Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Brazil

Internet Service Provider: Teleart Internet

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:
Type Details Datetime
attackbotsspam
Jul 17 08:03:37 offspring postfix/smtpd[27867]: connect from unknown[45.160.138.186]
Jul 17 08:03:41 offspring postfix/smtpd[27867]: warning: unknown[45.160.138.186]: SASL CRAM-MD5 authentication failed: authentication failure
Jul 17 08:03:41 offspring postfix/smtpd[27867]: warning: unknown[45.160.138.186]: SASL PLAIN authentication failed: authentication failure
Jul 17 08:03:43 offspring postfix/smtpd[27867]: warning: unknown[45.160.138.186]: SASL LOGIN authentication failed: authentication failure


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=45.160.138.186
2019-07-17 16:41:44
Comments on same subnet:
IP Type Details Datetime
45.160.138.182 attack
Sep 14 18:54:56 mail.srvfarm.net postfix/smtpd[2076883]: warning: unknown[45.160.138.182]: SASL PLAIN authentication failed: 
Sep 14 18:54:57 mail.srvfarm.net postfix/smtpd[2076883]: lost connection after AUTH from unknown[45.160.138.182]
Sep 14 18:56:18 mail.srvfarm.net postfix/smtpd[2076883]: warning: unknown[45.160.138.182]: SASL PLAIN authentication failed: 
Sep 14 18:56:18 mail.srvfarm.net postfix/smtpd[2076883]: lost connection after AUTH from unknown[45.160.138.182]
Sep 14 18:57:07 mail.srvfarm.net postfix/smtps/smtpd[2079600]: warning: unknown[45.160.138.182]: SASL PLAIN authentication failed:
2020-09-15 23:11:47
45.160.138.182 attackbotsspam
Sep 14 18:54:56 mail.srvfarm.net postfix/smtpd[2076883]: warning: unknown[45.160.138.182]: SASL PLAIN authentication failed: 
Sep 14 18:54:57 mail.srvfarm.net postfix/smtpd[2076883]: lost connection after AUTH from unknown[45.160.138.182]
Sep 14 18:56:18 mail.srvfarm.net postfix/smtpd[2076883]: warning: unknown[45.160.138.182]: SASL PLAIN authentication failed: 
Sep 14 18:56:18 mail.srvfarm.net postfix/smtpd[2076883]: lost connection after AUTH from unknown[45.160.138.182]
Sep 14 18:57:07 mail.srvfarm.net postfix/smtps/smtpd[2079600]: warning: unknown[45.160.138.182]: SASL PLAIN authentication failed:
2020-09-15 15:05:16
45.160.138.182 attack
Sep 14 18:54:56 mail.srvfarm.net postfix/smtpd[2076883]: warning: unknown[45.160.138.182]: SASL PLAIN authentication failed: 
Sep 14 18:54:57 mail.srvfarm.net postfix/smtpd[2076883]: lost connection after AUTH from unknown[45.160.138.182]
Sep 14 18:56:18 mail.srvfarm.net postfix/smtpd[2076883]: warning: unknown[45.160.138.182]: SASL PLAIN authentication failed: 
Sep 14 18:56:18 mail.srvfarm.net postfix/smtpd[2076883]: lost connection after AUTH from unknown[45.160.138.182]
Sep 14 18:57:07 mail.srvfarm.net postfix/smtps/smtpd[2079600]: warning: unknown[45.160.138.182]: SASL PLAIN authentication failed:
2020-09-15 07:12:17
45.160.138.113 attack
Aug 15 00:07:55 mail.srvfarm.net postfix/smtps/smtpd[893682]: warning: unknown[45.160.138.113]: SASL PLAIN authentication failed: 
Aug 15 00:07:56 mail.srvfarm.net postfix/smtps/smtpd[893682]: lost connection after AUTH from unknown[45.160.138.113]
Aug 15 00:11:23 mail.srvfarm.net postfix/smtpd[795872]: warning: unknown[45.160.138.113]: SASL PLAIN authentication failed: 
Aug 15 00:11:23 mail.srvfarm.net postfix/smtpd[795872]: lost connection after AUTH from unknown[45.160.138.113]
Aug 15 00:17:44 mail.srvfarm.net postfix/smtps/smtpd[741489]: warning: unknown[45.160.138.113]: SASL PLAIN authentication failed:
