Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Romania

Internet Service Provider: SC Netsilvania Network SRL

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
Unauthorized connection attempt detected from IP address 45.14.148.98 to port 322 [J]
2020-02-01 16:23:54
attackspam
45.14.148.98 - - [21/Jan/2020:08:56:31 +0400] "GET / HTTP/1.0" 301 162 "http://protech.ge/" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.87 Safari/537.36"
2020-01-21 16:25:13
attackspambots
RO_Parfumuri Femei.com SRL_<177>1578891410 [1:2522084:3938] ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic group 85 [Classification: Misc Attack] [Priority: 2] {TCP} 45.14.148.98:47926
2020-01-13 13:01:30
Comments on same subnet:
IP Type Details Datetime
45.14.148.141 attack
Invalid user www from 45.14.148.141 port 51550
2020-09-30 04:05:22
45.14.148.141 attackbots
Sep 29 09:46:55 dev0-dcde-rnet sshd[19775]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.141
Sep 29 09:46:57 dev0-dcde-rnet sshd[19775]: Failed password for invalid user postgres5 from 45.14.148.141 port 53390 ssh2
Sep 29 09:56:01 dev0-dcde-rnet sshd[19910]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.141
2020-09-29 20:12:09
45.14.148.141 attackspambots
Sep 29 01:16:02 myhostname sshd[7303]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.141  user=r.r
Sep 29 01:16:03 myhostname sshd[7303]: Failed password for r.r from 45.14.148.141 port 53122 ssh2
Sep 29 01:16:03 myhostname sshd[7303]: Received disconnect from 45.14.148.141 port 53122:11: Bye Bye [preauth]
Sep 29 01:16:03 myhostname sshd[7303]: Disconnected from 45.14.148.141 port 53122 [preauth]
Sep 29 01:28:04 myhostname sshd[20778]: Invalid user nagios3 from 45.14.148.141
Sep 29 01:28:04 myhostname sshd[20778]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.141


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=45.14.148.141
2020-09-29 12:19:48
45.14.148.141 attackbotsspam
Sep 26 15:50:49 mout sshd[7016]: Disconnected from invalid user storm 45.14.148.141 port 47714 [preauth]
Sep 26 15:58:47 mout sshd[7989]: Invalid user test2 from 45.14.148.141 port 44844
2020-09-27 06:46:11
45.14.148.141 attackspam
Sep 26 15:50:49 mout sshd[7016]: Disconnected from invalid user storm 45.14.148.141 port 47714 [preauth]
Sep 26 15:58:47 mout sshd[7989]: Invalid user test2 from 45.14.148.141 port 44844
2020-09-26 23:10:35
45.14.148.141 attack
Sep 25 22:44:19 h2646465 sshd[29358]: Invalid user weblogic from 45.14.148.141
Sep 25 22:44:19 h2646465 sshd[29358]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.141
Sep 25 22:44:19 h2646465 sshd[29358]: Invalid user weblogic from 45.14.148.141
Sep 25 22:44:21 h2646465 sshd[29358]: Failed password for invalid user weblogic from 45.14.148.141 port 48042 ssh2
Sep 25 22:55:55 h2646465 sshd[31066]: Invalid user ospite from 45.14.148.141
Sep 25 22:55:55 h2646465 sshd[31066]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.141
Sep 25 22:55:55 h2646465 sshd[31066]: Invalid user ospite from 45.14.148.141
Sep 25 22:55:57 h2646465 sshd[31066]: Failed password for invalid user ospite from 45.14.148.141 port 48194 ssh2
Sep 25 23:06:08 h2646465 sshd[32748]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.141  user=root
Sep 25 23:06:10 h2646465 sshd[32748]: Failed password
2020-09-26 14:58:51
45.14.148.191 attackbots
 TCP (SYN) 45.14.148.191:50832 -> port 22, len 44
2020-08-30 15:42:40
45.14.148.141 attack
Port scan denied
2020-08-15 14:28:01
45.14.148.95 attackspambots
Failed password for invalid user test from 45.14.148.95 port 48020 ssh2
Invalid user play from 45.14.148.95 port 43540
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.95
Failed password for invalid user play from 45.14.148.95 port 43540 ssh2
Invalid user tjd from 45.14.148.95 port 39586
2020-07-16 08:02:39
45.14.148.95 attackspambots
Jul 15 01:25:00 h1745522 sshd[6026]: Invalid user idd from 45.14.148.95 port 39970
Jul 15 01:25:00 h1745522 sshd[6026]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.95
Jul 15 01:25:00 h1745522 sshd[6026]: Invalid user idd from 45.14.148.95 port 39970
Jul 15 01:25:01 h1745522 sshd[6026]: Failed password for invalid user idd from 45.14.148.95 port 39970 ssh2
Jul 15 01:28:45 h1745522 sshd[6604]: Invalid user xuy from 45.14.148.95 port 47142
Jul 15 01:28:45 h1745522 sshd[6604]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.95
Jul 15 01:28:45 h1745522 sshd[6604]: Invalid user xuy from 45.14.148.95 port 47142
Jul 15 01:28:48 h1745522 sshd[6604]: Failed password for invalid user xuy from 45.14.148.95 port 47142 ssh2
Jul 15 01:32:25 h1745522 sshd[7122]: Invalid user developer from 45.14.148.95 port 53726
...
2020-07-15 08:42:59
45.14.148.95 attackbots
Jul 13 05:44:43 ns382633 sshd\[31650\]: Invalid user farmacia from 45.14.148.95 port 48638
Jul 13 05:44:43 ns382633 sshd\[31650\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.95
Jul 13 05:44:45 ns382633 sshd\[31650\]: Failed password for invalid user farmacia from 45.14.148.95 port 48638 ssh2
Jul 13 05:56:05 ns382633 sshd\[1371\]: Invalid user orange from 45.14.148.95 port 34496
Jul 13 05:56:05 ns382633 sshd\[1371\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.95
2020-07-13 12:28:47
45.14.148.95 attackspam
Jul  9 07:27:41 vmd26974 sshd[16755]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.95
Jul  9 07:27:43 vmd26974 sshd[16755]: Failed password for invalid user znc from 45.14.148.95 port 59952 ssh2
...
2020-07-09 16:48:17
45.14.148.95 attackbots
Jul  6 23:34:30 inter-technics sshd[10133]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.95  user=root
Jul  6 23:34:32 inter-technics sshd[10133]: Failed password for root from 45.14.148.95 port 57130 ssh2
Jul  6 23:38:08 inter-technics sshd[10366]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.95  user=root
Jul  6 23:38:09 inter-technics sshd[10366]: Failed password for root from 45.14.148.95 port 33586 ssh2
Jul  6 23:41:43 inter-technics sshd[10648]: Invalid user testsftp from 45.14.148.95 port 37868
...
2020-07-07 06:33:43
45.14.148.95 attack
SSH auth scanning - multiple failed logins
2020-06-26 04:05:11
45.14.148.95 attack
SSH Brute-Force attacks
2020-06-19 16:42:52
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.14.148.98
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5171
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.14.148.98.			IN	A

