Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Brazil

Internet Service Provider: Nova Fibra Telecom

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:
Type Details Datetime
attackspambots
Trying to deliver email spam, but blocked by RBL
2019-07-03 16:36:41
Comments on same subnet:
IP Type Details Datetime
45.165.57.105 attack
 TCP (SYN) 45.165.57.105:23448 -> port 8080, len 44
2020-08-13 03:31:12
45.165.5.170 attack
Port Scan detected!
...
2020-08-01 21:47:20
45.165.5.161 attackspambots
Scanning random ports - tries to find possible vulnerable services
2020-03-08 05:56:08
45.165.5.161 attackbots
Unauthorized connection attempt detected from IP address 45.165.5.161 to port 1433 [J]
2020-01-30 23:55:42
45.165.5.64 attackspambots
Unauthorized connection attempt from IP address 45.165.5.64 on Port 445(SMB)
2019-09-07 05:20:59
45.165.5.64 attackspam
Port Scan: TCP/445
2019-08-24 15:39:32
45.165.57.130 attackbotsspam
Aug  8 13:53:55 km20725 sshd[5274]: reveeclipse mapping checking getaddrinfo for 130.57.165.45.bazarinfor.com.br [45.165.57.130] failed - POSSIBLE BREAK-IN ATTEMPT!
Aug  8 13:53:55 km20725 sshd[5274]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.165.57.130  user=r.r
Aug  8 13:53:58 km20725 sshd[5274]: Failed password for r.r from 45.165.57.130 port 37426 ssh2
Aug  8 13:54:00 km20725 sshd[5274]: Failed password for r.r from 45.165.57.130 port 37426 ssh2
Aug  8 13:54:02 km20725 sshd[5274]: Failed password for r.r from 45.165.57.130 port 37426 ssh2
Aug  8 13:54:05 km20725 sshd[5274]: Failed password for r.r from 45.165.57.130 port 37426 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=45.165.57.130
2019-08-09 04:33:09
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.165.5.46
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34387
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.165.5.46.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019070300 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Wed Jul 03 16:36:31 CST 2019
;; MSG SIZE  rcvd: 115
Host info
46.5.165.45.in-addr.arpa domain name pointer 45-165-5-46.novafibra.net.br.
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
46.5.165.45.in-addr.arpa	name = 45-165-5-46.novafibra.net.br.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
60.169.45.159 attackspambots
Lines containing failures of 60.169.45.159


