45.14.148.191 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Romania

Internet Service Provider: SC Netsilvania Network SRL

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbots	TCP (SYN) 45.14.148.191:50832 -> port 22, len 44	2020-08-30 15:42:40

Comments on same subnet:

IP	Type	Details	Datetime
45.14.148.141	attack	Invalid user www from 45.14.148.141 port 51550	2020-09-30 04:05:22
45.14.148.141	attackbots	Sep 29 09:46:55 dev0-dcde-rnet sshd[19775]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.141 Sep 29 09:46:57 dev0-dcde-rnet sshd[19775]: Failed password for invalid user postgres5 from 45.14.148.141 port 53390 ssh2 Sep 29 09:56:01 dev0-dcde-rnet sshd[19910]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.141	2020-09-29 20:12:09
45.14.148.141	attackspambots	Sep 29 01:16:02 myhostname sshd[7303]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.141 user=r.r Sep 29 01:16:03 myhostname sshd[7303]: Failed password for r.r from 45.14.148.141 port 53122 ssh2 Sep 29 01:16:03 myhostname sshd[7303]: Received disconnect from 45.14.148.141 port 53122:11: Bye Bye [preauth] Sep 29 01:16:03 myhostname sshd[7303]: Disconnected from 45.14.148.141 port 53122 [preauth] Sep 29 01:28:04 myhostname sshd[20778]: Invalid user nagios3 from 45.14.148.141 Sep 29 01:28:04 myhostname sshd[20778]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.141 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=45.14.148.141	2020-09-29 12:19:48
45.14.148.141	attackbotsspam	Sep 26 15:50:49 mout sshd[7016]: Disconnected from invalid user storm 45.14.148.141 port 47714 [preauth] Sep 26 15:58:47 mout sshd[7989]: Invalid user test2 from 45.14.148.141 port 44844	2020-09-27 06:46:11
45.14.148.141	attackspam	Sep 26 15:50:49 mout sshd[7016]: Disconnected from invalid user storm 45.14.148.141 port 47714 [preauth] Sep 26 15:58:47 mout sshd[7989]: Invalid user test2 from 45.14.148.141 port 44844	2020-09-26 23:10:35
45.14.148.141	attack	Sep 25 22:44:19 h2646465 sshd[29358]: Invalid user weblogic from 45.14.148.141 Sep 25 22:44:19 h2646465 sshd[29358]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.141 Sep 25 22:44:19 h2646465 sshd[29358]: Invalid user weblogic from 45.14.148.141 Sep 25 22:44:21 h2646465 sshd[29358]: Failed password for invalid user weblogic from 45.14.148.141 port 48042 ssh2 Sep 25 22:55:55 h2646465 sshd[31066]: Invalid user ospite from 45.14.148.141 Sep 25 22:55:55 h2646465 sshd[31066]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.141 Sep 25 22:55:55 h2646465 sshd[31066]: Invalid user ospite from 45.14.148.141 Sep 25 22:55:57 h2646465 sshd[31066]: Failed password for invalid user ospite from 45.14.148.141 port 48194 ssh2 Sep 25 23:06:08 h2646465 sshd[32748]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.141 user=root Sep 25 23:06:10 h2646465 sshd[32748]: Failed password	2020-09-26 14:58:51
45.14.148.141	attack	Port scan denied	2020-08-15 14:28:01
45.14.148.95	attackspambots	Failed password for invalid user test from 45.14.148.95 port 48020 ssh2 Invalid user play from 45.14.148.95 port 43540 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.95 Failed password for invalid user play from 45.14.148.95 port 43540 ssh2 Invalid user tjd from 45.14.148.95 port 39586	2020-07-16 08:02:39
45.14.148.95	attackspambots	Jul 15 01:25:00 h1745522 sshd[6026]: Invalid user idd from 45.14.148.95 port 39970 Jul 15 01:25:00 h1745522 sshd[6026]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.95 Jul 15 01:25:00 h1745522 sshd[6026]: Invalid user idd from 45.14.148.95 port 39970 Jul 15 01:25:01 h1745522 sshd[6026]: Failed password for invalid user idd from 45.14.148.95 port 39970 ssh2 Jul 15 01:28:45 h1745522 sshd[6604]: Invalid user xuy from 45.14.148.95 port 47142 Jul 15 01:28:45 h1745522 sshd[6604]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.95 Jul 15 01:28:45 h1745522 sshd[6604]: Invalid user xuy from 45.14.148.95 port 47142 Jul 15 01:28:48 h1745522 sshd[6604]: Failed password for invalid user xuy from 45.14.148.95 port 47142 ssh2 Jul 15 01:32:25 h1745522 sshd[7122]: Invalid user developer from 45.14.148.95 port 53726 ...	2020-07-15 08:42:59
45.14.148.95	attackbots	Jul 13 05:44:43 ns382633 sshd\[31650\]: Invalid user farmacia from 45.14.148.95 port 48638 Jul 13 05:44:43 ns382633 sshd\[31650\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.95 Jul 13 05:44:45 ns382633 sshd\[31650\]: Failed password for invalid user farmacia from 45.14.148.95 port 48638 ssh2 Jul 13 05:56:05 ns382633 sshd\[1371\]: Invalid user orange from 45.14.148.95 port 34496 Jul 13 05:56:05 ns382633 sshd\[1371\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.95	2020-07-13 12:28:47
45.14.148.95	attackspam	Jul 9 07:27:41 vmd26974 sshd[16755]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.95 Jul 9 07:27:43 vmd26974 sshd[16755]: Failed password for invalid user znc from 45.14.148.95 port 59952 ssh2 ...	2020-07-09 16:48:17
45.14.148.95	attackbots	Jul 6 23:34:30 inter-technics sshd[10133]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.95 user=root Jul 6 23:34:32 inter-technics sshd[10133]: Failed password for root from 45.14.148.95 port 57130 ssh2 Jul 6 23:38:08 inter-technics sshd[10366]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.95 user=root Jul 6 23:38:09 inter-technics sshd[10366]: Failed password for root from 45.14.148.95 port 33586 ssh2 Jul 6 23:41:43 inter-technics sshd[10648]: Invalid user testsftp from 45.14.148.95 port 37868 ...	2020-07-07 06:33:43
45.14.148.95	attack	SSH auth scanning - multiple failed logins	2020-06-26 04:05:11
45.14.148.95	attack	SSH Brute-Force attacks	2020-06-19 16:42:52
45.14.148.95	attackbotsspam	Unauthorised connection attempt detected at AUO MAIN. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)	2020-06-15 21:28:25

