Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: Scanifi LLC

Hostname: unknown

Organization: unknown

Usage Type: Commercial

Comments:
Type Details Datetime
attack
Unauthorized connection attempt detected from IP address 45.93.20.137 to port 6806
2019-12-17 13:31:45
attack
" "
2019-12-05 04:50:06
Comments on same subnet:
IP Type Details Datetime
45.93.20.165 attackspam
" "
2019-12-28 00:33:47
45.93.20.156 attack
firewall-block, port(s): 27973/tcp
2019-12-27 15:09:30
45.93.20.171 attackspam
Dec 27 05:57:33 debian-2gb-nbg1-2 kernel: \[1075378.769969\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.93.20.171 DST=195.201.40.59 LEN=40 TOS=0x08 PREC=0x00 TTL=241 ID=29493 PROTO=TCP SPT=61000 DPT=4031 WINDOW=1024 RES=0x00 SYN URGP=0
2019-12-27 13:10:40
45.93.20.186 attack
firewall-block, port(s): 8943/tcp
2019-12-26 14:49:12
45.93.20.156 attackbots
firewall-block, port(s): 45954/tcp
2019-12-26 08:11:09
45.93.20.161 attackbotsspam
56104/tcp 38252/tcp 33404/tcp...
[2019-11-28/12-25]22pkt,22pt.(tcp)
2019-12-25 21:15:52
45.93.20.181 attack
Fail2Ban Ban Triggered
2019-12-25 15:36:33
45.93.20.180 attack
Unauthorized connection attempt detected from IP address 45.93.20.180 to port 11754
2019-12-25 13:24:34
45.93.20.154 attack
12/24/2019-05:30:20.456820 45.93.20.154 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 43
2019-12-24 19:23:01
45.93.20.143 attackbotsspam
" "
2019-12-24 08:44:52
45.93.20.138 attackbots
56208/tcp 24179/tcp 18281/tcp...
[2019-11-27/12-23]19pkt,19pt.(tcp)
2019-12-24 06:23:02
45.93.20.184 attackbots
" "
2019-12-24 06:19:05
45.93.20.187 attackbotsspam
firewall-block, port(s): 31502/tcp
2019-12-23 19:15:30
45.93.20.133 attackbots
" "
2019-12-23 08:51:29
45.93.20.190 attack
Unauthorized connection attempt detected from IP address 45.93.20.190 to port 6724
2019-12-23 08:47:35
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.93.20.137
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64440
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.93.20.137.			IN	A

;; AUTHORITY SECTION:
.			527	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019120402 1800 900 604800 86400

