Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Germany

Internet Service Provider: Oracle Public Cloud

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspambots
$f2bV_matches
2020-09-11 21:58:43
attackbots
Sep 11 05:50:46 plex-server sshd[641271]: Failed password for invalid user liquide from 132.145.242.238 port 56620 ssh2
Sep 11 05:54:18 plex-server sshd[642057]: Invalid user oracle from 132.145.242.238 port 59287
Sep 11 05:54:18 plex-server sshd[642057]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.242.238 
Sep 11 05:54:18 plex-server sshd[642057]: Invalid user oracle from 132.145.242.238 port 59287
Sep 11 05:54:20 plex-server sshd[642057]: Failed password for invalid user oracle from 132.145.242.238 port 59287 ssh2
...
2020-09-11 14:06:04
attackspambots
Failed password for invalid user ftp from 132.145.242.238 port 38122 ssh2
2020-09-11 06:17:32
attackspam
Sep  3 19:51:55 ns382633 sshd\[29565\]: Invalid user probe from 132.145.242.238 port 47006
Sep  3 19:51:55 ns382633 sshd\[29565\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.242.238
Sep  3 19:51:57 ns382633 sshd\[29565\]: Failed password for invalid user probe from 132.145.242.238 port 47006 ssh2
Sep  3 19:55:48 ns382633 sshd\[30271\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.242.238  user=root
Sep  3 19:55:51 ns382633 sshd\[30271\]: Failed password for root from 132.145.242.238 port 53150 ssh2
2020-09-04 04:02:15
attackbotsspam
Sep  2 22:17:19 php1 sshd\[4618\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.242.238  user=root
Sep  2 22:17:22 php1 sshd\[4618\]: Failed password for root from 132.145.242.238 port 33583 ssh2
Sep  2 22:21:02 php1 sshd\[4877\]: Invalid user min from 132.145.242.238
Sep  2 22:21:02 php1 sshd\[4877\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.242.238
Sep  2 22:21:04 php1 sshd\[4877\]: Failed password for invalid user min from 132.145.242.238 port 36132 ssh2
2020-09-03 19:41:05
attackbots
Aug 28 15:43:12 vps639187 sshd\[8233\]: Invalid user iac from 132.145.242.238 port 57490
Aug 28 15:43:12 vps639187 sshd\[8233\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.242.238
Aug 28 15:43:15 vps639187 sshd\[8233\]: Failed password for invalid user iac from 132.145.242.238 port 57490 ssh2
...
2020-08-28 23:39:44
attack
Aug 22 14:09:43 home sshd[3181907]: Failed password for mysql from 132.145.242.238 port 48751 ssh2
Aug 22 14:13:15 home sshd[3183270]: Invalid user claudette from 132.145.242.238 port 52440
Aug 22 14:13:15 home sshd[3183270]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.242.238 
Aug 22 14:13:15 home sshd[3183270]: Invalid user claudette from 132.145.242.238 port 52440
Aug 22 14:13:17 home sshd[3183270]: Failed password for invalid user claudette from 132.145.242.238 port 52440 ssh2
...
2020-08-22 23:39:04
attack
Aug 16 21:48:03 onepixel sshd[2709910]: Invalid user sun from 132.145.242.238 port 49037
Aug 16 21:48:03 onepixel sshd[2709910]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.242.238 
Aug 16 21:48:03 onepixel sshd[2709910]: Invalid user sun from 132.145.242.238 port 49037
Aug 16 21:48:05 onepixel sshd[2709910]: Failed password for invalid user sun from 132.145.242.238 port 49037 ssh2
Aug 16 21:51:41 onepixel sshd[2711921]: Invalid user basic from 132.145.242.238 port 54016
2020-08-17 06:14:32
attack
Aug 15 06:27:07 abendstille sshd\[19167\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.242.238  user=root
Aug 15 06:27:10 abendstille sshd\[19167\]: Failed password for root from 132.145.242.238 port 45126 ssh2
Aug 15 06:30:58 abendstille sshd\[22529\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.242.238  user=root
Aug 15 06:31:01 abendstille sshd\[22529\]: Failed password for root from 132.145.242.238 port 49963 ssh2
Aug 15 06:34:51 abendstille sshd\[26077\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.242.238  user=root
...
