Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Indonesia

Internet Service Provider: PT Masterweb Network

Hostname: unknown

Organization: PT Master Web Network

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
Automatic report - XMLRPC Attack
2019-10-24 14:30:09
attack
loopsrockreggae.com 45.64.1.95 \[23/Oct/2019:05:55:06 +0200\] "POST /wp-login.php HTTP/1.1" 200 5613 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
loopsrockreggae.com 45.64.1.95 \[23/Oct/2019:05:55:10 +0200\] "POST /wp-login.php HTTP/1.1" 200 5581 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2019-10-23 14:36:55
Comments on same subnet:
IP Type Details Datetime
45.64.128.160 attackbots
[N10.H2.VM2] Port Scanner Detected Blocked by UFW
2020-10-01 06:56:42
45.64.128.160 attack
Fail2Ban Ban Triggered
2020-09-30 23:20:41
45.64.126.103 attack
Sep 26 20:37:17 django-0 sshd[10035]: Invalid user gen from 45.64.126.103
...
2020-09-27 04:49:56
45.64.126.103 attack
Sep 26 08:29:48 ws12vmsma01 sshd[24920]: Invalid user cl from 45.64.126.103
Sep 26 08:29:51 ws12vmsma01 sshd[24920]: Failed password for invalid user cl from 45.64.126.103 port 36356 ssh2
Sep 26 08:32:31 ws12vmsma01 sshd[25347]: Invalid user mama from 45.64.126.103
...
2020-09-26 21:01:16
45.64.126.103 attackbotsspam
2020-09-26T04:35:45.352683abusebot-8.cloudsearch.cf sshd[29102]: Invalid user jane from 45.64.126.103 port 54200
2020-09-26T04:35:45.359599abusebot-8.cloudsearch.cf sshd[29102]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.64.126.103
2020-09-26T04:35:45.352683abusebot-8.cloudsearch.cf sshd[29102]: Invalid user jane from 45.64.126.103 port 54200
2020-09-26T04:35:47.232058abusebot-8.cloudsearch.cf sshd[29102]: Failed password for invalid user jane from 45.64.126.103 port 54200 ssh2
2020-09-26T04:40:29.612516abusebot-8.cloudsearch.cf sshd[29228]: Invalid user mysql from 45.64.126.103 port 33360
2020-09-26T04:40:29.620013abusebot-8.cloudsearch.cf sshd[29228]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.64.126.103
2020-09-26T04:40:29.612516abusebot-8.cloudsearch.cf sshd[29228]: Invalid user mysql from 45.64.126.103 port 33360
2020-09-26T04:40:31.478332abusebot-8.cloudsearch.cf sshd[29228]: Failed pa
...
2020-09-26 12:44:02
45.64.128.160 attack
 TCP (SYN) 45.64.128.160:60000 -> port 6003, len 44
2020-09-25 03:35:13
45.64.128.160 attackbotsspam
Fail2Ban Ban Triggered
2020-09-24 19:20:54
45.64.126.103 attackbots
TCP ports : 421 / 7323 / 14757 / 17327 / 21039
2020-09-06 22:00:06
45.64.126.103 attackbotsspam