;; Query time: 127 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Dec 05 04:50:03 CST 2019
;; MSG SIZE  rcvd: 116
Host info
Host 137.20.93.45.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 137.20.93.45.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
185.53.88.26 attackbotsspam
[2020-02-28 00:17:10] NOTICE[1148][C-0000c9a0] chan_sip.c: Call from '' (185.53.88.26:59304) to extension '011442037694876' rejected because extension not found in context 'public'.
[2020-02-28 00:17:10] SECURITY[1163] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-02-28T00:17:10.656-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="011442037694876",SessionID="0x7fd82c538db8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.26/59304",ACLName="no_extension_match"
[2020-02-28 00:17:15] NOTICE[1148][C-0000c9a1] chan_sip.c: Call from '' (185.53.88.26:50022) to extension '011442037694876' rejected because extension not found in context 'public'.
[2020-02-28 00:17:15] SECURITY[1163] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-02-28T00:17:15.128-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="011442037694876",SessionID="0x7fd82c3faf98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185
...
2020-02-28 13:19:54
1.243.143.233 attackbotsspam
port scan and connect, tcp 23 (telnet)
2020-02-28 13:12:57
61.164.246.45 attack
Feb 28 05:39:21 server sshd[2265582]: Failed password for invalid user Acotas from 61.164.246.45 port 59440 ssh2
Feb 28 05:48:15 server sshd[2267321]: Failed password for invalid user minecraft from 61.164.246.45 port 46538 ssh2
Feb 28 05:56:44 server sshd[2269004]: Failed password for invalid user party from 61.164.246.45 port 33634 ssh2
2020-02-28 13:20:47
111.93.156.74 attackspambots
Feb 28 05:49:48 vps691689 sshd[12953]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.93.156.74
Feb 28 05:49:50 vps691689 sshd[12953]: Failed password for invalid user weblogic from 111.93.156.74 port 44422 ssh2
...
2020-02-28 13:05:13
222.186.175.150 attackspambots
Feb 28 06:07:48 h2177944 sshd\[31529\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.150  user=root
Feb 28 06:07:51 h2177944 sshd\[31529\]: Failed password for root from 222.186.175.150 port 11158 ssh2
Feb 28 06:07:55 h2177944 sshd\[31529\]: Failed password for root from 222.186.175.150 port 11158 ssh2
Feb 28 06:07:58 h2177944 sshd\[31529\]: Failed password for root from 222.186.175.150 port 11158 ssh2
...
2020-02-28 13:10:07
45.238.121.129 attackbots
Attempts against Email Servers
2020-02-28 13:05:48
135.23.58.151 attackspam
Honeypot attack, port: 5555, PTR: 135-23-58-151.cpe.pppoe.ca.
2020-02-28 13:10:59
36.78.211.185 attackspam
20/2/27@23:57:06: FAIL: Alarm-Network address from=36.78.211.185
20/2/27@23:57:06: FAIL: Alarm-Network address from=36.78.211.185
...
2020-02-28 13:15:22
178.33.255.189 attackbotsspam
Honeypot attack, port: 445, PTR: ip189.ip-178-33-255.eu.
2020-02-28 13:09:46
138.0.60.5 attackspam
Feb 28 05:50:27 silence02 sshd[8795]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.0.60.5
Feb 28 05:50:28 silence02 sshd[8795]: Failed password for invalid user tengwen from 138.0.60.5 port 40102 ssh2
Feb 28 05:57:17 silence02 sshd[11918]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.0.60.5
2020-02-28 13:08:36
206.189.142.107 attackbots
Invalid user miyazawa from 206.189.142.107 port 58764
2020-02-28 10:13:11
183.88.144.7 attackbotsspam
Honeypot attack, port: 445, PTR: mx-ll-183.88.144-7.dynamic.3bb.in.th.
2020-02-28 13:27:31
181.188.134.133 attackspambots
Invalid user thorstenschwarz from 181.188.134.133 port 45690
2020-02-28 10:15:56
190.64.204.140 attack
Feb 28 01:59:13 localhost sshd\[55615\]: Invalid user yueyimin from 190.64.204.140 port 52444
Feb 28 01:59:13 localhost sshd\[55615\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.64.204.140
Feb 28 01:59:15 localhost sshd\[55615\]: Failed password for invalid user yueyimin from 190.64.204.140 port 52444 ssh2
Feb 28 02:09:32 localhost sshd\[55823\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.64.204.140  user=root
Feb 28 02:09:34 localhost sshd\[55823\]: Failed password for root from 190.64.204.140 port 34493 ssh2
...
2020-02-28 10:14:03
66.44.209.102 attack
Feb 27 22:57:17 mailman postfix/smtpd[24167]: NOQUEUE: reject: RCPT from unknown[66.44.209.102]: 554 5.7.1 Service unavailable; Client host [66.44.209.102] blocked using sbl-xbl.spamhaus.org; https://www.spamhaus.org/query/ip/66.44.209.102 / https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=SMTP helo=
Feb 27 22:57:18 mailman postfix/smtpd[24167]: NOQUEUE: reject: RCPT from unknown[66.44.209.102]: 554 5.7.1 Service unavailable; Client host [66.44.209.102] blocked using sbl-xbl.spamhaus.org; https://www.spamhaus.org/query/ip/66.44.209.102 / https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=SMTP helo=
2020-02-28 13:05:29

Recently Reported IPs

177.38.183.149 60.15.181.165 160.3.45.208 83.69.81.48
128.42.150.214 159.228.35.180 68.15.245.228 104.151.173.153
162.229.121.27 195.141.111.32 125.91.15.230 66.135.101.246
175.44.34.249 52.97.176.34 144.79.51.240 37.180.171.107
79.31.164.147 81.111.18.223 82.13.84.132 208.25.74.156