Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Mexico

Internet Service Provider: Gestion de Direccionamiento Uninet

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attackbots
Sep 15 22:54:21 eddieflores sshd\[25532\]: Invalid user tomcat7 from 201.145.45.164
Sep 15 22:54:21 eddieflores sshd\[25532\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.145.45.164
Sep 15 22:54:22 eddieflores sshd\[25532\]: Failed password for invalid user tomcat7 from 201.145.45.164 port 44172 ssh2
Sep 15 22:58:36 eddieflores sshd\[25861\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.145.45.164  user=root
Sep 15 22:58:37 eddieflores sshd\[25861\]: Failed password for root from 201.145.45.164 port 58522 ssh2
2019-09-16 17:11:44
attack
Brute force SMTP login attempted.
...
2019-09-16 09:12:27
attack
Sep 11 22:44:27 ny01 sshd[23431]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.145.45.164
Sep 11 22:44:29 ny01 sshd[23431]: Failed password for invalid user postgrespass from 201.145.45.164 port 48620 ssh2
Sep 11 22:50:31 ny01 sshd[24532]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.145.45.164
2019-09-12 11:02:37
attackspam
Sep 10 18:38:22 icinga sshd[31383]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.145.45.164
Sep 10 18:38:24 icinga sshd[31383]: Failed password for invalid user hadoop from 201.145.45.164 port 20178 ssh2
...
2019-09-11 02:44:05
attack
Sep 10 02:02:39 localhost sshd\[24837\]: Invalid user ts2 from 201.145.45.164 port 40396
Sep 10 02:02:39 localhost sshd\[24837\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.145.45.164
Sep 10 02:02:41 localhost sshd\[24837\]: Failed password for invalid user ts2 from 201.145.45.164 port 40396 ssh2
Sep 10 02:08:16 localhost sshd\[25066\]: Invalid user deploy from 201.145.45.164 port 22508
Sep 10 02:08:16 localhost sshd\[25066\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.145.45.164
...
2019-09-10 10:23:38
attack
Sep  7 22:30:39 web9 sshd\[26818\]: Invalid user user from 201.145.45.164
Sep  7 22:30:39 web9 sshd\[26818\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.145.45.164
Sep  7 22:30:41 web9 sshd\[26818\]: Failed password for invalid user user from 201.145.45.164 port 45456 ssh2
Sep  7 22:35:06 web9 sshd\[27658\]: Invalid user user21 from 201.145.45.164
Sep  7 22:35:06 web9 sshd\[27658\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.145.45.164
2019-09-08 16:52:11
attackbotsspam
Automatic report - Banned IP Access
2019-09-06 06:10:24
attackspambots
Sep  3 21:55:16 mail sshd\[21773\]: Invalid user ozzie from 201.145.45.164 port 57810
Sep  3 21:55:16 mail sshd\[21773\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.145.45.164
...
2019-09-04 06:50:29
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 201.145.45.164
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7016
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;201.145.45.164.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019090301 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Wed Sep 04 06:50:24 CST 2019
;; MSG SIZE  rcvd: 118
Host info
164.45.145.201.in-addr.arpa domain name pointer dsl-201-145-45-164-dyn.prod-infinitum.com.mx.
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
164.45.145.201.in-addr.arpa	name = dsl-201-145-45-164-dyn.prod-infinitum.com.mx.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
206.189.197.48 attackbots
Jul 14 21:05:28 work-partkepr sshd\[29638\]: Invalid user abc from 206.189.197.48 port 48272
Jul 14 21:05:28 work-partkepr sshd\[29638\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.197.48
...
2019-07-15 05:13:03
200.172.91.170 attackbots
