Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Viet Nam

Internet Service Provider: The Authority of Central Post

Hostname: unknown

Organization: unknown

Usage Type: Government

Comments:
Type Details Datetime
attackbotsspam
1580360316 - 01/30/2020 05:58:36 Host: 45.252.245.237/45.252.245.237 Port: 445 TCP Blocked
2020-01-30 19:32:13
Comments on same subnet:
IP Type Details Datetime
45.252.245.242 attack
May 14 14:27:47 ns381471 sshd[8882]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.252.245.242
May 14 14:27:49 ns381471 sshd[8882]: Failed password for invalid user supervisor from 45.252.245.242 port 44110 ssh2
2020-05-14 21:44:43
45.252.245.239 attackspam
Honeypot attack, port: 445, PTR: PTR record not found
2020-04-23 00:31:34
45.252.245.252 attackspambots
1582865799 - 02/28/2020 05:56:39 Host: 45.252.245.252/45.252.245.252 Port: 445 TCP Blocked
2020-02-28 13:41:05
45.252.245.238 attackspambots
Unauthorized connection attempt from IP address 45.252.245.238 on Port 445(SMB)
2020-01-24 06:41:08
45.252.245.239 attackbotsspam
Port 1433 Scan
2020-01-24 06:28:15
45.252.245.239 attackbots
Unauthorized connection attempt from IP address 45.252.245.239 on Port 445(SMB)
2020-01-16 19:23:41
45.252.245.234 attackbotsspam
1577025911 - 12/22/2019 15:45:11 Host: 45.252.245.234/45.252.245.234 Port: 445 TCP Blocked
2019-12-23 06:05:12
45.252.245.239 attackspam
SMB Server BruteForce Attack
2019-09-13 03:55:52
45.252.245.240 attackspam
Unauthorised access (Jul  6) SRC=45.252.245.240 LEN=52 TTL=116 ID=9648 DF TCP DPT=445 WINDOW=8192 SYN
2019-07-06 16:05:43
45.252.245.248 attack
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-03 18:49:58,368 INFO [shellcode_manager] (45.252.245.248) no match, writing hexdump (bb7dbdaf028665e9e7835b1a95f65a7a :13628) - SMB (Unknown)
2019-07-05 17:27:29
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.252.245.237
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19183
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.252.245.237.			IN	A

;; AUTHORITY SECTION:
.			216	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020013001 1800 900 604800 86400

;; Query time: 101 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 30 19:32:08 CST 2020
;; MSG SIZE  rcvd: 118
Host info
Host 237.245.252.45.in-addr.arpa not found: 2(SERVFAIL)
Nslookup info:
;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 237.245.252.45.in-addr.arpa: SERVFAIL
Related IP info:
Related comments:
IP Type Details Datetime
184.105.247.244 attack
Port probing on unauthorized port 23
2020-02-21 05:00:11
61.177.172.128 attackbots
Feb 20 21:43:29 h2177944 sshd\[16725\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.128  user=root
Feb 20 21:43:32 h2177944 sshd\[16725\]: Failed password for root from 61.177.172.128 port 46587 ssh2
Feb 20 21:43:35 h2177944 sshd\[16725\]: Failed password for root from 61.177.172.128 port 46587 ssh2
Feb 20 21:43:38 h2177944 sshd\[16725\]: Failed password for root from 61.177.172.128 port 46587 ssh2
...
2020-02-21 04:45:35
37.139.2.218 attack
Invalid user rodean from 37.139.2.218 port 51580
2020-02-21 04:55:10
201.249.88.124 attack
Feb 20 21:20:52 MK-Soft-VM3 sshd[16546]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.249.88.124 
Feb 20 21:20:53 MK-Soft-VM3 sshd[16546]: Failed password for invalid user daniel from 201.249.88.124 port 57340 ssh2
...
2020-02-21 04:52:40
111.38.107.15 attackspambots
Honeypot attack, port: 81, PTR: PTR record not found
2020-02-21 04:51:39
112.85.42.173 attackbotsspam
Feb 21 01:43:34 gw1 sshd[23544]: Failed password for root from 112.85.42.173 port 5945 ssh2
Feb 21 01:43:48 gw1 sshd[23544]: error: maximum authentication attempts exceeded for root from 112.85.42.173 port 5945 ssh2 [preauth]
...
2020-02-21 04:49:29
185.234.217.64 attack
firewall-block, port(s): 465/tcp
2020-02-21 04:53:58
207.46.13.158 attackspam
Automatic report - Banned IP Access
2020-02-21 05:06:44
217.16.11.235 attack
trying to access non-authorized port
2020-02-21 04:56:21
176.113.70.60 attackspambots
176.113.70.60 was recorded 13 times by 5 hosts attempting to connect to the following ports: 1900. Incident counter (4h, 24h, all-time): 13, 67, 2510
2020-02-21 04:47:59
41.225.4.234 attack
Honeypot attack, port: 81, PTR: PTR record not found
2020-02-21 04:36:22
209.200.15.186 attack
Honeypot attack, port: 445, PTR: PTR record not found
2020-02-21 04:50:07
198.199.100.5 attack
Invalid user vps from 198.199.100.5 port 53019
2020-02-21 04:32:28
51.83.155.130 attackspambots
Honeypot attack, port: 445, PTR: ip130.ip-51-83-155.eu.
2020-02-21 04:54:27
212.232.25.224 attackbotsspam
$f2bV_matches
2020-02-21 04:59:50

Recently Reported IPs

100.69.0.47 139.33.9.218 192.241.254.91 80.17.142.94
194.121.94.193 198.167.3.68 203.123.61.236 183.130.131.100
118.225.177.55 206.204.137.231 187.109.208.69 243.22.180.123
80.210.36.62 96.139.23.100 121.175.229.69 166.4.157.248
48.86.175.135 125.24.169.16 183.138.222.223 124.177.158.11