;; AUTHORITY SECTION:
.			506	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020011201 1800 900 604800 86400

;; Query time: 112 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jan 13 13:01:26 CST 2020
;; MSG SIZE  rcvd: 116
Host info
Host 98.148.14.45.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 98.148.14.45.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
182.71.246.162 attackspam
Jun 18 10:49:29 ws22vmsma01 sshd[240203]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.71.246.162
Jun 18 10:49:31 ws22vmsma01 sshd[240203]: Failed password for invalid user eeg from 182.71.246.162 port 55334 ssh2
...
2020-06-19 03:13:54
118.174.3.185 attack
Unauthorized connection attempt from IP address 118.174.3.185 on Port 445(SMB)
2020-06-19 03:47:00
49.233.10.41 attackbots
Jun 18 14:39:17 vps sshd[123427]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.10.41
Jun 18 14:39:18 vps sshd[123427]: Failed password for invalid user list from 49.233.10.41 port 54048 ssh2
Jun 18 14:43:18 vps sshd[142057]: Invalid user sysadmin from 49.233.10.41 port 42388
Jun 18 14:43:18 vps sshd[142057]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.10.41
Jun 18 14:43:19 vps sshd[142057]: Failed password for invalid user sysadmin from 49.233.10.41 port 42388 ssh2
...
2020-06-19 03:43:51
124.196.16.75 attack
Jun 18 13:49:12 ZTCN001 sshd[159548]: Invalid user user1 from 124.196.16.75 port 36492
Jun 18 13:49:12 ZTCN001 sshd[159548]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.196.16.75 
Jun 18 13:49:12 ZTCN001 sshd[159548]: Invalid user user1 from 124.196.16.75 port 36492
Jun 18 13:49:15 ZTCN001 sshd[159548]: Failed password for invalid user user1 from 124.196.16.75 port 36492 ssh2
Jun 18 13:51:34 ZTCN001 sshd[159583]: Invalid user vlc from 124.196.16.75 port 57160


