Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Russian Federation

Internet Service Provider: Intercom LLC

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:
Type Details Datetime
attack
[MK-VM4] Blocked by UFW
2020-07-21 03:41:14
attackbotsspam
Jul 17 17:25:10 debian-2gb-nbg1-2 kernel: \[17258064.434125\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.145.66.102 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=4139 PROTO=TCP SPT=49961 DPT=1301 WINDOW=1024 RES=0x00 SYN URGP=0
2020-07-17 23:41:36
attackbotsspam
[MK-VM5] Blocked by UFW
2020-07-17 06:11:43
Comments on same subnet:
IP Type Details Datetime
45.145.66.104 attackbots
Excessive Port-Scanning
2020-10-04 02:34:03
45.145.66.104 attackbotsspam
[HOST2] Port Scan detected
2020-10-03 18:21:49
45.145.66.159 attackbotsspam
RDPBruteGam24
2020-09-29 02:25:57
45.145.66.159 attack
RDPBruteGam24
2020-09-28 18:33:33
45.145.66.67 attack
scans once in preceeding hours on the ports (in chronological order) 20425 resulting in total of 13 scans from 45.145.66.0/23 block.
2020-09-13 22:45:10
45.145.66.67 attackspambots
Fail2Ban Ban Triggered
2020-09-13 14:40:51
45.145.66.67 attackbots
Fail2Ban Ban Triggered
2020-09-13 06:23:54
45.145.66.104 attackbots
Unauthorized connection attempt from IP address 45.145.66.104 on Port 3389(RDP)
2020-09-09 17:11:10
45.145.66.96 attack
ET CINS Active Threat Intelligence Poor Reputation IP group 23 - port: 13947 proto: tcp cat: Misc Attackbytes: 60
2020-09-08 04:18:28
45.145.66.96 attackbots
SmallBizIT.US 20 packets to tcp(13911,13959,13990,14001,14015,14016,14022,14028,14036,14052,14068,14069,14075,14076,14120,14132,14146,14170,14186,14194)
2020-09-07 19:54:56
45.145.66.96 attackspambots
Port scan: Attack repeated for 24 hours
2020-09-06 04:08:16
45.145.66.96 attackspam
ET CINS Active Threat Intelligence Poor Reputation IP group 23 - port: 14029 proto: tcp cat: Misc Attackbytes: 60
2020-09-05 19:53:35
45.145.66.90 attackbots
9922/tcp 4899/tcp 1022/tcp...
[2020-06-27/08-27]230pkt,86pt.(tcp)
2020-08-29 15:27:53
45.145.66.120 attackbots
[H1.VM8] Blocked by UFW
2020-08-27 07:37:28
45.145.66.21 attackbots
ET CINS Active Threat Intelligence Poor Reputation IP group 23 - port: 29939 proto: tcp cat: Misc Attackbytes: 60
2020-08-27 02:41:52
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.145.66.102
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64164
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.145.66.102.			IN	A

;; AUTHORITY SECTION:
.			456	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020071000 1800 900 604800 86400

