Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Germany

Internet Service Provider: ComTrade LLC

Hostname: unknown

Organization: unknown

Usage Type: Commercial

Comments:
Type Details Datetime
attackspambots
1574317651 - 11/21/2019 07:27:31 Host: 45.136.111.24/45.136.111.24 Port: 6001 TCP Blocked
2019-11-21 16:44:38
Comments on same subnet:
IP Type Details Datetime
45.136.111.115 attackspambots
RDP brute forcing (r)
2020-02-12 04:59:10
45.136.111.68 attack
Brute-Force Attack
2020-02-09 06:06:34
45.136.111.131 attackspam
Brute-Force Attack
2020-02-09 05:25:10
45.136.111.109 attackbotsspam
Jan  9 15:20:52 debian-2gb-nbg1-2 kernel: \[838965.019442\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.136.111.109 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=181 ID=12894 PROTO=TCP SPT=40032 DPT=33867 WINDOW=1024 RES=0x00 SYN URGP=0
2020-01-09 22:51:58
45.136.111.109 attackspambots
Jan  9 13:47:21 debian-2gb-nbg1-2 kernel: \[833353.752877\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.136.111.109 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=180 ID=49367 PROTO=TCP SPT=40032 DPT=33889 WINDOW=1024 RES=0x00 SYN URGP=0
2020-01-09 20:58:16
45.136.111.109 attack
Jan  3 15:58:09 h2177944 kernel: \[1262092.522476\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.111.109 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=186 ID=27223 PROTO=TCP SPT=48227 DPT=3007 WINDOW=1024 RES=0x00 SYN URGP=0 
Jan  3 15:58:09 h2177944 kernel: \[1262092.522489\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.111.109 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=186 ID=27223 PROTO=TCP SPT=48227 DPT=3007 WINDOW=1024 RES=0x00 SYN URGP=0 
Jan  3 16:33:07 h2177944 kernel: \[1264190.699883\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.111.109 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=186 ID=62098 PROTO=TCP SPT=48227 DPT=3004 WINDOW=1024 RES=0x00 SYN URGP=0 
Jan  3 16:33:07 h2177944 kernel: \[1264190.699897\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.111.109 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=186 ID=62098 PROTO=TCP SPT=48227 DPT=3004 WINDOW=1024 RES=0x00 SYN URGP=0 
Jan  3 16:33:12 h2177944 kernel: \[1264195.130428\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.111.109 DST=85.214.
2020-01-04 00:00:41
45.136.111.109 attack
12/28/2019-06:29:14.241621 45.136.111.109 Protocol: 6 ET SCAN NMAP -sS window 1024
2019-12-28 19:37:56
45.136.111.109 attackbots
Automatic report - Port Scan
2019-12-28 14:01:37
45.136.111.65 attack
Dec 14 09:30:07 debian-2gb-nbg1-2 kernel: \[24593735.530181\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.136.111.65 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=28231 PROTO=TCP SPT=45713 DPT=9094 WINDOW=1024 RES=0x00 SYN URGP=0
2019-12-14 17:04:08
45.136.111.65 attack
Dec 12 08:50:39 debian-2gb-vpn-nbg1-1 kernel: [508219.734117] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=45.136.111.65 DST=78.46.192.101 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=61971 PROTO=TCP SPT=45713 DPT=14350 WINDOW=1024 RES=0x00 SYN URGP=0
2019-12-12 13:58:48
45.136.111.65 attack
Dec 11 11:38:58 debian-2gb-vpn-nbg1-1 kernel: [431921.053048] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=45.136.111.65 DST=78.46.192.101 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=54683 PROTO=TCP SPT=45713 DPT=64337 WINDOW=1024 RES=0x00 SYN URGP=0
2019-12-11 16:59:47
45.136.111.65 attack
Dec  9 20:34:34 debian-2gb-vpn-nbg1-1 kernel: [291261.390516] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=45.136.111.65 DST=78.46.192.101 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=26352 PROTO=TCP SPT=45713 DPT=60385 WINDOW=1024 RES=0x00 SYN URGP=0
2019-12-10 01:43:26
45.136.111.21 attack
firewall-block, port(s): 3319/tcp, 3663/tcp, 3838/tcp
2019-11-23 15:08:04
45.136.111.21 attackbotsspam
CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found
2019-11-21 07:52:41
45.136.111.21 attackspam
45.136.111.21 was recorded 16 times by 10 hosts attempting to connect to the following ports: 3390,3386,3392,3387,3391,3384,3394,3393,3389,3382,3381. Incident counter (4h, 24h, all-time): 16, 51, 221
2019-11-18 03:10:47
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.136.111.24
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35342
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.136.111.24.			IN	A