2020-08-15 17:11:51
45.160.138.182 attackbotsspam
Aug 15 00:13:58 mail.srvfarm.net postfix/smtpd[848719]: warning: unknown[45.160.138.182]: SASL PLAIN authentication failed: 
Aug 15 00:13:58 mail.srvfarm.net postfix/smtpd[848719]: lost connection after AUTH from unknown[45.160.138.182]
Aug 15 00:15:00 mail.srvfarm.net postfix/smtpd[741824]: warning: unknown[45.160.138.182]: SASL PLAIN authentication failed: 
Aug 15 00:15:01 mail.srvfarm.net postfix/smtpd[741824]: lost connection after AUTH from unknown[45.160.138.182]
Aug 15 00:15:08 mail.srvfarm.net postfix/smtpd[795872]: warning: unknown[45.160.138.182]: SASL PLAIN authentication failed:
2020-08-15 17:11:30
45.160.138.163 attackbotsspam
Aug 15 01:06:14 mail.srvfarm.net postfix/smtps/smtpd[915855]: warning: unknown[45.160.138.163]: SASL PLAIN authentication failed: 
Aug 15 01:06:14 mail.srvfarm.net postfix/smtps/smtpd[915855]: lost connection after AUTH from unknown[45.160.138.163]
Aug 15 01:10:17 mail.srvfarm.net postfix/smtps/smtpd[927777]: warning: unknown[45.160.138.163]: SASL PLAIN authentication failed: 
Aug 15 01:10:18 mail.srvfarm.net postfix/smtps/smtpd[927777]: lost connection after AUTH from unknown[45.160.138.163]
Aug 15 01:13:47 mail.srvfarm.net postfix/smtpd[928780]: warning: unknown[45.160.138.163]: SASL PLAIN authentication failed:
2020-08-15 16:02:58
45.160.138.172 attackspambots
Jul 28 05:35:51 mail.srvfarm.net postfix/smtps/smtpd[2355365]: warning: unknown[45.160.138.172]: SASL PLAIN authentication failed: 
Jul 28 05:35:52 mail.srvfarm.net postfix/smtps/smtpd[2355365]: lost connection after AUTH from unknown[45.160.138.172]
Jul 28 05:38:56 mail.srvfarm.net postfix/smtpd[2354260]: warning: unknown[45.160.138.172]: SASL PLAIN authentication failed: 
Jul 28 05:38:57 mail.srvfarm.net postfix/smtpd[2354260]: lost connection after AUTH from unknown[45.160.138.172]
Jul 28 05:41:05 mail.srvfarm.net postfix/smtps/smtpd[2355866]: warning: unknown[45.160.138.172]: SASL PLAIN authentication failed:
2020-07-28 17:50:43
45.160.138.165 attackspambots
Jul 24 08:44:30 mail.srvfarm.net postfix/smtps/smtpd[2137441]: warning: unknown[45.160.138.165]: SASL PLAIN authentication failed: 
Jul 24 08:44:30 mail.srvfarm.net postfix/smtps/smtpd[2137441]: lost connection after AUTH from unknown[45.160.138.165]
Jul 24 08:46:01 mail.srvfarm.net postfix/smtps/smtpd[2137533]: warning: unknown[45.160.138.165]: SASL PLAIN authentication failed: 
Jul 24 08:46:02 mail.srvfarm.net postfix/smtps/smtpd[2137533]: lost connection after AUTH from unknown[45.160.138.165]
Jul 24 08:54:12 mail.srvfarm.net postfix/smtpd[2140704]: warning: unknown[45.160.138.165]: SASL PLAIN authentication failed:
2020-07-25 04:29:06
45.160.138.187 attackspambots
Jul 24 16:57:50 mail.srvfarm.net postfix/smtps/smtpd[2334289]: warning: unknown[45.160.138.187]: SASL PLAIN authentication failed: 
Jul 24 16:57:51 mail.srvfarm.net postfix/smtps/smtpd[2334289]: lost connection after AUTH from unknown[45.160.138.187]
Jul 24 17:04:37 mail.srvfarm.net postfix/smtps/smtpd[2333865]: warning: unknown[45.160.138.187]: SASL PLAIN authentication failed: 
Jul 24 17:04:37 mail.srvfarm.net postfix/smtps/smtpd[2333865]: lost connection after AUTH from unknown[45.160.138.187]
Jul 24 17:05:22 mail.srvfarm.net postfix/smtps/smtpd[2349270]: warning: unknown[45.160.138.187]: SASL PLAIN authentication failed:
2020-07-25 01:45:23
