Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States of America

Internet Service Provider: IT7 Networks Inc

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspam
<6 unauthorized SSH connections
2020-07-25 16:12:25
attackspam
Jul 23 14:23:21 plex-server sshd[1249955]: Invalid user oracle from 45.78.65.108 port 37184
Jul 23 14:23:21 plex-server sshd[1249955]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.78.65.108 
Jul 23 14:23:21 plex-server sshd[1249955]: Invalid user oracle from 45.78.65.108 port 37184
Jul 23 14:23:23 plex-server sshd[1249955]: Failed password for invalid user oracle from 45.78.65.108 port 37184 ssh2
Jul 23 14:26:15 plex-server sshd[1251355]: Invalid user rt from 45.78.65.108 port 56762
...
2020-07-23 22:35:11
attackbotsspam
$f2bV_matches
2020-07-22 08:57:09
attack
Fail2Ban Ban Triggered
2020-07-16 19:55:36
attack
$f2bV_matches
2020-07-15 17:00:32
attackspam
Jul 14 11:28:33 santamaria sshd\[26469\]: Invalid user ccc from 45.78.65.108
Jul 14 11:28:33 santamaria sshd\[26469\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.78.65.108
Jul 14 11:28:36 santamaria sshd\[26469\]: Failed password for invalid user ccc from 45.78.65.108 port 33444 ssh2
...
2020-07-14 18:17:39
attackbots
Jul  8 11:24:10 XXX sshd[52205]: Invalid user shubham from 45.78.65.108 port 51338
2020-07-08 20:41:52
attack
Jun 29 01:12:07 sigma sshd\[1129\]: Invalid user user from 45.78.65.108Jun 29 01:12:09 sigma sshd\[1129\]: Failed password for invalid user user from 45.78.65.108 port 37770 ssh2
...
2020-06-29 08:17:52
attack
2020-06-27T00:33:42.434606n23.at sshd[1873458]: Invalid user galia from 45.78.65.108 port 42148
2020-06-27T00:33:44.207825n23.at sshd[1873458]: Failed password for invalid user galia from 45.78.65.108 port 42148 ssh2
2020-06-27T00:42:43.621803n23.at sshd[1881194]: Invalid user user100 from 45.78.65.108 port 35124
...
2020-06-27 07:38:28
attack
2020-06-05T22:30:41.046106n23.at sshd[7339]: Failed password for root from 45.78.65.108 port 43798 ssh2
2020-06-05T22:35:39.359057n23.at sshd[11346]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.78.65.108  user=root
2020-06-05T22:35:41.568060n23.at sshd[11346]: Failed password for root from 45.78.65.108 port 48836 ssh2
...
2020-06-06 11:49:35
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.78.65.108
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 9520
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.78.65.108.			IN	A

;; AUTHORITY SECTION:
.			152	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020060501 1800 900 604800 86400

;; Query time: 110 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jun 06 11:49:29 CST 2020
;; MSG SIZE  rcvd: 116
Host info
108.65.78.45.in-addr.arpa domain name pointer 45.78.65.108.16clouds.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
108.65.78.45.in-addr.arpa	name = 45.78.65.108.16clouds.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
129.211.86.49 attack
SSH Brute-Force. Ports scanning.
2020-08-23 18:35:21
191.190.243.212 attackspam
trying to access non-authorized port
2020-08-23 18:37:32
186.116.7.214 attack
Attempted connection to port 445.
2020-08-23 18:45:50
121.232.7.106 attackspambots
C2,DEF GET /phpmyadmin/
2020-08-23 19:08:41
89.163.134.171 attackspam
SSH Brute-Forcing (server1)
2020-08-23 18:48:08
5.196.70.107 attackbotsspam
Invalid user factorio from 5.196.70.107 port 58380
2020-08-23 18:32:46
222.186.180.41 attack
SSH brute-force attempt
2020-08-23 19:14:46
54.254.155.218 attackbotsspam
Aug 20 09:01:04 zimbra sshd[13327]: Invalid user ncs from 54.254.155.218
Aug 20 09:01:04 zimbra sshd[13327]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.254.155.218
Aug 20 09:01:07 zimbra sshd[13327]: Failed password for invalid user ncs from 54.254.155.218 port 52018 ssh2
Aug 20 09:01:07 zimbra sshd[13327]: Received disconnect from 54.254.155.218 port 52018:11: Bye Bye [preauth]
Aug 20 09:01:07 zimbra sshd[13327]: Disconnected from 54.254.155.218 port 52018 [preauth]
Aug 20 09:06:37 zimbra sshd[18223]: Invalid user ope from 54.254.155.218
Aug 20 09:06:37 zimbra sshd[18223]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.254.155.218
Aug 20 09:06:39 zimbra sshd[18223]: Failed password for invalid user ope from 54.254.155.218 port 45400 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=54.254.155.218
2020-08-23 19:05:16
186.52.116.223 attackbotsspam
2020-08-23T05:47:16.850218vps751288.ovh.net sshd\[2206\]: Invalid user admin from 186.52.116.223 port 52035
2020-08-23T05:47:17.114643vps751288.ovh.net sshd\[2206\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=r186-52-116-223.dialup.adsl.anteldata.net.uy
2020-08-23T05:47:19.045127vps751288.ovh.net sshd\[2206\]: Failed password for invalid user admin from 186.52.116.223 port 52035 ssh2
2020-08-23T05:47:21.236625vps751288.ovh.net sshd\[2208\]: Invalid user admin from 186.52.116.223 port 52111
2020-08-23T05:47:21.501387vps751288.ovh.net sshd\[2208\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=r186-52-116-223.dialup.adsl.anteldata.net.uy
2020-08-23 19:07:39
177.74.183.196 attackbots
Attempted Brute Force (dovecot)
2020-08-23 18:52:57
118.68.4.185 attackspambots
Attempted connection to port 445.
2020-08-23 18:51:31
190.141.228.168 attack
2020-08-23T13:47:23.692474luisaranguren sshd[3352959]: Failed password for root from 190.141.228.168 port 42553 ssh2
2020-08-23T13:47:25.590307luisaranguren sshd[3352959]: Connection closed by authenticating user root 190.141.228.168 port 42553 [preauth]
...
2020-08-23 19:03:17
130.204.4.74 attackspam
Invalid user Administrator from 130.204.4.74 port 45200
2020-08-23 19:10:05
106.52.181.236 attackbotsspam
Aug 23 11:36:38 ns382633 sshd\[5038\]: Invalid user web from 106.52.181.236 port 50806
Aug 23 11:36:38 ns382633 sshd\[5038\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.181.236
Aug 23 11:36:40 ns382633 sshd\[5038\]: Failed password for invalid user web from 106.52.181.236 port 50806 ssh2
Aug 23 11:42:08 ns382633 sshd\[6045\]: Invalid user tutor from 106.52.181.236 port 45131
Aug 23 11:42:08 ns382633 sshd\[6045\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.181.236
2020-08-23 18:32:31
181.81.246.115 attackbotsspam
Attempted connection to port 23.
2020-08-23 18:46:57

Recently Reported IPs

33.51.54.27 103.255.5.98 201.127.188.219 45.187.182.204
251.108.119.97 5.250.225.132 250.248.204.88 5.189.155.12
189.173.107.123 190.217.219.180 185.39.11.57 115.127.36.92
111.185.239.126 51.75.142.122 104.236.134.112 24.119.158.74
190.88.185.216 187.22.122.116 176.194.221.29 93.80.0.214