Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Brazil

Internet Service Provider: Universidade Federal do Rio de Janeiro

Hostname: unknown

Organization: unknown

Usage Type: University/College/School

Comments:
Type Details Datetime
attackspambots
$f2bV_matches
2020-06-20 02:44:20
attack
Jun 14 15:43:33 lukav-desktop sshd\[1441\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.164.51.61  user=root
Jun 14 15:43:35 lukav-desktop sshd\[1441\]: Failed password for root from 146.164.51.61 port 47358 ssh2
Jun 14 15:47:14 lukav-desktop sshd\[1507\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.164.51.61  user=root
Jun 14 15:47:15 lukav-desktop sshd\[1507\]: Failed password for root from 146.164.51.61 port 34442 ssh2
Jun 14 15:50:47 lukav-desktop sshd\[1566\]: Invalid user userftp from 146.164.51.61
2020-06-14 21:15:15
attack
2020-05-28T19:50:41.409310Z bfd84a59cb1c New connection: 146.164.51.61:60562 (172.17.0.3:2222) [session: bfd84a59cb1c]
2020-05-28T20:08:45.603723Z 0c166d9a369a New connection: 146.164.51.61:40130 (172.17.0.3:2222) [session: 0c166d9a369a]
2020-05-29 05:43:05
attack
May 13 01:43:13 efa1 sshd[2040]: Invalid user ubuntu from 146.164.51.61
May 13 01:43:13 efa1 sshd[2040]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.164.51.61 
May 13 01:43:15 efa1 sshd[2040]: Failed password for invalid user ubuntu from 146.164.51.61 port 36512 ssh2
May 13 01:50:20 efa1 sshd[5129]: Invalid user tfcserver from 146.164.51.61
May 13 01:50:20 efa1 sshd[5129]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.164.51.61 

........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=146.164.51.61
2020-05-15 00:09:53
Comments on same subnet:
IP Type Details Datetime
146.164.51.62 attackbotsspam
Jun 17 05:48:52 mail sshd[18393]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.164.51.62
Jun 17 05:48:53 mail sshd[18393]: Failed password for invalid user test from 146.164.51.62 port 46560 ssh2
...
2020-06-17 18:53:30
146.164.51.55 attackbotsspam
SSH brute force attempt
2020-06-15 09:43:29
146.164.51.50 attack
Jun  9 12:03:25 localhost sshd\[5460\]: Invalid user mattes from 146.164.51.50 port 57654
Jun  9 12:03:25 localhost sshd\[5460\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.164.51.50
Jun  9 12:03:27 localhost sshd\[5460\]: Failed password for invalid user mattes from 146.164.51.50 port 57654 ssh2
...
2020-06-10 01:58:17
146.164.51.50 attack
146.164.51.50 (BR/Brazil/-), 12 distributed sshd attacks on account [root] in the last 3600 secs
2020-06-04 22:24:49
146.164.51.60 attack
146.164.51.60 (BR/Brazil/-), 12 distributed sshd attacks on account [root] in the last 3600 secs
2020-06-04 22:22:13
146.164.51.59 attackbots
146.164.51.59 (BR/Brazil/-), 12 distributed sshd attacks on account [root] in the last 3600 secs
2020-06-04 22:21:51
146.164.51.53 attack
Jun  1 11:35:29 ns sshd[22111]: Connection from 146.164.51.53 port 36812 on 134.119.39.98 port 22
Jun  1 11:35:31 ns sshd[22111]: User r.r from 146.164.51.53 not allowed because not listed in AllowUsers
Jun  1 11:35:31 ns sshd[22111]: Failed password for invalid user r.r from 146.164.51.53 port 36812 ssh2
Jun  1 11:35:31 ns sshd[22111]: Received disconnect from 146.164.51.53 port 36812:11: Bye Bye [preauth]
Jun  1 11:35:31 ns sshd[22111]: Disconnected from 146.164.51.53 port 36812 [preauth]
Jun  1 11:39:41 ns sshd[8413]: Connection from 146.164.51.53 port 37166 on 134.119.39.98 port 22
Jun  1 11:39:43 ns sshd[8413]: User r.r from 146.164.51.53 not allowed because not listed in AllowUsers
Jun  1 11:39:43 ns sshd[8413]: Failed password for invalid user r.r from 146.164.51.53 port 37166 ssh2
Jun  1 11:39:43 ns sshd[8413]: Received disconnect from 146.164.51.53 port 37166:11: Bye Bye [preauth]
Jun  1 11:39:43 ns sshd[8413]: Disconnected from 146.164.51.53 port 37166 [preaut........
-------------------------------
2020-06-01 23:11:26
146.164.51.50 attackspambots
Jun  1 07:55:36 pornomens sshd\[13182\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.164.51.50  user=root
Jun  1 07:55:39 pornomens sshd\[13182\]: Failed password for root from 146.164.51.50 port 47392 ssh2
Jun  1 07:59:46 pornomens sshd\[13247\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.164.51.50  user=root
...
2020-06-01 14:28:25
146.164.51.58 attackbotsspam
$f2bV_matches
2020-05-30 22:44:06
146.164.51.49 attackspambots
May 30 07:13:05 askasleikir sshd[25918]: Failed password for git from 146.164.51.49 port 38694 ssh2
May 30 07:05:09 askasleikir sshd[25902]: Failed password for ftp from 146.164.51.49 port 39408 ssh2
May 30 07:01:14 askasleikir sshd[25896]: Failed password for root from 146.164.51.49 port 39786 ssh2
2020-05-30 20:56:48
146.164.51.50 attack
May 30 06:53:21 askasleikir sshd[25872]: Failed password for root from 146.164.51.50 port 40550 ssh2
2020-05-30 20:56:10
146.164.51.60 attack
Unauthorised connection attempt detected at AUO NODE 4. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)
2020-05-30 20:55:50
146.164.51.62 attackbots
May 30 07:09:07 askasleikir sshd[25910]: Failed password for invalid user zabbix from 146.164.51.62 port 39052 ssh2
2020-05-30 20:53:50
146.164.51.52 attackspam
May 30 05:50:20 pve1 sshd[25943]: Failed password for root from 146.164.51.52 port 41272 ssh2
...
2020-05-30 12:31:02
146.164.51.51 attackspam
May 28 20:08:08 ws26vmsma01 sshd[71171]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.164.51.51
May 28 20:08:10 ws26vmsma01 sshd[71171]: Failed password for invalid user hadoop from 146.164.51.51 port 51056 ssh2
...
2020-05-29 06:19:30
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 146.164.51.61
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56909
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;146.164.51.61.			IN	A

