45.171.142.241

Basic Info

City: unknown

Region: unknown

Country: Brazil

Internet Service Provider: JG Telecom

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspambots	Automatic report - Port Scan Attack	2020-07-08 09:56:46

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.171.142.241
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59410
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.171.142.241.			IN	A

;; AUTHORITY SECTION:
.			593	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020070701 1800 900 604800 86400

;; Query time: 106 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jul 08 09:56:41 CST 2020
;; MSG SIZE  rcvd: 118

Host info

Host 241.142.171.45.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 241.142.171.45.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
105.112.101.188	attack	Icarus honeypot on github	2020-09-09 00:51:32
180.76.111.242	attackspam	2020-09-07T23:27:04.0818711495-001 sshd[60455]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.111.242 user=root 2020-09-07T23:27:06.0050381495-001 sshd[60455]: Failed password for root from 180.76.111.242 port 60978 ssh2 2020-09-07T23:36:51.5297911495-001 sshd[60944]: Invalid user raudel from 180.76.111.242 port 32806 2020-09-07T23:36:51.5328781495-001 sshd[60944]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.111.242 2020-09-07T23:36:51.5297911495-001 sshd[60944]: Invalid user raudel from 180.76.111.242 port 32806 2020-09-07T23:36:53.3754901495-001 sshd[60944]: Failed password for invalid user raudel from 180.76.111.242 port 32806 ssh2 ...	2020-09-09 00:36:21
165.22.113.66	attackbots	Sep 8 18:50:27 buvik sshd[30681]: Failed password for invalid user abuseio from 165.22.113.66 port 35314 ssh2 Sep 8 18:53:58 buvik sshd[31102]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.113.66 user=root Sep 8 18:54:00 buvik sshd[31102]: Failed password for root from 165.22.113.66 port 41294 ssh2 ...	2020-09-09 01:03:18
112.196.72.188	attack	www.geburtshaus-fulda.de 112.196.72.188 [08/Sep/2020:16:34:57 +0200] "POST /wp-login.php HTTP/1.1" 200 6753 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" www.geburtshaus-fulda.de 112.196.72.188 [08/Sep/2020:16:34:59 +0200] "POST /wp-login.php HTTP/1.1" 200 6754 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-09-09 00:56:49
223.18.54.173	attackbots	Sep 7 18:50:53 ks10 sshd[894828]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.18.54.173 Sep 7 18:50:55 ks10 sshd[894828]: Failed password for invalid user admin from 223.18.54.173 port 39050 ssh2 ...	2020-09-09 00:17:18
106.13.190.84	attackspambots	Sep 8 14:54:03 lnxweb62 sshd[20728]: Failed password for root from 106.13.190.84 port 54604 ssh2 Sep 8 14:54:03 lnxweb62 sshd[20728]: Failed password for root from 106.13.190.84 port 54604 ssh2	2020-09-09 01:00:07
121.122.172.117	attackbotsspam	firewall-block, port(s): 23/tcp	2020-09-09 01:05:47
179.57.206.66	attackspambots	Sep 7 18:52:26 pl3server sshd[7544]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.57.206.66 user=r.r Sep 7 18:52:27 pl3server sshd[7546]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.57.206.66 user=r.r Sep 7 18:52:28 pl3server sshd[7544]: Failed password for r.r from 179.57.206.66 port 37472 ssh2 Sep 7 18:52:28 pl3server sshd[7544]: Connection closed by 179.57.206.66 port 37472 [preauth] Sep 7 18:52:28 pl3server sshd[7546]: Failed password for r.r from 179.57.206.66 port 37540 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=179.57.206.66	2020-09-09 00:52:44
213.142.9.46	attackbots	Honeypot attack, port: 5555, PTR: h213-142-9-46.cust.a3fiber.se.	2020-09-09 00:58:43
51.91.159.46	attackbotsspam	Fail2Ban Ban Triggered (2)	2020-09-09 00:49:01
201.122.102.21	attackbots	Sep 8 02:12:54 instance-2 sshd[25086]: Failed password for root from 201.122.102.21 port 46414 ssh2 Sep 8 02:16:55 instance-2 sshd[25145]: Failed password for root from 201.122.102.21 port 50540 ssh2	2020-09-09 00:50:36
196.218.58.203	attackbotsspam	Icarus honeypot on github	2020-09-09 00:42:35
178.34.190.34	attackbotsspam	Repeated brute force against a port	2020-09-09 00:40:58
162.142.125.25	attackbots	TCP (SYN) 162.142.125.25:22945 -> port 23, len 44	2020-09-09 01:02:20
185.220.101.213	attack	Sep 8 15:37:50 shivevps sshd[21950]: Failed password for root from 185.220.101.213 port 14188 ssh2 Sep 8 15:38:02 shivevps sshd[21950]: Failed password for root from 185.220.101.213 port 14188 ssh2 Sep 8 15:38:02 shivevps sshd[21950]: error: maximum authentication attempts exceeded for root from 185.220.101.213 port 14188 ssh2 [preauth] ...	2020-09-09 00:23:41

Recently Reported IPs

78.128.113.229	38.102.173.21	213.221.46.150	37.137.212.85
185.105.185.244	2001:41d0:a:29ce::	130.211.252.197	49.232.172.244
185.83.115.36	46.21.213.44	203.195.151.172	49.235.28.96
191.97.5.71	177.26.154.108	154.232.215.141	162.212.31.0
216.230.53.242	109.172.102.23	57.116.4.238	94.84.62.171