AbuseIPDB » 181.23.106.164

181.23.106.164 was found in our database!

This IP was reported 85 times. Confidence of Abuse is 59%: ?

59%

ISP	Telefonica de Argentina
Usage Type	Unknown
Hostname(s)	181-23-106-164.speedy.com.ar
Domain Name	telefonica.com.ar
Country	Argentina
City	La Plata, Buenos Aires

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 181.23.106.164

Whois 181.23.106.164

IP Abuse Reports for 181.23.106.164:

This IP address has been reported a total of 85 times from 45 distinct sources. 181.23.106.164 was first reported on February 5th 2023, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	Date	Comment	Categories
ipcop.net	22 Mar 2023	Feb 5 09:28:11 pbx-router-01.de.pbx-host.com sshd[3534820]: Disconnected from authenticating user r ... show moreFeb 5 09:28:11 pbx-router-01.de.pbx-host.com sshd[3534820]: Disconnected from authenticating user root 181.23.106.164 port 39121 [preauth] Feb 5 09:32:44 pbx-router-01.de.pbx-host.com sshd[3536236]: Disconnected from authenticating user root 181.23.106.164 port 58061 [preauth] Feb 5 09:34:32 pbx-router-01.de.pbx-host.com sshd[3536814]: Disconnected from authenticating user root 181.23.106.164 port 53319 [preauth] Feb 5 09:36:24 pbx-router-01.de.pbx-host.com sshd[3537420]: Disconnected from authenticating user root 181.23.106.164 port 49368 [preauth] Feb 5 09:38:20 pbx-router-01.de.pbx-host.com sshd[3538033]: Disconnected from authenticating user root 181.23.106.164 port 40182 [preauth] show less	Brute-Force
ipcop.net	22 Mar 2023	Feb 5 01:32:21 gw2.wira-gmbh.de sshd[871643]: Invalid user administrator from 181.23.106.164 port 5 ... show moreFeb 5 01:32:21 gw2.wira-gmbh.de sshd[871643]: Invalid user administrator from 181.23.106.164 port 57247 Feb 5 01:32:21 gw2.wira-gmbh.de sshd[871643]: Disconnected from invalid user administrator 181.23.106.164 port 57247 [preauth] Feb 5 01:34:18 gw2.wira-gmbh.de sshd[871892]: Disconnected from authenticating user root 181.23.106.164 port 44122 [preauth] Feb 5 01:36:12 gw2.wira-gmbh.de sshd[872181]: Invalid user centos from 181.23.106.164 port 37777 Feb 5 01:36:12 gw2.wira-gmbh.de sshd[872181]: Disconnected from invalid user centos 181.23.106.164 port 37777 [preauth] show less	Brute-Force
ipcop.net	22 Mar 2023	Feb 5 01:32:21 gw2.wira-gmbh.de sshd[871643]: Invalid user administrator from 181.23.106.164 port 5 ... show moreFeb 5 01:32:21 gw2.wira-gmbh.de sshd[871643]: Invalid user administrator from 181.23.106.164 port 57247 Feb 5 01:32:21 gw2.wira-gmbh.de sshd[871643]: Disconnected from invalid user administrator 181.23.106.164 port 57247 [preauth] Feb 5 01:34:18 gw2.wira-gmbh.de sshd[871892]: Disconnected from authenticating user root 181.23.106.164 port 44122 [preauth] Feb 5 01:36:12 gw2.wira-gmbh.de sshd[872181]: Invalid user centos from 181.23.106.164 port 37777 Feb 5 01:36:12 gw2.wira-gmbh.de sshd[872181]: Disconnected from invalid user centos 181.23.106.164 port 37777 [preauth] show less	Brute-Force
ipcop.net	22 Mar 2023	Feb 5 01:32:21 gw2.wira-gmbh.de sshd[871643]: Invalid user administrator from 181.23.106.164 port 5 ... show moreFeb 5 01:32:21 gw2.wira-gmbh.de sshd[871643]: Invalid user administrator from 181.23.106.164 port 57247 Feb 5 01:32:21 gw2.wira-gmbh.de sshd[871643]: Disconnected from invalid user administrator 181.23.106.164 port 57247 [preauth] Feb 5 01:34:18 gw2.wira-gmbh.de sshd[871892]: Disconnected from authenticating user root 181.23.106.164 port 44122 [preauth] Feb 5 01:36:12 gw2.wira-gmbh.de sshd[872181]: Invalid user centos from 181.23.106.164 port 37777 Feb 5 01:36:12 gw2.wira-gmbh.de sshd[872181]: Disconnected from invalid user centos 181.23.106.164 port 37777 [preauth] show less	Brute-Force
ipcop.net	22 Mar 2023	Feb 5 01:32:21 gw2.wira-gmbh.de sshd[871643]: Invalid user administrator from 181.23.106.164 port 5 ... show moreFeb 5 01:32:21 gw2.wira-gmbh.de sshd[871643]: Invalid user administrator from 181.23.106.164 port 57247 Feb 5 01:32:21 gw2.wira-gmbh.de sshd[871643]: Disconnected from invalid user administrator 181.23.106.164 port 57247 [preauth] Feb 5 01:34:18 gw2.wira-gmbh.de sshd[871892]: Disconnected from authenticating user root 181.23.106.164 port 44122 [preauth] Feb 5 01:36:12 gw2.wira-gmbh.de sshd[872181]: Invalid user centos from 181.23.106.164 port 37777 Feb 5 01:36:12 gw2.wira-gmbh.de sshd[872181]: Disconnected from invalid user centos 181.23.106.164 port 37777 [preauth] show less	Brute-Force
