Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Netherlands

Internet Service Provider: Scanifi LLC

Hostname: unknown

Organization: unknown

Usage Type: Commercial

Comments:
Type Details Datetime
attack
abuseConfidenceScore blocked for 12h
2019-09-28 09:25:57
attackspam
" "
2019-08-12 21:40:02
Comments on same subnet:
IP Type Details Datetime
45.93.20.165 attackspam
" "
2019-12-28 00:33:47
45.93.20.156 attack
firewall-block, port(s): 27973/tcp
2019-12-27 15:09:30
45.93.20.171 attackspam
Dec 27 05:57:33 debian-2gb-nbg1-2 kernel: \[1075378.769969\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.93.20.171 DST=195.201.40.59 LEN=40 TOS=0x08 PREC=0x00 TTL=241 ID=29493 PROTO=TCP SPT=61000 DPT=4031 WINDOW=1024 RES=0x00 SYN URGP=0
2019-12-27 13:10:40
45.93.20.186 attack
firewall-block, port(s): 8943/tcp
2019-12-26 14:49:12
45.93.20.156 attackbots
firewall-block, port(s): 45954/tcp
2019-12-26 08:11:09
45.93.20.161 attackbotsspam
56104/tcp 38252/tcp 33404/tcp...
[2019-11-28/12-25]22pkt,22pt.(tcp)
2019-12-25 21:15:52
45.93.20.181 attack
Fail2Ban Ban Triggered
2019-12-25 15:36:33
45.93.20.180 attack
Unauthorized connection attempt detected from IP address 45.93.20.180 to port 11754
2019-12-25 13:24:34
45.93.20.154 attack
12/24/2019-05:30:20.456820 45.93.20.154 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 43
2019-12-24 19:23:01
45.93.20.143 attackbotsspam
" "
2019-12-24 08:44:52
45.93.20.138 attackbots
56208/tcp 24179/tcp 18281/tcp...
[2019-11-27/12-23]19pkt,19pt.(tcp)
2019-12-24 06:23:02
45.93.20.184 attackbots
" "
2019-12-24 06:19:05
45.93.20.187 attackbotsspam
firewall-block, port(s): 31502/tcp
2019-12-23 19:15:30
45.93.20.133 attackbots
" "
2019-12-23 08:51:29
45.93.20.190 attack
Unauthorized connection attempt detected from IP address 45.93.20.190 to port 6724
2019-12-23 08:47:35
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.93.20.4
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48539
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.93.20.4.			IN	A

;; AUTHORITY SECTION:
.			3268	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019081200 1800 900 604800 86400

