Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Italy

Internet Service Provider: Telecom Italia S.p.A.

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attackbots
Aug  4 05:00:28 ms-srv sshd[17172]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.45.45.65
Aug  4 05:00:29 ms-srv sshd[17172]: Failed password for invalid user booking from 213.45.45.65 port 58025 ssh2
2020-03-08 23:34:48
attackbotsspam
Aug  7 19:45:51 * sshd[17333]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.45.45.65
Aug  7 19:45:53 * sshd[17333]: Failed password for invalid user larry from 213.45.45.65 port 56868 ssh2
2019-08-08 02:37:56
attackspambots
Aug  3 11:16:12 server01 sshd\[2575\]: Invalid user psmaint from 213.45.45.65
Aug  3 11:16:12 server01 sshd\[2575\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.45.45.65
Aug  3 11:16:13 server01 sshd\[2575\]: Failed password for invalid user psmaint from 213.45.45.65 port 56910 ssh2
...
2019-08-03 16:24:15
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 213.45.45.65
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49920
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;213.45.45.65.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019080300 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Aug 03 16:24:09 CST 2019
;; MSG SIZE  rcvd: 116
Host info
65.45.45.213.in-addr.arpa domain name pointer host65-45-dynamic.45-213-r.retail.telecomitalia.it.
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
65.45.45.213.in-addr.arpa	name = host65-45-dynamic.45-213-r.retail.telecomitalia.it.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
196.203.31.154 attack
Invalid user informix from 196.203.31.154 port 41937
2020-01-13 06:14:29
218.92.0.200 attackbots
Jan 12 22:28:01 vmanager6029 sshd\[5182\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.200  user=root
Jan 12 22:28:03 vmanager6029 sshd\[5182\]: Failed password for root from 218.92.0.200 port 15823 ssh2
Jan 12 22:28:05 vmanager6029 sshd\[5182\]: Failed password for root from 218.92.0.200 port 15823 ssh2
2020-01-13 06:21:54
195.9.81.150 attackbotsspam
B: zzZZzz blocked content access
2020-01-13 06:40:51
137.226.113.10 attack
Jan 12 22:27:49 debian-2gb-nbg1-2 kernel: \[1123773.881691\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=137.226.113.10 DST=195.201.40.59 LEN=1258 TOS=0x00 PREC=0x00 TTL=242 ID=54321 PROTO=UDP SPT=55536 DPT=443 LEN=1238
2020-01-13 06:30:30
164.68.125.156 attackspam
Jan 12 23:28:36 ncomp sshd[21849]: Invalid user applmgr from 164.68.125.156
Jan 12 23:28:36 ncomp sshd[21849]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.68.125.156
Jan 12 23:28:36 ncomp sshd[21849]: Invalid user applmgr from 164.68.125.156
Jan 12 23:28:38 ncomp sshd[21849]: Failed password for invalid user applmgr from 164.68.125.156 port 53908 ssh2
2020-01-13 06:10:57
112.85.42.188 attackspam
01/12/2020-17:22:49.945475 112.85.42.188 Protocol: 6 ET SCAN Potential SSH Scan
2020-01-13 06:24:21
42.118.242.189 attackspambots
Dec 11 09:59:25 vtv3 sshd[4984]: Failed password for root from 42.118.242.189 port 48770 ssh2
Dec 11 10:06:11 vtv3 sshd[8460]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.118.242.189 
Dec 11 10:06:13 vtv3 sshd[8460]: Failed password for invalid user hamsa from 42.118.242.189 port 57920 ssh2
Dec 11 10:19:49 vtv3 sshd[14458]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.118.242.189 
Dec 11 10:19:50 vtv3 sshd[14458]: Failed password for invalid user lyly from 42.118.242.189 port 47990 ssh2
Dec 11 10:26:43 vtv3 sshd[18048]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.118.242.189 
Dec 11 10:40:08 vtv3 sshd[24586]: Failed password for root from 42.118.242.189 port 47216 ssh2
