Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Russia

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
192.145.99.71 attackbotsspam
Sep 15 03:42:48 our-server-hostname sshd[30783]: Address 192.145.99.71 maps to aofy.ru, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Sep 15 03:42:48 our-server-hostname sshd[30783]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.145.99.71  user=r.r
Sep 15 03:42:50 our-server-hostname sshd[30783]: Failed password for r.r from 192.145.99.71 port 60175 ssh2
Sep 15 03:59:06 our-server-hostname sshd[32531]: Address 192.145.99.71 maps to aofy.ru, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Sep 15 03:59:06 our-server-hostname sshd[32531]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.145.99.71  user=r.r
Sep 15 03:59:08 our-server-hostname sshd[32531]: Failed password for r.r from 192.145.99.71 port 40733 ssh2
Sep 15 04:03:54 our-server-hostname sshd[547]: Address 192.145.99.71 maps to aofy.ru, but this does not map back to the address ........
-------------------------------
2020-09-16 12:00:39
192.145.99.71 attackspam
Sep 15 03:42:48 our-server-hostname sshd[30783]: Address 192.145.99.71 maps to aofy.ru, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Sep 15 03:42:48 our-server-hostname sshd[30783]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.145.99.71  user=r.r
Sep 15 03:42:50 our-server-hostname sshd[30783]: Failed password for r.r from 192.145.99.71 port 60175 ssh2
Sep 15 03:59:06 our-server-hostname sshd[32531]: Address 192.145.99.71 maps to aofy.ru, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Sep 15 03:59:06 our-server-hostname sshd[32531]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.145.99.71  user=r.r
Sep 15 03:59:08 our-server-hostname sshd[32531]: Failed password for r.r from 192.145.99.71 port 40733 ssh2
Sep 15 04:03:54 our-server-hostname sshd[547]: Address 192.145.99.71 maps to aofy.ru, but this does not map back to the address ........
-------------------------------
2020-09-16 03:49:22
192.145.99.71 attackspam
Sep 15 03:42:48 our-server-hostname sshd[30783]: Address 192.145.99.71 maps to aofy.ru, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Sep 15 03:42:48 our-server-hostname sshd[30783]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.145.99.71  user=r.r
Sep 15 03:42:50 our-server-hostname sshd[30783]: Failed password for r.r from 192.145.99.71 port 60175 ssh2
Sep 15 03:59:06 our-server-hostname sshd[32531]: Address 192.145.99.71 maps to aofy.ru, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Sep 15 03:59:06 our-server-hostname sshd[32531]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.145.99.71  user=r.r
Sep 15 03:59:08 our-server-hostname sshd[32531]: Failed password for r.r from 192.145.99.71 port 40733 ssh2
Sep 15 04:03:54 our-server-hostname sshd[547]: Address 192.145.99.71 maps to aofy.ru, but this does not map back to the address ........
-------------------------------
2020-09-16 00:19:00
192.145.99.71 attackbots
Sep 15 03:42:48 our-server-hostname sshd[30783]: Address 192.145.99.71 maps to aofy.ru, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Sep 15 03:42:48 our-server-hostname sshd[30783]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.145.99.71  user=r.r
Sep 15 03:42:50 our-server-hostname sshd[30783]: Failed password for r.r from 192.145.99.71 port 60175 ssh2
Sep 15 03:59:06 our-server-hostname sshd[32531]: Address 192.145.99.71 maps to aofy.ru, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Sep 15 03:59:06 our-server-hostname sshd[32531]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.145.99.71  user=r.r
Sep 15 03:59:08 our-server-hostname sshd[32531]: Failed password for r.r from 192.145.99.71 port 40733 ssh2
Sep 15 04:03:54 our-server-hostname sshd[547]: Address 192.145.99.71 maps to aofy.ru, but this does not map back to the address ........
-------------------------------
2020-09-15 16:12:26
192.145.99.71 attack
Sep 15 03:42:48 our-server-hostname sshd[30783]: Address 192.145.99.71 maps to aofy.ru, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Sep 15 03:42:48 our-server-hostname sshd[30783]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.145.99.71  user=r.r
Sep 15 03:42:50 our-server-hostname sshd[30783]: Failed password for r.r from 192.145.99.71 port 60175 ssh2
Sep 15 03:59:06 our-server-hostname sshd[32531]: Address 192.145.99.71 maps to aofy.ru, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Sep 15 03:59:06 our-server-hostname sshd[32531]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.145.99.71  user=r.r
Sep 15 03:59:08 our-server-hostname sshd[32531]: Failed password for r.r from 192.145.99.71 port 40733 ssh2
Sep 15 04:03:54 our-server-hostname sshd[547]: Address 192.145.99.71 maps to aofy.ru, but this does not map back to the address ........
-------------------------------
2020-09-15 08:17:40
192.145.99.250 attackbots
Attempted WordPress login: "GET /wp-login.php"
2019-07-14 19:31:30
192.145.99.250 attack
WordPress brute force
2019-07-12 19:51:23
192.145.99.250 attack
Automatic report generated by Wazuh
2019-07-09 05:20:51
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 192.145.99.73
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;192.145.99.73.			IN	A