45.160.138.211 attack
failed_logins
2020-07-18 17:08:37
45.160.138.211 attackspambots
(smtpauth) Failed SMTP AUTH login from 45.160.138.211 (BR/Brazil/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-07-17 08:24:55 plain authenticator failed for ([45.160.138.211]) [45.160.138.211]: 535 Incorrect authentication data (set_id=dairy)
2020-07-17 15:54:33
45.160.138.160 attackspam
Jun 16 05:16:06 mail.srvfarm.net postfix/smtpd[916166]: warning: unknown[45.160.138.160]: SASL PLAIN authentication failed: 
Jun 16 05:16:07 mail.srvfarm.net postfix/smtpd[916166]: lost connection after AUTH from unknown[45.160.138.160]
Jun 16 05:23:27 mail.srvfarm.net postfix/smtpd[935980]: warning: unknown[45.160.138.160]: SASL PLAIN authentication failed: 
Jun 16 05:23:27 mail.srvfarm.net postfix/smtpd[935980]: lost connection after AUTH from unknown[45.160.138.160]
Jun 16 05:25:26 mail.srvfarm.net postfix/smtps/smtpd[938097]: warning: unknown[45.160.138.160]: SASL PLAIN authentication failed:
2020-06-16 16:38:12
45.160.138.118 attack
(smtpauth) Failed SMTP AUTH login from 45.160.138.118 (BR/Brazil/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-05-10 08:25:11 plain authenticator failed for ([45.160.138.118]) [45.160.138.118]: 535 Incorrect authentication data (set_id=sale)
2020-05-10 13:27:22
45.160.138.219 attack
Unauthorised access (Oct 31) SRC=45.160.138.219 LEN=52 TTL=109 ID=2475 DF TCP DPT=445 WINDOW=8192 SYN
2019-11-01 01:55:04
45.160.138.105 attack
Jul 14 12:05:19 rigel postfix/smtpd[29099]: connect from unknown[45.160.138.105]
Jul 14 12:05:22 rigel postfix/smtpd[29099]: warning: unknown[45.160.138.105]: SASL CRAM-MD5 authentication failed: authentication failure
Jul 14 12:05:23 rigel postfix/smtpd[29099]: warning: unknown[45.160.138.105]: SASL PLAIN authentication failed: authentication failure
Jul 14 12:05:24 rigel postfix/smtpd[29099]: warning: unknown[45.160.138.105]: SASL LOGIN authentication failed: authentication failure


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=45.160.138.105
2019-07-15 03:45:05
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.160.138.186
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56825
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.160.138.186.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019071700 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Wed Jul 17 16:41:37 CST 2019
;; MSG SIZE  rcvd: 118
Host info
Host 186.138.160.45.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 186.138.160.45.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
192.241.239.54 attackspambots
Port scan denied
2020-09-05 03:18:24
47.74.3.113 attack
ET CINS Active Threat Intelligence Poor Reputation IP group 27 - port: 13650 proto: tcp cat: Misc Attackbytes: 60
2020-09-05 03:33:44
49.233.162.198 attackbots
Sep  4 20:31:44 MainVPS sshd[20087]: Invalid user admin from 49.233.162.198 port 57420
Sep  4 20:31:44 MainVPS sshd[20087]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.162.198
Sep  4 20:31:44 MainVPS sshd[20087]: Invalid user admin from 49.233.162.198 port 57420
Sep  4 20:31:47 MainVPS sshd[20087]: Failed password for invalid user admin from 49.233.162.198 port 57420 ssh2
Sep  4 20:33:44 MainVPS sshd[24200]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.162.198  user=root
Sep  4 20:33:46 MainVPS sshd[24200]: Failed password for root from 49.233.162.198 port 50814 ssh2
...