ET CINS Active Threat Intelligence Poor Reputation IP group 25 - port: 21039 proto: tcp cat: Misc Attackbytes: 60
2020-09-06 13:35:47
45.64.126.103 attackspambots
Sep  5 18:49:03 h2646465 sshd[28993]: Invalid user gangadhar from 45.64.126.103
Sep  5 18:49:03 h2646465 sshd[28993]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.64.126.103
Sep  5 18:49:03 h2646465 sshd[28993]: Invalid user gangadhar from 45.64.126.103
Sep  5 18:49:05 h2646465 sshd[28993]: Failed password for invalid user gangadhar from 45.64.126.103 port 51228 ssh2
Sep  5 18:50:44 h2646465 sshd[29502]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.64.126.103  user=root
Sep  5 18:50:46 h2646465 sshd[29502]: Failed password for root from 45.64.126.103 port 35662 ssh2
Sep  5 18:51:51 h2646465 sshd[29533]: Invalid user monte from 45.64.126.103
Sep  5 18:51:51 h2646465 sshd[29533]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.64.126.103
Sep  5 18:51:51 h2646465 sshd[29533]: Invalid user monte from 45.64.126.103
Sep  5 18:51:53 h2646465 sshd[29533]: Failed password for invalid u
2020-09-06 05:50:46
45.64.179.202 attackbotsspam
Attempted connection to port 8080.
2020-08-24 21:09:59
45.64.126.103 attackbotsspam
Automatic Fail2ban report - Trying login SSH
2020-08-20 20:21:58
45.64.126.103 attack
Aug 19 15:44:56 journals sshd\[38921\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.64.126.103  user=root
Aug 19 15:44:57 journals sshd\[38921\]: Failed password for root from 45.64.126.103 port 55884 ssh2
Aug 19 15:48:17 journals sshd\[39293\]: Invalid user sai from 45.64.126.103
Aug 19 15:48:17 journals sshd\[39293\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.64.126.103
Aug 19 15:48:19 journals sshd\[39293\]: Failed password for invalid user sai from 45.64.126.103 port 41510 ssh2
...
2020-08-19 21:05:07
45.64.126.103 attack
2020-08-18T23:56:01.992956mail.thespaminator.com sshd[12900]: Invalid user kevin from 45.64.126.103 port 58240
2020-08-18T23:56:04.564299mail.thespaminator.com sshd[12900]: Failed password for invalid user kevin from 45.64.126.103 port 58240 ssh2
...
2020-08-19 12:34:39
45.64.126.103 attack
SSH Brute Force
2020-08-15 17:55:53
Whois info:
b
Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.64.1.95
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 16992
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.64.1.95.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019050700 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Tue May 07 23:34:05 +08 2019
;; MSG SIZE  rcvd: 114