2020-08-15 14:11:28
attack
Jul 31 05:49:51 OPSO sshd\[20778\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.242.238  user=root
Jul 31 05:49:52 OPSO sshd\[20778\]: Failed password for root from 132.145.242.238 port 33126 ssh2
Jul 31 05:53:34 OPSO sshd\[21410\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.242.238  user=root
Jul 31 05:53:36 OPSO sshd\[21410\]: Failed password for root from 132.145.242.238 port 38839 ssh2
Jul 31 05:57:18 OPSO sshd\[22008\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.242.238  user=root
2020-07-31 12:14:43
attackbots
Jul 19 17:22:20 gospond sshd[18117]: Invalid user rony from 132.145.242.238 port 47492
Jul 19 17:22:22 gospond sshd[18117]: Failed password for invalid user rony from 132.145.242.238 port 47492 ssh2
Jul 19 17:26:25 gospond sshd[18163]: Invalid user frank from 132.145.242.238 port 55560
...
2020-07-20 00:51:13
attackspambots
Banned for a week because repeated abuses, for example SSH, but not only
2020-07-19 05:50:54
attack
Jul 17 23:30:32 ovpn sshd\[30837\]: Invalid user monitor from 132.145.242.238
Jul 17 23:30:32 ovpn sshd\[30837\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.242.238
Jul 17 23:30:34 ovpn sshd\[30837\]: Failed password for invalid user monitor from 132.145.242.238 port 54873 ssh2
Jul 17 23:35:27 ovpn sshd\[32045\]: Invalid user stephanie from 132.145.242.238
Jul 17 23:35:27 ovpn sshd\[32045\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.242.238
2020-07-18 06:12:49
attack
Jun 27 20:42:51 onepixel sshd[472172]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.242.238 
Jun 27 20:42:51 onepixel sshd[472172]: Invalid user web from 132.145.242.238 port 47720
Jun 27 20:42:53 onepixel sshd[472172]: Failed password for invalid user web from 132.145.242.238 port 47720 ssh2
Jun 27 20:46:04 onepixel sshd[473808]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.242.238  user=root
Jun 27 20:46:05 onepixel sshd[473808]: Failed password for root from 132.145.242.238 port 46988 ssh2
2020-06-28 05:19:34
attackbotsspam
Jun 24 06:10:41 h2779839 sshd[3934]: Invalid user xy from 132.145.242.238 port 57209
Jun 24 06:10:41 h2779839 sshd[3934]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.242.238
Jun 24 06:10:41 h2779839 sshd[3934]: Invalid user xy from 132.145.242.238 port 57209
Jun 24 06:10:43 h2779839 sshd[3934]: Failed password for invalid user xy from 132.145.242.238 port 57209 ssh2
Jun 24 06:13:51 h2779839 sshd[3985]: Invalid user banana from 132.145.242.238 port 56685
Jun 24 06:13:51 h2779839 sshd[3985]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.242.238
Jun 24 06:13:51 h2779839 sshd[3985]: Invalid user banana from 132.145.242.238 port 56685
Jun 24 06:13:53 h2779839 sshd[3985]: Failed password for invalid user banana from 132.145.242.238 port 56685 ssh2
Jun 24 06:17:00 h2779839 sshd[4067]: Invalid user bsnl from 132.145.242.238 port 56166
...
2020-06-24 12:25:00
attackbots
Jun 13 11:31:15 webhost01 sshd[24067]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.242.238
Jun 13 11:31:17 webhost01 sshd[24067]: Failed password for invalid user rkd from 132.145.242.238 port 33782 ssh2
...
2020-06-13 12:33:01
attackspam
Jun 11 14:14:03 h2427292 sshd\[15887\]: Invalid user user1 from 132.145.242.238
Jun 11 14:14:03 h2427292 sshd\[15887\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.242.238 
Jun 11 14:14:05 h2427292 sshd\[15887\]: Failed password for invalid user user1 from 132.145.242.238 port 58227 ssh2
...
2020-06-11 21:31:26
attackspam
<6 unauthorized SSH connections
2020-06-10 18:19:59
attack
Jun  5 17:17:11 hosting sshd[6930]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.242.238  user=root
Jun  5 17:17:14 hosting sshd[6930]: Failed password for root from 132.145.242.238 port 38170 ssh2
Jun  5 17:31:45 hosting sshd[8348]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.242.238  user=root
Jun  5 17:31:47 hosting sshd[8348]: Failed password for root from 132.145.242.238 port 43109 ssh2
Jun  5 17:35:10 hosting sshd[8997]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.242.238  user=root
Jun  5 17:35:12 hosting sshd[8997]: Failed password for root from 132.145.242.238 port 44963 ssh2
...