;; AUTHORITY SECTION:
.			195	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019110401 1800 900 604800 86400

;; Query time: 66 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Nov 05 06:20:17 CST 2019
;; MSG SIZE  rcvd: 117
Host info
Host 24.111.136.45.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 24.111.136.45.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
165.49.25.193 attackbots
Automatic report - Port Scan Attack
2020-05-12 07:22:54
119.29.2.157 attackbotsspam
Repeated brute force against a port
2020-05-12 07:21:00
218.92.0.138 attackspam
May 12 01:11:15 santamaria sshd\[12646\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.138  user=root
May 12 01:11:17 santamaria sshd\[12646\]: Failed password for root from 218.92.0.138 port 60999 ssh2
May 12 01:11:35 santamaria sshd\[12654\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.138  user=root
...
2020-05-12 07:22:08
134.122.8.197 attack
...
2020-05-12 07:20:37
180.76.167.221 attackspam
Brute force SSH attack
2020-05-12 07:29:22
121.15.7.26 attackspambots
May 12 01:51:25 hosting sshd[4828]: Invalid user ts3server from 121.15.7.26 port 36930
...
2020-05-12 07:09:17
222.73.202.117 attack
Invalid user tw from 222.73.202.117 port 55908
2020-05-12 07:28:32
45.10.175.80 attackspam
May 11 22:34:31 debian-2gb-nbg1-2 kernel: \[11488137.321107\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.10.175.80 DST=195.201.40.59 LEN=44 TOS=0x00 PREC=0x00 TTL=242 ID=55976 PROTO=TCP SPT=40494 DPT=5874 WINDOW=1024 RES=0x00 SYN URGP=0
2020-05-12 07:14:45
157.230.37.142 attack
May 12 00:36:23 vpn01 sshd[16650]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.37.142
May 12 00:36:25 vpn01 sshd[16650]: Failed password for invalid user mongodb from 157.230.37.142 port 59288 ssh2
...
2020-05-12 07:07:07
172.96.242.112 attackbots
May 12 06:03:40 webhost01 sshd[805]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.96.242.112
May 12 06:03:42 webhost01 sshd[805]: Failed password for invalid user temp from 172.96.242.112 port 42604 ssh2
...
2020-05-12 07:35:00
222.165.186.51 attackspambots
May 11 23:03:29 piServer sshd[24616]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.165.186.51 
May 11 23:03:30 piServer sshd[24616]: Failed password for invalid user smkim from 222.165.186.51 port 33314 ssh2
May 11 23:07:41 piServer sshd[25050]: Failed password for root from 222.165.186.51 port 41442 ssh2
...
2020-05-12 06:55:34
180.166.141.58 attackbotsspam
May 12 01:12:11 debian-2gb-nbg1-2 kernel: \[11497596.149942\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=180.166.141.58 DST=195.201.40.59 LEN=40 TOS=0x08 PREC=0x00 TTL=237 ID=54875 PROTO=TCP SPT=50029 DPT=9859 WINDOW=1024 RES=0x00 SYN URGP=0
2020-05-12 07:19:30
103.228.183.10 attack
May 11 21:34:13 l02a sshd[1768]: Invalid user nero from 103.228.183.10
May 11 21:34:13 l02a sshd[1768]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.228.183.10 
May 11 21:34:13 l02a sshd[1768]: Invalid user nero from 103.228.183.10
May 11 21:34:15 l02a sshd[1768]: Failed password for invalid user nero from 103.228.183.10 port 58446 ssh2
2020-05-12 07:27:40
123.146.23.149 attackspambots
Port probing on unauthorized port 6433
2020-05-12 07:26:13
93.174.93.195 attackbots
93.174.93.195 was recorded 7 times by 5 hosts attempting to connect to the following ports: 25524,25600. Incident counter (4h, 24h, all-time): 7, 59, 9104
2020-05-12 06:58:08

Recently Reported IPs

206.189.230.98 58.240.39.245 3.80.224.56 105.101.74.248
45.7.231.94 82.79.245.20 189.102.141.212 175.126.38.26
192.236.160.254 188.239.140.156 81.192.38.179 201.209.184.192
96.84.31.250 52.230.127.59 113.101.65.135 78.149.212.3
142.4.206.18 91.73.136.38 85.128.142.121 14.231.201.16