Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Russian Federation

Internet Service Provider: Media Land LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspambots
Aug  2 10:33:36 debian-2gb-nbg1-2 kernel: \[18615692.571001\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.141.84.94 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=38541 PROTO=TCP SPT=43451 DPT=4790 WINDOW=1024 RES=0x00 SYN URGP=0
2020-08-02 16:44:00
attackspam
Port scan on 5 port(s): 4822 4967 5272 5410 5571
2020-07-30 19:05:33
attack
Jul 28 18:22:57 debian-2gb-nbg1-2 kernel: \[18211877.012398\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.141.84.94 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=23568 PROTO=TCP SPT=50204 DPT=5625 WINDOW=1024 RES=0x00 SYN URGP=0
2020-07-29 00:36:24
attackbotsspam
Jul 28 01:26:13 debian-2gb-nbg1-2 kernel: \[18150876.575895\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.141.84.94 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=40520 PROTO=TCP SPT=58652 DPT=5082 WINDOW=1024 RES=0x00 SYN URGP=0
2020-07-28 07:37:16
attackbots
Jul 27 20:18:49 debian-2gb-nbg1-2 kernel: \[18132434.066191\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.141.84.94 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=35593 PROTO=TCP SPT=58652 DPT=5736 WINDOW=1024 RES=0x00 SYN URGP=0
2020-07-28 02:50:40
attackspambots
Jul 26 22:32:04 debian-2gb-nbg1-2 kernel: \[18054032.629114\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.141.84.94 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=56860 PROTO=TCP SPT=58652 DPT=5956 WINDOW=1024 RES=0x00 SYN URGP=0
2020-07-27 04:32:36
attack
Jul 26 12:38:04 debian-2gb-nbg1-2 kernel: \[18018394.868328\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.141.84.94 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=11094 PROTO=TCP SPT=48599 DPT=4932 WINDOW=1024 RES=0x00 SYN URGP=0
2020-07-26 18:46:02
attack
Jul 24 20:09:37 debian-2gb-nbg1-2 kernel: \[17872696.461731\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.141.84.94 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=50089 PROTO=TCP SPT=49451 DPT=4228 WINDOW=1024 RES=0x00 SYN URGP=0
2020-07-25 02:11:03
attackspambots
Jul 20 11:55:32 [host] kernel: [906299.000602] [UF
Jul 20 12:24:38 [host] kernel: [908044.695983] [UF
Jul 20 12:25:42 [host] kernel: [908108.393338] [UF
Jul 20 12:31:10 [host] kernel: [908436.266237] [UF
Jul 20 12:33:30 [host] kernel: [908576.638374] [UF
Jul 20 12:44:04 [host] kernel: [909210.074451] [UF
2020-07-20 19:11:35
attack
Jul 19 22:59:08 debian-2gb-nbg1-2 kernel: \[17450891.310110\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.141.84.94 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=62730 PROTO=TCP SPT=45435 DPT=5316 WINDOW=1024 RES=0x00 SYN URGP=0
2020-07-20 05:00:40
attack
Jul 19 06:36:45 debian-2gb-nbg1-2 kernel: \[17391951.475452\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.141.84.94 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=24023 PROTO=TCP SPT=42429 DPT=5883 WINDOW=1024 RES=0x00 SYN URGP=0
2020-07-19 12:46:16
attack
Jul 17 06:25:51 debian-2gb-nbg1-2 kernel: \[17218508.094172\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.141.84.94 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=47121 PROTO=TCP SPT=41873 DPT=4894 WINDOW=1024 RES=0x00 SYN URGP=0
2020-07-17 12:59:05
Comments on same subnet:
IP Type Details Datetime
45.141.84.126 attack
Login failure from 45.141.84.126 via ssh
2020-10-14 08:35:33
45.141.84.57 attackbotsspam
TCP port : 3389
2020-10-13 20:43:13
45.141.84.57 attackbotsspam
 TCP (SYN) 45.141.84.57:46343 -> port 3389, len 44
2020-10-13 12:14:48
45.141.84.57 attackspambots
ET CINS Active Threat Intelligence Poor Reputation IP group 28 - port: 3389 proto: tcp cat: Misc Attackbytes: 60
2020-10-13 05:04:40
45.141.84.173 attackbots
 TCP (SYN) 45.141.84.173:49148 -> port 3333, len 44
2020-10-12 01:28:29
45.141.84.173 attack
ET CINS Active Threat Intelligence Poor Reputation IP group 28 - port: 8889 proto: tcp cat: Misc Attackbytes: 60
2020-10-11 17:19:41
45.141.84.57 attackbots
ET CINS Active Threat Intelligence Poor Reputation IP group 27
2020-10-10 08:03:20
45.141.84.57 attack
ET CINS Active Threat Intelligence Poor Reputation IP group 27
2020-10-10 00:26:40
45.141.84.57 attackbotsspam
[portscan] tcp/3389 [MS RDP]
*(RWIN=1024)(10090804)
2020-10-09 16:12:36
45.141.84.35 attackspam
RDP Bruteforce
2020-10-06 05:01:58
45.141.84.35 attackspam
RDP Bruteforce
2020-10-05 21:04:54
45.141.84.35 attackspam
RDP Bruteforce
2020-10-05 12:54:53
45.141.84.175 attackspambots
RDPBrutePap
2020-10-05 03:46:01
45.141.84.191 attackbots
Repeated RDP login failures. Last user: administrator
2020-10-05 03:45:37
45.141.84.175 attackspambots
Repeated RDP login failures. Last user: openpgsvc
2020-10-04 19:34:37
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.141.84.94
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60848
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.141.84.94.			IN	A