;; AUTHORITY SECTION:
.			489	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020051400 1800 900 604800 86400

;; Query time: 53 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri May 15 00:09:45 CST 2020
;; MSG SIZE  rcvd: 117
Host info
Host 61.51.164.146.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 61.51.164.146.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
177.86.109.3 attackspam
Honeypot attack, port: 445, PTR: 177-86-109-3.tubaron.net.br.
2020-01-11 07:51:04
222.186.52.86 attackspam
Jan 10 18:10:00 ny01 sshd[23174]: Failed password for root from 222.186.52.86 port 54724 ssh2
Jan 10 18:12:28 ny01 sshd[23408]: Failed password for root from 222.186.52.86 port 63751 ssh2
2020-01-11 07:32:02
113.134.242.128 attackbots
firewall-block, port(s): 23/tcp
2020-01-11 07:42:14
40.73.119.194 attackbotsspam
Jan 10 21:09:05 localhost sshd\[14991\]: Invalid user oracle from 40.73.119.194 port 50388
Jan 10 21:09:05 localhost sshd\[14991\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.73.119.194
Jan 10 21:09:08 localhost sshd\[14991\]: Failed password for invalid user oracle from 40.73.119.194 port 50388 ssh2
...
2020-01-11 08:01:36
115.43.79.37 attack
Honeypot attack, port: 5555, PTR: host-37.79-43-115.dynamic.totalbb.net.tw.
2020-01-11 07:38:07
188.165.221.36 attackbots
[Aegis] @ 2020-01-10 21:09:27  0000 -> Attempt to use mail server as relay (550: Requested action not taken).
2020-01-11 07:31:25
158.140.122.138 attackbotsspam
Jan 10 22:09:26 grey postfix/smtpd\[27527\]: NOQUEUE: reject: RCPT from unknown\[158.140.122.138\]: 554 5.7.1 Service unavailable\; Client host \[158.140.122.138\] blocked using cbl.abuseat.org\; Blocked - see http://www.abuseat.org/lookup.cgi\?ip=158.140.122.138\; from=\ to=\<3dpalur@fasor.hu\> proto=ESMTP helo=\<\[158.140.122.138\]\>
...
2020-01-11 07:40:42
106.13.84.151 attackbotsspam
Jan 10 19:06:07 : SSH login attempts with invalid user
2020-01-11 07:50:17
118.141.152.250 attackbots
Honeypot attack, port: 5555, PTR: sr-250-152-141-118-on-nets.com.
2020-01-11 07:41:42
125.71.55.62 attack
Honeypot attack, port: 445, PTR: 62.55.71.125.broad.cd.sc.dynamic.163data.com.cn.
2020-01-11 07:47:00
114.47.104.206 attackbotsspam
port scan and connect, tcp 23 (telnet)
2020-01-11 07:44:02
49.235.216.174 attack
Failed password for root from 49.235.216.174 port 43386 ssh2
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.216.174  user=root
Failed password for root from 49.235.216.174 port 44678 ssh2
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.216.174  user=root
Failed password for root from 49.235.216.174 port 45968 ssh2
2020-01-11 07:34:21
80.82.64.127 attackspambots
01/10/2020-18:55:21.464127 80.82.64.127 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 82
2020-01-11 08:08:03
182.61.55.154 attackbotsspam
$f2bV_matches
2020-01-11 07:56:43
222.186.30.35 attackbotsspam
10.01.2020 23:25:26 SSH access blocked by firewall
2020-01-11 07:32:29

Recently Reported IPs

100.240.215.80 191.93.47.123 232.159.209.218 38.110.218.66
140.61.114.143 175.164.135.9 174.27.214.28 54.36.109.76
197.28.63.234 4.130.81.164 236.181.5.15 15.171.154.106
139.81.225.61 230.104.152.22 2.3.251.172 162.158.87.144
109.172.56.91 197.47.69.238 86.17.150.193 193.70.13.5