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.14.148.191
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27041
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.14.148.191.			IN	A

;; AUTHORITY SECTION:
.			224	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020083000 1800 900 604800 86400

;; Query time: 155 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Aug 30 15:42:33 CST 2020
;; MSG SIZE  rcvd: 117

Host info

Host 191.148.14.45.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 191.148.14.45.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
223.240.214.192	attack	Unauthorized connection attempt detected from IP address 223.240.214.192 to port 6656 [T]	2020-01-27 03:12:40
14.34.165.16	attackspambots	TCP Port: 25 invalid blocked dnsbl-sorbs also abuseat-org and barracuda (536)	2020-01-27 02:53:54
117.30.197.96	attackbots	Unauthorized connection attempt detected from IP address 117.30.197.96 to port 8088 [J]	2020-01-27 03:23:01
114.237.49.137	attack	Unauthorized connection attempt detected from IP address 114.237.49.137 to port 6656 [T]	2020-01-27 03:23:58
222.186.30.12	attack	Unauthorized connection attempt detected from IP address 222.186.30.12 to port 22 [T]	2020-01-27 03:13:07
165.22.108.156	attackspambots	Unauthorized connection attempt detected from IP address 165.22.108.156 to port 2220 [J]	2020-01-27 02:58:52
78.141.198.196	attackspambots	Jan 25 10:24:01 kmh-wsh-001-nbg03 sshd[7689]: Invalid user ftpuser1 from 78.141.198.196 port 34806 Jan 25 10:24:01 kmh-wsh-001-nbg03 sshd[7689]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.141.198.196 Jan 25 10:24:03 kmh-wsh-001-nbg03 sshd[7689]: Failed password for invalid user ftpuser1 from 78.141.198.196 port 34806 ssh2 Jan 25 10:24:03 kmh-wsh-001-nbg03 sshd[7689]: Received disconnect from 78.141.198.196 port 34806:11: Bye Bye [preauth] Jan 25 10:24:03 kmh-wsh-001-nbg03 sshd[7689]: Disconnected from 78.141.198.196 port 34806 [preauth] Jan 25 10:45:40 kmh-wsh-001-nbg03 sshd[10050]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.141.198.196 user=r.r Jan 25 10:45:42 kmh-wsh-001-nbg03 sshd[10050]: Failed password for r.r from 78.141.198.196 port 43404 ssh2 Jan 25 10:45:42 kmh-wsh-001-nbg03 sshd[10050]: Received disconnect from 78.141.198.196 port 43404:11: Bye Bye [preauth] Jan 25........ -------------------------------	2020-01-27 02:50:20
113.100.9.68	attackspam	Unauthorized connection attempt detected from IP address 113.100.9.68 to port 6656 [T]	2020-01-27 03:25:22
52.71.95.144	attackbotsspam	"GET / HTTP/1.1" 301 178 "-" "Cloud mapping experiment. Contact research@pdrlabs.net"	2020-01-27 02:53:16
220.161.243.36	attack	Unauthorized connection attempt detected from IP address 220.161.243.36 to port 6656 [T]	2020-01-27 03:14:05
113.57.35.101	attackspam	Unauthorized connection attempt detected from IP address 113.57.35.101 to port 6656 [T]	2020-01-27 03:25:45
175.15.220.105	attackbotsspam	Unauthorized connection attempt detected from IP address 175.15.220.105 to port 1433 [T]	2020-01-27 03:17:25
84.54.77.175	attackspam	TCP Port: 25 invalid blocked dnsbl-sorbs also abuseat-org and barracuda (529)	2020-01-27 03:06:12
114.99.16.218	attackspam	Unauthorized connection attempt detected from IP address 114.99.16.218 to port 6656 [T]	2020-01-27 03:24:23
170.130.187.22	attackspambots	1580065556 - 01/26/2020 20:05:56 Host: 170.130.187.22/170.130.187.22 Port: 161 UDP Blocked	2020-01-27 03:18:02

Recently Reported IPs

199.79.63.167	103.131.71.129	47.14.121.92	174.100.100.168
161.35.207.11	72.50.205.105	178.82.234.137	188.166.50.89
108.60.52.121	95.56.231.2	50.81.5.23	89.33.192.23
73.46.25.86	106.12.97.132	60.254.3.73	73.166.245.77
241.15.51.170	215.13.34.238	46.101.93.149	237.47.243.191