Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Germany

Internet Service Provider: ComTrade LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspam
Brute-Force Attack
2020-02-09 05:25:10
Comments on same subnet:
IP Type Details Datetime
45.136.111.115 attackspambots
RDP brute forcing (r)
2020-02-12 04:59:10
45.136.111.68 attack
Brute-Force Attack
2020-02-09 06:06:34
45.136.111.109 attackbotsspam
Jan  9 15:20:52 debian-2gb-nbg1-2 kernel: \[838965.019442\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.136.111.109 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=181 ID=12894 PROTO=TCP SPT=40032 DPT=33867 WINDOW=1024 RES=0x00 SYN URGP=0
2020-01-09 22:51:58
45.136.111.109 attackspambots
Jan  9 13:47:21 debian-2gb-nbg1-2 kernel: \[833353.752877\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.136.111.109 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=180 ID=49367 PROTO=TCP SPT=40032 DPT=33889 WINDOW=1024 RES=0x00 SYN URGP=0
2020-01-09 20:58:16
45.136.111.109 attack
Jan  3 15:58:09 h2177944 kernel: \[1262092.522476\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.111.109 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=186 ID=27223 PROTO=TCP SPT=48227 DPT=3007 WINDOW=1024 RES=0x00 SYN URGP=0 
Jan  3 15:58:09 h2177944 kernel: \[1262092.522489\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.111.109 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=186 ID=27223 PROTO=TCP SPT=48227 DPT=3007 WINDOW=1024 RES=0x00 SYN URGP=0 
Jan  3 16:33:07 h2177944 kernel: \[1264190.699883\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.111.109 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=186 ID=62098 PROTO=TCP SPT=48227 DPT=3004 WINDOW=1024 RES=0x00 SYN URGP=0 
Jan  3 16:33:07 h2177944 kernel: \[1264190.699897\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.111.109 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=186 ID=62098 PROTO=TCP SPT=48227 DPT=3004 WINDOW=1024 RES=0x00 SYN URGP=0 
Jan  3 16:33:12 h2177944 kernel: \[1264195.130428\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.111.109 DST=85.214.
2020-01-04 00:00:41
45.136.111.109 attack
12/28/2019-06:29:14.241621 45.136.111.109 Protocol: 6 ET SCAN NMAP -sS window 1024
2019-12-28 19:37:56
45.136.111.109 attackbots
Automatic report - Port Scan
2019-12-28 14:01:37
45.136.111.65 attack
Dec 14 09:30:07 debian-2gb-nbg1-2 kernel: \[24593735.530181\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.136.111.65 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=28231 PROTO=TCP SPT=45713 DPT=9094 WINDOW=1024 RES=0x00 SYN URGP=0
2019-12-14 17:04:08
45.136.111.65 attack
Dec 12 08:50:39 debian-2gb-vpn-nbg1-1 kernel: [508219.734117] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=45.136.111.65 DST=78.46.192.101 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=61971 PROTO=TCP SPT=45713 DPT=14350 WINDOW=1024 RES=0x00 SYN URGP=0
2019-12-12 13:58:48
45.136.111.65 attack
Dec 11 11:38:58 debian-2gb-vpn-nbg1-1 kernel: [431921.053048] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=45.136.111.65 DST=78.46.192.101 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=54683 PROTO=TCP SPT=45713 DPT=64337 WINDOW=1024 RES=0x00 SYN URGP=0
2019-12-11 16:59:47
45.136.111.65 attack
Dec  9 20:34:34 debian-2gb-vpn-nbg1-1 kernel: [291261.390516] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=45.136.111.65 DST=78.46.192.101 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=26352 PROTO=TCP SPT=45713 DPT=60385 WINDOW=1024 RES=0x00 SYN URGP=0
2019-12-10 01:43:26
45.136.111.21 attack
firewall-block, port(s): 3319/tcp, 3663/tcp, 3838/tcp
2019-11-23 15:08:04
45.136.111.24 attackspambots
1574317651 - 11/21/2019 07:27:31 Host: 45.136.111.24/45.136.111.24 Port: 6001 TCP Blocked
2019-11-21 16:44:38
45.136.111.21 attackbotsspam
CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found
2019-11-21 07:52:41
45.136.111.21 attackspam
45.136.111.21 was recorded 16 times by 10 hosts attempting to connect to the following ports: 3390,3386,3392,3387,3391,3384,3394,3393,3389,3382,3381. Incident counter (4h, 24h, all-time): 16, 51, 221
2019-11-18 03:10:47
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.136.111.131
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59904
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.136.111.131.			IN	A

