45.140.168.154

Basic Info

City: unknown

Region: unknown

Country: Russian Federation

Internet Service Provider: SmartData LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Automatic report - Port Scan Attack	2019-10-16 15:31:16

Comments on same subnet:

IP	Type	Details	Datetime
45.140.168.188	attack	Apr 16 05:52:36 host sshd[14668]: Invalid user ran from 45.140.168.188 port 58264 ...	2020-04-16 15:16:57
45.140.168.188	attack	Apr 15 20:23:07 ip-172-31-62-245 sshd\[6472\]: Invalid user ev from 45.140.168.188\ Apr 15 20:23:09 ip-172-31-62-245 sshd\[6472\]: Failed password for invalid user ev from 45.140.168.188 port 39282 ssh2\ Apr 15 20:26:30 ip-172-31-62-245 sshd\[6515\]: Invalid user driver from 45.140.168.188\ Apr 15 20:26:32 ip-172-31-62-245 sshd\[6515\]: Failed password for invalid user driver from 45.140.168.188 port 46652 ssh2\ Apr 15 20:28:29 ip-172-31-62-245 sshd\[6533\]: Invalid user gh from 45.140.168.188\	2020-04-16 05:04:41

Type

Details

Datetime

45.140.168.188

attack

Apr 16 05:52:36 host sshd[14668]: Invalid user ran from 45.140.168.188 port 58264
...

2020-04-16 15:16:57

45.140.168.188

attack

Apr 15 20:23:07 ip-172-31-62-245 sshd\[6472\]: Invalid user ev from 45.140.168.188\
Apr 15 20:23:09 ip-172-31-62-245 sshd\[6472\]: Failed password for invalid user ev from 45.140.168.188 port 39282 ssh2\
Apr 15 20:26:30 ip-172-31-62-245 sshd\[6515\]: Invalid user driver from 45.140.168.188\
Apr 15 20:26:32 ip-172-31-62-245 sshd\[6515\]: Failed password for invalid user driver from 45.140.168.188 port 46652 ssh2\
Apr 15 20:28:29 ip-172-31-62-245 sshd\[6533\]: Invalid user gh from 45.140.168.188\

2020-04-16 05:04:41

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.140.168.154
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34683
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.140.168.154.			IN	A

;; AUTHORITY SECTION:
.			120	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019101600 1800 900 604800 86400

;; Query time: 95 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Oct 16 15:31:12 CST 2019
;; MSG SIZE  rcvd: 118

