Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Russian Federation

Internet Service Provider: PJSC MegaFon

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attackbotsspam
Unauthorized connection attempt from IP address 83.149.45.2 on Port 445(SMB)
2020-04-23 04:31:36
Comments on same subnet:
IP Type Details Datetime
83.149.45.205 attackbotsspam
Honeypot attack, port: 445, PTR: PTR record not found
2020-09-17 21:41:14
83.149.45.205 attackbotsspam
Honeypot attack, port: 445, PTR: PTR record not found
2020-09-17 13:51:41
83.149.45.205 attack
Honeypot attack, port: 445, PTR: PTR record not found
2020-09-17 04:58:24
83.149.45.108 attackbots
Unauthorized connection attempt from IP address 83.149.45.108 on Port 445(SMB)
2020-08-28 00:55:26
83.149.45.233 attackspambots
Unauthorized IMAP connection attempt
2020-06-09 21:55:17
83.149.45.104 attackbots
nft/Honeypot/139/73e86
2020-05-14 22:40:48
83.149.45.175 attackbots
20/2/27@09:23:47: FAIL: Alarm-Network address from=83.149.45.175
20/2/27@09:23:47: FAIL: Alarm-Network address from=83.149.45.175
...
2020-02-28 02:28:33
83.149.45.118 attackspam
Honeypot attack, port: 445, PTR: PTR record not found
2020-02-27 16:20:35
83.149.45.65 attackbotsspam
1580996631 - 02/06/2020 14:43:51 Host: 83.149.45.65/83.149.45.65 Port: 445 TCP Blocked
2020-02-07 00:58:38
83.149.45.60 attack
Unauthorized connection attempt from IP address 83.149.45.60 on Port 445(SMB)
2019-11-16 22:25:36
83.149.45.100 attackspam
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-25 17:20:08,784 INFO [shellcode_manager] (83.149.45.100) no match, writing hexdump (2d19a2d8cc00c9c93b9d3b382a242b8d :2549202) - MS17010 (EternalBlue)
2019-07-27 06:23:04
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 83.149.45.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28582
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;83.149.45.2.			IN	A

;; AUTHORITY SECTION:
.			117	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020042201 1800 900 604800 86400

