45.14.148.101 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Romania

Internet Service Provider: Parfumuri Femei

Hostname: unknown

Organization: unknown

Usage Type: Commercial

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbotsspam	Aug 23 12:30:56 lnxmail61 sshd[24014]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.101	2019-08-23 19:53:52
attackspam	2019-08-19T02:38:45.034426abusebot-6.cloudsearch.cf sshd\[27790\]: Invalid user appserver from 45.14.148.101 port 53604	2019-08-19 10:53:21

Type

Details

Datetime

attackbotsspam

Aug 23 12:30:56 lnxmail61 sshd[24014]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.101

2019-08-23 19:53:52

attackspam

2019-08-19T02:38:45.034426abusebot-6.cloudsearch.cf sshd\[27790\]: Invalid user appserver from 45.14.148.101 port 53604

2019-08-19 10:53:21

Comments on same subnet:

IP	Type	Details	Datetime
45.14.148.141	attack	Invalid user www from 45.14.148.141 port 51550	2020-09-30 04:05:22
45.14.148.141	attackbots	Sep 29 09:46:55 dev0-dcde-rnet sshd[19775]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.141 Sep 29 09:46:57 dev0-dcde-rnet sshd[19775]: Failed password for invalid user postgres5 from 45.14.148.141 port 53390 ssh2 Sep 29 09:56:01 dev0-dcde-rnet sshd[19910]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.141	2020-09-29 20:12:09
45.14.148.141	attackspambots	Sep 29 01:16:02 myhostname sshd[7303]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.141 user=r.r Sep 29 01:16:03 myhostname sshd[7303]: Failed password for r.r from 45.14.148.141 port 53122 ssh2 Sep 29 01:16:03 myhostname sshd[7303]: Received disconnect from 45.14.148.141 port 53122:11: Bye Bye [preauth] Sep 29 01:16:03 myhostname sshd[7303]: Disconnected from 45.14.148.141 port 53122 [preauth] Sep 29 01:28:04 myhostname sshd[20778]: Invalid user nagios3 from 45.14.148.141 Sep 29 01:28:04 myhostname sshd[20778]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.141 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=45.14.148.141	2020-09-29 12:19:48
45.14.148.141	attackbotsspam	Sep 26 15:50:49 mout sshd[7016]: Disconnected from invalid user storm 45.14.148.141 port 47714 [preauth] Sep 26 15:58:47 mout sshd[7989]: Invalid user test2 from 45.14.148.141 port 44844	2020-09-27 06:46:11
45.14.148.141	attackspam	Sep 26 15:50:49 mout sshd[7016]: Disconnected from invalid user storm 45.14.148.141 port 47714 [preauth] Sep 26 15:58:47 mout sshd[7989]: Invalid user test2 from 45.14.148.141 port 44844	2020-09-26 23:10:35
45.14.148.141	attack	Sep 25 22:44:19 h2646465 sshd[29358]: Invalid user weblogic from 45.14.148.141 Sep 25 22:44:19 h2646465 sshd[29358]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.141 Sep 25 22:44:19 h2646465 sshd[29358]: Invalid user weblogic from 45.14.148.141 Sep 25 22:44:21 h2646465 sshd[29358]: Failed password for invalid user weblogic from 45.14.148.141 port 48042 ssh2 Sep 25 22:55:55 h2646465 sshd[31066]: Invalid user ospite from 45.14.148.141 Sep 25 22:55:55 h2646465 sshd[31066]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.141 Sep 25 22:55:55 h2646465 sshd[31066]: Invalid user ospite from 45.14.148.141 Sep 25 22:55:57 h2646465 sshd[31066]: Failed password for invalid user ospite from 45.14.148.141 port 48194 ssh2 Sep 25 23:06:08 h2646465 sshd[32748]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.141 user=root Sep 25 23:06:10 h2646465 sshd[32748]: Failed password	2020-09-26 14:58:51
45.14.148.191	attackbots	TCP (SYN) 45.14.148.191:50832 -> port 22, len 44	2020-08-30 15:42:40
45.14.148.141	attack	Port scan denied	2020-08-15 14:28:01
45.14.148.95	attackspambots	Failed password for invalid user test from 45.14.148.95 port 48020 ssh2 Invalid user play from 45.14.148.95 port 43540 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.95 Failed password for invalid user play from 45.14.148.95 port 43540 ssh2 Invalid user tjd from 45.14.148.95 port 39586	2020-07-16 08:02:39
45.14.148.95	attackspambots	Jul 15 01:25:00 h1745522 sshd[6026]: Invalid user idd from 45.14.148.95 port 39970 Jul 15 01:25:00 h1745522 sshd[6026]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.95 Jul 15 01:25:00 h1745522 sshd[6026]: Invalid user idd from 45.14.148.95 port 39970 Jul 15 01:25:01 h1745522 sshd[6026]: Failed password for invalid user idd from 45.14.148.95 port 39970 ssh2 Jul 15 01:28:45 h1745522 sshd[6604]: Invalid user xuy from 45.14.148.95 port 47142 Jul 15 01:28:45 h1745522 sshd[6604]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.95 Jul 15 01:28:45 h1745522 sshd[6604]: Invalid user xuy from 45.14.148.95 port 47142 Jul 15 01:28:48 h1745522 sshd[6604]: Failed password for invalid user xuy from 45.14.148.95 port 47142 ssh2 Jul 15 01:32:25 h1745522 sshd[7122]: Invalid user developer from 45.14.148.95 port 53726 ...	2020-07-15 08:42:59
45.14.148.95	attackbots	Jul 13 05:44:43 ns382633 sshd\[31650\]: Invalid user farmacia from 45.14.148.95 port 48638 Jul 13 05:44:43 ns382633 sshd\[31650\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.95 Jul 13 05:44:45 ns382633 sshd\[31650\]: Failed password for invalid user farmacia from 45.14.148.95 port 48638 ssh2 Jul 13 05:56:05 ns382633 sshd\[1371\]: Invalid user orange from 45.14.148.95 port 34496 Jul 13 05:56:05 ns382633 sshd\[1371\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.95	2020-07-13 12:28:47
45.14.148.95	attackspam	Jul 9 07:27:41 vmd26974 sshd[16755]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.95 Jul 9 07:27:43 vmd26974 sshd[16755]: Failed password for invalid user znc from 45.14.148.95 port 59952 ssh2 ...	2020-07-09 16:48:17
45.14.148.95	attackbots	Jul 6 23:34:30 inter-technics sshd[10133]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.95 user=root Jul 6 23:34:32 inter-technics sshd[10133]: Failed password for root from 45.14.148.95 port 57130 ssh2 Jul 6 23:38:08 inter-technics sshd[10366]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.95 user=root Jul 6 23:38:09 inter-technics sshd[10366]: Failed password for root from 45.14.148.95 port 33586 ssh2 Jul 6 23:41:43 inter-technics sshd[10648]: Invalid user testsftp from 45.14.148.95 port 37868 ...	2020-07-07 06:33:43
45.14.148.95	attack	SSH auth scanning - multiple failed logins	2020-06-26 04:05:11
45.14.148.95	attack	SSH Brute-Force attacks	2020-06-19 16:42:52