;; AUTHORITY SECTION:
.			304	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020071604 1800 900 604800 86400

;; Query time: 25 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jul 17 12:58:57 CST 2020
;; MSG SIZE  rcvd: 116
Host info
Host 94.84.141.45.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 94.84.141.45.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
129.204.76.34 attackspambots
Jul  8 22:57:43 nexus sshd[14619]: Invalid user ln from 129.204.76.34 port 53162
Jul  8 22:57:43 nexus sshd[14619]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.76.34
Jul  8 22:57:45 nexus sshd[14619]: Failed password for invalid user ln from 129.204.76.34 port 53162 ssh2
Jul  8 22:57:45 nexus sshd[14619]: Received disconnect from 129.204.76.34 port 53162:11: Bye Bye [preauth]
Jul  8 22:57:45 nexus sshd[14619]: Disconnected from 129.204.76.34 port 53162 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=129.204.76.34
2019-07-10 15:52:15
111.246.77.117 attackbots
[portscan] Port scan
2019-07-10 15:36:58
191.193.187.254 attackspam
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-08 20:33:21,461 INFO [shellcode_manager] (191.193.187.254) no match, writing hexdump (38fb75822e450e763c0bdf6e86bcc376 :2176131) - MS17010 (EternalBlue)
2019-07-10 15:55:02
152.169.204.74 attackspam
Jul  8 17:06:32 *** sshd[15484]: Invalid user rp from 152.169.204.74 port 23907
Jul  8 17:06:33 *** sshd[15484]: Failed password for invalid user rp from 152.169.204.74 port 23907 ssh2
Jul  8 17:06:34 *** sshd[15484]: Received disconnect from 152.169.204.74 port 23907:11: Bye Bye [preauth]
Jul  8 17:06:34 *** sshd[15484]: Disconnected from 152.169.204.74 port 23907 [preauth]
Jul  8 17:07:00 *** sshd[15870]: Invalid user rp from 152.169.204.74 port 32193
Jul  8 17:07:02 *** sshd[15870]: Failed password for invalid user rp from 152.169.204.74 port 32193 ssh2
Jul  8 17:07:02 *** sshd[15870]: Received disconnect from 152.169.204.74 port 32193:11: Bye Bye [preauth]
Jul  8 17:07:02 *** sshd[15870]: Disconnected from 152.169.204.74 port 32193 [preauth]
Jul  8 17:10:07 *** sshd[18230]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.169.204.74  user=r.r
Jul  8 17:10:10 *** sshd[18230]: Failed password for r.r from 152.169.204.74 port ........
-------------------------------
2019-07-10 16:07:10
125.212.203.113 attack
Jul 10 03:41:20 www sshd\[4076\]: Invalid user frank from 125.212.203.113 port 60490
...
2019-07-10 15:31:10
218.203.204.144 attackbots
Jul 10 01:13:56 Proxmox sshd\[28693\]: Invalid user demouser from 218.203.204.144 port 36252
Jul 10 01:13:56 Proxmox sshd\[28693\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.203.204.144
Jul 10 01:13:58 Proxmox sshd\[28693\]: Failed password for invalid user demouser from 218.203.204.144 port 36252 ssh2
Jul 10 01:16:59 Proxmox sshd\[31595\]: User root from 218.203.204.144 not allowed because not listed in AllowUsers
Jul 10 01:16:59 Proxmox sshd\[31595\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.203.204.144  user=root
Jul 10 01:17:01 Proxmox sshd\[31595\]: Failed password for invalid user root from 218.203.204.144 port 48165 ssh2
2019-07-10 15:41:15
111.230.248.125 attackbotsspam
2019-07-10T00:12:25.829669abusebot-8.cloudsearch.cf sshd\[18075\]: Invalid user henry from 111.230.248.125 port 45236
2019-07-10 15:33:16
202.137.154.198 attack
Jul 10 02:17:55 srv-4 sshd\[31330\]: Invalid user admin from 202.137.154.198
Jul 10 02:17:55 srv-4 sshd\[31330\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.137.154.198
Jul 10 02:17:57 srv-4 sshd\[31330\]: Failed password for invalid user admin from 202.137.154.198 port 53520 ssh2
...
