Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Viet Nam

Internet Service Provider: The Authority of Central Post

Hostname: unknown

Organization: unknown

Usage Type: Government

Comments:
Type Details Datetime
attackbotsspam
1577025911 - 12/22/2019 15:45:11 Host: 45.252.245.234/45.252.245.234 Port: 445 TCP Blocked
2019-12-23 06:05:12
Comments on same subnet:
IP Type Details Datetime
45.252.245.242 attack
May 14 14:27:47 ns381471 sshd[8882]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.252.245.242
May 14 14:27:49 ns381471 sshd[8882]: Failed password for invalid user supervisor from 45.252.245.242 port 44110 ssh2
2020-05-14 21:44:43
45.252.245.239 attackspam
Honeypot attack, port: 445, PTR: PTR record not found
2020-04-23 00:31:34
45.252.245.252 attackspambots
1582865799 - 02/28/2020 05:56:39 Host: 45.252.245.252/45.252.245.252 Port: 445 TCP Blocked
2020-02-28 13:41:05
45.252.245.237 attackbotsspam
1580360316 - 01/30/2020 05:58:36 Host: 45.252.245.237/45.252.245.237 Port: 445 TCP Blocked
2020-01-30 19:32:13
45.252.245.238 attackspambots
Unauthorized connection attempt from IP address 45.252.245.238 on Port 445(SMB)
2020-01-24 06:41:08
45.252.245.239 attackbotsspam
Port 1433 Scan
2020-01-24 06:28:15
45.252.245.239 attackbots
Unauthorized connection attempt from IP address 45.252.245.239 on Port 445(SMB)
2020-01-16 19:23:41
45.252.245.239 attackspam
SMB Server BruteForce Attack
2019-09-13 03:55:52
45.252.245.240 attackspam
Unauthorised access (Jul  6) SRC=45.252.245.240 LEN=52 TTL=116 ID=9648 DF TCP DPT=445 WINDOW=8192 SYN
2019-07-06 16:05:43
45.252.245.248 attack
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-03 18:49:58,368 INFO [shellcode_manager] (45.252.245.248) no match, writing hexdump (bb7dbdaf028665e9e7835b1a95f65a7a :13628) - SMB (Unknown)
2019-07-05 17:27:29
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.252.245.234
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6665
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.252.245.234.			IN	A

;; AUTHORITY SECTION:
.			425	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019122201 1800 900 604800 86400

;; Query time: 123 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Dec 23 06:05:08 CST 2019
;; MSG SIZE  rcvd: 118
Host info
Host 234.245.252.45.in-addr.arpa not found: 2(SERVFAIL)
Nslookup info:
;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 234.245.252.45.in-addr.arpa: SERVFAIL
Related IP info:
Related comments:
IP Type Details Datetime
106.13.230.219 attack
Bruteforce detected by fail2ban
2020-04-08 06:41:46
91.237.182.29 attack
Attempted connection to port 8080.
2020-04-08 07:02:39
51.91.140.218 attackbots
Apr  8 00:00:56 vpn01 sshd[15385]: Failed password for root from 51.91.140.218 port 59052 ssh2
...
2020-04-08 06:50:27
114.219.56.219 attack
2020-04-07T22:36:58.950374shield sshd\[13818\]: Invalid user alfresco from 114.219.56.219 port 44908
2020-04-07T22:36:58.954180shield sshd\[13818\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.219.56.219
2020-04-07T22:37:00.743412shield sshd\[13818\]: Failed password for invalid user alfresco from 114.219.56.219 port 44908 ssh2
2020-04-07T22:41:19.302982shield sshd\[14641\]: Invalid user ts3srv from 114.219.56.219 port 51284
2020-04-07T22:41:19.306521shield sshd\[14641\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.219.56.219
2020-04-08 07:04:28
89.248.160.178 attackspambots
04/07/2020-18:57:30.702766 89.248.160.178 Protocol: 6 ET SCAN NMAP -sS window 1024
2020-04-08 07:06:51
122.51.243.223 attackspambots
$f2bV_matches
2020-04-08 06:46:44
41.223.4.155 attack
k+ssh-bruteforce
2020-04-08 06:35:50
220.180.119.250 attackspambots
Attempted connection to port 1433.
2020-04-08 07:09:00
183.159.115.193 attackspam
Attempted connection to port 3389.
2020-04-08 06:34:34
171.103.141.50 attackbots
(imapd) Failed IMAP login from 171.103.141.50 (TH/Thailand/171-103-141-50.static.asianet.co.th): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Apr  8 03:01:08 ir1 dovecot[566034]: imap-login: Disconnected (auth failed, 1 attempts in 5 secs): user=, method=PLAIN, rip=171.103.141.50, lip=5.63.12.44, TLS: Connection closed, session=<67dV8LqixYKrZ40y>
2020-04-08 06:56:59
222.186.175.163 attackbotsspam
[MK-VM5] SSH login failed
2020-04-08 07:11:31
147.0.138.146 attackspambots
Draytek Vigor Remote Command Execution Vulnerability
2020-04-08 06:57:30
175.24.4.159 attackspambots
Apr  8 00:19:07 h2779839 sshd[24532]: Invalid user cele from 175.24.4.159 port 45002
Apr  8 00:19:07 h2779839 sshd[24532]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.24.4.159
Apr  8 00:19:07 h2779839 sshd[24532]: Invalid user cele from 175.24.4.159 port 45002
Apr  8 00:19:09 h2779839 sshd[24532]: Failed password for invalid user cele from 175.24.4.159 port 45002 ssh2
Apr  8 00:23:10 h2779839 sshd[24656]: Invalid user piter from 175.24.4.159 port 34080
Apr  8 00:23:10 h2779839 sshd[24656]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.24.4.159
Apr  8 00:23:10 h2779839 sshd[24656]: Invalid user piter from 175.24.4.159 port 34080
Apr  8 00:23:12 h2779839 sshd[24656]: Failed password for invalid user piter from 175.24.4.159 port 34080 ssh2
Apr  8 00:27:11 h2779839 sshd[24745]: Invalid user luser from 175.24.4.159 port 51388
...
2020-04-08 06:43:42
45.143.223.142 attack
MAIL: User Login Brute Force Attempt
2020-04-08 07:01:03
106.12.133.247 attackbots
$f2bV_matches
2020-04-08 07:04:42

Recently Reported IPs

232.46.144.29 210.4.123.98 114.33.96.173 36.70.8.60
113.199.0.3 124.83.19.208 103.29.249.70 222.184.56.18
138.197.2.248 91.214.74.238 107.49.2.21 114.67.84.208
138.18.149.214 91.124.39.1 63.96.28.58 203.205.52.138
85.8.43.116 145.239.83.104 58.56.181.46 168.211.54.149