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.14.148.101
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12493
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.14.148.101.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019081801 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Aug 19 10:53:15 CST 2019
;; MSG SIZE  rcvd: 117

Host info

Host 101.148.14.45.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 101.148.14.45.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
189.213.147.178	attackspambots	ET SCAN Suspicious inbound to MSSQL port 1433 - port: 1433 proto: TCP cat: Potentially Bad Traffic	2020-06-06 08:19:44
71.6.199.23	attackbotsspam	Unauthorized connection attempt detected from IP address 71.6.199.23 to port 9306	2020-06-06 08:05:24
37.193.123.110	attack	TCP (SYN) 37.193.123.110:18363 -> port 23, len 40	2020-06-06 08:10:38
103.145.12.145	attack	Port scan: Attack repeated for 24 hours	2020-06-06 07:57:06
68.183.34.236	attackspam	TCP (SYN) 68.183.34.236:52880 -> port 6485, len 44	2020-06-06 08:06:12
195.54.166.75	attack	ET DROP Dshield Block Listed Source group 1 - port: 30847 proto: TCP cat: Misc Attack	2020-06-06 08:16:17
185.173.35.17	attackbotsspam	nginx/honey/a4a6f	2020-06-06 08:20:48
85.209.0.100	attack	...	2020-06-06 08:03:16
208.100.26.228	attack	TCP (SYN) 208.100.26.228:52851 -> port 1900, len 44	2020-06-06 08:15:34
61.178.103.131	attackspambots	ET SCAN Suspicious inbound to MSSQL port 1433 - port: 1433 proto: TCP cat: Potentially Bad Traffic	2020-06-06 08:07:15
185.156.73.57	attackspam	ET DROP Dshield Block Listed Source group 1 - port: 3389 proto: TCP cat: Misc Attack	2020-06-06 08:21:20
111.14.220.140	attackspambots	ET SCAN Suspicious inbound to MSSQL port 1433 - port: 1433 proto: TCP cat: Potentially Bad Traffic	2020-06-06 07:56:30
61.219.11.153	attack	Unauthorized connection attempt detected from IP address 61.219.11.153 to port 8080	2020-06-06 08:07:02
111.254.46.73	attack	ET SCAN Potential SSH Scan - port: 22 proto: TCP cat: Attempted Information Leak	2020-06-06 07:56:17
68.183.55.223	attackspambots	TCP (SYN) 68.183.55.223:59376 -> port 13354, len 44	2020-06-06 08:05:55

Recently Reported IPs

150.30.199.195	45.194.46.118	142.152.155.141	184.179.216.156
141.216.205.190	188.188.112.6	60.28.63.85	189.91.239.181
103.208.20.118	125.116.210.239	109.162.39.131	111.224.121.244
46.146.233.117	134.209.161.147	71.44.166.170	59.27.118.163
73.10.180.160	59.127.189.160	140.207.114.222	45.114.9.237