Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Brazil

Internet Service Provider: NovaFibra Telecom

Hostname: unknown

Organization: unknown

Usage Type: Commercial

Comments:
Type Details Datetime
attackspambots
Scanning random ports - tries to find possible vulnerable services
2020-03-08 05:56:08
attackbots
Unauthorized connection attempt detected from IP address 45.165.5.161 to port 1433 [J]
2020-01-30 23:55:42
Comments on same subnet:
IP Type Details Datetime
45.165.57.105 attack
 TCP (SYN) 45.165.57.105:23448 -> port 8080, len 44
2020-08-13 03:31:12
45.165.5.170 attack
Port Scan detected!
...
2020-08-01 21:47:20
45.165.5.64 attackspambots
Unauthorized connection attempt from IP address 45.165.5.64 on Port 445(SMB)
2019-09-07 05:20:59
45.165.5.64 attackspam
Port Scan: TCP/445
2019-08-24 15:39:32
45.165.57.130 attackbotsspam
Aug  8 13:53:55 km20725 sshd[5274]: reveeclipse mapping checking getaddrinfo for 130.57.165.45.bazarinfor.com.br [45.165.57.130] failed - POSSIBLE BREAK-IN ATTEMPT!
Aug  8 13:53:55 km20725 sshd[5274]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.165.57.130  user=r.r
Aug  8 13:53:58 km20725 sshd[5274]: Failed password for r.r from 45.165.57.130 port 37426 ssh2
Aug  8 13:54:00 km20725 sshd[5274]: Failed password for r.r from 45.165.57.130 port 37426 ssh2
Aug  8 13:54:02 km20725 sshd[5274]: Failed password for r.r from 45.165.57.130 port 37426 ssh2
Aug  8 13:54:05 km20725 sshd[5274]: Failed password for r.r from 45.165.57.130 port 37426 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=45.165.57.130
2019-08-09 04:33:09
45.165.5.46 attackspambots
Trying to deliver email spam, but blocked by RBL
2019-07-03 16:36:41
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.165.5.161
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63894
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.165.5.161.			IN	A

;; AUTHORITY SECTION:
.			60	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020013002 1800 900 604800 86400

;; Query time: 109 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 30 23:55:30 CST 2020
;; MSG SIZE  rcvd: 116
Host info
161.5.165.45.in-addr.arpa domain name pointer 45-165-5-161.novafibra.net.br.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
161.5.165.45.in-addr.arpa	name = 45-165-5-161.novafibra.net.br.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
178.62.239.249 attackspambots
Feb 20 15:52:49 dillonfme sshd\[15432\]: Invalid user ubuntu from 178.62.239.249 port 54042
Feb 20 15:52:49 dillonfme sshd\[15432\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.239.249
Feb 20 15:52:51 dillonfme sshd\[15432\]: Failed password for invalid user ubuntu from 178.62.239.249 port 54042 ssh2
Feb 20 15:58:15 dillonfme sshd\[15509\]: Invalid user soo1chi from 178.62.239.249 port 46308
Feb 20 15:58:15 dillonfme sshd\[15509\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.239.249
...
2019-07-05 05:16:11
108.174.194.77 attackbotsspam
Unsolicited snoring remedy
2019-07-05 04:43:33
60.255.181.245 attack
Attempts against Pop3/IMAP
2019-07-05 04:36:06
80.48.183.178 attackbots
proto=tcp  .  spt=52476  .  dpt=25  .     (listed on Blocklist de  Jul 03)     (867)
2019-07-05 04:31:28
217.74.33.12 attackbots
joshuajohannes.de 217.74.33.12 \[04/Jul/2019:15:05:18 +0200\] "POST /wp-login.php HTTP/1.1" 200 5606 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
joshuajohannes.de 217.74.33.12 \[04/Jul/2019:15:05:19 +0200\] "POST /wp-login.php HTTP/1.1" 200 5613 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2019-07-05 04:26:57
118.24.102.248 attackspambots
Feb 11 04:12:49 dillonfme sshd\[9902\]: Invalid user ice from 118.24.102.248 port 43202
Feb 11 04:12:49 dillonfme sshd\[9902\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.102.248
Feb 11 04:12:51 dillonfme sshd\[9902\]: Failed password for invalid user ice from 118.24.102.248 port 43202 ssh2
Feb 11 04:19:30 dillonfme sshd\[10261\]: Invalid user sentry from 118.24.102.248 port 34574
Feb 11 04:19:30 dillonfme sshd\[10261\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.102.248
...
2019-07-05 04:58:12
132.232.118.214 attackspam
ssh failed login
2019-07-05 04:45:04
190.85.156.226 attack
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-03 12:00:20,589 INFO [shellcode_manager] (190.85.156.226) no match, writing hexdump (82cb422f03ecfd010705fe7536aabdce :2193622) - MS17010 (EternalBlue)
2019-07-05 04:55:32
37.34.240.50 attackbots
Netgear DGN Device Remote Command Execution Vulnerability
2019-07-05 05:10:01
36.59.239.57 attack
2019-07-04T18:14:13.852132Z \[cowrie.ssh.factory.CowrieSSHFactory\] New connection: 36.59.239.57:48960 \(107.175.91.48:22\) \[session: 0493a274eca4\]
2019-07-04T18:14:16.229366Z \[cowrie.ssh.factory.CowrieSSHFactory\] New connection: 36.59.239.57:48966 \(107.175.91.48:22\) \[session: 7cbcd18eab96\]
...
2019-07-05 05:03:20
190.153.220.42 attack
Brute force attempt
2019-07-05 05:19:27
139.198.122.76 attack
Invalid user test from 139.198.122.76 port 38818
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.122.76
Failed password for invalid user test from 139.198.122.76 port 38818 ssh2
Invalid user meng from 139.198.122.76 port 34620
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.122.76
2019-07-05 05:14:12
58.64.144.108 attackspambots
SSH invalid-user multiple login attempts
2019-07-05 04:48:54
132.148.18.214 attackbotsspam
fail2ban honeypot
2019-07-05 04:32:36
31.210.94.36 attackbots
WordPress login Brute force / Web App Attack on client site.
2019-07-05 04:36:26

Recently Reported IPs

45.83.66.128 45.83.66.113 45.83.64.68 43.225.194.215
41.231.85.33 41.44.83.213 23.224.158.2 201.162.105.43
197.33.15.129 196.27.106.76 189.151.73.8 187.163.127.41
186.89.246.236 185.121.32.185 179.97.240.180 177.230.223.76
143.255.0.225 123.110.221.248 121.151.111.173 103.232.215.24