Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Romania

Internet Service Provider: SC Netsilvania Network SRL

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
Bruteforce detected by fail2ban
2020-10-06 04:54:39
attack
Bruteforce detected by fail2ban
2020-10-05 20:57:38
attack
Oct  5 01:05:13 mout sshd[21090]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.149.38  user=root
Oct  5 01:05:15 mout sshd[21090]: Failed password for root from 45.14.149.38 port 37428 ssh2
Oct  5 01:05:15 mout sshd[21090]: Disconnected from authenticating user root 45.14.149.38 port 37428 [preauth]
2020-10-05 12:47:32
attack
"Unauthorized connection attempt on SSHD detected"
2020-09-29 01:20:02
attack
"Unauthorized connection attempt on SSHD detected"
2020-09-28 17:23:15
attackspambots
 TCP (SYN) 45.14.149.38:42618 -> port 10938, len 44
2020-08-10 15:56:36
attack
Jul 28 03:57:15 *** sshd[1812]: Invalid user shachunyang from 45.14.149.38
2020-07-28 12:42:19
attackbots
ET CINS Active Threat Intelligence Poor Reputation IP group 25 - port: 6520 proto: tcp cat: Misc Attackbytes: 60
2020-07-27 21:41:15
attackbots
SSH Invalid Login
2020-07-17 05:53:22
attackbots
Multiple SSH authentication failures from 45.14.149.38
2020-07-01 14:12:26
attackbots
Invalid user ydc from 45.14.149.38 port 40756
2020-06-29 18:53:50
attackbotsspam
Jun 28 12:09:49 onepixel sshd[1034361]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.149.38 
Jun 28 12:09:49 onepixel sshd[1034361]: Invalid user qwer from 45.14.149.38 port 40928
Jun 28 12:09:51 onepixel sshd[1034361]: Failed password for invalid user qwer from 45.14.149.38 port 40928 ssh2
Jun 28 12:14:55 onepixel sshd[1037409]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.149.38  user=root
Jun 28 12:14:57 onepixel sshd[1037409]: Failed password for root from 45.14.149.38 port 33064 ssh2
2020-06-28 20:57:03
attackspambots
Jun 26 07:38:17 Tower sshd[22378]: Connection from 45.14.149.38 port 35742 on 192.168.10.220 port 22 rdomain ""
Jun 26 07:38:28 Tower sshd[22378]: Invalid user temp1 from 45.14.149.38 port 35742
Jun 26 07:38:28 Tower sshd[22378]: error: Could not get shadow information for NOUSER
Jun 26 07:38:28 Tower sshd[22378]: Failed password for invalid user temp1 from 45.14.149.38 port 35742 ssh2
Jun 26 07:38:29 Tower sshd[22378]: Received disconnect from 45.14.149.38 port 35742:11: Bye Bye [preauth]
Jun 26 07:38:29 Tower sshd[22378]: Disconnected from invalid user temp1 45.14.149.38 port 35742 [preauth]
2020-06-26 20:36:58
attackbotsspam
Invalid user martina from 45.14.149.38 port 52546
2020-05-15 15:28:56
Comments on same subnet:
IP Type Details Datetime
45.14.149.46 attack
Multiple SSH authentication failures from 45.14.149.46
2020-07-30 21:51:39
45.14.149.46 attackspambots
Jul 23 16:12:18 ajax sshd[10304]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.149.46 
Jul 23 16:12:19 ajax sshd[10304]: Failed password for invalid user ego from 45.14.149.46 port 41032 ssh2
2020-07-24 02:26:43
45.14.149.46 attackbotsspam
(sshd) Failed SSH login from 45.14.149.46 (RO/Romania/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jul 22 16:23:15 grace sshd[18899]: Invalid user ace from 45.14.149.46 port 38312
Jul 22 16:23:17 grace sshd[18899]: Failed password for invalid user ace from 45.14.149.46 port 38312 ssh2
Jul 22 16:39:07 grace sshd[21609]: Invalid user lupita from 45.14.149.46 port 46330
Jul 22 16:39:09 grace sshd[21609]: Failed password for invalid user lupita from 45.14.149.46 port 46330 ssh2
Jul 22 16:50:55 grace sshd[23498]: Invalid user guest from 45.14.149.46 port 33246
2020-07-23 00:57:36
45.14.149.46 attackbotsspam
Jul 11 22:58:43 lukav-desktop sshd\[6639\]: Invalid user lexi from 45.14.149.46
Jul 11 22:58:43 lukav-desktop sshd\[6639\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.149.46
Jul 11 22:58:45 lukav-desktop sshd\[6639\]: Failed password for invalid user lexi from 45.14.149.46 port 52532 ssh2
Jul 11 23:07:44 lukav-desktop sshd\[13463\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.149.46  user=www-data
Jul 11 23:07:47 lukav-desktop sshd\[13463\]: Failed password for www-data from 45.14.149.46 port 50716 ssh2
2020-07-12 05:06:18
45.14.149.46 attack
Jun 28 14:14:27 srv sshd[11112]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.149.46
2020-06-28 21:25:11
45.14.149.46 attackbotsspam
Invalid user wordpress from 45.14.149.46 port 32884
2020-06-26 22:14:36
45.14.149.46 attack
Jun 23 00:51:20 fhem-rasp sshd[30318]: Invalid user ubuntu from 45.14.149.46 port 43190
...
2020-06-23 06:56:47
45.14.149.46 attackbotsspam
$f2bV_matches
2020-06-21 03:40:00
45.14.149.46 attackbotsspam
Invalid user gsh from 45.14.149.46 port 42798
2020-06-18 07:43:48
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.14.149.38
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 36501
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.14.149.38.			IN	A

