45.14.148.98 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Romania

Internet Service Provider: SC Netsilvania Network SRL

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Unauthorized connection attempt detected from IP address 45.14.148.98 to port 322 [J]	2020-02-01 16:23:54
attackspam	45.14.148.98 - - [21/Jan/2020:08:56:31 +0400] "GET / HTTP/1.0" 301 162 "http://protech.ge/" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.87 Safari/537.36"	2020-01-21 16:25:13
attackspambots	RO_Parfumuri Femei.com SRL_<177>1578891410 [1:2522084:3938] ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic group 85 [Classification: Misc Attack] [Priority: 2] {TCP} 45.14.148.98:47926	2020-01-13 13:01:30

Type

Details

Datetime

attack

Unauthorized connection attempt detected from IP address 45.14.148.98 to port 322 [J]

2020-02-01 16:23:54

attackspam

45.14.148.98 - - [21/Jan/2020:08:56:31 +0400] "GET / HTTP/1.0" 301 162 "http://protech.ge/" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.87 Safari/537.36"

2020-01-21 16:25:13

attackspambots

RO_Parfumuri Femei.com SRL_<177>1578891410 [1:2522084:3938] ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic group 85 [Classification: Misc Attack] [Priority: 2] {TCP} 45.14.148.98:47926

2020-01-13 13:01:30

Comments on same subnet:

IP	Type	Details	Datetime
45.14.148.141	attack	Invalid user www from 45.14.148.141 port 51550	2020-09-30 04:05:22
45.14.148.141	attackbots	Sep 29 09:46:55 dev0-dcde-rnet sshd[19775]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.141 Sep 29 09:46:57 dev0-dcde-rnet sshd[19775]: Failed password for invalid user postgres5 from 45.14.148.141 port 53390 ssh2 Sep 29 09:56:01 dev0-dcde-rnet sshd[19910]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.141	2020-09-29 20:12:09
45.14.148.141	attackspambots	Sep 29 01:16:02 myhostname sshd[7303]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.141 user=r.r Sep 29 01:16:03 myhostname sshd[7303]: Failed password for r.r from 45.14.148.141 port 53122 ssh2 Sep 29 01:16:03 myhostname sshd[7303]: Received disconnect from 45.14.148.141 port 53122:11: Bye Bye [preauth] Sep 29 01:16:03 myhostname sshd[7303]: Disconnected from 45.14.148.141 port 53122 [preauth] Sep 29 01:28:04 myhostname sshd[20778]: Invalid user nagios3 from 45.14.148.141 Sep 29 01:28:04 myhostname sshd[20778]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.141 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=45.14.148.141	2020-09-29 12:19:48
45.14.148.141	attackbotsspam	Sep 26 15:50:49 mout sshd[7016]: Disconnected from invalid user storm 45.14.148.141 port 47714 [preauth] Sep 26 15:58:47 mout sshd[7989]: Invalid user test2 from 45.14.148.141 port 44844	2020-09-27 06:46:11
45.14.148.141	attackspam	Sep 26 15:50:49 mout sshd[7016]: Disconnected from invalid user storm 45.14.148.141 port 47714 [preauth] Sep 26 15:58:47 mout sshd[7989]: Invalid user test2 from 45.14.148.141 port 44844	2020-09-26 23:10:35
