104.45.148.145

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: Microsoft Corporation

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbotsspam	Restricted File Access Attempt Matched phrase "/.env" at REQUEST_FILENAME.	2019-07-16 11:04:06

Comments on same subnet:

IP	Type	Details	Datetime
104.45.148.3	attackspambots	Unauthorized connection attempt detected from IP address 104.45.148.3 to port 1433 [T]	2020-07-22 00:53:25
104.45.148.101	attackspambots	Dec 6 17:01:19 legacy sshd[21453]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.45.148.101 Dec 6 17:01:21 legacy sshd[21453]: Failed password for invalid user norena from 104.45.148.101 port 60738 ssh2 Dec 6 17:07:37 legacy sshd[21683]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.45.148.101 ...	2019-12-07 00:09:25
104.45.148.101	attackbotsspam	Dec 6 12:34:14 herz-der-gamer sshd[2444]: Invalid user ariaantje from 104.45.148.101 port 53766 ...	2019-12-06 20:01:22
104.45.148.101	attackspam	Dec 3 18:21:52 xeon sshd[37270]: Failed password for invalid user gunnhilde from 104.45.148.101 port 33912 ssh2	2019-12-04 01:46:51

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.45.148.145
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35334
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.45.148.145.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019071501 1800 900 604800 86400

;; Query time: 247 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Tue Jul 16 11:04:00 CST 2019
;; MSG SIZE  rcvd: 118

Host info

Host 145.148.45.104.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 145.148.45.104.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
192.144.239.87	attackbots	Failed password for invalid user usuario from 192.144.239.87 port 55116 ssh2	2020-05-31 06:17:08
162.243.142.210	attackbotsspam	ZGrab Application Layer Scanner Detection	2020-05-31 06:46:34
174.138.44.201	attackbotsspam	WordPress login Brute force / Web App Attack on client site.	2020-05-31 06:30:50
106.13.196.51	attackbots	2020-05-30T17:18:52.0816951495-001 sshd[18520]: Failed password for invalid user campbell from 106.13.196.51 port 47410 ssh2 2020-05-30T17:20:37.0595701495-001 sshd[18573]: Invalid user test_app from 106.13.196.51 port 40054 2020-05-30T17:20:37.0668851495-001 sshd[18573]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.196.51 2020-05-30T17:20:37.0595701495-001 sshd[18573]: Invalid user test_app from 106.13.196.51 port 40054 2020-05-30T17:20:39.3740991495-001 sshd[18573]: Failed password for invalid user test_app from 106.13.196.51 port 40054 ssh2 2020-05-30T17:22:17.5714271495-001 sshd[18639]: Invalid user teamspeak from 106.13.196.51 port 60928 ...	2020-05-31 06:29:27
139.59.23.128	attackspam	Invalid user takahama from 139.59.23.128 port 37242	2020-05-31 06:55:38
129.204.83.3	attackbotsspam	May 30 23:30:36 vpn01 sshd[4563]: Failed password for root from 129.204.83.3 port 38962 ssh2 ...	2020-05-31 06:18:44
197.234.193.46	attackbots	727. On May 30 2020 experienced a Brute Force SSH login attempt -> 3 unique times by 197.234.193.46.	2020-05-31 06:25:57
70.37.75.157	attack	1215. On May 30 2020 experienced a Brute Force SSH login attempt -> 1 unique times by 70.37.75.157.	2020-05-31 06:37:07
180.108.64.71	attackspam	Invalid user man from 180.108.64.71 port 40484	2020-05-31 06:40:59
148.70.133.175	attack	Invalid user granados from 148.70.133.175 port 45546	2020-05-31 06:35:07
1.71.248.141	attack	firewall-block, port(s): 1433/tcp	2020-05-31 06:39:36
103.219.112.48	attackspambots	May 31 00:43:57 server sshd[37834]: Failed password for root from 103.219.112.48 port 53234 ssh2 May 31 00:48:00 server sshd[41074]: Failed password for root from 103.219.112.48 port 57198 ssh2 May 31 00:51:58 server sshd[44148]: Failed password for root from 103.219.112.48 port 32932 ssh2	2020-05-31 06:54:05
138.68.99.12	attackspambots	(imapd) Failed IMAP login from 138.68.99.12 (DE/Germany/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: May 31 00:59:41 ir1 dovecot[2885757]: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=138.68.99.12, lip=5.63.12.44, session=<26LCa+Omje+KRGMM>	2020-05-31 06:41:48
203.81.78.180	attackbotsspam	May 30 23:33:19 ajax sshd[9782]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.81.78.180 May 30 23:33:22 ajax sshd[9782]: Failed password for invalid user asci123asci\r from 203.81.78.180 port 58032 ssh2	2020-05-31 06:40:17
107.170.19.251	attack	(mod_security) mod_security (id:210492) triggered by 107.170.19.251 (US/United States/mx.guiafacilhost.com): 5 in the last 3600 secs	2020-05-31 06:44:10

Recently Reported IPs

118.255.234.150	202.162.198.93	49.67.83.231	61.230.116.128
173.165.143.157	5.133.140.221	177.72.134.248	54.37.136.213
172.247.109.168	149.129.227.28	129.204.91.238	51.15.206.30
128.199.69.60	177.155.207.231	168.228.101.72	81.111.52.38
14.43.82.242	13.82.53.173	201.186.132.193	200.66.126.26