;; AUTHORITY SECTION:
.			227	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020020800 1800 900 604800 86400

;; Query time: 226 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 09 05:25:07 CST 2020
;; MSG SIZE  rcvd: 118
Host info
Host 131.111.136.45.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 131.111.136.45.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
51.75.53.115 attackbots
Oct 31 13:23:42 localhost sshd\[54187\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.53.115  user=root
Oct 31 13:23:44 localhost sshd\[54187\]: Failed password for root from 51.75.53.115 port 52222 ssh2
Oct 31 13:27:41 localhost sshd\[54296\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.53.115  user=root
Oct 31 13:27:43 localhost sshd\[54296\]: Failed password for root from 51.75.53.115 port 35502 ssh2
Oct 31 13:31:46 localhost sshd\[54398\]: Invalid user mika from 51.75.53.115 port 47016
...
2019-11-01 00:26:25
106.12.77.199 attackspambots
Oct 31 16:26:04 minden010 sshd[16042]: Failed password for root from 106.12.77.199 port 40710 ssh2
Oct 31 16:31:24 minden010 sshd[19705]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.77.199
Oct 31 16:31:26 minden010 sshd[19705]: Failed password for invalid user eee from 106.12.77.199 port 48138 ssh2
...
2019-10-31 23:59:51
85.93.20.148 attackspambots
191031  9:35:06 \[Warning\] Access denied for user 'root'@'85.93.20.148' \(using password: YES\)
191031  9:52:25 \[Warning\] Access denied for user 'root'@'85.93.20.148' \(using password: YES\)
191031 10:36:48 \[Warning\] Access denied for user 'root'@'85.93.20.148' \(using password: YES\)
...
2019-11-01 00:03:00
88.200.166.18 attackbots
Unauthorized connection attempt from IP address 88.200.166.18 on Port 445(SMB)
2019-11-01 00:07:09
94.191.50.165 attack
SSH Bruteforce attempt
2019-11-01 00:01:41
95.84.60.206 attack
Unauthorized connection attempt from IP address 95.84.60.206 on Port 445(SMB)
2019-11-01 00:23:36
46.218.138.197 attack
Unauthorized connection attempt from IP address 46.218.138.197 on Port 445(SMB)
2019-11-01 00:05:16
157.55.39.66 attackspam
Automatic report - Banned IP Access
2019-10-31 23:56:42
139.59.41.170 attackbots
Oct 31 11:58:30 mail sshd\[40413\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.41.170  user=root
...
2019-11-01 00:14:22
171.234.63.20 attackspambots
Unauthorized connection attempt from IP address 171.234.63.20 on Port 445(SMB)
2019-11-01 00:07:47
78.187.239.88 attackbots
Unauthorized connection attempt from IP address 78.187.239.88 on Port 445(SMB)
2019-11-01 00:20:32
177.94.12.204 attackspambots
IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/177.94.12.204/ 
 
 BR - 1H : (378)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : BR 
 NAME ASN : ASN27699 
 
 IP : 177.94.12.204 
 
 CIDR : 177.94.0.0/16 
 
 PREFIX COUNT : 267 
 
 UNIQUE IP COUNT : 6569728 
 
 
 ATTACKS DETECTED ASN27699 :  
  1H - 12 
  3H - 23 
  6H - 38 
 12H - 77 
 24H - 158 
 
 DateTime : 2019-10-31 13:03:08 
 
 INFO : Server 403 - Looking for resource vulnerabilities Detected and Blocked by ADMIN  - data recovery
2019-11-01 00:11:59
118.140.244.226 attackbotsspam
Unauthorized connection attempt from IP address 118.140.244.226 on Port 445(SMB)
2019-10-31 23:59:32
37.110.92.147 attackspambots
Chat Spam
2019-10-31 23:49:23
51.77.133.61 attackspambots
WordPress login Brute force / Web App Attack on client site.
2019-11-01 00:24:22

Recently Reported IPs

113.20.186.142 97.213.125.146 221.124.112.19 190.176.157.72
117.214.83.174 110.181.81.113 46.31.84.128 187.192.63.163
85.127.235.9 110.247.64.52 102.61.197.33 128.148.52.220
154.65.13.65 173.137.223.204 111.133.159.229 2.49.19.18
183.57.163.28 148.67.239.74 98.82.103.218 60.26.203.36