45.14.148.141	attack	Sep 25 22:44:19 h2646465 sshd[29358]: Invalid user weblogic from 45.14.148.141 Sep 25 22:44:19 h2646465 sshd[29358]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.141 Sep 25 22:44:19 h2646465 sshd[29358]: Invalid user weblogic from 45.14.148.141 Sep 25 22:44:21 h2646465 sshd[29358]: Failed password for invalid user weblogic from 45.14.148.141 port 48042 ssh2 Sep 25 22:55:55 h2646465 sshd[31066]: Invalid user ospite from 45.14.148.141 Sep 25 22:55:55 h2646465 sshd[31066]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.141 Sep 25 22:55:55 h2646465 sshd[31066]: Invalid user ospite from 45.14.148.141 Sep 25 22:55:57 h2646465 sshd[31066]: Failed password for invalid user ospite from 45.14.148.141 port 48194 ssh2 Sep 25 23:06:08 h2646465 sshd[32748]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.141 user=root Sep 25 23:06:10 h2646465 sshd[32748]: Failed password	2020-09-26 14:58:51
45.14.148.191	attackbots	TCP (SYN) 45.14.148.191:50832 -> port 22, len 44	2020-08-30 15:42:40
45.14.148.141	attack	Port scan denied	2020-08-15 14:28:01
45.14.148.95	attackspambots	Failed password for invalid user test from 45.14.148.95 port 48020 ssh2 Invalid user play from 45.14.148.95 port 43540 pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.95 Failed password for invalid user play from 45.14.148.95 port 43540 ssh2 Invalid user tjd from 45.14.148.95 port 39586	2020-07-16 08:02:39
45.14.148.95	attackspambots	Jul 15 01:25:00 h1745522 sshd[6026]: Invalid user idd from 45.14.148.95 port 39970 Jul 15 01:25:00 h1745522 sshd[6026]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.95 Jul 15 01:25:00 h1745522 sshd[6026]: Invalid user idd from 45.14.148.95 port 39970 Jul 15 01:25:01 h1745522 sshd[6026]: Failed password for invalid user idd from 45.14.148.95 port 39970 ssh2 Jul 15 01:28:45 h1745522 sshd[6604]: Invalid user xuy from 45.14.148.95 port 47142 Jul 15 01:28:45 h1745522 sshd[6604]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.95 Jul 15 01:28:45 h1745522 sshd[6604]: Invalid user xuy from 45.14.148.95 port 47142 Jul 15 01:28:48 h1745522 sshd[6604]: Failed password for invalid user xuy from 45.14.148.95 port 47142 ssh2 Jul 15 01:32:25 h1745522 sshd[7122]: Invalid user developer from 45.14.148.95 port 53726 ...	2020-07-15 08:42:59
45.14.148.95	attackbots	Jul 13 05:44:43 ns382633 sshd\[31650\]: Invalid user farmacia from 45.14.148.95 port 48638 Jul 13 05:44:43 ns382633 sshd\[31650\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.95 Jul 13 05:44:45 ns382633 sshd\[31650\]: Failed password for invalid user farmacia from 45.14.148.95 port 48638 ssh2 Jul 13 05:56:05 ns382633 sshd\[1371\]: Invalid user orange from 45.14.148.95 port 34496 Jul 13 05:56:05 ns382633 sshd\[1371\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.95	2020-07-13 12:28:47
45.14.148.95	attackspam	Jul 9 07:27:41 vmd26974 sshd[16755]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.95 Jul 9 07:27:43 vmd26974 sshd[16755]: Failed password for invalid user znc from 45.14.148.95 port 59952 ssh2 ...	2020-07-09 16:48:17
45.14.148.95	attackbots	Jul 6 23:34:30 inter-technics sshd[10133]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.95 user=root Jul 6 23:34:32 inter-technics sshd[10133]: Failed password for root from 45.14.148.95 port 57130 ssh2 Jul 6 23:38:08 inter-technics sshd[10366]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.95 user=root Jul 6 23:38:09 inter-technics sshd[10366]: Failed password for root from 45.14.148.95 port 33586 ssh2 Jul 6 23:41:43 inter-technics sshd[10648]: Invalid user testsftp from 45.14.148.95 port 37868 ...	2020-07-07 06:33:43
45.14.148.95	attack	SSH auth scanning - multiple failed logins	2020-06-26 04:05:11
45.14.148.95	attack	SSH Brute-Force attacks	2020-06-19 16:42:52