2020-06-05 22:43:22
attackspam
May 11 21:10:47 ns381471 sshd[12550]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.242.238
May 11 21:10:48 ns381471 sshd[12550]: Failed password for invalid user user from 132.145.242.238 port 39036 ssh2
2020-05-12 03:21:56
attack
May 11 17:20:33 itv-usvr-02 sshd[20393]: Invalid user admin from 132.145.242.238 port 46200
May 11 17:20:33 itv-usvr-02 sshd[20393]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.242.238
May 11 17:20:33 itv-usvr-02 sshd[20393]: Invalid user admin from 132.145.242.238 port 46200
May 11 17:20:35 itv-usvr-02 sshd[20393]: Failed password for invalid user admin from 132.145.242.238 port 46200 ssh2
May 11 17:24:18 itv-usvr-02 sshd[20520]: Invalid user timson from 132.145.242.238 port 51756
2020-05-11 18:42:53
attackbotsspam
May  4 03:04:34 vps46666688 sshd[31867]: Failed password for root from 132.145.242.238 port 60252 ssh2
...
2020-05-04 14:42:53
attackbots
2020-05-03T15:29:03.327594vivaldi2.tree2.info sshd[15585]: Failed password for invalid user yhl from 132.145.242.238 port 45105 ssh2
2020-05-03T15:33:12.152994vivaldi2.tree2.info sshd[15880]: Invalid user justin from 132.145.242.238
2020-05-03T15:33:12.165861vivaldi2.tree2.info sshd[15880]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.242.238
2020-05-03T15:33:12.152994vivaldi2.tree2.info sshd[15880]: Invalid user justin from 132.145.242.238
2020-05-03T15:33:14.048700vivaldi2.tree2.info sshd[15880]: Failed password for invalid user justin from 132.145.242.238 port 51500 ssh2
...
2020-05-03 16:39:26
attack
2020-05-01T04:43:28.168109shield sshd\[12744\]: Invalid user jc from 132.145.242.238 port 55491
2020-05-01T04:43:28.172128shield sshd\[12744\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.242.238
2020-05-01T04:43:30.086603shield sshd\[12744\]: Failed password for invalid user jc from 132.145.242.238 port 55491 ssh2
2020-05-01T04:47:05.765140shield sshd\[13117\]: Invalid user kit from 132.145.242.238 port 33103
2020-05-01T04:47:05.768637shield sshd\[13117\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.242.238
2020-05-01 12:58:45
attackbots
Apr 28 16:23:11 vpn01 sshd[3245]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.242.238
Apr 28 16:23:13 vpn01 sshd[3245]: Failed password for invalid user filter from 132.145.242.238 port 33202 ssh2
...
2020-04-28 22:53:31
attackbotsspam
Apr 19 20:48:07 mout sshd[30752]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.242.238  user=root
Apr 19 20:48:10 mout sshd[30752]: Failed password for root from 132.145.242.238 port 47391 ssh2
2020-04-20 03:35:55
attackbots
"Unauthorized connection attempt on SSHD detected"
2020-04-18 21:39:21
attackbotsspam
Apr 16 20:09:16 r.ca sshd[3074]: Failed password for root from 132.145.242.238 port 55512 ssh2
2020-04-18 00:43:56
attackspam
Apr 10 08:23:26 server1 sshd\[20013\]: Failed password for invalid user admin from 132.145.242.238 port 46662 ssh2
Apr 10 08:26:51 server1 sshd\[20956\]: Invalid user admin from 132.145.242.238
Apr 10 08:26:51 server1 sshd\[20956\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.242.238 
Apr 10 08:26:53 server1 sshd\[20956\]: Failed password for invalid user admin from 132.145.242.238 port 50953 ssh2
Apr 10 08:30:36 server1 sshd\[22065\]: Invalid user test from 132.145.242.238
...
2020-04-10 22:55:37
attackbotsspam
Ssh brute force
2020-04-08 08:00:54
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 132.145.242.238
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11822
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;132.145.242.238.		IN	A

;; AUTHORITY SECTION:
.			317	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020032700 1800 900 604800 86400

;; Query time: 51 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 27 19:20:25 CST 2020
;; MSG SIZE  rcvd: 119
Host info
Host 238.242.145.132.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 238.242.145.132.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
180.164.58.165 attackbots
(sshd) Failed SSH login from 180.164.58.165 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep  8 07:15:19 optimus sshd[13354]: Invalid user ftp_user from 180.164.58.165
Sep  8 07:15:19 optimus sshd[13354]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.164.58.165 
Sep  8 07:15:20 optimus sshd[13354]: Failed password for invalid user ftp_user from 180.164.58.165 port 51180 ssh2
Sep  8 07:31:37 optimus sshd[21535]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.164.58.165  user=root
Sep  8 07:31:40 optimus sshd[21535]: Failed password for root from 180.164.58.165 port 38588 ssh2
2020-09-08 19:42:47
45.95.168.131 attackbotsspam
Fail2Ban automatic report:
SSH brute-force:
2020-09-08 20:09:51
222.186.175.215 attack
Sep  8 13:44:47 dev0-dcde-rnet sshd[23089]: Failed password for root from 222.186.175.215 port 7614 ssh2
Sep  8 13:45:01 dev0-dcde-rnet sshd[23089]: error: maximum authentication attempts exceeded for root from 222.186.175.215 port 7614 ssh2 [preauth]
Sep  8 13:45:08 dev0-dcde-rnet sshd[23116]: Failed password for root from 222.186.175.215 port 42280 ssh2
2020-09-08 19:45:35
190.202.89.199 attackspam
Port Scan
...
