Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Bebedouro

Region: Sao Paulo

Country: Brazil

Internet Service Provider: unknown

Hostname: unknown

Organization: Explorer Telecom Barretos Informatica Ltda ME

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
45.70.0.73 attackbotsspam
Unauthorized connection attempt detected from IP address 45.70.0.73 to port 80
2020-07-22 21:15:58
45.70.0.17 attackbotsspam
Sending SPAM email
2019-12-12 08:53:33
45.70.0.158 attack
Automatic report - Port Scan Attack
2019-10-30 19:04:33
45.70.0.17 attackspambots
proto=tcp  .  spt=45806  .  dpt=25  .     (listed on Dark List de Aug 23)     (131)
2019-08-24 16:33:49
45.70.0.17 attackbots
Jun 18 07:19:37 our-server-hostname postfix/smtpd[29541]: connect from unknown[45.70.0.17]
Jun x@x
Jun 18 07:19:40 our-server-hostname postfix/smtpd[29541]: lost connection after RCPT from unknown[45.70.0.17]
Jun 18 07:19:40 our-server-hostname postfix/smtpd[29541]: disconnect from unknown[45.70.0.17]
Jun 18 07:25:26 our-server-hostname postfix/smtpd[30227]: connect from unknown[45.70.0.17]
Jun 18 07:25:33 our-server-hostname postfix/smtpd[30227]: NOQUEUE: reject: RCPT from unknown[45.70.0.17]: 554 5.7.1 Service un
.... truncated .... 
ble; x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun 19 02:30:48 our-server-hostname postfix/smtpd[3522]: too many errors after RCPT from unknown[45.70.0.17]
Jun 19 02:30:48 our-server-hostname postfix/smtpd[3522]: disconnect from unknown[45.70.0.17]
Jun 19 02:31:50 our-server-hostname postfix/smtpd[5324]: connect from unknown[45.70.0.17]
Jun x........
-------------------------------
2019-06-22 22:32:11
45.70.0.17 attackbots
Jun 18 07:19:37 our-server-hostname postfix/smtpd[29541]: connect from unknown[45.70.0.17]
Jun x@x
Jun 18 07:19:40 our-server-hostname postfix/smtpd[29541]: lost connection after RCPT from unknown[45.70.0.17]
Jun 18 07:19:40 our-server-hostname postfix/smtpd[29541]: disconnect from unknown[45.70.0.17]
Jun 18 07:25:26 our-server-hostname postfix/smtpd[30227]: connect from unknown[45.70.0.17]
Jun 18 07:25:33 our-server-hostname postfix/smtpd[30227]: NOQUEUE: reject: RCPT from unknown[45.70.0.17]: 554 5.7.1 Service un
.... truncated .... 
ble; x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun 19 02:30:48 our-server-hostname postfix/smtpd[3522]: too many errors after RCPT from unknown[45.70.0.17]
Jun 19 02:30:48 our-server-hostname postfix/smtpd[3522]: disconnect from unknown[45.70.0.17]
Jun 19 02:31:50 our-server-hostname postfix/smtpd[5324]: connect from unknown[45.70.0.17]
Jun x........
-------------------------------
2019-06-21 22:34:09
Whois info:
b
Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.70.0.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34846
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.70.0.142.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019060300 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Jun 03 23:00:58 CST 2019
;; MSG SIZE  rcvd: 115

Host info
142.0.70.45.in-addr.arpa has no PTR record
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
142.0.70.45.in-addr.arpa	name = ip-45-70-0-142.iflytelecom.com.br.

Authoritative answers can be found from:

