Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Netherlands

Internet Service Provider: Scanifi LLC

Hostname: unknown

Organization: unknown

Usage Type: Commercial

Comments:
Type Details Datetime
attack
firewall-block, port(s): 14848/tcp
2019-12-12 15:59:44
Comments on same subnet:
IP Type Details Datetime
45.93.20.165 attackspam
" "
2019-12-28 00:33:47
45.93.20.156 attack
firewall-block, port(s): 27973/tcp
2019-12-27 15:09:30
45.93.20.171 attackspam
Dec 27 05:57:33 debian-2gb-nbg1-2 kernel: \[1075378.769969\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.93.20.171 DST=195.201.40.59 LEN=40 TOS=0x08 PREC=0x00 TTL=241 ID=29493 PROTO=TCP SPT=61000 DPT=4031 WINDOW=1024 RES=0x00 SYN URGP=0
2019-12-27 13:10:40
45.93.20.186 attack
firewall-block, port(s): 8943/tcp
2019-12-26 14:49:12
45.93.20.156 attackbots
firewall-block, port(s): 45954/tcp
2019-12-26 08:11:09
45.93.20.161 attackbotsspam
56104/tcp 38252/tcp 33404/tcp...
[2019-11-28/12-25]22pkt,22pt.(tcp)
2019-12-25 21:15:52
45.93.20.181 attack
Fail2Ban Ban Triggered
2019-12-25 15:36:33
45.93.20.180 attack
Unauthorized connection attempt detected from IP address 45.93.20.180 to port 11754
2019-12-25 13:24:34
45.93.20.154 attack
12/24/2019-05:30:20.456820 45.93.20.154 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 43
2019-12-24 19:23:01
45.93.20.143 attackbotsspam
" "
2019-12-24 08:44:52
45.93.20.138 attackbots
56208/tcp 24179/tcp 18281/tcp...
[2019-11-27/12-23]19pkt,19pt.(tcp)
2019-12-24 06:23:02
45.93.20.184 attackbots
" "
2019-12-24 06:19:05
45.93.20.187 attackbotsspam
firewall-block, port(s): 31502/tcp
2019-12-23 19:15:30
45.93.20.133 attackbots
" "
2019-12-23 08:51:29
45.93.20.190 attack
Unauthorized connection attempt detected from IP address 45.93.20.190 to port 6724
2019-12-23 08:47:35
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.93.20.189
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 46734
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.93.20.189.			IN	A

;; AUTHORITY SECTION:
.			207	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019121200 1800 900 604800 86400