2020-09-08 19:58:03
185.220.103.7 attackspambots
(sshd) Failed SSH login from 185.220.103.7 (DE/Germany/anatkamm.tor-exit.calyxinstitute.org): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep  8 07:15:01 optimus sshd[13110]: Failed password for root from 185.220.103.7 port 57108 ssh2
Sep  8 07:15:03 optimus sshd[13110]: Failed password for root from 185.220.103.7 port 57108 ssh2
Sep  8 07:15:06 optimus sshd[13110]: Failed password for root from 185.220.103.7 port 57108 ssh2
Sep  8 07:15:09 optimus sshd[13110]: Failed password for root from 185.220.103.7 port 57108 ssh2
Sep  8 07:15:12 optimus sshd[13110]: Failed password for root from 185.220.103.7 port 57108 ssh2
2020-09-08 19:38:24
218.92.0.173 attack
Sep  8 11:57:49 scw-6657dc sshd[12266]: Failed password for root from 218.92.0.173 port 33167 ssh2
Sep  8 11:57:49 scw-6657dc sshd[12266]: Failed password for root from 218.92.0.173 port 33167 ssh2
Sep  8 11:57:53 scw-6657dc sshd[12266]: Failed password for root from 218.92.0.173 port 33167 ssh2
...
2020-09-08 20:04:22
87.246.7.148 attack
Brute forcing email accounts
2020-09-08 20:15:03
111.225.152.190 attackspam
spam (f2b h2)
2020-09-08 19:54:56
189.180.48.216 attack
Unauthorized connection attempt from IP address 189.180.48.216 on Port 445(SMB)
2020-09-08 20:00:26
113.179.245.234 attackbots
Unauthorized connection attempt from IP address 113.179.245.234 on Port 445(SMB)
2020-09-08 19:41:26
187.174.102.130 attackbotsspam
Unauthorized connection attempt from IP address 187.174.102.130 on Port 445(SMB)
2020-09-08 19:57:11
106.51.80.198 attack
Sep  8 09:02:49 root sshd[20930]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.51.80.198 
...
2020-09-08 20:08:24
190.77.127.45 attack
Unauthorized connection attempt from IP address 190.77.127.45 on Port 445(SMB)
2020-09-08 20:01:43
45.142.120.166 attackspambots
2020-09-08 15:09:12 auth_plain authenticator failed for (User) [45.142.120.166]: 535 Incorrect authentication data (set_id=dccharset@com.ua)
2020-09-08 15:09:58 auth_plain authenticator failed for (User) [45.142.120.166]: 535 Incorrect authentication data (set_id=chun@com.ua)
...
2020-09-08 20:10:50
222.186.150.123 attackbotsspam
Sep  8 11:26:13 Ubuntu-1404-trusty-64-minimal sshd\[972\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.150.123  user=root
Sep  8 11:26:14 Ubuntu-1404-trusty-64-minimal sshd\[972\]: Failed password for root from 222.186.150.123 port 56502 ssh2
Sep  8 11:34:00 Ubuntu-1404-trusty-64-minimal sshd\[15911\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.150.123  user=root
Sep  8 11:34:01 Ubuntu-1404-trusty-64-minimal sshd\[15911\]: Failed password for root from 222.186.150.123 port 49378 ssh2
Sep  8 11:38:17 Ubuntu-1404-trusty-64-minimal sshd\[18971\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.150.123  user=root
2020-09-08 20:18:46

Recently Reported IPs

95.46.67.197 83.97.20.76 114.119.166.181 112.17.173.49
58.187.9.166 188.212.173.2 185.171.88.47 58.48.227.63
118.131.184.243 123.21.134.202 45.95.168.205 103.86.158.46
62.169.208.100 25.11.230.159 41.234.102.141 202.51.74.23
178.128.172.165 51.15.129.164 35.154.45.251 49.66.199.253