;; Query time: 198 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Apr 23 04:31:33 CST 2020
;; MSG SIZE  rcvd: 115
Host info
Host 2.45.149.83.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 2.45.149.83.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
176.31.252.148 attack
Jul  6 08:12:29 localhost sshd\[29592\]: Invalid user wen from 176.31.252.148 port 46151
Jul  6 08:12:29 localhost sshd\[29592\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.31.252.148
...
2019-07-06 17:29:08
128.199.202.206 attack
Invalid user admin from 128.199.202.206 port 56296
2019-07-06 17:08:02
92.53.96.202 attack
Wordpress Admin Login attack
2019-07-06 17:26:56
65.175.175.194 attackbotsspam
Jul  6 06:43:34 srv-4 sshd\[5241\]: Invalid user tanya from 65.175.175.194
Jul  6 06:43:34 srv-4 sshd\[5241\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.175.175.194
Jul  6 06:43:36 srv-4 sshd\[5241\]: Failed password for invalid user tanya from 65.175.175.194 port 53252 ssh2
...
2019-07-06 17:10:38
51.255.174.164 attack
ssh failed login
2019-07-06 17:39:02
54.153.92.42 attack
[portscan] Port scan
2019-07-06 18:03:25
134.209.11.199 attackbots
Jul  6 05:27:33 debian sshd\[20923\]: Invalid user interalt from 134.209.11.199 port 50544
Jul  6 05:27:33 debian sshd\[20923\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.11.199
Jul  6 05:27:34 debian sshd\[20923\]: Failed password for invalid user interalt from 134.209.11.199 port 50544 ssh2
...
2019-07-06 18:07:25
185.4.78.172 attack
Autoban   185.4.78.172 AUTH/CONNECT
2019-07-06 18:08:30
211.177.84.154 attackbotsspam
Jul  6 05:33:51 mxgate1 postfix/postscreen[30471]: CONNECT from [211.177.84.154]:48116 to [176.31.12.44]:25
Jul  6 05:33:51 mxgate1 postfix/dnsblog[30475]: addr 211.177.84.154 listed by domain zen.spamhaus.org as 127.0.0.3
Jul  6 05:33:51 mxgate1 postfix/dnsblog[30475]: addr 211.177.84.154 listed by domain zen.spamhaus.org as 127.0.0.11
Jul  6 05:33:51 mxgate1 postfix/dnsblog[30475]: addr 211.177.84.154 listed by domain zen.spamhaus.org as 127.0.0.4
Jul  6 05:33:51 mxgate1 postfix/dnsblog[30473]: addr 211.177.84.154 listed by domain b.barracudacentral.org as 127.0.0.2
Jul  6 05:33:52 mxgate1 postfix/dnsblog[30476]: addr 211.177.84.154 listed by domain cbl.abuseat.org as 127.0.0.2
Jul  6 05:33:57 mxgate1 postfix/postscreen[30471]: DNSBL rank 4 for [211.177.84.154]:48116
Jul x@x
Jul  6 05:34:00 mxgate1 postfix/postscreen[30471]: HANGUP after 2.9 from [211.177.84.154]:48116 in tests after SMTP handshake
Jul  6 05:34:00 mxgate1 postfix/postscreen[30471]: DISCONNECT [211.177........
-------------------------------
2019-07-06 18:05:14
185.211.245.170 attackspambots
Jul  6 10:34:51 s1 postfix/submission/smtpd\[8654\]: warning: unknown\[185.211.245.170\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul  6 10:34:59 s1 postfix/submission/smtpd\[8654\]: warning: unknown\[185.211.245.170\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul  6 10:35:20 s1 postfix/submission/smtpd\[8654\]: warning: unknown\[185.211.245.170\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul  6 10:35:28 s1 postfix/submission/smtpd\[8654\]: warning: unknown\[185.211.245.170\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul  6 10:35:59 s1 postfix/submission/smtpd\[8654\]: warning: unknown\[185.211.245.170\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul  6 10:36:07 s1 postfix/submission/smtpd\[8654\]: warning: unknown\[185.211.245.170\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul  6 10:36:48 s1 postfix/submission/smtpd\[10575\]: warning: unknown\[185.211.245.170\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul  6 10:36:56 s1 postfix/submission/smtpd\[10575\]: warning: u
2019-07-06 17:33:49
106.36.3.154 attackbotsspam
SSH/22 MH Probe, BF, Hack -
2019-07-06 17:58:47
88.248.29.116 attack
DATE:2019-07-06_05:42:24, IP:88.248.29.116, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc)
2019-07-06 17:39:31
77.46.106.131 attackspam
Lines containing failures of 77.46.106.131 (max 1000)
Jul  5 02:11:23 Server sshd[20523]: Invalid user pi from 77.46.106.131 port 42402
Jul  5 02:11:23 Server sshd[20523]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.46.106.131
Jul  5 02:11:23 Server sshd[20524]: Invalid user pi from 77.46.106.131 port 42414
Jul  5 02:11:24 Server sshd[20524]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.46.106.131


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=77.46.106.131
2019-07-06 17:26:33
217.133.99.111 attackspambots
Jul  6 08:47:38 www sshd\[23636\]: Invalid user lan from 217.133.99.111 port 49700
...
2019-07-06 17:36:10
178.128.181.186 attack
Jul  6 06:23:56 lnxmail61 sshd[15458]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.181.186
2019-07-06 17:22:12

Recently Reported IPs

180.76.124.20 115.76.35.20 200.122.237.227 217.11.188.116
178.32.222.86 200.231.192.242 70.125.140.70 93.119.123.12
175.111.113.2 183.12.50.160 167.71.111.126 196.70.250.116
176.74.124.52 186.206.201.226 144.22.15.170 95.168.94.79
203.177.14.138 190.0.57.46 185.176.221.207 110.235.250.209