Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Germany

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attack
Scan port
2023-09-26 16:42:07
attack
Scan port
2023-09-14 12:36:57
attack
Scan port
2023-09-14 12:35:56
Comments on same subnet:
IP Type Details Datetime
45.93.16.214 attack
Scan port
2023-08-15 12:42:10
45.93.16.240 attack
Scan port
2023-08-02 12:48:29
45.93.16.48 attack
Scan port DDoS
2023-03-23 15:05:07
45.93.16.216 attack
Scan port DDoS
2023-03-23 15:04:54
45.93.16.216 attack
Scan port DDoS
2023-03-23 15:04:28
45.93.16.81 attack
Scan port DDoS
2023-03-23 15:04:05
45.93.16.32 attack
Port scan
2023-02-08 13:52:26
45.93.16.23 attack
Port scan
2023-01-23 13:54:04
45.93.16.100 attack
Port scan
2023-01-23 13:52:29
45.93.16.22 attack
DdoS
2023-01-23 13:50:44
45.93.16.189 attack
Brute-force
2023-01-23 13:48:42
45.93.16.24 attack
port scan
2023-01-20 13:43:49
45.93.16.22 attack
Port scan
2023-01-20 13:42:14
45.93.16.23 attack
Port scan
2023-01-20 13:38:38
45.93.16.100 attack
Port scan
2023-01-20 13:36:55
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.93.16.154
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7625
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;45.93.16.154.			IN	A

;; AUTHORITY SECTION:
.			188	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2023091302 1800 900 604800 86400

;; Query time: 21 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Sep 14 12:35:55 CST 2023
;; MSG SIZE  rcvd: 105
Host info
Host 154.16.93.45.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 154.16.93.45.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
177.159.99.89 attackbotsspam
Distributed brute force attack
2020-09-12 12:53:13
222.186.42.213 attack
Sep 12 07:05:49 dev0-dcde-rnet sshd[9380]: Failed password for root from 222.186.42.213 port 60275 ssh2
Sep 12 07:05:58 dev0-dcde-rnet sshd[9382]: Failed password for root from 222.186.42.213 port 23403 ssh2
2020-09-12 13:12:47
212.47.238.207 attackbotsspam
Sep 11 23:44:23 mellenthin sshd[12708]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.47.238.207  user=root
Sep 11 23:44:24 mellenthin sshd[12708]: Failed password for invalid user root from 212.47.238.207 port 38396 ssh2
2020-09-12 12:49:21
20.188.107.54 attackbots
Time:     Sat Sep 12 04:24:08 2020 +0200
IP:       20.188.107.54 (SG/Singapore/-)
Failures: 5 (sshd)
Interval: 3600 seconds
Blocked:  Permanent Block [LF_SSHD]

Log entries:

Sep 12 04:21:15 ca-3-ams1 sshd[33520]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.188.107.54  user=root
Sep 12 04:21:16 ca-3-ams1 sshd[33520]: Failed password for root from 20.188.107.54 port 1024 ssh2
Sep 12 04:22:56 ca-3-ams1 sshd[33599]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.188.107.54  user=root
Sep 12 04:22:58 ca-3-ams1 sshd[33599]: Failed password for root from 20.188.107.54 port 1024 ssh2
Sep 12 04:24:06 ca-3-ams1 sshd[33634]: Invalid user admin from 20.188.107.54 port 1024
2020-09-12 13:26:36
192.35.168.234 attackspambots
 TCP (SYN) 192.35.168.234:59120 -> port 12115, len 44
2020-09-12 13:11:52
167.250.127.235 attack
Sep 12 06:41:10 PorscheCustomer sshd[20567]: Failed password for root from 167.250.127.235 port 19991 ssh2
Sep 12 06:45:25 PorscheCustomer sshd[20688]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.250.127.235
Sep 12 06:45:27 PorscheCustomer sshd[20688]: Failed password for invalid user chef from 167.250.127.235 port 34116 ssh2
...
2020-09-12 12:57:36
200.159.63.178 attackspambots
Sep 12 02:39:25 vps333114 sshd[1929]: Failed password for root from 200.159.63.178 port 35885 ssh2
Sep 12 02:52:54 vps333114 sshd[2258]: Invalid user temp from 200.159.63.178
...
2020-09-12 13:23:30
195.54.167.153 attackspambots
Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2020-09-12T01:15:45Z and 2020-09-12T03:15:29Z
2020-09-12 13:16:59
51.68.44.13 attackbots
Sep 12 06:05:02 root sshd[7885]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.44.13 
...
2020-09-12 13:25:41
210.22.78.74 attack
Sep 12 07:13:09 root sshd[16262]: Invalid user reder from 210.22.78.74
...
2020-09-12 12:56:42
106.53.178.199 attackspam
malicious Brute-Force reported by https://www.patrick-binder.de
...
2020-09-12 13:20:47
103.145.13.212 attack
NL NL/Netherlands/- Hits: 11
2020-09-12 13:13:33
45.135.134.39 attackbotsspam
Sep 12 01:07:37 doubuntu sshd[25088]: error: maximum authentication attempts exceeded for root from 45.135.134.39 port 59086 ssh2 [preauth]
Sep 12 01:07:40 doubuntu sshd[25090]: error: maximum authentication attempts exceeded for root from 45.135.134.39 port 60304 ssh2 [preauth]
Sep 12 01:07:43 doubuntu sshd[25092]: Disconnected from authenticating user root 45.135.134.39 port 33290 [preauth]
...
2020-09-12 13:20:12
102.44.152.167 attackbotsspam
Threat Management Alert 1: Attempted Administrator Privilege Gain. Signature ET EXPLOIT MVPower DVR Shell UCE. From: 102.44.152.167:58383, to: 192.168.4.99:80, protocol: TCP
2020-09-12 12:50:00
85.209.0.101 attack
 TCP (SYN) 85.209.0.101:45118 -> port 22, len 60
2020-09-12 13:04:05

Recently Reported IPs

68.103.62.22 23.39.216.147 13.35.49.75 209.45.51.221
118.185.230.129 211.125.136.91 178.120.196.199 87.139.51.200
114.222.168.85 114.38.83.74 154.9.206.213 185.170.62.72
233.242.245.234 121.52.153.158 103.134.39.29 36.78.202.115
41.59.227.89 192.168.43.216 202.197.208.100 45.93.16.134