Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Gonzaga

Region: Minas Gerais

Country: Brazil

Internet Service Provider: Chave & Lacerda Ltda - ME

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:
Type Details Datetime
attack
Unauthorized connection attempt from IP address 45.185.121.0 on Port 445(SMB)
2020-07-18 08:08:53
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.185.121.0
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7295
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.185.121.0.			IN	A

;; AUTHORITY SECTION:
.			510	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020071702 1800 900 604800 86400

;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jul 18 08:08:48 CST 2020
;; MSG SIZE  rcvd: 116
Host info
0.121.185.45.in-addr.arpa domain name pointer 0.121.185.45.linkanet.com.br.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
0.121.185.45.in-addr.arpa	name = 0.121.185.45.linkanet.com.br.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
115.239.208.165 attackspambots
Aug  3 10:47:21 host sshd[3814]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.239.208.165  user=root
Aug  3 10:47:23 host sshd[3814]: Failed password for root from 115.239.208.165 port 54056 ssh2
...
2020-08-03 20:06:32
172.104.95.221 attackbots
Honeypot hit.
2020-08-03 20:29:34
165.22.54.19 attack
(sshd) Failed SSH login from 165.22.54.19 (SG/Singapore/-): 5 in the last 3600 secs
2020-08-03 20:28:01
185.172.111.221 attackspambots
Unauthorised access (Aug  3) SRC=185.172.111.221 LEN=40 TTL=53 ID=46514 TCP DPT=8080 WINDOW=46923 SYN 
Unauthorised access (Aug  3) SRC=185.172.111.221 LEN=40 TTL=53 ID=38324 TCP DPT=8080 WINDOW=46923 SYN 
Unauthorised access (Aug  3) SRC=185.172.111.221 LEN=40 TTL=53 ID=43132 TCP DPT=8080 WINDOW=31720 SYN
2020-08-03 20:22:03
80.182.156.196 attackspambots
2020-08-03T12:20:39.626950shield sshd\[9492\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=host-80-182-156-196.pool80182.interbusiness.it  user=root
2020-08-03T12:20:41.579045shield sshd\[9492\]: Failed password for root from 80.182.156.196 port 56998 ssh2
2020-08-03T12:24:41.985893shield sshd\[10229\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=host-80-182-156-196.retail.telecomitalia.it  user=root
2020-08-03T12:24:43.823608shield sshd\[10229\]: Failed password for root from 80.182.156.196 port 53103 ssh2
2020-08-03T12:28:35.454044shield sshd\[10984\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=host-80-182-156-196.pool80182.interbusiness.it  user=root
2020-08-03 20:36:44
51.91.125.195 attack
$f2bV_matches
2020-08-03 20:16:44
222.186.15.158 attack
Aug  3 14:30:07 theomazars sshd[7656]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.158  user=root
Aug  3 14:30:09 theomazars sshd[7656]: Failed password for root from 222.186.15.158 port 62193 ssh2
2020-08-03 20:33:54
122.224.232.66 attackspambots
$f2bV_matches
2020-08-03 20:24:12
193.242.151.126 attackspambots
1596426466 - 08/03/2020 05:47:46 Host: 193.242.151.126/193.242.151.126 Port: 445 TCP Blocked
2020-08-03 20:21:08
134.175.129.58 attackbots
Aug  3 10:49:01 vpn01 sshd[22193]: Failed password for root from 134.175.129.58 port 28762 ssh2
...
2020-08-03 20:13:49
80.82.77.4 attackbots
80.82.77.4 was recorded 5 times by 4 hosts attempting to connect to the following ports: 2302,2362. Incident counter (4h, 24h, all-time): 5, 30, 778
2020-08-03 20:30:07
149.20.213.207 attack
SSH break in attempt
...
2020-08-03 20:02:35
185.176.27.242 attackspam
08/03/2020-08:28:33.939921 185.176.27.242 Protocol: 6 ET DROP Dshield Block Listed Source group 1
2020-08-03 20:38:45
189.39.102.67 attackspam
Aug  3 05:34:58 master sshd[23288]: Failed password for root from 189.39.102.67 port 49122 ssh2
Aug  3 05:42:49 master sshd[23458]: Failed password for root from 189.39.102.67 port 51958 ssh2
Aug  3 05:48:20 master sshd[23522]: Failed password for root from 189.39.102.67 port 36272 ssh2
Aug  3 05:53:22 master sshd[23612]: Failed password for root from 189.39.102.67 port 48818 ssh2
Aug  3 05:58:32 master sshd[23665]: Failed password for root from 189.39.102.67 port 33146 ssh2
Aug  3 06:03:31 master sshd[24135]: Failed password for root from 189.39.102.67 port 45694 ssh2
Aug  3 06:08:39 master sshd[24190]: Failed password for root from 189.39.102.67 port 58256 ssh2
Aug  3 06:13:42 master sshd[24323]: Failed password for root from 189.39.102.67 port 42598 ssh2
Aug  3 06:18:49 master sshd[24390]: Failed password for root from 189.39.102.67 port 55148 ssh2
Aug  3 06:28:56 master sshd[24750]: Failed password for root from 189.39.102.67 port 52022 ssh2
2020-08-03 20:13:21
134.209.111.46 attack
Unauthorized connection attempt detected from IP address 134.209.111.46 to port 6379
2020-08-03 20:01:21

Recently Reported IPs

210.6.204.249 205.134.208.113 193.71.133.224 205.154.81.0
193.172.179.21 131.211.95.84 217.6.20.161 84.50.188.57
115.153.119.86 47.160.1.28 154.153.78.113 118.99.245.241
47.44.249.234 76.230.237.207 45.177.164.2 91.246.118.152
222.52.107.4 142.134.13.134 166.171.147.222 54.234.254.120