Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Romania

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
botsattackproxy
SSH bot
2025-03-20 13:48:12
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.142.193.152
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14332
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;45.142.193.152.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025032000 1800 900 604800 86400

;; Query time: 62 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Mar 20 13:48:11 CST 2025
;; MSG SIZE  rcvd: 107
Host info
Host 152.193.142.45.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 152.193.142.45.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
159.65.9.28 attack
2019-10-08T22:51:46.148108abusebot-5.cloudsearch.cf sshd\[10505\]: Invalid user Adolph2017 from 159.65.9.28 port 50758
2019-10-09 07:30:27
208.109.53.185 attackbots
[munged]::443 208.109.53.185 - - [08/Oct/2019:23:34:13 +0200] "POST /[munged]: HTTP/1.1" 200 9079 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 208.109.53.185 - - [08/Oct/2019:23:34:15 +0200] "POST /[munged]: HTTP/1.1" 200 9079 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 208.109.53.185 - - [08/Oct/2019:23:34:17 +0200] "POST /[munged]: HTTP/1.1" 200 9079 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 208.109.53.185 - - [08/Oct/2019:23:34:19 +0200] "POST /[munged]: HTTP/1.1" 200 9079 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 208.109.53.185 - - [08/Oct/2019:23:34:21 +0200] "POST /[munged]: HTTP/1.1" 200 9079 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 208.109.53.185 - - [08/Oct/2019:23:34:22 +0200] "POST /[munged]: HTTP/1.1" 200 9079 "-" "Mozilla/5.0 (X11
2019-10-09 07:26:22
104.248.146.1 attackspam
fail2ban honeypot
2019-10-09 07:29:41
222.186.173.154 attack
Oct  9 01:05:20 dcd-gentoo sshd[23788]: User root from 222.186.173.154 not allowed because none of user's groups are listed in AllowGroups
Oct  9 01:05:25 dcd-gentoo sshd[23788]: error: PAM: Authentication failure for illegal user root from 222.186.173.154
Oct  9 01:05:20 dcd-gentoo sshd[23788]: User root from 222.186.173.154 not allowed because none of user's groups are listed in AllowGroups
Oct  9 01:05:25 dcd-gentoo sshd[23788]: error: PAM: Authentication failure for illegal user root from 222.186.173.154
Oct  9 01:05:20 dcd-gentoo sshd[23788]: User root from 222.186.173.154 not allowed because none of user's groups are listed in AllowGroups
Oct  9 01:05:25 dcd-gentoo sshd[23788]: error: PAM: Authentication failure for illegal user root from 222.186.173.154
Oct  9 01:05:25 dcd-gentoo sshd[23788]: Failed keyboard-interactive/pam for invalid user root from 222.186.173.154 port 64866 ssh2
...
2019-10-09 07:06:07
46.101.27.6 attack
SSH Bruteforce attempt
2019-10-09 06:58:16
175.6.100.58 attackspambots
Oct  8 16:07:04 *** sshd[20373]: Failed password for invalid user hduser from 175.6.100.58 port 20769 ssh2
2019-10-09 07:32:40
202.39.133.175 attackbots
Unauthorized connection attempt from IP address 202.39.133.175 on Port 445(SMB)
2019-10-09 07:18:47
45.76.154.45 attackbotsspam
10/08/2019-16:02:23.108466 45.76.154.45 Protocol: 6 ET SCAN Potential SSH Scan
2019-10-09 07:12:55
185.53.88.102 attackspambots
\[2019-10-08 18:59:53\] NOTICE\[1887\] chan_sip.c: Registration from '"602" \' failed for '185.53.88.102:5501' - Wrong password
\[2019-10-08 18:59:53\] SECURITY\[1898\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-08T18:59:53.101-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="602",SessionID="0x7fc3ad563028",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.102/5501",Challenge="48287b02",ReceivedChallenge="48287b02",ReceivedHash="d491a9a5e4f7fd1456a3f4b35538153c"
\[2019-10-08 18:59:53\] NOTICE\[1887\] chan_sip.c: Registration from '"602" \' failed for '185.53.88.102:5501' - Wrong password
\[2019-10-08 18:59:53\] SECURITY\[1898\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-08T18:59:53.202-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="602",SessionID="0x7fc3acc3d768",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.
2019-10-09 07:00:36
222.186.175.163 attackspambots
Oct  9 01:59:13 pkdns2 sshd\[62180\]: Failed password for root from 222.186.175.163 port 47864 ssh2Oct  9 01:59:17 pkdns2 sshd\[62180\]: Failed password for root from 222.186.175.163 port 47864 ssh2Oct  9 01:59:21 pkdns2 sshd\[62180\]: Failed password for root from 222.186.175.163 port 47864 ssh2Oct  9 01:59:40 pkdns2 sshd\[62191\]: Failed password for root from 222.186.175.163 port 23462 ssh2Oct  9 02:00:02 pkdns2 sshd\[62191\]: Failed password for root from 222.186.175.163 port 23462 ssh2Oct  9 02:00:12 pkdns2 sshd\[62247\]: Failed password for root from 222.186.175.163 port 5376 ssh2
...
2019-10-09 07:05:53
201.151.1.2 attack
Unauthorized connection attempt from IP address 201.151.1.2 on Port 445(SMB)
2019-10-09 06:57:33
188.252.203.196 attack
Port 1433 Scan
2019-10-09 07:22:43
208.180.1.182 attackspambots
Unauthorized connection attempt from IP address 208.180.1.182 on Port 445(SMB)
2019-10-09 07:27:47
190.5.136.236 attackspam
Port 1433 Scan
2019-10-09 07:19:21
176.74.73.203 attackbots
Unauthorized connection attempt from IP address 176.74.73.203 on Port 445(SMB)
2019-10-09 07:21:44

Recently Reported IPs

208.58.144.7 116.128.6.171 87.131.215.213 154.29.159.144
30.184.239.132 119.198.125.236 78.170.66.131 197.89.220.143
153.192.9.8 200.68.173.220 176.215.211.147 165.228.53.195
37.109.40.191 51.220.130.90 39.196.172.98 47.89.51.3
198.20.148.237 187.191.38.215 48.126.215.41 176.223.253.100