Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Russian Federation

Internet Service Provider: OJSC Ufanet

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:
Type Details Datetime
attack
/viewforum.php?f=3
2020-03-12 08:10:38
Comments on same subnet:
IP Type Details Datetime
145.255.0.50 attackbots
Feb 21 10:15:41 plusreed sshd[31879]: Invalid user telnet from 145.255.0.50
...
2020-02-21 23:30:24
145.255.0.44 attackbotsspam
Unauthorized connection attempt detected from IP address 145.255.0.44 to port 8080
2019-12-31 01:57:49
145.255.0.40 attackbots
Unauthorized connection attempt detected from IP address 145.255.0.40 to port 445
2019-12-28 03:17:05
145.255.0.125 attack
2019-07-09T09:42:57.462840stt-1.[munged] kernel: [6711399.171391] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:97:36:58:84:78:ac:57:aa:c1:08:00 SRC=145.255.0.125 DST=[mungedIP1] LEN=52 TOS=0x00 PREC=0x00 TTL=113 ID=10720 DF PROTO=TCP SPT=61603 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 
2019-07-09T09:43:00.457687stt-1.[munged] kernel: [6711402.166222] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:97:36:58:84:78:ac:57:aa:c1:08:00 SRC=145.255.0.125 DST=[mungedIP1] LEN=52 TOS=0x00 PREC=0x00 TTL=113 ID=14767 DF PROTO=TCP SPT=61603 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 
2019-07-09T09:43:06.458777stt-1.[munged] kernel: [6711408.167294] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:97:36:58:84:78:ac:57:aa:c1:08:00 SRC=145.255.0.125 DST=[mungedIP1] LEN=48 TOS=0x00 PREC=0x00 TTL=113 ID=20137 DF PROTO=TCP SPT=61603 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0
2019-07-09 23:06:09
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 145.255.0.161
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26431
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;145.255.0.161.			IN	A

;; AUTHORITY SECTION:
.			551	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020031102 1800 900 604800 86400

;; Query time: 97 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Mar 12 08:10:35 CST 2020
;; MSG SIZE  rcvd: 117
Host info
161.0.255.145.in-addr.arpa domain name pointer 145.255.0.161.dynamic.ufanet.ru.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
161.0.255.145.in-addr.arpa	name = 145.255.0.161.dynamic.ufanet.ru.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
217.112.128.192 attackspambots
Postfix DNSBL listed. Trying to send SPAM.
2019-07-30 15:05:01
47.245.1.241 attackbots
Jul 30 03:13:04 localhost sshd\[55726\]: Invalid user db2admin from 47.245.1.241 port 56632
Jul 30 03:13:04 localhost sshd\[55726\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.245.1.241
Jul 30 03:13:05 localhost sshd\[55726\]: Failed password for invalid user db2admin from 47.245.1.241 port 56632 ssh2
Jul 30 03:17:20 localhost sshd\[55845\]: Invalid user marco from 47.245.1.241 port 41724
Jul 30 03:17:20 localhost sshd\[55845\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.245.1.241
...
2019-07-30 14:24:46
59.36.173.179 attackspambots
Jul 29 23:13:11 TORMINT sshd\[5428\]: Invalid user ramses from 59.36.173.179
Jul 29 23:13:11 TORMINT sshd\[5428\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.36.173.179
Jul 29 23:13:13 TORMINT sshd\[5428\]: Failed password for invalid user ramses from 59.36.173.179 port 57759 ssh2
...
2019-07-30 14:09:37
91.218.92.15 attackbotsspam
445/tcp 445/tcp
[2019-07-03/29]2pkt
2019-07-30 14:45:19
49.69.175.232 attackbots
Automatic report - Port Scan Attack
2019-07-30 14:35:18
60.190.222.170 attack
SMB Server BruteForce Attack
2019-07-30 14:11:52
61.220.158.103 attackbots
445/tcp 445/tcp 445/tcp...
[2019-06-30/07-29]5pkt,1pt.(tcp)
2019-07-30 14:59:32
198.27.81.223 attackbots
Jul 30 00:30:35 aat-srv002 sshd[31356]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.27.81.223
Jul 30 00:30:37 aat-srv002 sshd[31356]: Failed password for invalid user claire from 198.27.81.223 port 34234 ssh2
Jul 30 00:35:08 aat-srv002 sshd[31429]: Failed password for root from 198.27.81.223 port 57824 ssh2
...
2019-07-30 14:14:06
191.235.93.236 attackspam
SSH invalid-user multiple login try
2019-07-30 14:55:12
41.42.66.28 attack
Lines containing failures of 41.42.66.28
Jul 30 04:12:11 MAKserver05 sshd[27580]: Invalid user admin from 41.42.66.28 port 42940
Jul 30 04:12:11 MAKserver05 sshd[27580]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.42.66.28 
Jul 30 04:12:13 MAKserver05 sshd[27580]: Failed password for invalid user admin from 41.42.66.28 port 42940 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=41.42.66.28
2019-07-30 14:04:31
69.162.134.230 attackspambots
30.07.2019 04:24:26 - Wordpress fail 
Detected by ELinOX-ALM
2019-07-30 14:05:18
185.244.25.194 attack
123/udp 389/udp...
[2019-06-05/07-29]11pkt,2pt.(udp)
2019-07-30 14:50:10
93.118.235.232 attackspambots
Telnet Server BruteForce Attack
2019-07-30 14:23:59
106.13.144.8 attackspam
2019-07-30T06:12:53.886115abusebot-2.cloudsearch.cf sshd\[4847\]: Invalid user testuser from 106.13.144.8 port 58252
2019-07-30 14:23:38
200.150.87.131 attackspam
SSH Brute-Force reported by Fail2Ban
2019-07-30 15:03:03

Recently Reported IPs

175.101.151.103 106.13.209.16 87.97.132.132 218.66.71.5
198.50.168.45 118.24.14.64 40.117.102.205 88.251.2.57
87.75.119.28 42.101.38.160 128.1.48.110 113.25.207.88
39.152.50.138 101.162.68.248 49.234.163.238 198.54.124.245
211.137.225.136 139.186.15.254 182.61.43.80 191.7.145.246