Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Germany

Internet Service Provider: netcup GmbH

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspambots
Oct 26 18:34:39 jonas sshd[11587]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.45.103.254  user=r.r
Oct 26 18:34:41 jonas sshd[11587]: Failed password for r.r from 5.45.103.254 port 50566 ssh2
Oct 26 18:34:41 jonas sshd[11587]: Received disconnect from 5.45.103.254 port 50566:11: Bye Bye [preauth]
Oct 26 18:34:41 jonas sshd[11587]: Disconnected from 5.45.103.254 port 50566 [preauth]
Oct 26 18:51:26 jonas sshd[12895]: Invalid user swebadmin from 5.45.103.254
Oct 26 18:51:26 jonas sshd[12895]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.45.103.254
Oct 26 18:51:28 jonas sshd[12895]: Failed password for invalid user swebadmin from 5.45.103.254 port 45328 ssh2
Oct 26 18:51:28 jonas sshd[12895]: Received disconnect from 5.45.103.254 port 45328:11: Bye Bye [preauth]
Oct 26 18:51:28 jonas sshd[12895]: Disconnected from 5.45.103.254 port 45328 [preauth]
Oct 26 18:56:04 jonas sshd[13207]: ........
-------------------------------
2019-10-27 06:18:35
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 5.45.103.254
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41384
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;5.45.103.254.			IN	A

;; AUTHORITY SECTION:
.			458	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019102601 1800 900 604800 86400

;; Query time: 108 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Oct 27 06:18:32 CST 2019
;; MSG SIZE  rcvd: 116
Host info
254.103.45.5.in-addr.arpa domain name pointer pingoin.eu.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
254.103.45.5.in-addr.arpa	name = pingoin.eu.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
212.237.36.182 attack
Aug  6 07:20:33 vps639187 sshd\[27315\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.237.36.182  user=root
Aug  6 07:20:35 vps639187 sshd\[27315\]: Failed password for root from 212.237.36.182 port 49460 ssh2
Aug  6 07:25:07 vps639187 sshd\[27398\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.237.36.182  user=root
...
2020-08-06 13:25:42
123.132.237.18 attack
Aug  6 07:21:05 [host] sshd[7339]: pam_unix(sshd:a
Aug  6 07:21:06 [host] sshd[7339]: Failed password
Aug  6 07:25:03 [host] sshd[7448]: pam_unix(sshd:a
2020-08-06 13:31:01
145.239.87.35 attack
$f2bV_matches
2020-08-06 13:35:52
129.28.197.173 attackbotsspam
Aug  6 04:44:34 game-panel sshd[12422]: Failed password for root from 129.28.197.173 port 57704 ssh2
Aug  6 04:48:05 game-panel sshd[12559]: Failed password for root from 129.28.197.173 port 40376 ssh2
2020-08-06 13:07:27
219.142.19.70 attackbots
Aug  6 08:24:47 server2 sshd\[24579\]: Invalid user admin from 219.142.19.70
Aug  6 08:24:49 server2 sshd\[24581\]: Invalid user admin from 219.142.19.70
Aug  6 08:24:51 server2 sshd\[24585\]: Invalid user admin from 219.142.19.70
Aug  6 08:24:52 server2 sshd\[24587\]: Invalid user admin from 219.142.19.70
Aug  6 08:24:54 server2 sshd\[24589\]: Invalid user admin from 219.142.19.70
Aug  6 08:24:56 server2 sshd\[24593\]: Invalid user admin from 219.142.19.70
2020-08-06 13:40:56
106.12.133.103 attack
Aug  6 02:01:57 firewall sshd[10205]: Failed password for root from 106.12.133.103 port 47062 ssh2
Aug  6 02:05:58 firewall sshd[10341]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.133.103  user=root
Aug  6 02:06:00 firewall sshd[10341]: Failed password for root from 106.12.133.103 port 38030 ssh2
...
2020-08-06 13:12:54
222.186.175.167 attack
Aug  6 10:03:40 gw1 sshd[14024]: Failed password for root from 222.186.175.167 port 22566 ssh2
Aug  6 10:03:44 gw1 sshd[14024]: Failed password for root from 222.186.175.167 port 22566 ssh2
...
2020-08-06 13:05:46
183.89.214.96 attackbots
Attempted Brute Force (dovecot)
2020-08-06 13:23:34
219.240.99.110 attackspam
Aug  6 05:16:00 localhost sshd[59078]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.240.99.110  user=root
Aug  6 05:16:02 localhost sshd[59078]: Failed password for root from 219.240.99.110 port 35834 ssh2
Aug  6 05:20:28 localhost sshd[59454]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.240.99.110  user=root
Aug  6 05:20:30 localhost sshd[59454]: Failed password for root from 219.240.99.110 port 45996 ssh2
Aug  6 05:24:55 localhost sshd[59800]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.240.99.110  user=root
Aug  6 05:24:57 localhost sshd[59800]: Failed password for root from 219.240.99.110 port 56164 ssh2
...
2020-08-06 13:39:29
129.204.148.56 attackspambots
Aug  6 06:52:01 vpn01 sshd[484]: Failed password for root from 129.204.148.56 port 32930 ssh2
...
2020-08-06 13:17:07
177.25.151.54 attackbotsspam
Fail2Ban Ban Triggered
2020-08-06 13:35:35
192.144.232.129 attackspam
Aug  6 06:24:58 vps1 sshd[25081]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.144.232.129  user=root
Aug  6 06:24:59 vps1 sshd[25081]: Failed password for invalid user root from 192.144.232.129 port 33656 ssh2
Aug  6 06:28:07 vps1 sshd[25242]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.144.232.129  user=root
Aug  6 06:28:10 vps1 sshd[25242]: Failed password for invalid user root from 192.144.232.129 port 44632 ssh2
Aug  6 06:31:13 vps1 sshd[25293]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.144.232.129  user=root
Aug  6 06:31:15 vps1 sshd[25293]: Failed password for invalid user root from 192.144.232.129 port 55604 ssh2
Aug  6 06:34:25 vps1 sshd[25332]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.144.232.129  user=root
...
2020-08-06 13:16:26
14.241.245.179 attackbots
Aug  6 01:15:33 ny01 sshd[19417]: Failed password for root from 14.241.245.179 port 59040 ssh2
Aug  6 01:20:16 ny01 sshd[19971]: Failed password for root from 14.241.245.179 port 41920 ssh2
2020-08-06 13:40:40
180.96.11.20 attack
Aug  6 05:17:49 game-panel sshd[13911]: Failed password for root from 180.96.11.20 port 40700 ssh2
Aug  6 05:21:26 game-panel sshd[14054]: Failed password for root from 180.96.11.20 port 52564 ssh2
2020-08-06 13:39:45
189.59.69.3 attackspam
(imapd) Failed IMAP login from 189.59.69.3 (BR/Brazil/trevisan.cba.gvt.net.br): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Aug  6 08:24:18 ir1 dovecot[3110802]: imap-login: Disconnected (auth failed, 1 attempts in 5 secs): user=, method=PLAIN, rip=189.59.69.3, lip=5.63.12.44, TLS, session=
2020-08-06 13:18:56

Recently Reported IPs

252.125.228.116 192.165.223.125 147.180.71.242 97.22.17.238
49.137.195.140 27.129.196.246 203.30.195.40 20.47.107.39
103.56.200.28 217.32.106.158 179.106.71.186 55.142.93.64
234.184.236.98 193.11.46.69 114.179.2.138 101.97.48.235
134.53.203.232 38.238.235.226 97.130.56.212 187.131.211.5