Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Republic of Lithuania

Internet Service Provider: unknown

Hostname: unknown

Organization: SoftLayer Technologies Inc.

Usage Type: unknown

Comments:
Type Details Datetime
attackbotsspam
Found on   Binary Defense     / proto=6  .  srcport=62996  .  dstport=5443  .     (3940)
2020-10-08 06:38:02
attack
 TCP (SYN) 92.118.160.45:52203 -> port 49502, len 44
2020-10-07 22:58:40
attackspambots
Port scanning [2 denied]
2020-10-07 15:03:20
attackbots
ET CINS Active Threat Intelligence Poor Reputation IP group 79 - port: 1723 proto: tcp cat: Misc Attackbytes: 60
2020-09-30 08:45:15
attack
 TCP (SYN) 92.118.160.45:57709 -> port 135, len 44
2020-09-30 01:36:02
attack
Found on   CINS badguys     / proto=6  .  srcport=64498  .  dstport=7777  .     (607)
2020-09-29 17:35:46
attackspambots
MultiHost/MultiPort Probe, Scan, Hack -
2020-08-14 18:08:25
attack
TCP port 3389: Scan and connection
2020-05-24 22:36:28
attackbots
firewall-block, port(s): 5800/tcp
2020-04-18 19:16:43
attack
Port Scan: Events[3] countPorts[2]: 22 7547 ..
2020-04-16 05:40:40
attackspambots
Fail2Ban Ban Triggered
2020-04-12 02:17:27
attackspambots
Unauthorized connection attempt detected from IP address 92.118.160.45 to port 6002
2020-04-11 08:15:09
attackbotsspam
Honeypot hit.
2020-03-28 07:34:00
attackspambots
Automatic report - Banned IP Access
2020-03-27 04:31:05
attack
firewall-block, port(s): 5061/tcp
2020-02-20 05:46:49
attack
Portscan or hack attempt detected by psad/fwsnort
2020-02-18 07:42:23
attackbots
Unauthorized connection attempt detected from IP address 92.118.160.45 to port 111 [J]
2020-01-15 19:55:16
attack
Unauthorized connection attempt detected from IP address 92.118.160.45 to port 2121 [J]
2020-01-15 04:48:11
attackbotsspam
" "
2020-01-11 03:44:10
attackspambots
Unauthorized connection attempt detected from IP address 92.118.160.45 to port 5902 [J]
2020-01-07 06:47:27
attack
7547/tcp 5909/tcp 44818/udp...
[2019-10-26/12-27]114pkt,61pt.(tcp),8pt.(udp),1tp.(icmp)
2019-12-27 15:06:55
attack
firewall-block, port(s): 8333/tcp
2019-12-11 06:16:00
attack
Fail2Ban Ban Triggered
2019-11-30 04:23:14
attackbotsspam
Automatic report - Banned IP Access
2019-11-29 17:12:45
attackbots
Automatic report - Banned IP Access
2019-11-17 03:27:23
attack
Fail2Ban Ban Triggered
2019-11-16 06:45:40
attackspambots
2001/tcp 123/udp 5000/tcp...
[2019-08-31/10-31]143pkt,65pt.(tcp),6pt.(udp),1tp.(icmp)
2019-11-01 12:01:57
attackbots
ET CINS Active Threat Intelligence Poor Reputation IP group 91 - port: 50070 proto: TCP cat: Misc Attack
2019-10-27 07:44:42
attack
" "
2019-10-26 12:09:27
attack
ET CINS Active Threat Intelligence Poor Reputation IP group 90 - port: 11211 proto: TCP cat: Misc Attack
2019-10-26 06:59:36
Comments on same subnet:
IP Type Details Datetime
92.118.160.61 attackspambots
[Wed Oct 14 04:02:08.771804 2020] [:error] [pid 18140:tid 140204174145280] [client 92.118.160.61:51035] [client 92.118.160.61] ModSecurity: Access denied with code 403 (phase 1). Match of "within %{tx.allowed_http_versions}" against "REQUEST_PROTOCOL" required. [file "/etc/modsecurity/coreruleset-3.3.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1041"] [id "920430"] [msg "HTTP protocol version is not allowed by policy"] [data "HTTP/1.0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/"] [unique_id "X4YV0AhFQrstw8CY0VTYQwAAABU"]
...
2020-10-14 05:38:29
92.118.160.41 attackspam
ET CINS Active Threat Intelligence Poor Reputation IP group 83 - port: 808 proto: tcp cat: Misc Attackbytes: 60
2020-10-14 05:01:11
92.118.160.37 attackspam
TCP ports : 3000 / 6002
2020-10-13 20:55:54
92.118.160.37 attack
firewall-block, port(s): 1723/tcp
2020-10-13 12:24:28
92.118.160.25 attackbotsspam
Port scan denied
2020-10-11 04:38:44
92.118.160.29 attackspam
Automatic report - Banned IP Access
2020-10-11 03:13:48
92.118.160.25 attack
Port scan denied
2020-10-10 20:37:51
92.118.160.29 attack
 TCP (SYN) 92.118.160.29:34247 -> port 6002, len 44
2020-10-10 19:03:49
92.118.160.53 attack
Hit honeypot r.
2020-10-10 03:31:27
92.118.160.53 attack
TCP port : 7547
2020-10-09 19:25:10
92.118.160.17 attackspam
Port Scan/VNC login attempt
...
2020-10-08 03:10:41
92.118.160.49 attackbots
Automatic report - Banned IP Access
2020-10-08 03:07:09
92.118.160.17 attackbotsspam
[N1.H1.VM1] Port Scanner Detected Blocked by UFW
2020-10-07 19:24:46
92.118.160.49 attackbots
TCP port : 118
2020-10-07 19:21:23
92.118.160.5 attack
 TCP (SYN) 92.118.160.5:57467 -> port 22, len 44
2020-10-07 01:08:25
Whois info:
b
Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 92.118.160.45
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10765
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;92.118.160.45.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019052100 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Tue May 21 20:46:23 CST 2019
;; MSG SIZE  rcvd: 117

Host info
45.160.118.92.in-addr.arpa domain name pointer 92.118.160.45.netsystemsresearch.com.
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
45.160.118.92.in-addr.arpa	name = 92.118.160.45.netsystemsresearch.com.