ipcop.net	22 Mar 2023	Feb 5 01:32:21 gw2.wira-gmbh.de sshd[871643]: Invalid user administrator from 181.23.106.164 port 5 ... show moreFeb 5 01:32:21 gw2.wira-gmbh.de sshd[871643]: Invalid user administrator from 181.23.106.164 port 57247 Feb 5 01:32:21 gw2.wira-gmbh.de sshd[871643]: Disconnected from invalid user administrator 181.23.106.164 port 57247 [preauth] Feb 5 01:34:18 gw2.wira-gmbh.de sshd[871892]: Disconnected from authenticating user root 181.23.106.164 port 44122 [preauth] Feb 5 01:36:12 gw2.wira-gmbh.de sshd[872181]: Invalid user centos from 181.23.106.164 port 37777 Feb 5 01:36:12 gw2.wira-gmbh.de sshd[872181]: Disconnected from invalid user centos 181.23.106.164 port 37777 [preauth] show less	Brute-Force
AdrianT	06 Mar 2023	SSH brute force	Brute-Force SSH
vereinshosting	06 Feb 2023	Invalid user admin from 181.23.106.164 port 41310	Brute-Force SSH
DAILYKANBAN.COM	05 Feb 2023	181.23.106.164 (AR/Argentina/181-23-106-164.speedy.com.ar), 5 distributed sshd attacks on account [u ... show more181.23.106.164 (AR/Argentina/181-23-106-164.speedy.com.ar), 5 distributed sshd attacks on account [ubuntu] in the last 600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Feb 5 15:46:26 chrisz sshd[281766]: Invalid user ubuntu from 51.75.124.212 port 47592 Feb 5 15:50:43 chrisz sshd[282164]: Invalid user ubuntu from 159.203.113.193 port 40512 Feb 5 15:52:14 chrisz sshd[282233]: Invalid user ubuntu from 51.75.124.212 port 41510 Feb 5 15:43:25 chrisz sshd[281596]: Invalid user ubuntu from 114.33.144.134 port 40764 Feb 5 15:49:32 chrisz sshd[282046]: Invalid user ubuntu from 181.23.106.164 port 39392 IP Addresses Blocked: 51.75.124.212 (FR/France/vps-834be09c.vps.ovh.net) 159.203.113.193 (US/United States/-) 114.33.144.134 (TW/Taiwan/114-33-144-134.hinet-ip.hinet.net) show less	SSH
Justin Catello	05 Feb 2023	(sshd) Failed SSH login from 181.23.106.164 (AR/Argentina/181-23-106-164.speedy.com.ar): 5 in the la ... show more(sshd) Failed SSH login from 181.23.106.164 (AR/Argentina/181-23-106-164.speedy.com.ar): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Feb 5 08:37:13 17659 sshd[8297]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.23.106.164 user=root Feb 5 08:37:16 17659 sshd[8297]: Failed password for root from 181.23.106.164 port 57294 ssh2 Feb 5 08:41:23 17659 sshd[8567]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.23.106.164 user=root Feb 5 08:41:25 17659 sshd[8567]: Failed password for root from 181.23.106.164 port 44763 ssh2 Feb 5 08:43:14 17659 sshd[8697]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.23.106.164 user=root show less	Brute-Force SSH
Davepeta	05 Feb 2023	Feb 5 14:20:56 pesterchum sshd[1473793]: Disconnected from authenticating user root 181.23.106.164 ... show moreFeb 5 14:20:56 pesterchum sshd[1473793]: Disconnected from authenticating user root 181.23.106.164 port 41180 [preauth] ... show less	Brute-Force SSH
Justin Catello	05 Feb 2023	181.23.106.164 (AR/Argentina/181-23-106-164.speedy.com.ar), 5 distributed sshd attacks on account [r ... show more181.23.106.164 (AR/Argentina/181-23-106-164.speedy.com.ar), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Feb 5 07:45:34 15015 sshd[5081]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.32.255.98 user=root Feb 5 08:16:37 15015 sshd[7300]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.23.106.164 user=root Feb 5 07:38:47 15015 sshd[4504]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.54.27.144 user=root Feb 5 07:36:15 15015 sshd[4372]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.159.201.123 user=root Feb 5 07:36:17 15015 sshd[4372]: Failed password for root from 43.159.201.123 port 47726 ssh2 IP Addresses Blocked: 152.32.255.98 (-) show less	Brute-Force SSH
shantanoo	05 Feb 2023	Feb 5 19:30:24 dhoomketu sshd[1503402]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show moreFeb 5 19:30:24 dhoomketu sshd[1503402]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.23.106.164 user=root Feb 5 19:30:27 dhoomketu sshd[1503402]: Failed password for root from 181.23.106.164 port 54773 ssh2 Feb 5 19:33:30 dhoomketu sshd[1503446]: Invalid user ubuntu from 181.23.106.164 port 34341 Feb 5 19:33:30 dhoomketu sshd[1503446]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.23.106.164 Feb 5 19:33:31 dhoomketu sshd[1503446]: Failed password for invalid user ubuntu from 181.23.106.164 port 34341 ssh2 ... show less	Brute-Force SSH
Anonymous	05 Feb 2023	Bruteforce access attempt...	Brute-Force
LRNP	05 Feb 2023	Feb 5 13:43:52 neon sshd[1014141]: Disconnected from authenticating user root 181.23.106.164 port 4 ... show moreFeb 5 13:43:52 neon sshd[1014141]: Disconnected from authenticating user root 181.23.106.164 port 41309 [preauth] Feb 5 13:46:48 neon sshd[1014167]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.23.106.164 user=root Feb 5 13:46:50 neon sshd[1014167]: Failed password for root from 181.23.106.164 port 48435 ssh2 ... show less	Brute-Force SSH

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