Dec 11 10:47:26 vtv3 sshd[28401]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.118.242.189 
Dec 11 10:47:28 vtv3 sshd[28401]: Failed password for invalid user f
2020-01-13 06:15:57
144.76.174.7 attackbotsspam
Automatic report - XMLRPC Attack
2020-01-13 06:13:55
134.209.7.179 attack
Jan 12 22:27:52 ns37 sshd[31527]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.7.179
2020-01-13 06:29:27
129.226.57.194 attackspambots
Lines containing failures of 129.226.57.194
Jan 12 12:54:26 *** sshd[38624]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.57.194  user=r.r
Jan 12 12:54:28 *** sshd[38624]: Failed password for r.r from 129.226.57.194 port 42156 ssh2
Jan 12 12:54:29 *** sshd[38624]: Received disconnect from 129.226.57.194 port 42156:11: Bye Bye [preauth]
Jan 12 12:54:29 *** sshd[38624]: Disconnected from authenticating user r.r 129.226.57.194 port 42156 [preauth]
Jan 12 13:07:00 *** sshd[39189]: Invalid user friedrich from 129.226.57.194 port 58446
Jan 12 13:07:00 *** sshd[39189]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.57.194
Jan 12 13:07:02 *** sshd[39189]: Failed password for invalid user friedrich from 129.226.57.194 port 58446 ssh2
Jan 12 13:07:02 *** sshd[39189]: Received disconnect from 129.226.57.194 port 58446:11: Bye Bye [preauth]
Jan 12 13:07:02 *** sshd[39189]: Disconnecte........
------------------------------
2020-01-13 06:27:01
106.13.23.149 attack
Unauthorized connection attempt detected from IP address 106.13.23.149 to port 2220 [J]
2020-01-13 06:29:42
187.95.124.230 attackspambots
Unauthorized connection attempt detected from IP address 187.95.124.230 to port 2220 [J]
2020-01-13 06:33:40
222.186.42.7 attackspam
2020-01-12T22:10:48.438290abusebot-2.cloudsearch.cf sshd[17697]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.7  user=root
2020-01-12T22:10:50.521048abusebot-2.cloudsearch.cf sshd[17697]: Failed password for root from 222.186.42.7 port 36859 ssh2
2020-01-12T22:10:52.792642abusebot-2.cloudsearch.cf sshd[17697]: Failed password for root from 222.186.42.7 port 36859 ssh2
2020-01-12T22:10:48.438290abusebot-2.cloudsearch.cf sshd[17697]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.7  user=root
2020-01-12T22:10:50.521048abusebot-2.cloudsearch.cf sshd[17697]: Failed password for root from 222.186.42.7 port 36859 ssh2
2020-01-12T22:10:52.792642abusebot-2.cloudsearch.cf sshd[17697]: Failed password for root from 222.186.42.7 port 36859 ssh2
2020-01-12T22:10:48.438290abusebot-2.cloudsearch.cf sshd[17697]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rho
...
2020-01-13 06:17:09
222.186.175.216 attackspambots
Jan 12 23:07:41 eventyay sshd[16822]: Failed password for root from 222.186.175.216 port 24360 ssh2
Jan 12 23:07:54 eventyay sshd[16822]: error: maximum authentication attempts exceeded for root from 222.186.175.216 port 24360 ssh2 [preauth]
Jan 12 23:08:00 eventyay sshd[16829]: Failed password for root from 222.186.175.216 port 47446 ssh2
...
2020-01-13 06:11:38
43.242.241.218 attack
Jan 12 23:03:38 blackhole sshd\[13697\]: Invalid user file from 43.242.241.218 port 35768
Jan 12 23:03:38 blackhole sshd\[13697\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.242.241.218
Jan 12 23:03:40 blackhole sshd\[13697\]: Failed password for invalid user file from 43.242.241.218 port 35768 ssh2
...
2020-01-13 06:19:54

Recently Reported IPs

95.225.203.50 91.39.220.15 73.64.48.178 65.195.18.17
22.41.218.130 139.95.38.223 128.190.182.104 75.133.143.3
213.232.126.170 154.121.57.3 197.92.220.195 114.246.148.231
86.201.248.153 218.197.24.1 232.150.7.5 224.99.216.59
69.94.143.26 64.129.79.7 228.25.12.235 104.248.224.228