Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Germany

Internet Service Provider: netcup GmbH

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspambots
Oct 26 18:34:39 jonas sshd[11587]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.45.103.254  user=r.r
Oct 26 18:34:41 jonas sshd[11587]: Failed password for r.r from 5.45.103.254 port 50566 ssh2
Oct 26 18:34:41 jonas sshd[11587]: Received disconnect from 5.45.103.254 port 50566:11: Bye Bye [preauth]
Oct 26 18:34:41 jonas sshd[11587]: Disconnected from 5.45.103.254 port 50566 [preauth]
Oct 26 18:51:26 jonas sshd[12895]: Invalid user swebadmin from 5.45.103.254
Oct 26 18:51:26 jonas sshd[12895]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.45.103.254
Oct 26 18:51:28 jonas sshd[12895]: Failed password for invalid user swebadmin from 5.45.103.254 port 45328 ssh2
Oct 26 18:51:28 jonas sshd[12895]: Received disconnect from 5.45.103.254 port 45328:11: Bye Bye [preauth]
Oct 26 18:51:28 jonas sshd[12895]: Disconnected from 5.45.103.254 port 45328 [preauth]
Oct 26 18:56:04 jonas sshd[13207]: ........
-------------------------------
2019-10-27 06:18:35
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 5.45.103.254
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41384
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;5.45.103.254.			IN	A

;; AUTHORITY SECTION:
.			458	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019102601 1800 900 604800 86400

;; Query time: 108 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Oct 27 06:18:32 CST 2019
;; MSG SIZE  rcvd: 116
Host info
254.103.45.5.in-addr.arpa domain name pointer pingoin.eu.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
254.103.45.5.in-addr.arpa	name = pingoin.eu.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
80.211.78.132 attack
DATE:2020-03-04 01:21:33, IP:80.211.78.132, PORT:ssh SSH brute force auth (docker-dc)
2020-03-04 08:38:56
192.241.218.84 attackbotsspam
Portscan or hack attempt detected by psad/fwsnort
2020-03-04 08:42:12
139.59.0.90 attackspambots
2020-03-04T00:08:01.066643vps751288.ovh.net sshd\[13006\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=blr.btrnaidu.com  user=root
2020-03-04T00:08:03.420897vps751288.ovh.net sshd\[13006\]: Failed password for root from 139.59.0.90 port 54626 ssh2
2020-03-04T00:15:32.482107vps751288.ovh.net sshd\[13110\]: Invalid user ts6 from 139.59.0.90 port 58974
2020-03-04T00:15:32.490753vps751288.ovh.net sshd\[13110\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=blr.btrnaidu.com
2020-03-04T00:15:34.760292vps751288.ovh.net sshd\[13110\]: Failed password for invalid user ts6 from 139.59.0.90 port 58974 ssh2
2020-03-04 08:41:08
175.140.138.193 attackbots
SASL PLAIN auth failed: ruser=...
2020-03-04 08:12:23
58.187.209.155 attackbotsspam
trying to access non-authorized port
2020-03-04 08:29:48
106.13.48.122 attack
Mar  4 00:47:46 sd-53420 sshd\[19716\]: Invalid user tech from 106.13.48.122
Mar  4 00:47:46 sd-53420 sshd\[19716\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.122
Mar  4 00:47:48 sd-53420 sshd\[19716\]: Failed password for invalid user tech from 106.13.48.122 port 45951 ssh2
Mar  4 00:51:25 sd-53420 sshd\[20076\]: Invalid user redmine from 106.13.48.122
Mar  4 00:51:25 sd-53420 sshd\[20076\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.122
...
2020-03-04 08:15:22
103.219.112.47 attackspambots
Mar  4 01:32:48 localhost sshd\[14321\]: Invalid user bot from 103.219.112.47 port 44242
Mar  4 01:32:48 localhost sshd\[14321\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.219.112.47
Mar  4 01:32:50 localhost sshd\[14321\]: Failed password for invalid user bot from 103.219.112.47 port 44242 ssh2
2020-03-04 08:48:10
180.71.44.97 attackspambots
Unauthorised access (Mar  4) SRC=180.71.44.97 LEN=40 PREC=0x20 TTL=52 ID=23671 TCP DPT=23 WINDOW=63137 SYN
2020-03-04 08:39:31
134.209.57.3 attackspam
2020-03-04T01:25:05.791945ns386461 sshd\[16156\]: Invalid user ftpuser from 134.209.57.3 port 33738
2020-03-04T01:25:05.796351ns386461 sshd\[16156\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.57.3
2020-03-04T01:25:08.606462ns386461 sshd\[16156\]: Failed password for invalid user ftpuser from 134.209.57.3 port 33738 ssh2
2020-03-04T01:42:21.725468ns386461 sshd\[31322\]: Invalid user teamsystem from 134.209.57.3 port 42802
2020-03-04T01:42:21.729135ns386461 sshd\[31322\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.57.3
...
2020-03-04 08:43:54
129.226.161.114 attackbots
Mar  4 01:22:56 vps647732 sshd[13766]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.161.114
Mar  4 01:22:57 vps647732 sshd[13766]: Failed password for invalid user redis from 129.226.161.114 port 46514 ssh2
...
2020-03-04 08:34:41
188.166.191.192 attack
Mar  3 23:56:24 silence02 sshd[9832]: Failed password for root from 188.166.191.192 port 46862 ssh2
Mar  4 00:00:10 silence02 sshd[10212]: Failed password for root from 188.166.191.192 port 46284 ssh2
2020-03-04 08:21:17
58.215.215.134 attack
Mar  3 22:03:15 XXX sshd[27047]: Invalid user XXXXXX from 58.215.215.134 port 2086
2020-03-04 08:12:00
82.146.53.5 attackbots
Mar  4 00:13:23 jane sshd[9458]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.146.53.5 
Mar  4 00:13:25 jane sshd[9458]: Failed password for invalid user cpanelconnecttrack from 82.146.53.5 port 36885 ssh2
...
2020-03-04 08:12:57
111.229.33.138 attack
2020-03-04T01:18:42.450295vps751288.ovh.net sshd\[14158\]: Invalid user www from 111.229.33.138 port 53092
2020-03-04T01:18:42.459256vps751288.ovh.net sshd\[14158\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.33.138
2020-03-04T01:18:44.357243vps751288.ovh.net sshd\[14158\]: Failed password for invalid user www from 111.229.33.138 port 53092 ssh2
2020-03-04T01:23:41.101634vps751288.ovh.net sshd\[14234\]: Invalid user kafka from 111.229.33.138 port 52188
2020-03-04T01:23:41.109670vps751288.ovh.net sshd\[14234\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.33.138
2020-03-04 08:35:05
103.78.209.204 attackspambots
Ssh brute force
2020-03-04 08:14:57

Recently Reported IPs

252.125.228.116 192.165.223.125 147.180.71.242 97.22.17.238
49.137.195.140 27.129.196.246 203.30.195.40 20.47.107.39
103.56.200.28 217.32.106.158 179.106.71.186 55.142.93.64
234.184.236.98 193.11.46.69 114.179.2.138 101.97.48.235
134.53.203.232 38.238.235.226 97.130.56.212 187.131.211.5