Host info

Host 154.168.140.45.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 154.168.140.45.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
95.57.225.134	attack	Nov 8 00:03:39 mailman postfix/smtpd[24687]: NOQUEUE: reject: RCPT from unknown[95.57.225.134]: 554 5.7.1 Service unavailable; Client host [95.57.225.134] blocked using sbl-xbl.spamhaus.org; https://www.spamhaus.org/query/ip/95.57.225.134; from= to= proto=ESMTP helo=<[95.57.225.134]> Nov 8 00:30:43 mailman postfix/smtpd[24919]: NOQUEUE: reject: RCPT from unknown[95.57.225.134]: 554 5.7.1 Service unavailable; Client host [95.57.225.134] blocked using sbl-xbl.spamhaus.org; https://www.spamhaus.org/query/ip/95.57.225.134; from= to= proto=ESMTP helo=<[95.57.225.134]>	2019-11-08 15:28:25
117.121.100.228	attack	2019-11-08T07:06:27.444120shield sshd\[3304\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.121.100.228 user=root 2019-11-08T07:06:29.448910shield sshd\[3304\]: Failed password for root from 117.121.100.228 port 56406 ssh2 2019-11-08T07:10:58.459620shield sshd\[3899\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.121.100.228 user=root 2019-11-08T07:11:00.334102shield sshd\[3899\]: Failed password for root from 117.121.100.228 port 33810 ssh2 2019-11-08T07:15:34.358013shield sshd\[4439\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.121.100.228 user=root	2019-11-08 15:25:48
201.149.22.37	attackspambots	$f2bV_matches	2019-11-08 15:41:40
142.93.108.189	attackbotsspam	Automatic report - Banned IP Access	2019-11-08 15:37:59
77.42.86.145	attack	Automatic report - Port Scan Attack	2019-11-08 15:30:50
180.178.108.220	attackbotsspam	Automatic report - Banned IP Access	2019-11-08 15:22:17
191.54.224.83	attackspambots	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/191.54.224.83/ BR - 1H : (188) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : BR NAME ASN : ASN53006 IP : 191.54.224.83 CIDR : 191.54.0.0/15 PREFIX COUNT : 15 UNIQUE IP COUNT : 599808 ATTACKS DETECTED ASN53006 : 1H - 1 3H - 4 6H - 6 12H - 13 24H - 22 DateTime : 2019-11-08 07:30:47 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery	2019-11-08 15:19:03
128.199.110.156	attack	fail2ban honeypot	2019-11-08 15:23:43
91.250.242.12	attackbots	geburtshaus-fulda.de:80 91.250.242.12 - - \[08/Nov/2019:07:29:45 +0100\] "POST /xmlrpc.php HTTP/1.0" 301 515 "-" "Mozilla/5.0 $X11\; Linux x86_64\; rv:60.0$ Gecko/20100101 Firefox/60.0" www.geburtshaus-fulda.de 91.250.242.12 \[08/Nov/2019:07:29:48 +0100\] "POST /xmlrpc.php HTTP/1.0" 200 3777 "-" "Mozilla/5.0 $X11\; Linux x86_64\; rv:60.0$ Gecko/20100101 Firefox/60.0"	2019-11-08 15:45:47
223.85.57.70	attackbotsspam	2019-11-08T07:02:21.113190abusebot-6.cloudsearch.cf sshd\[1794\]: Invalid user 123456789a from 223.85.57.70 port 46934	2019-11-08 15:40:53
80.211.171.78	attack	Nov 8 06:30:36 ms-srv sshd[58972]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.171.78 user=root Nov 8 06:30:38 ms-srv sshd[58972]: Failed password for invalid user root from 80.211.171.78 port 50512 ssh2	2019-11-08 15:29:56
58.37.18.213	attack	Nov 8 03:57:07 ws22vmsma01 sshd[34589]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.37.18.213 Nov 8 03:57:09 ws22vmsma01 sshd[34589]: Failed password for invalid user macrolan from 58.37.18.213 port 777 ssh2 ...	2019-11-08 15:31:53
120.92.173.154	attackspambots	Nov 8 07:30:05 v22018076622670303 sshd\[3077\]: Invalid user mri from 120.92.173.154 port 47747 Nov 8 07:30:05 v22018076622670303 sshd\[3077\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.92.173.154 Nov 8 07:30:07 v22018076622670303 sshd\[3077\]: Failed password for invalid user mri from 120.92.173.154 port 47747 ssh2 ...	2019-11-08 15:25:08
129.28.188.115	attackbotsspam	Nov 8 08:00:07 vps647732 sshd[20736]: Failed password for root from 129.28.188.115 port 44944 ssh2 Nov 8 08:04:47 vps647732 sshd[20838]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.28.188.115 ...	2019-11-08 15:23:15
109.224.22.34	attackbotsspam	postfix	2019-11-08 15:48:31

Recently Reported IPs

31.47.38.100	190.104.116.2	116.239.252.156	45.141.84.18
121.58.213.195	89.117.178.145	71.91.230.226	128.199.169.11
185.103.243.59	116.239.252.32	232.211.62.254	173.255.192.67
73.194.20.180	98.203.228.84	12.233.100.109	249.67.192.94
169.93.63.58	93.200.136.127	212.32.13.65	104.168.211.253