;; AUTHORITY SECTION:
.			290	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022101202 1800 900 604800 86400

;; Query time: 23 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Oct 13 13:00:11 CST 2022
;; MSG SIZE  rcvd: 106
Host info
73.99.145.192.in-addr.arpa domain name pointer aofy.ru.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
73.99.145.192.in-addr.arpa	name = aofy.ru.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
114.7.164.170 attack
Unauthorised connection attempt detected at AUO NODE 4. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)
2020-08-06 22:29:00
178.128.61.101 attackspam
Aug  6 16:12:21 [host] sshd[28091]: pam_unix(sshd:
Aug  6 16:12:23 [host] sshd[28091]: Failed passwor
Aug  6 16:16:54 [host] sshd[28171]: pam_unix(sshd:
2020-08-06 22:42:25
104.248.61.192 attackbots
Aug  6 15:25:48 vps647732 sshd[23597]: Failed password for root from 104.248.61.192 port 52936 ssh2
...
2020-08-06 22:21:20
202.171.73.84 attack
Dovecot Invalid User Login Attempt.
2020-08-06 22:54:46
2.132.215.111 attackbotsspam
1596721217 - 08/06/2020 15:40:17 Host: 2.132.215.111/2.132.215.111 Port: 445 TCP Blocked
2020-08-06 22:15:51
105.247.93.202 attack
445/tcp
[2020-08-06]1pkt
2020-08-06 22:20:48
182.208.185.213 attackspambots
Aug  6 16:29:18 PorscheCustomer sshd[527]: Failed password for root from 182.208.185.213 port 53156 ssh2
Aug  6 16:32:27 PorscheCustomer sshd[628]: Failed password for root from 182.208.185.213 port 43112 ssh2
...
2020-08-06 22:41:24
212.70.149.82 attackbots
Aug  6 16:52:03 srv01 postfix/smtpd\[21749\]: warning: unknown\[212.70.149.82\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug  6 16:52:09 srv01 postfix/smtpd\[22689\]: warning: unknown\[212.70.149.82\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug  6 16:52:12 srv01 postfix/smtpd\[22691\]: warning: unknown\[212.70.149.82\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug  6 16:52:12 srv01 postfix/smtpd\[22690\]: warning: unknown\[212.70.149.82\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug  6 16:52:31 srv01 postfix/smtpd\[22704\]: warning: unknown\[212.70.149.82\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2020-08-06 22:54:01
112.85.42.181 attackbotsspam
Aug  6 11:31:22 firewall sshd[12483]: Failed password for root from 112.85.42.181 port 36925 ssh2
Aug  6 11:31:25 firewall sshd[12483]: Failed password for root from 112.85.42.181 port 36925 ssh2
Aug  6 11:31:29 firewall sshd[12483]: Failed password for root from 112.85.42.181 port 36925 ssh2
...
2020-08-06 22:33:50
103.211.20.244 attackbotsspam
1596721181 - 08/06/2020 15:39:41 Host: 103.211.20.244/103.211.20.244 Port: 445 TCP Blocked
2020-08-06 22:26:09
129.226.67.78 attackspambots
Aug  6 15:24:26 ncomp sshd[13637]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.67.78  user=root
Aug  6 15:24:28 ncomp sshd[13637]: Failed password for root from 129.226.67.78 port 33102 ssh2
Aug  6 15:41:25 ncomp sshd[14132]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.67.78  user=root
Aug  6 15:41:27 ncomp sshd[14132]: Failed password for root from 129.226.67.78 port 46168 ssh2
2020-08-06 22:32:44
142.93.240.192 attackspam
SSH Brute Force
2020-08-06 22:35:29
129.226.117.160 attackbots
Aug  6 13:36:34 jumpserver sshd[44668]: Failed password for root from 129.226.117.160 port 47702 ssh2
Aug  6 13:41:24 jumpserver sshd[44703]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.117.160  user=root
Aug  6 13:41:26 jumpserver sshd[44703]: Failed password for root from 129.226.117.160 port 58260 ssh2
...
2020-08-06 22:36:04
80.82.64.98 attackbots
Email login attempts - bad mail account name (POP3)
2020-08-06 22:22:30
106.12.138.226 attackspam
Aug  6 16:27:12 buvik sshd[23861]: Failed password for root from 106.12.138.226 port 47290 ssh2
Aug  6 16:31:04 buvik sshd[24437]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.138.226  user=root
Aug  6 16:31:06 buvik sshd[24437]: Failed password for root from 106.12.138.226 port 60390 ssh2
...
2020-08-06 22:31:32

Recently Reported IPs

24.130.7.124 226.166.150.140 157.175.58.35 196.34.199.107
247.210.106.20 112.167.183.30 37.146.180.217 164.155.46.20
194.209.126.49 152.34.109.109 152.220.150.125 198.54.124.152
188.113.3.236 174.253.83.63 194.62.64.139 139.30.60.199
140.35.94.88 4.155.45.174 44.169.189.5 104.244.43.52