Jul 14 23:29:11 eventyay sshd[7852]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.172.91.170
Jul 14 23:29:13 eventyay sshd[7852]: Failed password for invalid user redis from 200.172.91.170 port 41139 ssh2
Jul 14 23:35:16 eventyay sshd[9421]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.172.91.170
...
2019-07-15 05:50:19
103.122.164.15 attack
WordPress brute force
2019-07-15 05:20:07
185.220.101.24 attackspam
WordPress login attempts.
2019-07-15 05:24:25
103.243.252.244 attackbotsspam
Jul 14 17:43:07 TORMINT sshd\[1811\]: Invalid user rf from 103.243.252.244
Jul 14 17:43:07 TORMINT sshd\[1811\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.243.252.244
Jul 14 17:43:09 TORMINT sshd\[1811\]: Failed password for invalid user rf from 103.243.252.244 port 41384 ssh2
...
2019-07-15 05:53:11
31.180.136.17 attackbots
Telnet Server BruteForce Attack
2019-07-15 05:23:00
71.6.233.145 attackspambots
" "
2019-07-15 05:39:52
162.243.136.230 attack
Invalid user thomas from 162.243.136.230 port 48258
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.243.136.230
Failed password for invalid user thomas from 162.243.136.230 port 48258 ssh2
Invalid user testbed from 162.243.136.230 port 33910
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.243.136.230
2019-07-15 05:45:07
115.159.111.193 attack
Jul 14 23:37:42 localhost sshd\[14153\]: Invalid user openerp from 115.159.111.193 port 48689
Jul 14 23:37:42 localhost sshd\[14153\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.159.111.193
Jul 14 23:37:44 localhost sshd\[14153\]: Failed password for invalid user openerp from 115.159.111.193 port 48689 ssh2
2019-07-15 05:44:10
192.144.132.172 attackbots
2019-07-14T21:18:01.116762abusebot-4.cloudsearch.cf sshd\[17182\]: Invalid user chen from 192.144.132.172 port 50270
2019-07-15 05:26:46
46.101.10.42 attackbotsspam
Jul 14 23:17:47 ubuntu-2gb-nbg1-dc3-1 sshd[18511]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.10.42
Jul 14 23:17:48 ubuntu-2gb-nbg1-dc3-1 sshd[18511]: Failed password for invalid user user2 from 46.101.10.42 port 47052 ssh2
...
2019-07-15 05:33:44
209.97.147.208 attackbots
Jul 14 21:17:30 MK-Soft-VM6 sshd\[5694\]: Invalid user dev from 209.97.147.208 port 47524
Jul 14 21:17:30 MK-Soft-VM6 sshd\[5694\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.97.147.208
Jul 14 21:17:31 MK-Soft-VM6 sshd\[5694\]: Failed password for invalid user dev from 209.97.147.208 port 47524 ssh2
...
2019-07-15 05:42:23
119.29.242.84 attackspam
Jul 14 20:14:41 MK-Soft-VM6 sshd\[5198\]: Invalid user jiang from 119.29.242.84 port 59370
Jul 14 20:14:42 MK-Soft-VM6 sshd\[5198\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.242.84
Jul 14 20:14:43 MK-Soft-VM6 sshd\[5198\]: Failed password for invalid user jiang from 119.29.242.84 port 59370 ssh2
...
2019-07-15 05:16:40
128.199.150.228 attackbots
Jul 15 02:47:38 areeb-Workstation sshd\[3550\]: Invalid user sinusbot from 128.199.150.228
Jul 15 02:47:38 areeb-Workstation sshd\[3550\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.150.228
Jul 15 02:47:41 areeb-Workstation sshd\[3550\]: Failed password for invalid user sinusbot from 128.199.150.228 port 55988 ssh2
...
2019-07-15 05:36:31
185.176.26.104 attack
14.07.2019 21:17:40 Connection to port 31799 blocked by firewall
2019-07-15 05:37:45

Recently Reported IPs

201.241.205.214 65.98.180.107 77.240.30.219 247.4.91.17
23.216.164.140 38.246.242.253 144.237.160.253 179.226.115.68
136.29.127.16 164.151.57.172 139.157.30.105 68.1.101.41
206.35.106.27 2.170.10.139 125.79.104.184 210.97.198.157
158.198.134.92 52.210.165.195 93.174.89.179 197.240.75.18