Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States of America

Internet Service Provider: Microsoft Corporation

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspambots
Unauthorized connection attempt detected from IP address 104.45.148.3 to port 1433 [T]
2020-07-22 00:53:25
Comments on same subnet:
IP Type Details Datetime
104.45.148.101 attackspambots
Dec  6 17:01:19 legacy sshd[21453]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.45.148.101
Dec  6 17:01:21 legacy sshd[21453]: Failed password for invalid user norena from 104.45.148.101 port 60738 ssh2
Dec  6 17:07:37 legacy sshd[21683]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.45.148.101
...
2019-12-07 00:09:25
104.45.148.101 attackbotsspam
Dec  6 12:34:14 herz-der-gamer sshd[2444]: Invalid user ariaantje from 104.45.148.101 port 53766
...
2019-12-06 20:01:22
104.45.148.101 attackspam
Dec  3 18:21:52 xeon sshd[37270]: Failed password for invalid user gunnhilde from 104.45.148.101 port 33912 ssh2
2019-12-04 01:46:51
104.45.148.145 attackbotsspam
Restricted File Access Attempt
Matched phrase "/.env" at REQUEST_FILENAME.
2019-07-16 11:04:06
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.45.148.3
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12602
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.45.148.3.			IN	A

;; AUTHORITY SECTION:
.			394	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020072100 1800 900 604800 86400

;; Query time: 25 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jul 22 00:53:15 CST 2020
;; MSG SIZE  rcvd: 116
Host info
Host 3.148.45.104.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 3.148.45.104.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
176.9.73.130 attack
SSH invalid-user multiple login try
2019-06-24 23:58:32
89.210.82.251 attackbots
Telnet Server BruteForce Attack
2019-06-24 23:47:17
104.248.16.13 attackbotsspam
104.248.16.13 - - \[24/Jun/2019:16:19:57 +0200\] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
104.248.16.13 - - \[24/Jun/2019:16:19:58 +0200\] "POST /wp-login.php HTTP/1.1" 200 1503 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
104.248.16.13 - - \[24/Jun/2019:16:20:01 +0200\] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
104.248.16.13 - - \[24/Jun/2019:16:20:03 +0200\] "POST /wp-login.php HTTP/1.1" 200 1486 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
104.248.16.13 - - \[24/Jun/2019:16:20:13 +0200\] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
104.248.16.13 - - \[24/Jun/2019:16:20:19 +0200\] "POST /wp-login.php HTTP/1.1" 200 1486 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\)
2019-06-24 23:44:57
121.232.19.151 attackspam
2019-06-24T13:58:50.488059 X postfix/smtpd[60116]: warning: unknown[121.232.19.151]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2019-06-24T14:47:51.430353 X postfix/smtpd[1931]: warning: unknown[121.232.19.151]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2019-06-24T15:13:28.218842 X postfix/smtpd[6834]: warning: unknown[121.232.19.151]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2019-06-24 23:49:10
141.98.10.34 attackspam
Rude login attack (5 tries in 1d)
2019-06-24 23:57:03
60.174.92.50 attackbotsspam
'IP reached maximum auth failures for a one day block'
2019-06-24 23:34:58
14.231.199.184 attack
TCP port 445 (SMB) attempt blocked by firewall. [2019-06-24 14:02:14]
2019-06-25 00:40:13
123.9.191.248 attackspam
Unauthorised access (Jun 24) SRC=123.9.191.248 LEN=40 TTL=50 ID=4502 TCP DPT=23 WINDOW=16230 SYN
2019-06-25 00:17:30
185.53.88.45 attackbotsspam
\[2019-06-24 11:12:24\] SECURITY\[1857\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-06-24T11:12:24.148-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="9441217900519",SessionID="0x7fc4242c7308",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.45/63494",ACLName="no_extension_match"
\[2019-06-24 11:14:02\] SECURITY\[1857\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-06-24T11:14:02.887-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="011441217900519",SessionID="0x7fc42417ead8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.45/52402",ACLName="no_extension_match"
\[2019-06-24 11:15:38\] SECURITY\[1857\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-06-24T11:15:38.723-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="9011441217900519",SessionID="0x7fc4242c7308",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.45/51145",ACLName="no_extensi
2019-06-24 23:38:51
185.36.81.175 attack
smtp auth brute force
2019-06-25 00:44:43
68.57.86.37 attack
$f2bV_matches
2019-06-25 00:35:02
109.73.129.93 attack
8080/tcp
[2019-06-24]1pkt
2019-06-25 00:43:51
193.32.163.182 attackbots
Jun 24 17:15:53 srv206 sshd[18107]: Invalid user admin from 193.32.163.182
...
2019-06-24 23:35:19
49.66.133.140 attackspambots
20 attempts against mh-ssh on gold.magehost.pro
2019-06-24 23:38:28
37.49.224.67 attackbotsspam
¯\_(ツ)_/¯
2019-06-25 00:18:10

Recently Reported IPs

114.67.96.213 111.249.4.43 108.191.190.114 106.53.236.220
94.245.131.33 213.62.90.36 89.22.152.24 36.90.111.236
32.97.23.51 18.78.127.20 73.205.101.200 114.13.84.100
46.209.37.239 34.92.175.185 31.135.49.216 145.195.22.237
2.57.122.202 132.230.177.94 209.51.64.203 183.178.104.0