Related IP info:
Related comments:
IP Type Details Datetime
195.158.92.108 attackspambots
Automatic report - Port Scan
2020-04-22 06:13:30
180.109.37.212 attackspam
Invalid user ch from 180.109.37.212 port 36868
2020-04-22 06:46:11
129.204.38.136 attack
Apr 21 23:03:11 host sshd[48868]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.38.136  user=root
Apr 21 23:03:12 host sshd[48868]: Failed password for root from 129.204.38.136 port 52320 ssh2
...
2020-04-22 06:17:27
101.91.242.119 attackbotsspam
Apr 21 21:40:48 Ubuntu-1404-trusty-64-minimal sshd\[24924\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.91.242.119  user=root
Apr 21 21:40:50 Ubuntu-1404-trusty-64-minimal sshd\[24924\]: Failed password for root from 101.91.242.119 port 39836 ssh2
Apr 21 21:48:06 Ubuntu-1404-trusty-64-minimal sshd\[28332\]: Invalid user rpcuser from 101.91.242.119
Apr 21 21:48:06 Ubuntu-1404-trusty-64-minimal sshd\[28332\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.91.242.119
Apr 21 21:48:07 Ubuntu-1404-trusty-64-minimal sshd\[28332\]: Failed password for invalid user rpcuser from 101.91.242.119 port 41996 ssh2
2020-04-22 06:41:04
52.170.80.49 attackspambots
Apr 22 00:24:11 srv-ubuntu-dev3 sshd[8177]: Invalid user ansible from 52.170.80.49
Apr 22 00:24:11 srv-ubuntu-dev3 sshd[8177]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.170.80.49
Apr 22 00:24:11 srv-ubuntu-dev3 sshd[8177]: Invalid user ansible from 52.170.80.49
Apr 22 00:24:13 srv-ubuntu-dev3 sshd[8177]: Failed password for invalid user ansible from 52.170.80.49 port 51828 ssh2
Apr 22 00:28:26 srv-ubuntu-dev3 sshd[8945]: Invalid user q from 52.170.80.49
Apr 22 00:28:26 srv-ubuntu-dev3 sshd[8945]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.170.80.49
Apr 22 00:28:26 srv-ubuntu-dev3 sshd[8945]: Invalid user q from 52.170.80.49
Apr 22 00:28:28 srv-ubuntu-dev3 sshd[8945]: Failed password for invalid user q from 52.170.80.49 port 38756 ssh2
Apr 22 00:32:35 srv-ubuntu-dev3 sshd[9800]: Invalid user wa from 52.170.80.49
...
2020-04-22 06:46:48
163.43.31.188 attackbotsspam
$f2bV_matches
2020-04-22 06:31:26
125.91.126.97 attackspam
2020-04-21T18:00:16.9552661495-001 sshd[57709]: Invalid user admin from 125.91.126.97 port 33806
2020-04-21T18:00:18.8013041495-001 sshd[57709]: Failed password for invalid user admin from 125.91.126.97 port 33806 ssh2
2020-04-21T18:04:56.1120211495-001 sshd[58143]: Invalid user zk from 125.91.126.97 port 57781
2020-04-21T18:04:56.1150671495-001 sshd[58143]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.91.126.97
2020-04-21T18:04:56.1120211495-001 sshd[58143]: Invalid user zk from 125.91.126.97 port 57781
2020-04-21T18:04:58.3936751495-001 sshd[58143]: Failed password for invalid user zk from 125.91.126.97 port 57781 ssh2
...
2020-04-22 06:26:13
200.119.112.204 attackbotsspam
DATE:2020-04-21 23:18:39, IP:200.119.112.204, PORT:ssh SSH brute force auth (docker-dc)
2020-04-22 06:38:36
163.44.153.96 attack
Invalid user admin from 163.44.153.96 port 49344
2020-04-22 06:32:00
192.99.34.42 attack
as always with OVH    Don’t ever register domain names at ovh !!!!!!!!! 
All domain names registered at ovh are attacked 
	 /Wp-login.php  	 /wp-admin.php
2020-04-22 06:18:52
136.32.222.64 attackbots
udp 50891
2020-04-22 06:29:04
43.243.168.63 attack
" "
2020-04-22 06:47:04
49.231.166.197 attackspam
Invalid user informix from 49.231.166.197 port 46364
2020-04-22 06:37:56
51.77.194.232 attack
5x Failed Password
2020-04-22 06:49:11
119.28.238.101 attack
Apr 21 20:48:46 server4-pi sshd[30363]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.28.238.101 
Apr 21 20:48:47 server4-pi sshd[30363]: Failed password for invalid user pp from 119.28.238.101 port 48116 ssh2
2020-04-22 06:13:47

Recently Reported IPs

122.45.117.158 110.4.46.11 141.203.175.9 36.148.130.227
116.4.97.249 113.91.182.151 71.250.71.27 188.162.197.69
200.193.220.26 193.111.2.33 201.193.85.210 222.174.88.102
173.23.151.84 182.114.3.216 148.163.168.192 59.79.23.86
185.236.100.7 14.229.228.135 140.141.235.54 123.131.60.226