;; Query time: 133 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Dec 12 15:59:41 CST 2019
;; MSG SIZE  rcvd: 116
Host info
Host 189.20.93.45.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 189.20.93.45.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
182.75.201.82 attackbots
Jul  1 04:06:22 SilenceServices sshd[31627]: Failed password for root from 182.75.201.82 port 36789 ssh2
Jul  1 04:08:03 SilenceServices sshd[32666]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.75.201.82
Jul  1 04:08:05 SilenceServices sshd[32666]: Failed password for invalid user minecraft from 182.75.201.82 port 53376 ssh2
2019-07-01 10:13:49
171.221.201.212 attackbotsspam
Brute force attack to crack SMTP password (port 25 / 587)
2019-07-01 10:49:31
159.89.172.190 attack
Scanning unused Default website or suspicious access to valid sites from IP marked as abusive
2019-07-01 10:16:50
178.128.214.126 attack
Jul  1 03:26:32 ns37 sshd[29173]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.214.126
Jul  1 03:26:32 ns37 sshd[29173]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.214.126
2019-07-01 10:31:40
103.27.237.67 attack
Invalid user pwcadmin from 103.27.237.67 port 23412
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.27.237.67
Failed password for invalid user pwcadmin from 103.27.237.67 port 23412 ssh2
Invalid user gatien from 103.27.237.67 port 37107
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.27.237.67
2019-07-01 10:32:09
189.90.255.173 attack
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.90.255.173
Failed password for invalid user test from 189.90.255.173 port 48511 ssh2
Invalid user ftpuser2 from 189.90.255.173 port 57799
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.90.255.173
Failed password for invalid user ftpuser2 from 189.90.255.173 port 57799 ssh2
2019-07-01 10:10:46
199.59.150.99 attackspambots
Brute force attack stopped by firewall
2019-07-01 10:08:51
103.224.247.216 attackbots
Jul  1 04:11:36 s64-1 sshd[28696]: Failed password for root from 103.224.247.216 port 14385 ssh2
Jul  1 04:11:43 s64-1 sshd[28696]: Failed password for root from 103.224.247.216 port 14385 ssh2
Jul  1 04:12:09 s64-1 sshd[28696]: Failed password for root from 103.224.247.216 port 14385 ssh2
...
2019-07-01 10:48:28
62.4.14.198 attack
Brute force attack stopped by firewall
2019-07-01 10:07:57
164.132.213.119 attack
Port scan attempt detected by AWS-CCS, CTS, India
2019-07-01 10:41:50
113.204.147.26 attackbotsspam
Jun 30 18:48:54 mailman dovecot: imap-login: Disconnected (auth failed, 1 attempts): user=, method=PLAIN, rip=113.204.147.26, lip=[munged], TLS
2019-07-01 10:11:05
80.104.34.234 attackbotsspam
Jun 28 07:50:12 xxxxxxx8434580 sshd[31677]: Invalid user cloud from 80.104.34.234
Jun 28 07:50:14 xxxxxxx8434580 sshd[31677]: Failed password for invalid user cloud from 80.104.34.234 port 49679 ssh2
Jun 28 07:50:14 xxxxxxx8434580 sshd[31677]: Received disconnect from 80.104.34.234: 11: Bye Bye [preauth]
Jun 28 07:53:19 xxxxxxx8434580 sshd[31711]: Invalid user kong from 80.104.34.234
Jun 28 07:53:21 xxxxxxx8434580 sshd[31711]: Failed password for invalid user kong from 80.104.34.234 port 55564 ssh2
Jun 28 07:53:21 xxxxxxx8434580 sshd[31711]: Received disconnect from 80.104.34.234: 11: Bye Bye [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=80.104.34.234
2019-07-01 10:17:12
129.204.58.180 attackbotsspam
Jul  1 02:27:05 ns37 sshd[24030]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.58.180
Jul  1 02:27:05 ns37 sshd[24030]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.58.180
2019-07-01 10:32:41
119.59.107.80 attackspam
Lines containing failures of 119.59.107.80


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=119.59.107.80
2019-07-01 10:51:26
94.176.76.74 attack
Unauthorised access (Jul  1) SRC=94.176.76.74 LEN=40 TTL=244 ID=50672 DF TCP DPT=23 WINDOW=14600 SYN 
Unauthorised access (Jul  1) SRC=94.176.76.74 LEN=40 TTL=244 ID=35670 DF TCP DPT=23 WINDOW=14600 SYN 
Unauthorised access (Jun 30) SRC=94.176.76.74 LEN=40 TTL=244 ID=31945 DF TCP DPT=23 WINDOW=14600 SYN 
Unauthorised access (Jun 30) SRC=94.176.76.74 LEN=40 TTL=244 ID=63577 DF TCP DPT=23 WINDOW=14600 SYN 
Unauthorised access (Jun 30) SRC=94.176.76.74 LEN=40 TTL=244 ID=21333 DF TCP DPT=23 WINDOW=14600 SYN 
Unauthorised access (Jun 30) SRC=94.176.76.74 LEN=40 TTL=244 ID=52997 DF TCP DPT=23 WINDOW=14600 SYN 
Unauthorised access (Jun 30) SRC=94.176.76.74 LEN=40 TTL=244 ID=29840 DF TCP DPT=23 WINDOW=14600 SYN 
Unauthorised access (Jun 30) SRC=94.176.76.74 LEN=40 TTL=244 ID=44939 DF TCP DPT=23 WINDOW=14600 SYN
2019-07-01 10:54:18

Recently Reported IPs

147.30.41.125 123.185.155.214 36.70.178.19 223.206.237.141
66.96.228.86 36.89.149.53 14.247.3.177 106.12.187.68
103.53.76.163 93.49.105.126 49.228.187.50 18.244.201.63
190.54.119.235 71.231.186.127 168.195.206.195 31.6.79.234
58.240.115.146 175.211.216.112 121.200.53.198 92.0.71.11