Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: India

Internet Service Provider: D-Lax It Services

Hostname: unknown

Organization: unknown

Usage Type: Commercial

Comments:
Type Details Datetime
attack
Unauthorized connection attempt from IP address 45.248.94.21 on Port 445(SMB)
2020-01-25 00:55:10
Comments on same subnet:
IP Type Details Datetime
45.248.94.195 attack
 TCP (SYN) 45.248.94.195:58847 -> port 1433, len 44
2020-09-28 05:38:02
45.248.94.195 attack
20/9/26@16:39:03: FAIL: Alarm-Intrusion address from=45.248.94.195
...
2020-09-27 21:57:31
45.248.94.195 attackbotsspam
20/9/26@16:39:03: FAIL: Alarm-Intrusion address from=45.248.94.195
...
2020-09-27 13:45:10
45.248.94.195 attackbots
Honeypot attack, port: 445, PTR: undefined.hostname.localhost.
2020-03-31 03:29:54
45.248.94.195 attackspambots
Honeypot attack, port: 445, PTR: undefined.hostname.localhost.
2020-03-07 03:36:04
45.248.94.195 attackspam
unauthorized connection attempt
2020-02-03 21:11:03
45.248.94.195 attackspambots
Unauthorized connection attempt detected from IP address 45.248.94.195 to port 1433 [J]
2020-01-18 17:58:59
45.248.94.195 attackspam
Honeypot attack, port: 445, PTR: undefined.hostname.localhost.
2019-12-14 21:10:51
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.248.94.21
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60815
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.248.94.21.			IN	A

;; AUTHORITY SECTION:
.			447	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020012400 1800 900 604800 86400

;; Query time: 118 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jan 25 00:55:03 CST 2020
;; MSG SIZE  rcvd: 116
Host info
21.94.248.45.in-addr.arpa domain name pointer undefined.hostname.localhost.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
21.94.248.45.in-addr.arpa	name = undefined.hostname.localhost.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
27.254.137.144 attack
Aug 27 03:32:11 php1 sshd\[520\]: Invalid user git from 27.254.137.144
Aug 27 03:32:11 php1 sshd\[520\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.137.144
Aug 27 03:32:13 php1 sshd\[520\]: Failed password for invalid user git from 27.254.137.144 port 43112 ssh2
Aug 27 03:37:07 php1 sshd\[902\]: Invalid user squid from 27.254.137.144
Aug 27 03:37:07 php1 sshd\[902\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.137.144
2019-08-27 23:45:19
14.165.194.20 attackspam
Unauthorized connection attempt from IP address 14.165.194.20 on Port 445(SMB)
2019-08-27 22:55:12
207.148.115.171 attackspambots
Aug 27 16:29:12 legacy sshd[27649]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.148.115.171
Aug 27 16:29:13 legacy sshd[27649]: Failed password for invalid user Minecraft from 207.148.115.171 port 44674 ssh2
Aug 27 16:34:11 legacy sshd[27681]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.148.115.171
...
2019-08-28 00:01:13
107.175.154.207 attackbots
(From noreply@thewordpressclub7928.news) Hello,

Are you utilizing Wordpress/Woocommerce or perhaps do you actually project to use it at some point ? We provide over 2500 premium plugins and additionally themes free to download : http://spara.xyz/GmllZ

Cheers,

Matthew
2019-08-27 23:01:24
36.22.182.26 attackbotsspam
Unauthorized connection attempt from IP address 36.22.182.26 on Port 445(SMB)
2019-08-27 23:13:59
198.20.103.242 attackbotsspam
Automatic report - Banned IP Access
2019-08-27 23:07:29
88.204.248.126 attack
Unauthorized connection attempt from IP address 88.204.248.126 on Port 445(SMB)
2019-08-28 00:05:52
206.189.232.45 attack
Aug 27 03:50:13 aiointranet sshd\[21426\]: Invalid user lw from 206.189.232.45
Aug 27 03:50:13 aiointranet sshd\[21426\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.artifice.ec
Aug 27 03:50:15 aiointranet sshd\[21426\]: Failed password for invalid user lw from 206.189.232.45 port 34876 ssh2
Aug 27 03:54:19 aiointranet sshd\[21769\]: Invalid user xbox from 206.189.232.45
Aug 27 03:54:19 aiointranet sshd\[21769\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.artifice.ec
2019-08-27 23:55:56
223.27.104.8 attack
Unauthorized connection attempt from IP address 223.27.104.8 on Port 445(SMB)
2019-08-27 23:34:08
116.118.104.57 attackspam
Unauthorized connection attempt from IP address 116.118.104.57 on Port 445(SMB)
2019-08-27 23:46:13
62.210.99.162 attack
Automatic report - Banned IP Access
2019-08-27 23:16:27
138.121.128.46 attackspambots
Automatic report - Port Scan Attack
2019-08-27 22:51:43
211.159.157.252 attackbots
404 NOT FOUND
2019-08-27 22:56:20
209.141.52.141 attackspambots
2019-08-27T12:34:18.123081abusebot-6.cloudsearch.cf sshd\[27122\]: Invalid user server1 from 209.141.52.141 port 53642
2019-08-28 00:08:37
165.227.41.202 attack
Aug 27 15:56:29 itv-usvr-02 sshd[17689]: Invalid user www from 165.227.41.202 port 56156
Aug 27 15:56:29 itv-usvr-02 sshd[17689]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.41.202
Aug 27 15:56:29 itv-usvr-02 sshd[17689]: Invalid user www from 165.227.41.202 port 56156
Aug 27 15:56:31 itv-usvr-02 sshd[17689]: Failed password for invalid user www from 165.227.41.202 port 56156 ssh2
Aug 27 16:04:26 itv-usvr-02 sshd[17767]: Invalid user tibco from 165.227.41.202 port 51916
2019-08-27 23:58:28

Recently Reported IPs

5.62.56.34 203.110.83.60 111.252.151.216 92.99.175.186
124.9.192.227 114.30.57.254 89.136.226.182 178.24.240.7
78.165.69.23 40.117.125.206 46.173.4.70 213.231.3.2
119.136.88.5 2.184.44.239 171.224.178.183 217.131.61.247
114.234.168.49 69.46.29.66 39.48.98.28 31.148.168.12