48 sticky sshd\[21367\]: Invalid user apt-mirror from 186.71.57.18 port 33290
Nov 10 11:41:48 sticky sshd\[21367\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.71.57.18
Nov 10 11:41:50 sticky sshd\[21367\]: Failed password for invalid user apt-mirror from 186.71.57.18 port 33290 ssh2
...
2019-11-10 18:55:29
178.128.121.188 attackspambots
2019-11-10T10:37:02.521275shield sshd\[19386\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.121.188  user=root
2019-11-10T10:37:04.854708shield sshd\[19386\]: Failed password for root from 178.128.121.188 port 51378 ssh2
2019-11-10T10:41:16.823280shield sshd\[20066\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.121.188  user=root
2019-11-10T10:41:19.034462shield sshd\[20066\]: Failed password for root from 178.128.121.188 port 60678 ssh2
2019-11-10T10:45:28.756198shield sshd\[20503\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.121.188  user=root
2019-11-10 19:01:48
45.141.84.25 attack
no
2019-11-10 19:21:14
206.189.24.124 attack
Nov 10 11:59:51 sticky sshd\[21738\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.24.124  user=root
Nov 10 11:59:53 sticky sshd\[21738\]: Failed password for root from 206.189.24.124 port 35722 ssh2
Nov 10 12:03:44 sticky sshd\[21835\]: Invalid user hubei from 206.189.24.124 port 45682
Nov 10 12:03:44 sticky sshd\[21835\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.24.124
Nov 10 12:03:46 sticky sshd\[21835\]: Failed password for invalid user hubei from 206.189.24.124 port 45682 ssh2
...
2019-11-10 19:16:57
13.74.155.45 attack
RDP Brute-Force (Grieskirchen RZ2)
2019-11-10 19:04:18
222.186.175.161 attack
2019-11-10T11:00:35.968686hub.schaetter.us sshd\[21383\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.161  user=root
2019-11-10T11:00:37.283336hub.schaetter.us sshd\[21383\]: Failed password for root from 222.186.175.161 port 34636 ssh2
2019-11-10T11:00:40.213107hub.schaetter.us sshd\[21383\]: Failed password for root from 222.186.175.161 port 34636 ssh2
2019-11-10T11:00:43.960348hub.schaetter.us sshd\[21383\]: Failed password for root from 222.186.175.161 port 34636 ssh2
2019-11-10T11:00:47.506647hub.schaetter.us sshd\[21383\]: Failed password for root from 222.186.175.161 port 34636 ssh2
...
2019-11-10 19:02:44
137.74.119.50 attack
Nov 10 07:52:16 localhost sshd\[10435\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.119.50  user=root
Nov 10 07:52:19 localhost sshd\[10435\]: Failed password for root from 137.74.119.50 port 51076 ssh2
Nov 10 07:55:53 localhost sshd\[10654\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.119.50  user=root
Nov 10 07:55:55 localhost sshd\[10654\]: Failed password for root from 137.74.119.50 port 59386 ssh2
Nov 10 07:59:42 localhost sshd\[10685\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.119.50  user=root
...
2019-11-10 18:50:34
83.212.106.177 attackbotsspam
Nov 10 11:33:45 vpn01 sshd[27692]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.212.106.177
Nov 10 11:33:47 vpn01 sshd[27692]: Failed password for invalid user gitlab-prometheus from 83.212.106.177 port 35244 ssh2
...
2019-11-10 19:10:54

Recently Reported IPs

14.207.42.142 159.203.73.200 94.96.145.99 101.36.152.13
1.160.21.16 94.29.249.47 192.144.129.168 149.202.218.7
89.248.162.209 175.20.42.5 61.216.142.160 70.55.42.22
82.207.206.128 81.11.163.106 209.97.181.42 196.112.128.30
193.188.22.85 216.250.119.233 70.134.38.123 87.255.31.27