Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Bosnia and Herzegovina

Internet Service Provider: Formea Drustvo Za Trgovinu Informaticki Inzenjering I Konsalting d.o.o. Visoko

Hostname: unknown

Organization: unknown

Usage Type: Commercial

Comments:
Type Details Datetime
attackspambots
(sshd) Failed SSH login from 45.14.38.4 (BA/Bosnia and Herzegovina/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Apr 11 02:03:13 srv sshd[30785]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.38.4  user=root
Apr 11 02:03:15 srv sshd[30785]: Failed password for root from 45.14.38.4 port 34158 ssh2
Apr 11 02:10:20 srv sshd[30881]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.38.4  user=root
Apr 11 02:10:22 srv sshd[30881]: Failed password for root from 45.14.38.4 port 50204 ssh2
Apr 11 02:13:12 srv sshd[30912]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.38.4  user=root
2020-04-11 07:33:18
attackbots
(sshd) Failed SSH login from 45.14.38.4 (BA/Bosnia and Herzegovina/-): 5 in the last 3600 secs
2020-04-08 15:49:54
attack
Apr  7 01:48:44 host sshd[44086]: Invalid user python from 45.14.38.4 port 45992
...
2020-04-07 07:53:12
attackbotsspam
2020-04-04T13:50:21.150963shield sshd\[26103\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.38.4  user=root
2020-04-04T13:50:22.910564shield sshd\[26103\]: Failed password for root from 45.14.38.4 port 40316 ssh2
2020-04-04T13:54:36.134172shield sshd\[27059\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.38.4  user=root
2020-04-04T13:54:38.234832shield sshd\[27059\]: Failed password for root from 45.14.38.4 port 53018 ssh2
2020-04-04T13:58:53.889692shield sshd\[28108\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.38.4  user=root
2020-04-05 02:22:28
attack
SSH Brute Force, server-1 sshd[14495]: Failed password for invalid user arma3server from 45.14.38.4 port 50782 ssh2
2019-08-16 11:29:34
attackspambots
Aug 15 00:54:09 www_kotimaassa_fi sshd[26259]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.38.4
Aug 15 00:54:10 www_kotimaassa_fi sshd[26259]: Failed password for invalid user infoadm from 45.14.38.4 port 34686 ssh2
...
2019-08-15 09:07:47
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.14.38.4
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 22973
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.14.38.4.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019081401 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Aug 15 09:07:39 CST 2019
;; MSG SIZE  rcvd: 114
Host info
Host 4.38.14.45.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 4.38.14.45.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
51.158.112.98 attack
Invalid user redis1 from 51.158.112.98 port 58752
2020-07-14 18:50:06
185.123.164.52 attack
2020-07-13 UTC: (40x) - abhijith,admin(2x),balkrishan,bigdata,celso,cherry,denver,factorio,fangnan,glass,gp,info,jacob,lester,mazen,mea,minecraft,mysql,n,nominatim,oam,omnix,philipp,postgres,rustserver,sara,science,server,stacy,theo,ubuntu,ugo,vijay,weblogic,wyf,xy,zeng,zhang,zy
2020-07-14 18:53:56
117.202.8.55 attack
2020-07-14T11:59:22.579033+02:00  sshd[7777]: Failed password for invalid user joy from 117.202.8.55 port 35718 ssh2
2020-07-14 18:48:32
89.23.37.77 attackbots
89.23.37.77 - - [14/Jul/2020:08:38:49 +0100] "POST /wp-login.php HTTP/1.1" 200 2435 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
89.23.37.77 - - [14/Jul/2020:08:38:51 +0100] "POST /wp-login.php HTTP/1.1" 200 2415 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
89.23.37.77 - - [14/Jul/2020:08:38:51 +0100] "POST /wp-login.php HTTP/1.1" 200 2415 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-07-14 19:03:35
138.68.253.149 attackbots
" "
2020-07-14 19:01:25
118.137.10.36 attack
2020-07-13 22:47:29.737856-0500  localhost smtpd[20795]: NOQUEUE: reject: RCPT from unknown[118.137.10.36]: 554 5.7.1 Service unavailable; Client host [118.137.10.36] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/118.137.10.36; from= to= proto=ESMTP helo=
2020-07-14 18:59:03
211.170.61.184 attackbots
5x Failed Password
2020-07-14 18:48:14
103.78.215.150 attackbots
$f2bV_matches
2020-07-14 19:01:11
147.135.208.33 attackspambots
Jul 14 07:24:30 game-panel sshd[27646]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.135.208.33
Jul 14 07:24:32 game-panel sshd[27646]: Failed password for invalid user testtest from 147.135.208.33 port 41824 ssh2
Jul 14 07:26:59 game-panel sshd[27718]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.135.208.33
2020-07-14 18:45:00
41.208.68.4 attackbots
Jul 14 12:22:30 home sshd[1894]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.208.68.4
Jul 14 12:22:32 home sshd[1894]: Failed password for invalid user str from 41.208.68.4 port 58904 ssh2
Jul 14 12:24:41 home sshd[2121]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.208.68.4
...
2020-07-14 18:49:12
41.93.32.89 attackspambots
Jul 14 12:49:07 *user* sshd[31052]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.93.32.89 Jul 14 12:49:09 *user* sshd[31052]: Failed password for invalid user karol from 41.93.32.89 port 49214 ssh2
2020-07-14 19:09:43
104.131.91.148 attackbotsspam
Automatic Fail2ban report - Trying login SSH
2020-07-14 19:00:20
178.62.76.138 attackbots
WordPress login Brute force / Web App Attack on client site.
2020-07-14 19:02:36
78.128.113.230 attackspam
Jul 14 12:49:12 vpn01 sshd[17126]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.128.113.230
Jul 14 12:49:14 vpn01 sshd[17126]: Failed password for invalid user admin from 78.128.113.230 port 60569 ssh2
...
2020-07-14 19:08:46
188.112.9.25 attackspam
Jul 14 05:12:17 mail.srvfarm.net postfix/smtps/smtpd[3297637]: warning: unknown[188.112.9.25]: SASL PLAIN authentication failed: 
Jul 14 05:12:17 mail.srvfarm.net postfix/smtps/smtpd[3297637]: lost connection after AUTH from unknown[188.112.9.25]
Jul 14 05:14:40 mail.srvfarm.net postfix/smtps/smtpd[3311872]: warning: unknown[188.112.9.25]: SASL PLAIN authentication failed: 
Jul 14 05:14:40 mail.srvfarm.net postfix/smtps/smtpd[3311872]: lost connection after AUTH from unknown[188.112.9.25]
Jul 14 05:18:28 mail.srvfarm.net postfix/smtps/smtpd[3297637]: warning: unknown[188.112.9.25]: SASL PLAIN authentication failed:
2020-07-14 19:06:31

Recently Reported IPs

175.21.20.10 67.129.241.30 18.217.247.237 221.150.155.103
186.210.17.236 159.65.155.10 1.235.143.219 203.45.45.241
123.10.166.57 101.227.90.169 189.126.173.15 168.90.78.216
178.62.155.249 186.96.127.221 191.53.196.37 187.74.157.246
43.246.138.6 116.26.93.174 184.101.65.42 198.12.127.111