45.138.100.147

Basic Info

City: unknown

Region: unknown

Country: Russian Federation

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
45.138.100.138	attackbotsspam	Chat Spam	2020-09-21 02:35:20
45.138.100.138	attackspam	Chat Spam	2020-09-20 18:36:13
45.138.100.189	attack	[TueJul2805:56:21.9668962020][:error][pid25791:tid47647209649920][client45.138.100.189:63459][client45.138.100.189]ModSecurity:Accessdeniedwithcode403$phase2$.Matchof"rx$MSWebServicesClientProtocol\\|WormlyBot\\|webauth@cmcm\\\\\\\\.com$"against"REQUEST_HEADERS:User-Agent"required.[file"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf"][line"402"][id"397989"][rev"1"][msg"Atomicorp.comWAFRules:MSIE6.0detected$DisableifyouwanttoallowMSIE6$"][severity"WARNING"][hostname"aquattrozampe.com"][uri"/"][unique_id"Xx@h5VSLNaAiDHoMIEPJhgAAABc"][TueJul2805:56:23.4414652020][:error][pid25921:tid47647176029952][client45.138.100.189:24279][client45.138.100.189]ModSecurity:Accessdeniedwithcode403$phase2$.Matchof"rx$MSWebServicesClientProtocol\\|WormlyBot\\|webauth@cmcm\\\\\\\\.com$"against"REQUEST_HEADERS:User-Agent"required.[file"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf"][line"402"][id"397989"][rev"1"][msg"Atomicorp.comWAFRules:MSIE6.0detected\(Disableifyouwantt	2020-07-28 13:34:26
45.138.100.247	attackspambots	Chat Spam	2020-06-13 17:38:30
45.138.100.129	attackbots	Chat Spam	2020-06-05 12:07:40
45.138.100.90	attackbotsspam	Chat Spam	2020-06-05 04:06:07
45.138.100.217	attackspam	Chat Spam	2020-06-04 23:23:27
45.138.100.47	attack	Chat Spam	2020-06-04 15:21:16
45.138.100.103	attackbots	Chat Spam	2020-05-27 05:44:19
45.138.100.233	attackspam	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/45.138.100.233/ FI - 1H : (3) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : FI NAME ASN : ASN0 IP : 45.138.100.233 CIDR : 45.138.100.0/22 PREFIX COUNT : 50242 UNIQUE IP COUNT : 856039856 ATTACKS DETECTED ASN0 : 1H - 4 3H - 7 6H - 8 12H - 9 24H - 17 DateTime : 2019-11-24 07:21:11 INFO : HACK ! - Looking for resource vulnerabilities Scan Detected and Blocked by ADMIN - data recovery	2019-11-24 19:53:29

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.138.100.147
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 22542
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;45.138.100.147.			IN	A

;; AUTHORITY SECTION:
.			340	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022011101 1800 900 604800 86400

;; Query time: 21 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 12 06:12:57 CST 2022
;; MSG SIZE  rcvd: 107