2020-09-05 03:45:25
195.54.167.151 attackbots
Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2020-09-04T14:59:08Z and 2020-09-04T16:43:51Z
2020-09-05 03:44:28
106.13.71.1 attack
Sep  4 16:36:07 ajax sshd[6102]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.71.1 
Sep  4 16:36:08 ajax sshd[6102]: Failed password for invalid user xyz from 106.13.71.1 port 36126 ssh2
2020-09-05 03:48:49
200.186.127.210 attackbots
Sep  4 16:44:51 lnxmail61 sshd[23906]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.186.127.210
2020-09-05 03:41:23
112.85.42.74 attackspam
"fail2ban match"
2020-09-05 03:15:50
207.154.236.97 attackspambots
207.154.236.97 - - [04/Sep/2020:19:01:07 +0200] "GET /wp-login.php HTTP/1.1" 200 8537 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
207.154.236.97 - - [04/Sep/2020:19:01:10 +0200] "POST /wp-login.php HTTP/1.1" 200 8854 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
207.154.236.97 - - [04/Sep/2020:19:01:10 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-09-05 03:18:05
188.146.171.252 attackbots
Sep  3 18:43:39 mellenthin postfix/smtpd[20267]: NOQUEUE: reject: RCPT from 188.146.171.252.nat.umts.dynamic.t-mobile.pl[188.146.171.252]: 554 5.7.1 Service unavailable; Client host [188.146.171.252] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/188.146.171.252; from= to= proto=ESMTP helo=<188.146.171.252.nat.umts.dynamic.t-mobile.pl>
2020-09-05 03:35:46
172.81.227.243 attackspambots
 TCP (SYN) 172.81.227.243:57050 -> port 251, len 44
2020-09-05 03:17:06
201.63.224.82 attack
Honeypot attack, port: 445, PTR: 201-63-224-82.customer.tdatabrasil.net.br.
2020-09-05 03:14:00
49.234.96.210 attack
2020-09-05T01:48:30.371457hostname sshd[2275]: Invalid user zt from 49.234.96.210 port 51714
2020-09-05T01:48:32.242754hostname sshd[2275]: Failed password for invalid user zt from 49.234.96.210 port 51714 ssh2
2020-09-05T01:54:24.041539hostname sshd[3009]: Invalid user ftp1 from 49.234.96.210 port 52920
...
2020-09-05 03:31:12
190.234.46.124 attackspambots
Sep  3 18:43:57 mellenthin postfix/smtpd[20267]: NOQUEUE: reject: RCPT from unknown[190.234.46.124]: 554 5.7.1 Service unavailable; Client host [190.234.46.124] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS / https://www.spamhaus.org/query/ip/190.234.46.124; from= to= proto=ESMTP helo=<[190.234.46.124]>
2020-09-05 03:23:22
5.135.164.201 attackbotsspam
Sep  4 18:03:39 santamaria sshd\[18874\]: Invalid user ventas from 5.135.164.201
Sep  4 18:03:39 santamaria sshd\[18874\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.135.164.201
Sep  4 18:03:41 santamaria sshd\[18874\]: Failed password for invalid user ventas from 5.135.164.201 port 36054 ssh2
...
2020-09-05 03:23:06
14.18.107.116 attackbotsspam
Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-09-04T03:56:38Z and 2020-09-04T03:56:59Z
2020-09-05 03:46:17

Recently Reported IPs

104.129.130.214 95.170.193.186 122.167.138.194 46.166.151.200
85.96.196.155 74.208.159.180 82.201.31.101 37.49.224.137
34.221.144.168 197.47.23.49 252.157.101.85 68.183.83.164
14.226.41.23 59.126.169.88 134.73.129.15 122.252.231.254
240.220.137.123 109.235.219.167 88.147.172.98 220.173.159.219