Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States of America

Internet Service Provider: PPMAN Services Srl

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
Jan 16 14:01:00 grey postfix/smtpd\[30200\]: NOQUEUE: reject: RCPT from unknown\[45.85.1.252\]: 554 5.7.1 Service unavailable\; Client host \[45.85.1.252\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[45.85.1.252\]\; from=\<5738-45-327424-1327-feher.eszter=kybest.hu@mail.superfaretstex.xyz\> to=\ proto=ESMTP helo=\
...
2020-01-17 01:01:44
Comments on same subnet:
IP Type Details Datetime
45.85.193.246 attackbots
[SYS2] ANY - Unused Port - Port=8082 (1x)
2020-10-10 04:35:09
45.85.193.246 attack
" "
2020-10-09 20:32:16
45.85.193.246 attackbotsspam
" "
2020-10-09 12:20:09
45.85.188.23 attack
SSH bruteforce more then 50 syn to 22 port per 10 seconds.
2020-03-11 12:05:14
45.85.188.21 attackbots
SSH bruteforce more then 50 syn to 22 port per 10 seconds.
2020-03-08 00:16:12
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.85.1.252
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29263
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.85.1.252.			IN	A

;; AUTHORITY SECTION:
.			252	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020011600 1800 900 604800 86400

;; Query time: 63 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 17 01:01:40 CST 2020
;; MSG SIZE  rcvd: 115
Host info
Host 252.1.85.45.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 252.1.85.45.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
76.9.49.43 attackbots
IP 76.9.49.43 attacked honeypot on port: 23 at 7/20/2020 8:53:32 PM
2020-07-21 16:15:00
47.180.212.134 attack
2020-07-21T08:18:58.931012shield sshd\[25920\]: Invalid user zxincsap from 47.180.212.134 port 44821
2020-07-21T08:18:58.940909shield sshd\[25920\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.180.212.134
2020-07-21T08:19:01.355611shield sshd\[25920\]: Failed password for invalid user zxincsap from 47.180.212.134 port 44821 ssh2
2020-07-21T08:23:09.969927shield sshd\[26466\]: Invalid user oksana from 47.180.212.134 port 51649
2020-07-21T08:23:09.979208shield sshd\[26466\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.180.212.134
2020-07-21 16:26:52
175.24.46.107 attack
Jul 21 14:20:49 NG-HHDC-SVS-001 sshd[29147]: Invalid user no from 175.24.46.107
...
2020-07-21 16:55:48
185.221.192.110 attackspam
07/20/2020-23:53:55.893201 185.221.192.110 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433
2020-07-21 16:23:06
60.219.171.134 attack
Jul 21 08:56:31 vps639187 sshd\[8202\]: Invalid user admin from 60.219.171.134 port 40492
Jul 21 08:56:31 vps639187 sshd\[8202\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.219.171.134
Jul 21 08:56:33 vps639187 sshd\[8202\]: Failed password for invalid user admin from 60.219.171.134 port 40492 ssh2
...
2020-07-21 16:22:36
146.120.87.199 attack
Automatic Fail2ban report - Trying login SSH
2020-07-21 16:19:00
59.27.124.26 attack
$f2bV_matches
2020-07-21 16:53:11
187.109.34.136 attackbotsspam
Jul 21 05:43:27 mail.srvfarm.net postfix/smtpd[11613]: warning: unknown[187.109.34.136]: SASL PLAIN authentication failed: 
Jul 21 05:43:27 mail.srvfarm.net postfix/smtpd[11613]: lost connection after AUTH from unknown[187.109.34.136]
Jul 21 05:43:28 mail.srvfarm.net postfix/smtpd[6178]: warning: unknown[187.109.34.136]: SASL PLAIN authentication failed: 
Jul 21 05:43:28 mail.srvfarm.net postfix/smtpd[6178]: lost connection after AUTH from unknown[187.109.34.136]
Jul 21 05:51:29 mail.srvfarm.net postfix/smtpd[13236]: warning: unknown[187.109.34.136]: SASL PLAIN authentication failed:
2020-07-21 16:36:55
192.241.239.55 attackbots
Tried our host z.
2020-07-21 16:24:35
51.77.230.147 attackspambots
SMTP blocked logins 13. Dates: 21-7-2020 / 21-7-2020
2020-07-21 16:42:54
122.155.17.174 attack
Jul 21 04:42:46 django-0 sshd[25168]: Invalid user sophia from 122.155.17.174
...
2020-07-21 16:16:19
169.38.80.210 attackspam
Invalid user ari from 169.38.80.210 port 35964
2020-07-21 16:50:59
194.225.24.196 attack
SSH auth scanning - multiple failed logins
2020-07-21 16:16:50
128.199.95.60 attackspam
SSH Brute Force
2020-07-21 16:19:24
101.51.60.113 attack
 TCP (SYN) 101.51.60.113:57673 -> port 23, len 44
2020-07-21 16:28:36

Recently Reported IPs

184.54.75.130 113.239.141.160 91.192.46.154 172.80.239.128
203.173.152.106 200.57.235.141 216.242.164.41 103.10.228.251
242.59.55.90 53.54.147.126 25.92.117.155 131.77.244.234
3.107.242.253 84.252.236.125 126.211.219.11 1.15.18.72
68.150.89.210 95.27.46.125 251.64.136.102 108.205.116.91