Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Netherlands

Internet Service Provider: 3NT Solutions LLP

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackbotsspam
ET CINS Active Threat Intelligence Poor Reputation IP group 5 - port: 55611 proto: tcp cat: Misc Attackbytes: 60
2020-10-01 07:26:06
attack
ET CINS Active Threat Intelligence Poor Reputation IP group 5 - port: 55608 proto: tcp cat: Misc Attackbytes: 60
2020-09-30 23:53:40
attackspambots
(PERMBLOCK) 5.45.68.133 (NL/Netherlands/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs:
2020-09-30 16:19:14
Comments on same subnet:
IP Type Details Datetime
5.45.68.189 attackbotsspam
Dear Sir / Madam, 
Yesterday, my close friend (Simona Simova) was contacted via fake Facebook profile to be informed that she has a profile on a escort website. While researching via the German phone number used in the advert, we have came across more ads. These profiles are created without her permission and she is now very upset. 

Here is a list of the profiles we have found: 

- https://escortsofia.info/de/sia-11/ (5.45.68.189)
- https://escortsofia.info/de/eleonora-8/ (5.45.68.189)
- https://escortinberlin.info/eleonora-3/ (5.45.68.189)
- https://escortinberlin.info/sia-2/ (5.45.68.189)

We have already hired a lawyer in Germany who will escalate the issue to the authorities.
2020-04-24 03:31:08
5.45.68.15 attackspambots
"Unrouteable address"
2020-03-28 08:32:57
5.45.68.19 attackspam
WP Authentication failure
2019-07-15 18:24:20
5.45.68.19 attackspam
SQL Injection Exploit Attempts
2019-07-01 05:07:03
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 5.45.68.133
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 36866
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;5.45.68.133.			IN	A

;; AUTHORITY SECTION:
.			351	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020093000 1800 900 604800 86400

;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Sep 30 16:19:10 CST 2020
;; MSG SIZE  rcvd: 115
Host info
Host 133.68.45.5.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 133.68.45.5.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
154.83.17.220 attackspambots
Sep  1 17:29:47 thevastnessof sshd[13084]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.83.17.220
...
2019-09-02 07:57:18
179.83.235.195 attackspambots
Automatic report - Port Scan Attack
2019-09-02 07:58:34
119.250.54.136 attackbotsspam
" "
2019-09-02 07:04:34
218.215.188.167 attackspam
Sep  1 21:50:04 localhost sshd\[14337\]: Invalid user super@123 from 218.215.188.167 port 57818
Sep  1 21:50:04 localhost sshd\[14337\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.215.188.167
Sep  1 21:50:06 localhost sshd\[14337\]: Failed password for invalid user super@123 from 218.215.188.167 port 57818 ssh2
Sep  1 21:58:35 localhost sshd\[14566\]: Invalid user 123456 from 218.215.188.167 port 43394
Sep  1 21:58:35 localhost sshd\[14566\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.215.188.167
...
2019-09-02 07:43:32
123.231.61.180 attack
Sep  1 22:34:40 MK-Soft-Root1 sshd\[7639\]: Invalid user node from 123.231.61.180 port 59509
Sep  1 22:34:40 MK-Soft-Root1 sshd\[7639\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.231.61.180
Sep  1 22:34:42 MK-Soft-Root1 sshd\[7639\]: Failed password for invalid user node from 123.231.61.180 port 59509 ssh2
...
2019-09-02 07:52:28
180.87.236.202 attackspambots
Sep  1 20:34:40 vps691689 sshd[24102]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.87.236.202
Sep  1 20:34:42 vps691689 sshd[24102]: Failed password for invalid user rafal from 180.87.236.202 port 47606 ssh2
...
2019-09-02 07:37:40
211.24.103.163 attack
Sep  1 21:34:38 icinga sshd[31749]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.24.103.163
Sep  1 21:34:40 icinga sshd[31749]: Failed password for invalid user website from 211.24.103.163 port 59070 ssh2
...
2019-09-02 07:39:05
190.136.91.149 attack
Sep  1 11:51:19 php2 sshd\[6600\]: Invalid user oracle from 190.136.91.149
Sep  1 11:51:19 php2 sshd\[6600\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=host149.190-136-91.telecom.net.ar
Sep  1 11:51:21 php2 sshd\[6600\]: Failed password for invalid user oracle from 190.136.91.149 port 54010 ssh2
Sep  1 11:57:52 php2 sshd\[7128\]: Invalid user tibero1 from 190.136.91.149
Sep  1 11:57:52 php2 sshd\[7128\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=host149.190-136-91.telecom.net.ar
2019-09-02 07:34:56
79.52.170.113 attack
Cross-site scripting attack from a dominant IP using an unknown bot
2019-09-02 07:27:34
106.12.17.43 attackbotsspam
Unauthorized SSH login attempts
2019-09-02 07:45:28
110.36.234.130 attackspam
Unauthorized connection attempt from IP address 110.36.234.130 on Port 445(SMB)
2019-09-02 07:23:00
71.193.161.218 attackbots
Sep  2 00:54:53 lnxweb61 sshd[3673]: Failed password for root from 71.193.161.218 port 48670 ssh2
Sep  2 00:54:53 lnxweb61 sshd[3673]: Failed password for root from 71.193.161.218 port 48670 ssh2
Sep  2 00:59:09 lnxweb61 sshd[7038]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=71.193.161.218
2019-09-02 07:06:19
98.143.148.45 attackbotsspam
Sep  1 21:07:21 dedicated sshd[13251]: Invalid user adelia from 98.143.148.45 port 51026
2019-09-02 07:54:32
92.119.160.103 attackspambots
MultiHost/MultiPort Probe, Scan, Hack -
2019-09-02 07:23:29
1.171.130.177 attackspam
Unauthorised access (Sep  1) SRC=1.171.130.177 LEN=52 PREC=0x20 TTL=115 ID=18249 DF TCP DPT=445 WINDOW=8192 SYN
2019-09-02 07:25:28

Recently Reported IPs

46.37.168.7 45.129.33.129 45.129.33.123 253.109.248.205
89.109.46.237 45.14.45.170 45.65.230.151 24.152.109.157
80.227.134.221 222.189.191.169 189.213.108.215 101.206.162.236
104.131.65.184 116.31.166.93 209.50.143.177 102.33.10.57
168.61.48.38 206.189.121.234 186.121.200.114 167.114.52.16