Host info

Host 147.100.138.45.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 147.100.138.45.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
183.88.47.227	attack	Jul 10 01:13:56 venus sshd[24404]: Did not receive identification string from 183.88.47.227 Jul 10 01:14:12 venus sshd[24470]: Invalid user dircreate from 183.88.47.227 Jul 10 01:14:13 venus sshd[24470]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.88.47.227 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=183.88.47.227	2019-07-10 13:43:04
109.173.98.17	attackbotsspam	"GET /wp-content/uploads/2013/07/img_1838.jpg HTTP/1.1" 404 "GET /wp-content/uploads/2013/07/8-img_1891.jpg HTTP/1.1" 404 "GET /wp-content/uploads/2013/07/7-img_1893.jpg HTTP/1.1" 404	2019-07-10 13:38:22
168.205.108.216	attack	failed_logins	2019-07-10 13:59:58
134.73.129.96	attackbots	Jul 10 01:14:07 keyhelp sshd[11212]: Invalid user staff from 134.73.129.96 Jul 10 01:14:07 keyhelp sshd[11212]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.73.129.96 Jul 10 01:14:09 keyhelp sshd[11212]: Failed password for invalid user staff from 134.73.129.96 port 40326 ssh2 Jul 10 01:14:09 keyhelp sshd[11212]: Received disconnect from 134.73.129.96 port 40326:11: Bye Bye [preauth] Jul 10 01:14:09 keyhelp sshd[11212]: Disconnected from 134.73.129.96 port 40326 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=134.73.129.96	2019-07-10 13:46:10
107.161.24.106	attack	SMB Server BruteForce Attack	2019-07-10 13:42:36
2606:a000:6d0e:9400:a0d6:34fa:ff4c:538b	attackbots	Sniffing for wp-login	2019-07-10 13:36:22
134.73.129.111	attackbots	Jul 10 01:17:50 keyhelp sshd[11929]: Invalid user xj from 134.73.129.111 Jul 10 01:17:50 keyhelp sshd[11929]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.73.129.111 Jul 10 01:17:52 keyhelp sshd[11929]: Failed password for invalid user xj from 134.73.129.111 port 43336 ssh2 Jul 10 01:17:52 keyhelp sshd[11929]: Received disconnect from 134.73.129.111 port 43336:11: Bye Bye [preauth] Jul 10 01:17:52 keyhelp sshd[11929]: Disconnected from 134.73.129.111 port 43336 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=134.73.129.111	2019-07-10 13:46:46
180.254.201.211	attackbots	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-08 19:51:11,632 INFO [shellcode_manager] (180.254.201.211) no match, writing hexdump (9b469ce013fea80746bb754d2c960df0 :2232202) - MS17010 (EternalBlue)	2019-07-10 13:06:17
168.128.86.35	attack	Jul 10 05:49:41 vps691689 sshd[8792]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.128.86.35 Jul 10 05:49:43 vps691689 sshd[8792]: Failed password for invalid user debian from 168.128.86.35 port 60490 ssh2 Jul 10 05:53:41 vps691689 sshd[8811]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.128.86.35 ...	2019-07-10 13:25:02
187.188.63.212	attackspam	19/7/9@19:21:28: FAIL: Alarm-Intrusion address from=187.188.63.212 ...	2019-07-10 14:03:25
41.39.71.217	attackbotsspam	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-08 19:50:56,653 INFO [shellcode_manager] (41.39.71.217) no match, writing hexdump (4d900835825f83ba0aa7363cb2e134be :14880) - SMB (Unknown)	2019-07-10 13:23:51
79.166.244.238	attackspambots	Telnet Server BruteForce Attack	2019-07-10 13:13:53
213.32.252.112	attackbots	DATE:2019-07-10 01:24:05, IP:213.32.252.112, PORT:ssh brute force auth on SSH service (patata)	2019-07-10 13:04:09
77.247.109.72	attackspam	\[2019-07-10 01:05:23\] NOTICE\[13443\] chan_sip.c: Registration from '"7777" \' failed for '77.247.109.72:5409' - Wrong password \[2019-07-10 01:05:23\] SECURITY\[13451\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-10T01:05:23.220-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="7777",SessionID="0x7f02f8f2dd48",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.109.72/5409",Challenge="46a7d1cc",ReceivedChallenge="46a7d1cc",ReceivedHash="43cdbb4dfcb6d7c054e7bfcb983c356d" \[2019-07-10 01:05:23\] NOTICE\[13443\] chan_sip.c: Registration from '"7777" \' failed for '77.247.109.72:5409' - Wrong password \[2019-07-10 01:05:23\] SECURITY\[13451\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-10T01:05:23.280-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="7777",SessionID="0x7f02f8dab428",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV	2019-07-10 13:20:24
197.230.82.115	attackspambots	$f2bV_matches	2019-07-10 13:12:43

Recently Reported IPs

125.87.193.161	254.103.3.133	47.118.39.173	128.58.102.236
239.190.162.78	208.136.220.229	113.6.36.172	88.30.203.177
242.153.148.37	129.94.230.26	50.100.3.68	124.168.180.153
27.170.18.140	93.72.152.142	59.144.84.117	253.199.240.70
157.119.231.131	181.56.86.234	31.154.244.229	144.197.16.208