Authoritative answers can be found from:

Related IP info:
Related comments:
IP Type Details Datetime
109.106.197.154 attackbots
Unauthorised access (Aug  8) SRC=109.106.197.154 LEN=52 TTL=113 ID=29143 DF TCP DPT=445 WINDOW=8192 SYN
2019-08-09 04:40:05
213.246.61.2 attack
#3587 - [213.246.61.23] Error: 550 5.7.1 Forged HELO hostname detected
#3587 - [213.246.61.23] Error: 550 5.7.1 Forged HELO hostname detected
#3587 - [213.246.61.23] Error: 550 5.7.1 Forged HELO hostname detected
#3587 - [213.246.61.23] Error: 550 5.7.1 Forged HELO hostname detected

........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=213.246.61.2
2019-08-09 05:00:30
203.195.246.58 attackbots
Aug  8 19:44:19 MK-Soft-VM4 sshd\[22985\]: Invalid user fedor from 203.195.246.58 port 54830
Aug  8 19:44:19 MK-Soft-VM4 sshd\[22985\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.195.246.58
Aug  8 19:44:21 MK-Soft-VM4 sshd\[22985\]: Failed password for invalid user fedor from 203.195.246.58 port 54830 ssh2
...
2019-08-09 04:38:32
149.91.90.147 attackspam
2019-08-08T13:33:20.892302abusebot-7.cloudsearch.cf sshd\[10248\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.91.90.147  user=root
2019-08-09 04:49:29
51.254.141.18 attackbots
Aug  8 15:46:26 dedicated sshd[12111]: Invalid user nexus from 51.254.141.18 port 39750
2019-08-09 04:48:59
110.138.150.246 attackbots
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-08-08 10:45:23,405 INFO [amun_request_handler] PortScan Detected on Port: 445 (110.138.150.246)
2019-08-09 05:11:54
14.231.173.16 attackspambots
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-08-08 16:37:42,619 INFO [amun_request_handler] PortScan Detected on Port: 445 (14.231.173.16)
2019-08-09 04:35:27
177.69.49.210 attackbots
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-08-08 11:42:03,823 INFO [amun_request_handler] PortScan Detected on Port: 445 (177.69.49.210)
2019-08-09 04:31:02
62.173.140.192 attackspam
MultiHost/MultiPort Probe, Scan, Hack -
2019-08-09 04:51:19
45.165.57.130 attackbotsspam
Aug  8 13:53:55 km20725 sshd[5274]: reveeclipse mapping checking getaddrinfo for 130.57.165.45.bazarinfor.com.br [45.165.57.130] failed - POSSIBLE BREAK-IN ATTEMPT!
Aug  8 13:53:55 km20725 sshd[5274]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.165.57.130  user=r.r
Aug  8 13:53:58 km20725 sshd[5274]: Failed password for r.r from 45.165.57.130 port 37426 ssh2
Aug  8 13:54:00 km20725 sshd[5274]: Failed password for r.r from 45.165.57.130 port 37426 ssh2
Aug  8 13:54:02 km20725 sshd[5274]: Failed password for r.r from 45.165.57.130 port 37426 ssh2
Aug  8 13:54:05 km20725 sshd[5274]: Failed password for r.r from 45.165.57.130 port 37426 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=45.165.57.130
2019-08-09 04:33:09
220.184.0.35 attack
Aug  8 11:54:05   DDOS Attack: SRC=220.184.0.35 DST=[Masked] LEN=40 TOS=0x00 PREC=0x00 TTL=51  DF PROTO=TCP SPT=40950 DPT=80 WINDOW=0 RES=0x00 RST URGP=0
2019-08-09 04:34:00
45.227.253.194 attackspambots
RDP Bruteforce
2019-08-09 04:54:18
223.197.175.34 attackspam
Logged: 8/08/2019 11:52:11 AM UTC
AS4760 HKT Limited
Port: 993 Protocol: tcp
Service Name: imaps
Description: IMAP over TLS protocol
2019-08-09 04:27:59
159.192.223.238 attackspambots
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-08-08 10:44:27,436 INFO [amun_request_handler] PortScan Detected on Port: 445 (159.192.223.238)
2019-08-09 05:12:38
79.42.62.124 attackbots
19/8/8@07:52:47: FAIL: IoT-Telnet address from=79.42.62.124
...
2019-08-09 05:12:12

Recently Reported IPs

191.32.179.130 173.235.126.57 61.155.70.246 182.100.67.85
212.10.9.69 178.215.156.66 180.248.198.221 196.205.198.182
31.154.123.171 38.162.147.82 86.64.199.198 190.104.26.114
97.29.91.45 216.61.82.217 18.235.135.222 58.54.192.148
77.60.72.218 114.141.55.12 87.156.80.41 114.125.86.70