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=60.169.45.159
2020-06-08 16:51:20
101.89.135.53 attackspambots
Jun  8 07:16:04 vps647732 sshd[21295]: Failed password for root from 101.89.135.53 port 50387 ssh2
...
2020-06-08 16:31:50
121.101.133.37 attackbots
Jun  8 07:46:11 OPSO sshd\[5022\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.101.133.37  user=root
Jun  8 07:46:12 OPSO sshd\[5022\]: Failed password for root from 121.101.133.37 port 49228 ssh2
Jun  8 07:49:11 OPSO sshd\[5257\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.101.133.37  user=root
Jun  8 07:49:13 OPSO sshd\[5257\]: Failed password for root from 121.101.133.37 port 33514 ssh2
Jun  8 07:52:13 OPSO sshd\[5909\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.101.133.37  user=root
2020-06-08 16:35:23
164.163.99.10 attackspambots
"fail2ban match"
2020-06-08 16:48:47
118.24.210.254 attackbotsspam
prod11
...
2020-06-08 16:49:39
178.62.21.80 attack
Jun  8 10:08:25 server sshd[7304]: Failed password for root from 178.62.21.80 port 39682 ssh2
Jun  8 10:12:03 server sshd[7836]: Failed password for root from 178.62.21.80 port 41206 ssh2
...
2020-06-08 16:33:27
61.142.20.29 attackspam
(ftpd) Failed FTP login from 61.142.20.29 (CN/China/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Jun  8 08:47:08 ir1 pure-ftpd: (?@61.142.20.29) [WARNING] Authentication failed for user [anonymous]
2020-06-08 16:59:07
85.238.101.190 attack
Jun  7 23:47:07 euve59663 sshd[27780]: pam_unix(sshd:auth): authenticat=
ion failure; logname=3D uid=3D0 euid=3D0 tty=3Dssh ruser=3D rhost=3D85-=
238-101-190.broadband.tenet.odessa.ua  user=3Dr.r
Jun  7 23:47:09 euve59663 sshd[27780]: Failed password for r.r from 85=
.238.101.190 port 45994 ssh2
Jun  7 23:47:09 euve59663 sshd[27780]: Received disconnect from 85.238.=
101.190: 11: Bye Bye [preauth]
Jun  7 23:50:43 euve59663 sshd[27872]: pam_unix(sshd:auth): authenticat=
ion failure; logname=3D uid=3D0 euid=3D0 tty=3Dssh ruser=3D rhost=3D85-=
238-101-190.broadband.tenet.odessa.ua  user=3Dr.r
Jun  7 23:50:45 euve59663 sshd[27872]: Failed password for r.r from 85=
.238.101.190 port 49142 ssh2
Jun  7 23:50:45 euve59663 sshd[27872]: Received disconnect from 85.238.=
101.190: 11: Bye Bye [preauth]
Jun  7 23:53:37 euve59663 sshd[27929]: pam_unix(sshd:auth): authenticat=
ion failure; logname=3D uid=3D0 euid=3D0 tty=3Dssh ruser=3D rhost=3D85-=
238-101-190.broadband.tenet.odessa.u........
-------------------------------
2020-06-08 16:26:06
157.230.109.166 attackbotsspam
Jun  8 08:17:50 tuxlinux sshd[54381]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.109.166  user=root
Jun  8 08:17:51 tuxlinux sshd[54381]: Failed password for root from 157.230.109.166 port 47600 ssh2
Jun  8 08:17:50 tuxlinux sshd[54381]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.109.166  user=root
Jun  8 08:17:51 tuxlinux sshd[54381]: Failed password for root from 157.230.109.166 port 47600 ssh2
Jun  8 08:29:59 tuxlinux sshd[60433]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.109.166  user=root
...
2020-06-08 16:45:20
181.1.50.211 attackbotsspam
$f2bV_matches
2020-06-08 16:18:10
185.242.86.46 attackbotsspam
DATE:2020-06-08 05:49:32, IP:185.242.86.46, PORT:5900 - VNC brute force auth on a honeypot server (epe-dc)
2020-06-08 16:42:41
95.163.255.202 attackspambots
Automatic report - Banned IP Access
2020-06-08 16:19:58
51.68.89.100 attack
$f2bV_matches
2020-06-08 16:22:31
139.59.161.78 attackbotsspam
SSH brute-force: detected 1 distinct username(s) / 15 distinct password(s) within a 24-hour window.
2020-06-08 16:27:04
122.114.239.22 attackspambots
Lines containing failures of 122.114.239.22
Jun  7 23:51:25 shared07 sshd[12240]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.114.239.22  user=r.r
Jun  7 23:51:28 shared07 sshd[12240]: Failed password for r.r from 122.114.239.22 port 40466 ssh2
Jun  7 23:51:28 shared07 sshd[12240]: Received disconnect from 122.114.239.22 port 40466:11: Bye Bye [preauth]
Jun  7 23:51:28 shared07 sshd[12240]: Disconnected from authenticating user r.r 122.114.239.22 port 40466 [preauth]
Jun  8 00:13:11 shared07 sshd[22868]: Connection closed by 122.114.239.22 port 53006 [preauth]
Jun  8 00:16:52 shared07 sshd[24198]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.114.239.22  user=r.r
Jun  8 00:16:54 shared07 sshd[24198]: Failed password for r.r from 122.114.239.22 port 41142 ssh2
Jun  8 00:16:54 shared07 sshd[24198]: Received disconnect from 122.114.239.22 port 41142:11: Bye Bye [preauth]
Jun  8 00:........
------------------------------
2020-06-08 16:39:17

Recently Reported IPs

118.70.125.3 220.134.226.171 185.224.88.162 177.17.189.234
160.16.148.109 180.154.178.119 27.8.224.154 14.190.114.174
112.115.134.254 43.48.180.208 27.215.90.173 14.161.24.1
187.113.198.21 60.241.145.49 14.185.159.147 101.228.85.131
14.163.104.152 219.92.25.164 45.115.6.161 103.81.13.138