;; Query time: 57 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jul 11 01:29:32 CST 2020
;; MSG SIZE  rcvd: 117
Host info
Host 102.66.145.45.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 102.66.145.45.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
185.173.35.37 attack
MultiHost/MultiPort Probe, Scan, Hack -
2020-07-04 21:03:33
185.142.236.34 attackspambots
scans 5 times in preceeding hours on the ports (in chronological order) 50050 2375 2121 1400 4567
2020-07-04 21:22:30
222.186.173.154 attackbotsspam
2020-07-04T15:59:06.896674afi-git.jinr.ru sshd[7298]: Failed password for root from 222.186.173.154 port 18200 ssh2
2020-07-04T15:59:09.617940afi-git.jinr.ru sshd[7298]: Failed password for root from 222.186.173.154 port 18200 ssh2
2020-07-04T15:59:13.281789afi-git.jinr.ru sshd[7298]: Failed password for root from 222.186.173.154 port 18200 ssh2
2020-07-04T15:59:13.281906afi-git.jinr.ru sshd[7298]: error: maximum authentication attempts exceeded for root from 222.186.173.154 port 18200 ssh2 [preauth]
2020-07-04T15:59:13.281921afi-git.jinr.ru sshd[7298]: Disconnecting: Too many authentication failures [preauth]
...
2020-07-04 21:00:45
37.97.232.49 attack
IP 37.97.232.49 attacked honeypot on port: 80 at 7/4/2020 6:18:49 AM
2020-07-04 21:26:37
139.59.56.23 attackbots
Jul  4 14:39:09 eventyay sshd[32254]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.56.23
Jul  4 14:39:11 eventyay sshd[32254]: Failed password for invalid user aa from 139.59.56.23 port 47592 ssh2
Jul  4 14:42:51 eventyay sshd[32397]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.56.23
...
2020-07-04 21:19:38
139.59.84.55 attackbots
Jul  4 14:06:33 server sshd[570]: Failed password for invalid user diane from 139.59.84.55 port 42548 ssh2
Jul  4 14:10:13 server sshd[4730]: Failed password for invalid user jenkins from 139.59.84.55 port 39892 ssh2
Jul  4 14:13:52 server sshd[8791]: Failed password for invalid user webmaster from 139.59.84.55 port 37236 ssh2
2020-07-04 20:52:59
167.179.156.20 attackbots
SSH Brute Force
2020-07-04 20:56:19
185.173.35.41 attackspambots
 TCP (SYN) 185.173.35.41:61516 -> port 5984, len 44
2020-07-04 20:57:16
80.68.99.237 attack
Jul  4 06:13:44 Host-KLAX-C dovecot: imap-login: Disconnected (auth failed, 1 attempts in 5 secs): user=, method=PLAIN, rip=80.68.99.237, lip=185.198.26.142, TLS, session=
...
2020-07-04 21:07:49
185.173.35.13 attackbotsspam
MultiHost/MultiPort Probe, Scan, Hack -
2020-07-04 21:19:17
46.38.145.247 attackspambots
2020-07-04 16:26:10 auth_plain authenticator failed for (User) [46.38.145.247]: 535 Incorrect authentication data (set_id=esmonc@lavrinenko.info)
2020-07-04 16:26:41 auth_plain authenticator failed for (User) [46.38.145.247]: 535 Incorrect authentication data (set_id=jobb@lavrinenko.info)
...
2020-07-04 21:28:57
207.126.55.12 attackspambots
Automatic report - XMLRPC Attack
2020-07-04 21:26:11
211.241.177.69 attackbotsspam
Jul  4 14:25:41 PorscheCustomer sshd[31324]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.241.177.69
Jul  4 14:25:43 PorscheCustomer sshd[31324]: Failed password for invalid user smt from 211.241.177.69 port 41672 ssh2
Jul  4 14:28:48 PorscheCustomer sshd[31391]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.241.177.69
...
2020-07-04 21:08:03
222.186.180.130 attackbots
Jul  4 15:13:20 v22018053744266470 sshd[28621]: Failed password for root from 222.186.180.130 port 37953 ssh2
Jul  4 15:13:22 v22018053744266470 sshd[28621]: Failed password for root from 222.186.180.130 port 37953 ssh2
Jul  4 15:13:23 v22018053744266470 sshd[28621]: Failed password for root from 222.186.180.130 port 37953 ssh2
...
2020-07-04 21:16:00
51.91.96.96 attackspam
Jul  4 15:04:18 vmd26974 sshd[615]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.96.96
Jul  4 15:04:20 vmd26974 sshd[615]: Failed password for invalid user kt from 51.91.96.96 port 39956 ssh2
...
2020-07-04 21:18:50

Recently Reported IPs

235.17.213.10 4.137.5.165 140.102.18.61 37.202.74.174
108.186.173.173 133.173.7.167 204.139.208.217 81.86.237.65
190.143.146.210 169.120.37.110 223.74.233.8 149.17.60.34
60.223.1.225 250.199.61.109 254.23.50.250 16.64.106.213
73.98.162.105 45.183.234.129 183.83.165.42 202.149.85.226