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=124.196.16.75
2020-06-19 03:46:30
129.211.85.214 attack
2020-06-18T10:37:18.9639271495-001 sshd[44763]: Invalid user hadoop from 129.211.85.214 port 49910
2020-06-18T10:37:18.9668931495-001 sshd[44763]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.85.214
2020-06-18T10:37:18.9639271495-001 sshd[44763]: Invalid user hadoop from 129.211.85.214 port 49910
2020-06-18T10:37:21.2613701495-001 sshd[44763]: Failed password for invalid user hadoop from 129.211.85.214 port 49910 ssh2
2020-06-18T10:40:15.5204671495-001 sshd[44841]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.85.214  user=root
2020-06-18T10:40:17.7799741495-001 sshd[44841]: Failed password for root from 129.211.85.214 port 49582 ssh2
...
2020-06-19 03:20:36
14.178.64.15 attackspam
Brute forcing RDP port 3389
2020-06-19 03:12:50
131.0.244.14 attack
2020-02-13T16:53:37.019Z CLOSE host=131.0.244.14 port=61134 fd=4 time=20.014 bytes=14
...
2020-06-19 03:20:01
45.134.179.243 attackbotsspam
Fail2Ban Ban Triggered
2020-06-19 03:30:52
190.181.91.31 attackspambots
Jun 18 11:05:59 mail.srvfarm.net postfix/smtpd[1409123]: warning: unknown[190.181.91.31]: SASL PLAIN authentication failed: 
Jun 18 11:06:00 mail.srvfarm.net postfix/smtpd[1409123]: lost connection after AUTH from unknown[190.181.91.31]
Jun 18 11:09:45 mail.srvfarm.net postfix/smtpd[1409762]: warning: unknown[190.181.91.31]: SASL PLAIN authentication failed: 
Jun 18 11:09:46 mail.srvfarm.net postfix/smtpd[1409762]: lost connection after AUTH from unknown[190.181.91.31]
Jun 18 11:14:58 mail.srvfarm.net postfix/smtps/smtpd[1409843]: warning: unknown[190.181.91.31]: SASL PLAIN authentication failed:
2020-06-19 03:33:14
47.75.126.75 attackbots
[Mon Jan 06 06:22:05.221054 2020] [access_compat:error] [pid 2641] [client 47.75.126.75:52048] AH01797: client denied by server configuration: /var/www/html/luke/wp-login.php, referer: http://lukegirvin.co.uk/wp-login.php
...
2020-06-19 03:48:20
47.29.255.124 attackspambots
[Wed Nov 27 01:15:28.571490 2019] [access_compat:error] [pid 10534] [client 47.29.255.124:43366] AH01797: client denied by server configuration: /var/www/html/josh/wp-login.php, referer: https://www.learnargentinianspanish.com//wp-login.php
...
2020-06-19 03:49:49
105.247.93.202 attackspambots
Unauthorized connection attempt from IP address 105.247.93.202 on Port 445(SMB)
2020-06-19 03:36:22
130.61.218.121 attackbotsspam
2020-04-19T22:34:07.817Z CLOSE host=130.61.218.121 port=24328 fd=4 time=20.012 bytes=26
...
2020-06-19 03:35:52
179.125.63.70 attackbotsspam
Jun 18 11:10:54 mail.srvfarm.net postfix/smtps/smtpd[1421519]: warning: unknown[179.125.63.70]: SASL PLAIN authentication failed: 
Jun 18 11:10:55 mail.srvfarm.net postfix/smtps/smtpd[1421519]: lost connection after AUTH from unknown[179.125.63.70]
Jun 18 11:12:41 mail.srvfarm.net postfix/smtps/smtpd[1423172]: warning: unknown[179.125.63.70]: SASL PLAIN authentication failed: 
Jun 18 11:12:41 mail.srvfarm.net postfix/smtps/smtpd[1423172]: lost connection after AUTH from unknown[179.125.63.70]
Jun 18 11:18:01 mail.srvfarm.net postfix/smtpd[1424198]: warning: unknown[179.125.63.70]: SASL PLAIN authentication failed:
2020-06-19 03:35:27
130.61.61.82 attackspam
2020-04-20T06:37:31.565Z CLOSE host=130.61.61.82 port=39688 fd=4 time=30.028 bytes=51
...
2020-06-19 03:23:18

Recently Reported IPs

82.117.168.78 189.129.122.128 162.1.1.128 113.252.237.97
110.77.195.8 190.199.77.145 64.204.217.25 201.211.168.240
180.241.223.104 42.98.35.48 192.3.245.103 177.66.172.162
36.37.126.116 81.182.248.177 60.169.95.173 40.175.124.183
103.140.10.162 103.215.193.12 71.235.132.55 222.254.34.25