Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Stockholm

Region: Stockholms

Country: Sweden

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
45.82.137.35 attackbotsspam
$f2bV_matches
2020-09-16 03:22:54
45.82.137.35 attackspam
Unauthorised connection attempt detected at AUO MAIN. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)
2020-09-15 19:26:31
45.82.137.35 attack
Sep 10 01:56:27 * sshd[13755]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.82.137.35
Sep 10 01:56:29 * sshd[13755]: Failed password for invalid user isaac from 45.82.137.35 port 50306 ssh2
2020-09-10 14:32:11
45.82.137.35 attack
Sep  9 20:57:06 MainVPS sshd[7695]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.82.137.35  user=root
Sep  9 20:57:08 MainVPS sshd[7695]: Failed password for root from 45.82.137.35 port 35584 ssh2
Sep  9 21:01:11 MainVPS sshd[472]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.82.137.35  user=root
Sep  9 21:01:13 MainVPS sshd[472]: Failed password for root from 45.82.137.35 port 41320 ssh2
Sep  9 21:05:22 MainVPS sshd[30448]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.82.137.35  user=root
Sep  9 21:05:24 MainVPS sshd[30448]: Failed password for root from 45.82.137.35 port 47056 ssh2
...
2020-09-10 05:12:44
45.82.137.35 attack
<6 unauthorized SSH connections
2020-09-07 23:16:34
45.82.137.35 attackspam
Brute%20Force%20SSH
2020-09-07 14:52:13
45.82.137.35 attackspam
$f2bV_matches
2020-09-07 07:21:41
45.82.136.246 attackspambots
Sep  1 15:53:57 uapps sshd[14104]: Connection closed by 45.82.136.246 port 40382
Sep  1 15:54:05 uapps sshd[14105]: Invalid user ansible from 45.82.136.246 port 57724
Sep  1 15:54:07 uapps sshd[14105]: Failed password for invalid user ansible from 45.82.136.246 port 57724 ssh2
Sep  1 15:54:08 uapps sshd[14105]: Received disconnect from 45.82.136.246 port 57724:11: Normal Shutdown, Thank you for playing [preauth]
Sep  1 15:54:08 uapps sshd[14105]: Disconnected from invalid user ansible 45.82.136.246 port 57724 [preauth]
Sep  1 15:54:19 uapps sshd[14109]: User r.r from 45.82.136.246 not allowed because not listed in AllowUsers
Sep  1 15:54:19 uapps sshd[14109]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.82.136.246  user=r.r
Sep  1 15:54:21 uapps sshd[14109]: Failed password for invalid user r.r from 45.82.136.246 port 39156 ssh2
Sep  1 15:54:22 uapps sshd[14109]: Received disconnect from 45.82.136.246 port 39156:11: Normal S........
-------------------------------
2020-09-06 22:33:15
45.82.136.246 attackbots
Fail2Ban
2020-09-06 14:05:53
45.82.136.246 attackspambots
Sep  5 23:58:41 sd-69548 sshd[851729]: Unable to negotiate with 45.82.136.246 port 47826: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth]
Sep  5 23:58:53 sd-69548 sshd[851746]: Unable to negotiate with 45.82.136.246 port 57016: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth]
...
2020-09-06 06:17:24
45.82.136.236 attackspam
Sep  1 14:56:06 euve59663 sshd[15993]: Did not receive identification s=
tring from 45.82.136.236
Sep  1 14:56:09 euve59663 sshd[15994]: Invalid user ansible from 45.82.=
136.236
Sep  1 14:56:09 euve59663 sshd[15994]: pam_unix(sshd:auth): authenticat=
ion failure; logname=3D uid=3D0 euid=3D0 tty=3Dssh ruser=3D rhost=3D45.=
82.136.236=20
Sep  1 14:56:11 euve59663 sshd[15994]: Failed password for invalid user=
 ansible from 45.82.136.236 port 48408 ssh2
Sep  1 14:56:11 euve59663 sshd[15994]: Received disconnect from 45.82.1=
36.236: 11: Normal Shutdown, Thank you for playing [preauth]
Sep  1 14:56:17 euve59663 sshd[15996]: pam_unix(sshd:auth): authenticat=
ion failure; logname=3D uid=3D0 euid=3D0 tty=3Dssh ruser=3D rhost=3D45.=
82.136.236  user=3Dr.r
Sep  1 14:56:19 euve59663 sshd[15996]: Failed password for r.r from 45=
.82.136.236 port 53924 ssh2
Sep  1 14:56:19 euve59663 sshd[15996]: Received disconnect from 45.82.1=
36.236: 11: Normal Shutdown, Thank you for playing [........
-------------------------------
2020-09-06 00:36:49
45.82.136.246 attackbots
Sep  5 17:35:35 deb10 sshd[22117]: Invalid user ansible from 45.82.136.246 port 51024
Sep  5 17:35:48 deb10 sshd[22124]: User root from 45.82.136.246 not allowed because not listed in AllowUsers
2020-09-06 00:23:03
45.82.136.236 attack
>10 unauthorized SSH connections
2020-09-05 16:06:29
45.82.136.246 attackbots
Sep  1 15:53:57 uapps sshd[14104]: Connection closed by 45.82.136.246 port 40382
Sep  1 15:54:05 uapps sshd[14105]: Invalid user ansible from 45.82.136.246 port 57724
Sep  1 15:54:07 uapps sshd[14105]: Failed password for invalid user ansible from 45.82.136.246 port 57724 ssh2
Sep  1 15:54:08 uapps sshd[14105]: Received disconnect from 45.82.136.246 port 57724:11: Normal Shutdown, Thank you for playing [preauth]
Sep  1 15:54:08 uapps sshd[14105]: Disconnected from invalid user ansible 45.82.136.246 port 57724 [preauth]
Sep  1 15:54:19 uapps sshd[14109]: User r.r from 45.82.136.246 not allowed because not listed in AllowUsers
Sep  1 15:54:19 uapps sshd[14109]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.82.136.246  user=r.r
Sep  1 15:54:21 uapps sshd[14109]: Failed password for invalid user r.r from 45.82.136.246 port 39156 ssh2
Sep  1 15:54:22 uapps sshd[14109]: Received disconnect from 45.82.136.246 port 39156:11: Normal S........
-------------------------------
2020-09-05 15:53:49
45.82.136.236 attackspambots
Time:     Fri Sep  4 23:53:35 2020 +0000
IP:       45.82.136.236 (IR/Iran/-)
Failures: 5 (sshd)
Interval: 3600 seconds
Blocked:  Permanent Block [LF_SSHD]

