Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Russia

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
45.141.85.66 attackbots
Triggered: repeated knocking on closed ports.
2020-08-16 08:16:25
45.141.85.200 attack
TCP ports : 3389 / 3883 / 3965 / 5031 / 5043 / 33636 / 33994
2020-08-06 18:43:29
45.141.85.200 attackbotsspam
SmallBizIT.US 3 packets to tcp(3320,33588,33721)
2020-08-06 01:10:23
45.141.85.110 attack
ET CINS Active Threat Intelligence Poor Reputation IP group 23 - port: 5900 proto: TCP cat: Misc Attack
2020-05-03 07:29:45
45.141.85.110 attackspam
[portscan] tcp/3389 [MS RDP]
*(RWIN=65535)(04301449)
2020-05-01 00:27:42
45.141.85.106 attack
firewall-block, port(s): 3633/tcp, 3649/tcp
2020-04-25 22:59:45
45.141.85.106 attackspambots
ET CINS Active Threat Intelligence Poor Reputation IP group 23 - port: 3713 proto: TCP cat: Misc Attack
2020-04-23 19:34:15
45.141.85.106 attackspam
Port 4169 scan denied
2020-04-17 06:47:12
45.141.85.106 attackspambots
Port scan: Attack repeated for 24 hours
2020-04-14 16:24:33
45.141.85.106 attackspambots
IP was detected trying to Brute-Force SSH, FTP, Web Apps, Port-Scan or Hacking.
2020-04-12 12:17:29
45.141.85.106 attackbotsspam
ET CINS Active Threat Intelligence Poor Reputation IP group 26 - port: 4073 proto: TCP cat: Misc Attack
2020-04-11 23:54:43
45.141.85.103 attackbots
" "
2020-04-03 21:10:58
45.141.85.101 attackspam
ET CINS Active Threat Intelligence Poor Reputation IP group 26 - port: 51572 proto: TCP cat: Misc Attack
2020-03-13 09:14:21
45.141.85.101 attackspambots
Portscan or hack attempt detected by psad/fwsnort
2020-02-28 21:40:56
45.141.85.101 attack
02/27/2020-17:46:43.521053 45.141.85.101 Protocol: 6 ET SCAN NMAP -sS window 1024
2020-02-28 08:02:14
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.141.85.4
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7994
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;45.141.85.4.			IN	A

;; AUTHORITY SECTION:
.			353	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022032200 1800 900 604800 86400