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.14.148.98
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5171
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.14.148.98.			IN	A

;; AUTHORITY SECTION:
.			506	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020011201 1800 900 604800 86400

;; Query time: 112 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jan 13 13:01:26 CST 2020
;; MSG SIZE  rcvd: 116

Host info

Host 98.148.14.45.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 98.148.14.45.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
61.177.172.159	attackbotsspam	2020-07-03T18:51:02.037243ns386461 sshd\[1792\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.159 user=root 2020-07-03T18:51:03.779873ns386461 sshd\[1792\]: Failed password for root from 61.177.172.159 port 33630 ssh2 2020-07-03T18:51:07.208101ns386461 sshd\[1792\]: Failed password for root from 61.177.172.159 port 33630 ssh2 2020-07-03T18:51:10.379685ns386461 sshd\[1792\]: Failed password for root from 61.177.172.159 port 33630 ssh2 2020-07-03T18:51:12.964073ns386461 sshd\[1792\]: Failed password for root from 61.177.172.159 port 33630 ssh2 ...	2020-07-04 01:02:15
202.137.155.65	attack	2020-07-0303:54:191jrAuA-0006XI-Hh\<=info@whatsup2013.chH=$localhost$[202.137.155.65]:33994P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=4969id=888c3a696249636bf7f244e80f7b514554615c@whatsup2013.chT="Signupnowtodiscovermeattonight"fordavebrown832@yahoo.combigbuddycm@yahoo.comtaypeterson87@gmail.com2020-07-0303:53:381jrAtW-0006WU-7T\<=info@whatsup2013.chH=pppoe.178-65-225-18.dynamic.avangarddsl.ru$localhost$[178.65.225.18]:38823P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=4948id=a5af88dbd0fb2e220540f6a551961c102b61cddb@whatsup2013.chT="Subscriberightnowtodiscoverbeavertonight"forartyfowl07@gmail.comalexseigfried@icloud.comvalleangel521@gmail.com2020-07-0303:52:441jrAsb-0006QC-Ee\<=info@whatsup2013.chH=$localhost$[115.238.90.218]:46680P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=4947id=0877c19299b298900c09bf13f480aabe432ec1@whatsup2013.chT="Matewitharealslutnearyou\	2020-07-04 01:23:11
130.185.123.140	attackbots	2020-07-03T19:51:24.652384mail.standpoint.com.ua sshd[322]: Failed password for root from 130.185.123.140 port 37862 ssh2 2020-07-03T19:54:37.307358mail.standpoint.com.ua sshd[722]: Invalid user docker from 130.185.123.140 port 36832 2020-07-03T19:54:37.309851mail.standpoint.com.ua sshd[722]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=130.185.123.140 2020-07-03T19:54:37.307358mail.standpoint.com.ua sshd[722]: Invalid user docker from 130.185.123.140 port 36832 2020-07-03T19:54:39.233409mail.standpoint.com.ua sshd[722]: Failed password for invalid user docker from 130.185.123.140 port 36832 ssh2 ...	2020-07-04 01:25:11
177.55.155.253	attackbots	$f2bV_matches	2020-07-04 00:54:46
179.184.0.112	attack	Jul 3 12:24:38 ny01 sshd[4786]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.184.0.112 Jul 3 12:24:40 ny01 sshd[4786]: Failed password for invalid user lene from 179.184.0.112 port 58748 ssh2 Jul 3 12:30:40 ny01 sshd[6055]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.184.0.112	2020-07-04 00:40:09
42.115.123.80	attackbotsspam	1593741306 - 07/03/2020 03:55:06 Host: 42.115.123.80/42.115.123.80 Port: 8080 TCP Blocked	2020-07-04 01:18:55
203.189.120.49	attackspambots	Brute forcing RDP port 3389	2020-07-04 00:55:59
101.32.1.249	attackspambots	...	2020-07-04 01:19:24
36.232.235.177	attackspam	1593741593 - 07/03/2020 03:59:53 Host: 36.232.235.177/36.232.235.177 Port: 23 TCP Blocked	2020-07-04 00:41:48
106.12.60.246	attack	Jul 3 03:59:29 srv sshd[786]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.60.246	2020-07-04 00:44:58
106.12.200.145	attack	1593741323 - 07/03/2020 03:55:23 Host: 106.12.200.145/106.12.200.145 Port: 8080 TCP Blocked	2020-07-04 01:16:28
103.50.37.55	attackbots	Jul 2 19:47:29 server1 sshd\[5148\]: Invalid user zain from 103.50.37.55 Jul 2 19:47:29 server1 sshd\[5148\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.50.37.55 Jul 2 19:47:31 server1 sshd\[5148\]: Failed password for invalid user zain from 103.50.37.55 port 46121 ssh2 Jul 2 19:54:13 server1 sshd\[7383\]: Invalid user tsm from 103.50.37.55 Jul 2 19:54:13 server1 sshd\[7383\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.50.37.55 ...	2020-07-04 01:24:18
120.29.78.214	attackbotsspam	SMB Server BruteForce Attack	2020-07-04 00:42:34
103.10.87.20	attack	pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.10.87.20 Failed password for invalid user ubuntu from 103.10.87.20 port 41523 ssh2 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.10.87.20	2020-07-04 01:13:28
113.168.180.136	attackbotsspam	1593741398 - 07/03/2020 03:56:38 Host: 113.168.180.136/113.168.180.136 Port: 445 TCP Blocked	2020-07-04 01:06:26

Recently Reported IPs

82.117.168.78	189.129.122.128	162.1.1.128	113.252.237.97
110.77.195.8	190.199.77.145	64.204.217.25	201.211.168.240
180.241.223.104	42.98.35.48	192.3.245.103	177.66.172.162
36.37.126.116	81.182.248.177	60.169.95.173	40.175.124.183
103.140.10.162	103.215.193.12	71.235.132.55	222.254.34.25