Log entries:

Sep  4 23:53:15 ca-47-ede1 sshd[28948]: Did not receive identification string from 45.82.136.236 port 54942
Sep  4 23:53:21 ca-47-ede1 sshd[28950]: Invalid user ansible from 45.82.136.236 port 33888
Sep  4 23:53:24 ca-47-ede1 sshd[28950]: Failed password for invalid user ansible from 45.82.136.236 port 33888 ssh2
Sep  4 23:53:30 ca-47-ede1 sshd[28955]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.82.136.236  user=root
Sep  4 23:53:32 ca-47-ede1 sshd[28955]: Failed password for root from 45.82.136.236 port 43312 ssh2
2020-09-05 08:41:46
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.82.13.200
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6057
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;45.82.13.200.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026012700 1800 900 604800 86400

;; Query time: 8 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jan 27 20:31:03 CST 2026
;; MSG SIZE  rcvd: 105
Host info
200.13.82.45.in-addr.arpa domain name pointer 152164.ip-ptr.tech.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
200.13.82.45.in-addr.arpa	name = 152164.ip-ptr.tech.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
176.122.169.95 attackbots
Invalid user admin from 176.122.169.95 port 40638
2020-06-28 13:37:28
195.122.226.164 attackbots
Invalid user ajeet from 195.122.226.164 port 63531
2020-06-28 13:19:54
122.51.202.157 attack
Jun 28 05:55:16 srv sshd[7318]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.202.157
Jun 28 05:55:18 srv sshd[7318]: Failed password for invalid user salt from 122.51.202.157 port 50798 ssh2
2020-06-28 13:45:53
118.25.159.166 attackspambots
Jun 28 06:57:47 meumeu sshd[160082]: Invalid user paj from 118.25.159.166 port 42386
Jun 28 06:57:47 meumeu sshd[160082]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.159.166 
Jun 28 06:57:47 meumeu sshd[160082]: Invalid user paj from 118.25.159.166 port 42386
Jun 28 06:57:49 meumeu sshd[160082]: Failed password for invalid user paj from 118.25.159.166 port 42386 ssh2
Jun 28 06:59:40 meumeu sshd[160104]: Invalid user david from 118.25.159.166 port 53818
Jun 28 06:59:40 meumeu sshd[160104]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.159.166 
Jun 28 06:59:40 meumeu sshd[160104]: Invalid user david from 118.25.159.166 port 53818
Jun 28 06:59:42 meumeu sshd[160104]: Failed password for invalid user david from 118.25.159.166 port 53818 ssh2
Jun 28 07:01:30 meumeu sshd[160150]: Invalid user ftpuser from 118.25.159.166 port 37018
...
2020-06-28 13:46:08
51.75.29.61 attackbotsspam
Jun 27 09:21:16 Tower sshd[18369]: refused connect from 49.233.147.108 (49.233.147.108)
Jun 28 00:25:23 Tower sshd[18369]: Connection from 51.75.29.61 port 51414 on 192.168.10.220 port 22 rdomain ""
Jun 28 00:25:24 Tower sshd[18369]: Invalid user haresh from 51.75.29.61 port 51414
Jun 28 00:25:24 Tower sshd[18369]: error: Could not get shadow information for NOUSER
Jun 28 00:25:24 Tower sshd[18369]: Failed password for invalid user haresh from 51.75.29.61 port 51414 ssh2
Jun 28 00:25:24 Tower sshd[18369]: Received disconnect from 51.75.29.61 port 51414:11: Bye Bye [preauth]