;; Query time: 75 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Mar 22 22:52:50 CST 2022
;; MSG SIZE  rcvd: 104
Host info
Host 4.85.141.45.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 4.85.141.45.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
220.180.192.152 attackspambots
Tried sshing with brute force.
2020-08-21 20:18:01
193.35.48.18 attackbotsspam
Aug 21 13:47:36 srv01 postfix/smtpd\[27831\]: warning: unknown\[193.35.48.18\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 21 13:47:52 srv01 postfix/smtpd\[22894\]: warning: unknown\[193.35.48.18\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 21 13:52:35 srv01 postfix/smtpd\[30526\]: warning: unknown\[193.35.48.18\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 21 13:52:53 srv01 postfix/smtpd\[27327\]: warning: unknown\[193.35.48.18\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 21 14:00:53 srv01 postfix/smtpd\[30713\]: warning: unknown\[193.35.48.18\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2020-08-21 20:04:36
222.186.175.216 attack
Aug 21 13:56:30 theomazars sshd[3364]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.216  user=root
Aug 21 13:56:32 theomazars sshd[3364]: Failed password for root from 222.186.175.216 port 36750 ssh2
2020-08-21 20:00:16
112.85.42.176 attack
(sshd) Failed SSH login from 112.85.42.176 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Aug 21 14:10:27 amsweb01 sshd[30800]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.176  user=root
Aug 21 14:10:28 amsweb01 sshd[30799]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.176  user=root
Aug 21 14:10:29 amsweb01 sshd[30799]: Failed password for root from 112.85.42.176 port 14447 ssh2
Aug 21 14:10:29 amsweb01 sshd[30800]: Failed password for root from 112.85.42.176 port 37000 ssh2
Aug 21 14:10:34 amsweb01 sshd[30799]: Failed password for root from 112.85.42.176 port 14447 ssh2
2020-08-21 20:12:47
222.186.180.8 attackspambots
DATE:2020-08-21 14:08:23, IP:222.186.180.8, PORT:ssh SSH brute force auth on honeypot server (honey-neo-dc)
2020-08-21 20:17:46
35.200.241.227 attack
Aug 21 11:43:17 santamaria sshd\[11692\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.200.241.227  user=root
Aug 21 11:43:19 santamaria sshd\[11692\]: Failed password for root from 35.200.241.227 port 51626 ssh2
Aug 21 11:45:18 santamaria sshd\[11709\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.200.241.227  user=root
...
2020-08-21 19:37:48
41.249.250.209 attackspam
Aug 21 12:54:01 MainVPS sshd[2668]: Invalid user yckim from 41.249.250.209 port 47864
Aug 21 12:54:01 MainVPS sshd[2668]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.249.250.209
Aug 21 12:54:01 MainVPS sshd[2668]: Invalid user yckim from 41.249.250.209 port 47864
Aug 21 12:54:03 MainVPS sshd[2668]: Failed password for invalid user yckim from 41.249.250.209 port 47864 ssh2
Aug 21 12:57:47 MainVPS sshd[3815]: Invalid user public from 41.249.250.209 port 55142
...
2020-08-21 19:54:56
123.206.26.133 attackbots
Aug 21 11:18:20 sshgateway sshd\[31047\]: Invalid user hank from 123.206.26.133
Aug 21 11:18:20 sshgateway sshd\[31047\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.26.133
Aug 21 11:18:23 sshgateway sshd\[31047\]: Failed password for invalid user hank from 123.206.26.133 port 37148 ssh2
2020-08-21 19:52:51
67.191.206.122 attackbotsspam
Hits on port : 23
2020-08-21 20:07:34
134.209.24.61 attackbotsspam
Aug 21 14:02:02 vps1 sshd[30590]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.24.61 
Aug 21 14:02:04 vps1 sshd[30590]: Failed password for invalid user jenkins from 134.209.24.61 port 58430 ssh2
Aug 21 14:04:19 vps1 sshd[30648]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.24.61  user=root
Aug 21 14:04:21 vps1 sshd[30648]: Failed password for invalid user root from 134.209.24.61 port 35566 ssh2
Aug 21 14:06:24 vps1 sshd[30663]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.24.61 
Aug 21 14:06:27 vps1 sshd[30663]: Failed password for invalid user username from 134.209.24.61 port 40928 ssh2
Aug 21 14:08:25 vps1 sshd[30692]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.24.61  user=root
...
2020-08-21 20:14:59
93.55.192.42 attackbotsspam
Aug 21 07:26:05 master sshd[27810]: Failed password for invalid user pi from 93.55.192.42 port 43080 ssh2
Aug 21 07:26:05 master sshd[27809]: Failed password for invalid user pi from 93.55.192.42 port 43076 ssh2
2020-08-21 20:03:43
118.25.139.201 attackbots
Invalid user sdp from 118.25.139.201 port 54026
2020-08-21 19:47:27
106.12.7.86 attack
Aug 21 13:40:15 ns381471 sshd[27515]: Failed password for root from 106.12.7.86 port 45844 ssh2
2020-08-21 19:54:32
103.23.144.53 attack
Port Scan
...
2020-08-21 20:11:52
193.27.228.193 attackspam
firewall-block, port(s): 40485/tcp
2020-08-21 19:47:14

Recently Reported IPs

36.137.29.43 7.40.46.239 83.106.181.50 150.30.127.50
148.29.38.159 215.157.250.24 116.233.238.61 36.195.193.72
144.135.33.43 193.177.241.48 138.88.237.79 5.81.90.187
135.94.20.149 37.202.190.123 237.53.71.72 107.197.243.149
96.232.203.72 7.172.5.172 78.74.58.127 99.123.22.176