;; Query time: 0 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Aug 12 21:39:52 CST 2019
;; MSG SIZE  rcvd: 114
Host info
Host 4.20.93.45.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 4.20.93.45.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
51.75.67.69 attack
Invalid user benoliel from 51.75.67.69 port 51748
2019-11-13 16:22:34
104.50.8.212 attackspambots
$f2bV_matches
2019-11-13 16:07:21
61.133.232.249 attackbotsspam
2019-11-13T06:27:36.643867abusebot-5.cloudsearch.cf sshd\[22614\]: Invalid user home from 61.133.232.249 port 12406
2019-11-13 16:34:22
123.16.22.51 attackspam
Lines containing failures of 123.16.22.51
Oct 17 17:37:25 server-name sshd[5970]: Invalid user accept from 123.16.22.51 port 50840
Oct 17 17:37:25 server-name sshd[5970]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.16.22.51 
Oct 17 17:37:28 server-name sshd[5970]: Failed password for invalid user accept from 123.16.22.51 port 50840 ssh2
Oct 17 17:37:30 server-name sshd[5970]: Connection closed by invalid user accept 123.16.22.51 port 50840 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=123.16.22.51
2019-11-13 16:33:35
123.156.89.159 attackspam
Automatic report - Port Scan Attack
2019-11-13 16:18:39
61.7.191.132 attack
Lines containing failures of 61.7.191.132
Oct  4 20:52:06 server-name sshd[5561]: Invalid user admin from 61.7.191.132 port 50495
Oct  4 20:52:06 server-name sshd[5561]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.7.191.132 
Oct  4 20:52:08 server-name sshd[5561]: Failed password for invalid user admin from 61.7.191.132 port 50495 ssh2
Oct  4 20:52:10 server-name sshd[5561]: Connection closed by invalid user admin 61.7.191.132 port 50495 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=61.7.191.132
2019-11-13 16:08:22
132.232.59.136 attackbots
2019-11-13T08:01:25.543168shield sshd\[25336\]: Invalid user rpc from 132.232.59.136 port 54098
2019-11-13T08:01:25.547327shield sshd\[25336\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.59.136
2019-11-13T08:01:27.388040shield sshd\[25336\]: Failed password for invalid user rpc from 132.232.59.136 port 54098 ssh2
2019-11-13T08:06:23.220777shield sshd\[25713\]: Invalid user chervenka from 132.232.59.136 port 34978
2019-11-13T08:06:23.225184shield sshd\[25713\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.59.136
2019-11-13 16:14:13
183.129.160.229 attackspam
183.129.160.229 was recorded 14 times by 12 hosts attempting to connect to the following ports: 57907,51827,29798,60620,65281,4462,25273,21040,20482,17,46614,10321,43909,30281. Incident counter (4h, 24h, all-time): 14, 98, 963
2019-11-13 15:56:20
103.235.236.224 attack
SSH Bruteforce
2019-11-13 16:01:12
222.186.180.147 attackspambots
F2B jail: sshd. Time: 2019-11-13 09:09:54, Reported by: VKReport
2019-11-13 16:11:56
46.37.172.252 attack
46.37.172.252 - - \[13/Nov/2019:07:57:32 +0100\] "POST /wp-login.php HTTP/1.0" 200 10546 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
46.37.172.252 - - \[13/Nov/2019:07:57:33 +0100\] "POST /wp-login.php HTTP/1.0" 200 10371 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
46.37.172.252 - - \[13/Nov/2019:07:57:34 +0100\] "POST /wp-login.php HTTP/1.0" 200 10366 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2019-11-13 16:07:03
124.156.206.152 attackspam
Nov 12 21:35:13 hpm sshd\[15084\]: Invalid user kasumovich from 124.156.206.152
Nov 12 21:35:13 hpm sshd\[15084\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.156.206.152
Nov 12 21:35:15 hpm sshd\[15084\]: Failed password for invalid user kasumovich from 124.156.206.152 port 60174 ssh2
Nov 12 21:39:30 hpm sshd\[15562\]: Invalid user jaguar from 124.156.206.152
Nov 12 21:39:30 hpm sshd\[15562\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.156.206.152
2019-11-13 16:14:41
116.118.2.171 attackspambots
Lines containing failures of 116.118.2.171
Oct 17 17:33:01 server-name sshd[5488]: Invalid user admin from 116.118.2.171 port 33175
Oct 17 17:33:02 server-name sshd[5488]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.118.2.171 
Oct 17 17:33:03 server-name sshd[5488]: Failed password for invalid user admin from 116.118.2.171 port 33175 ssh2
Oct 17 17:33:04 server-name sshd[5488]: Connection closed by invalid user admin 116.118.2.171 port 33175 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=116.118.2.171
2019-11-13 16:00:05
114.202.139.173 attackbotsspam
Tried sshing with brute force.
2019-11-13 15:58:49
129.18.158.220 attackspambots
Lines containing failures of 129.18.158.220
Oct 17 17:29:54 server-name sshd[5108]: Invalid user admin from 129.18.158.220 port 57143
Oct 17 17:29:54 server-name sshd[5108]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.18.158.220 
Oct 17 17:29:56 server-name sshd[5108]: Failed password for invalid user admin from 129.18.158.220 port 57143 ssh2
Oct 17 17:29:58 server-name sshd[5108]: Connection closed by invalid user admin 129.18.158.220 port 57143 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=129.18.158.220
2019-11-13 16:21:11

Recently Reported IPs

78.90.150.237 61.152.171.44 20.103.53.83 138.232.13.63
92.63.194.79 18.241.91.249 54.106.52.211 232.18.159.89
75.62.183.157 106.57.41.135 190.4.66.116 55.45.134.76
225.166.106.185 54.38.131.240 237.31.80.22 15.19.22.4
218.237.65.80 190.122.1.38 122.250.74.211 185.137.234.239