Host info
95.1.64.45.in-addr.arpa domain name pointer cl46075x.c.maintenis.com.
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
95.1.64.45.in-addr.arpa	name = cl46075x.c.maintenis.com.

Authoritative answers can be found from:

Related IP info:
Related comments:
IP Type Details Datetime
159.203.190.189 attackbotsspam
May  9 04:43:12 OPSO sshd\[6387\]: Invalid user drcom123 from 159.203.190.189 port 41953
May  9 04:43:12 OPSO sshd\[6387\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.190.189
May  9 04:43:14 OPSO sshd\[6387\]: Failed password for invalid user drcom123 from 159.203.190.189 port 41953 ssh2
May  9 04:45:54 OPSO sshd\[7210\]: Invalid user 123 from 159.203.190.189 port 57099
May  9 04:45:54 OPSO sshd\[7210\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.190.189
2020-05-09 13:12:32
162.243.142.187 attackspam
Unauthorized connection attempt detected from IP address 162.243.142.187 to port 435
2020-05-09 12:51:36
181.28.254.49 attackbotsspam
SSH Brute Force
2020-05-09 13:08:20
138.219.41.146 attackspam
May  9 08:42:35 w sshd[19056]: Invalid user nginxtcp from 138.219.41.146
May  9 08:42:35 w sshd[19056]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.219.41.146
May  9 08:42:37 w sshd[19056]: Failed password for invalid user nginxtcp from 138.219.41.146 port 34163 ssh2
May  9 08:42:37 w sshd[19056]: Received disconnect from 138.219.41.146 port 34163:11: Bye Bye [preauth]
May  9 08:42:37 w sshd[19056]: Disconnected from 138.219.41.146 port 34163 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=138.219.41.146
2020-05-09 13:17:51
103.109.179.74 attack
Automatic report - Port Scan Attack
2020-05-09 13:21:13
213.217.0.131 attack
May  9 04:40:31 debian-2gb-nbg1-2 kernel: \[11250909.751825\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=213.217.0.131 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=41991 PROTO=TCP SPT=56680 DPT=51433 WINDOW=1024 RES=0x00 SYN URGP=0
2020-05-09 12:37:20
106.12.89.160 attackbots
$f2bV_matches
2020-05-09 12:47:13
87.27.199.200 attackspambots
Attempted connection to ports 8291, 8728.
2020-05-09 13:07:33
78.128.113.100 attack
May  9 04:53:20 web01.agentur-b-2.de postfix/smtps/smtpd[77062]: warning: unknown[78.128.113.100]: SASL PLAIN authentication failed: 
May  9 04:53:21 web01.agentur-b-2.de postfix/smtps/smtpd[77062]: lost connection after AUTH from unknown[78.128.113.100]
May  9 04:53:32 web01.agentur-b-2.de postfix/smtps/smtpd[77062]: lost connection after AUTH from unknown[78.128.113.100]
May  9 04:53:42 web01.agentur-b-2.de postfix/smtps/smtpd[77062]: warning: unknown[78.128.113.100]: SASL PLAIN authentication failed: 
May  9 04:53:43 web01.agentur-b-2.de postfix/smtps/smtpd[77062]: lost connection after AUTH from unknown[78.128.113.100]
2020-05-09 12:53:48
162.243.140.89 attackspam
scans once in preceeding hours on the ports (in chronological order) 8443 resulting in total of 61 scans from 162.243.0.0/16 block.
2020-05-09 12:59:30
79.188.68.89 attackspambots
May  9 04:46:45 OPSO sshd\[7298\]: Invalid user fw from 79.188.68.89 port 47277
May  9 04:46:45 OPSO sshd\[7298\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.188.68.89
May  9 04:46:47 OPSO sshd\[7298\]: Failed password for invalid user fw from 79.188.68.89 port 47277 ssh2
May  9 04:55:08 OPSO sshd\[9283\]: Invalid user naomi from 79.188.68.89 port 53493
May  9 04:55:08 OPSO sshd\[9283\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.188.68.89
2020-05-09 13:17:15
106.13.6.116 attackbotsspam
May  9 03:16:06 host sshd[10631]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.6.116  user=root
May  9 03:16:08 host sshd[10631]: Failed password for root from 106.13.6.116 port 47350 ssh2
...
2020-05-09 13:10:27
222.186.180.41 attackbotsspam
May  9 04:58:32 minden010 sshd[8221]: Failed password for root from 222.186.180.41 port 21676 ssh2
May  9 04:58:35 minden010 sshd[8221]: Failed password for root from 222.186.180.41 port 21676 ssh2
May  9 04:58:38 minden010 sshd[8221]: Failed password for root from 222.186.180.41 port 21676 ssh2
May  9 04:58:41 minden010 sshd[8221]: Failed password for root from 222.186.180.41 port 21676 ssh2
...
2020-05-09 12:40:14
180.166.141.58 attackspambots
May  9 04:47:22 debian-2gb-nbg1-2 kernel: \[11251320.970362\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=180.166.141.58 DST=195.201.40.59 LEN=40 TOS=0x08 PREC=0x00 TTL=237 ID=25802 PROTO=TCP SPT=50029 DPT=30954 WINDOW=1024 RES=0x00 SYN URGP=0
2020-05-09 12:58:43
187.34.148.54 attackbots
Unauthorized connection attempt detected from IP address 187.34.148.54 to port 81
2020-05-09 13:15:35

Recently Reported IPs

125.165.182.163 188.54.27.103 125.26.229.143 42.118.135.29
41.34.122.86 201.105.46.24 43.228.220.156 159.192.216.98
80.211.253.114 156.88.187.51 196.218.133.199 121.142.237.113
67.21.86.202 174.198.180.144 94.242.39.193 142.11.239.156
1.168.9.43 190.142.220.19 209.89.178.157 85.117.60.126