2019-07-10 15:21:05
105.247.157.59 attackspambots
Jul 10 02:02:41 OPSO sshd\[9871\]: Invalid user stella from 105.247.157.59 port 44661
Jul 10 02:02:41 OPSO sshd\[9871\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=105.247.157.59
Jul 10 02:02:43 OPSO sshd\[9871\]: Failed password for invalid user stella from 105.247.157.59 port 44661 ssh2
Jul 10 02:06:42 OPSO sshd\[10208\]: Invalid user administrador from 105.247.157.59 port 58691
Jul 10 02:06:42 OPSO sshd\[10208\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=105.247.157.59
2019-07-10 15:36:20
218.104.199.131 attackspambots
Jul 10 01:10:30 ovpn sshd\[21994\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.104.199.131  user=root
Jul 10 01:10:32 ovpn sshd\[21994\]: Failed password for root from 218.104.199.131 port 59066 ssh2
Jul 10 01:15:45 ovpn sshd\[23013\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.104.199.131  user=root
Jul 10 01:15:48 ovpn sshd\[23013\]: Failed password for root from 218.104.199.131 port 52503 ssh2
Jul 10 01:17:33 ovpn sshd\[23324\]: Invalid user readonly from 218.104.199.131
Jul 10 01:17:33 ovpn sshd\[23324\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.104.199.131
2019-07-10 15:28:07
106.13.35.212 attackbotsspam
SSH bruteforce
2019-07-10 15:46:36
104.238.116.94 attackspambots
Jul 10 07:55:45 MK-Soft-VM6 sshd\[14962\]: Invalid user teamspeak5 from 104.238.116.94 port 48118
Jul 10 07:55:45 MK-Soft-VM6 sshd\[14962\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.238.116.94
Jul 10 07:55:47 MK-Soft-VM6 sshd\[14962\]: Failed password for invalid user teamspeak5 from 104.238.116.94 port 48118 ssh2
...
2019-07-10 15:56:05
164.132.196.98 attack
Jul 10 13:13:28 itv-usvr-02 sshd[32522]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.196.98  user=root
Jul 10 13:13:29 itv-usvr-02 sshd[32522]: Failed password for root from 164.132.196.98 port 45242 ssh2
Jul 10 13:15:56 itv-usvr-02 sshd[32527]: Invalid user long from 164.132.196.98 port 56081
Jul 10 13:15:56 itv-usvr-02 sshd[32527]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.196.98
Jul 10 13:15:56 itv-usvr-02 sshd[32527]: Invalid user long from 164.132.196.98 port 56081
Jul 10 13:15:58 itv-usvr-02 sshd[32527]: Failed password for invalid user long from 164.132.196.98 port 56081 ssh2
2019-07-10 15:26:51
75.31.93.181 attackbotsspam
Jul  9 23:06:38 lola sshd[16552]: Invalid user sam from 75.31.93.181
Jul  9 23:06:38 lola sshd[16552]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=75.31.93.181 
Jul  9 23:06:40 lola sshd[16552]: Failed password for invalid user sam from 75.31.93.181 port 55078 ssh2
Jul  9 23:06:40 lola sshd[16552]: Received disconnect from 75.31.93.181: 11: Bye Bye [preauth]
Jul 10 00:15:16 lola sshd[18935]: Invalid user joana from 75.31.93.181
Jul 10 00:15:16 lola sshd[18935]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=75.31.93.181 
Jul 10 00:15:18 lola sshd[18935]: Failed password for invalid user joana from 75.31.93.181 port 32936 ssh2
Jul 10 00:15:18 lola sshd[18935]: Received disconnect from 75.31.93.181: 11: Bye Bye [preauth]
Jul 10 00:16:43 lola sshd[19003]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=75.31.93.181  user=r.r
Jul 10 00:16:46 lola sshd........
-------------------------------
2019-07-10 15:58:06
148.70.249.72 attackbots
$f2bV_matches
2019-07-10 15:57:09

Recently Reported IPs

134.122.86.98 123.24.206.31 39.229.180.171 194.87.138.213
85.209.0.61 110.164.70.118 103.217.255.140 180.158.13.218
116.179.32.34 54.246.7.85 192.241.236.138 103.82.15.29
46.101.248.251 34.243.126.16 66.249.79.91 54.39.51.192
190.152.215.77 101.109.218.154 51.179.107.255 194.26.29.80