Jun 28 00:25:24 Tower sshd[18369]: Disconnected from invalid user haresh 51.75.29.61 port 51414 [preauth]
2020-06-28 13:35:29
87.251.74.48 attackspam
Jun 28 13:00:50 itachi1706steam sshd[120552]: Did not receive identification string from 87.251.74.48 port 14588
Jun 28 13:00:55 itachi1706steam sshd[120554]: Connection closed by authenticating user root 87.251.74.48 port 64520 [preauth]
Jun 28 13:00:56 itachi1706steam sshd[120553]: Connection closed by authenticating user root 87.251.74.48 port 26228 [preauth]
...
2020-06-28 13:20:50
51.77.144.50 attackspam
Jun 28 05:52:14 buvik sshd[13903]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.144.50
Jun 28 05:52:16 buvik sshd[13903]: Failed password for invalid user ftpuser from 51.77.144.50 port 51458 ssh2
Jun 28 05:55:19 buvik sshd[14373]: Invalid user joanna from 51.77.144.50
...
2020-06-28 13:47:13
218.92.0.251 attackspambots
$f2bV_matches
2020-06-28 13:38:10
212.102.33.47 attack
(From stubbs.alejandro@outlook.com) Hello,

I’m David Domine, owner of Louisville Historic Tours that operates here in Old Louisville, Kentucky.  
Like many businesses, I’m sure you and your employees have probably been stuck at home because of the Kentucky-wide lockdown. Most restaurants and bars still aren’t accepting large groups. This is making get-togethers or outside team building exercises currently impossible. 

That’s why I’m reaching out today.  I run a Daytime Walking Tour and a Nighttime Ghost Tour right here in Louisville.  Since our tours are outside, we are operating fully, and we are able to take groups of people (as long as we follow the social distancing guidelines.)

I’ve had a huge increase in the amount of organizations booking private tours for their employees since everyone is looking for a way to get together.  I wanted to reach out to you about the same possibility.    

Here’s the Daytime Walking Tour:

https://bit.ly/DaytimeWalkingTour

And here’s a bit of detail on the
2020-06-28 13:36:05
23.253.109.27 attackspambots
 TCP (SYN) 23.253.109.27:52433 -> port 23620, len 44
2020-06-28 13:41:30
138.128.118.133 attackbotsspam
C2,WP GET /beta/wp-includes/wlwmanifest.xml
2020-06-28 13:44:04
151.236.59.142 attack
Jun 27 18:09:00 php1 sshd\[1041\]: Invalid user bbb from 151.236.59.142
Jun 27 18:09:00 php1 sshd\[1041\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.236.59.142
Jun 27 18:09:02 php1 sshd\[1041\]: Failed password for invalid user bbb from 151.236.59.142 port 45708 ssh2
Jun 27 18:12:13 php1 sshd\[1514\]: Invalid user nti from 151.236.59.142
Jun 27 18:12:13 php1 sshd\[1514\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.236.59.142
2020-06-28 13:23:53
185.117.215.9 attackspambots
Automatic report - Banned IP Access
2020-06-28 13:42:29
86.34.214.208 attackspambots
Automatic report - Port Scan Attack
2020-06-28 13:40:58
199.249.230.105 attack
xmlrpc attack
2020-06-28 13:14:00

Recently Reported IPs

103.236.227.157 17.241.227.95 17.241.227.21 192.151.197.126
120.36.250.175 40.124.174.61 46.101.248.248 91.92.241.152
39.98.57.173 152.32.129.13 212.73.148.23 45.43.37.254
39.100.83.62 45.149.173.217 159.223.20.142 185.93.89.43
172.203.245.82 192.168.0.140 47.130.222.240 98.94.61.32