;; AUTHORITY SECTION:
.			583	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020050600 1800 900 604800 86400

;; Query time: 80 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed May 06 22:20:20 CST 2020
;; MSG SIZE  rcvd: 116
Host info
Host 38.149.14.45.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 38.149.14.45.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
104.236.94.202 attack
2019-10-31T21:36:57.486604shield sshd\[8146\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.94.202  user=root
2019-10-31T21:36:59.710459shield sshd\[8146\]: Failed password for root from 104.236.94.202 port 36462 ssh2
2019-10-31T21:40:47.071202shield sshd\[9982\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.94.202  user=root
2019-10-31T21:40:49.865850shield sshd\[9982\]: Failed password for root from 104.236.94.202 port 47310 ssh2
2019-10-31T21:44:38.374682shield sshd\[11542\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.94.202  user=root
2019-11-01 05:53:19
106.12.74.123 attackbotsspam
2019-10-31T20:13:12.900824abusebot-4.cloudsearch.cf sshd\[6356\]: Invalid user welcome from 106.12.74.123 port 55160
2019-11-01 06:08:28
5.54.7.226 attackspam
Telnet Server BruteForce Attack
2019-11-01 05:51:44
103.67.16.6 attackbots
proto=tcp  .  spt=38075  .  dpt=25  .     (Found on   Blocklist de  Oct 31)     (775)
2019-11-01 05:56:51
101.230.238.32 attackspam
Lines containing failures of 101.230.238.32
Oct 28 08:38:15 shared10 sshd[11855]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.230.238.32  user=r.r
Oct 28 08:38:17 shared10 sshd[11855]: Failed password for r.r from 101.230.238.32 port 40722 ssh2
Oct 28 08:38:18 shared10 sshd[11855]: Received disconnect from 101.230.238.32 port 40722:11: Bye Bye [preauth]
Oct 28 08:38:18 shared10 sshd[11855]: Disconnected from authenticating user r.r 101.230.238.32 port 40722 [preauth]
Oct 28 09:02:20 shared10 sshd[19793]: Invalid user hattori from 101.230.238.32 port 51834
Oct 28 09:02:20 shared10 sshd[19793]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.230.238.32
Oct 28 09:02:22 shared10 sshd[19793]: Failed password for invalid user hattori from 101.230.238.32 port 51834 ssh2
Oct 28 09:02:22 shared10 sshd[19793]: Received disconnect from 101.230.238.32 port 51834:11: Bye Bye [preauth]
Oct 28 0........
------------------------------
2019-11-01 06:01:02
14.191.148.249 attack
Automatic report - Port Scan Attack
2019-11-01 05:51:25
102.65.110.11 attackspambots
Oct 28 19:16:40 vayu sshd[839042]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102-65-110-11.ftth.web.africa  user=r.r
Oct 28 19:16:42 vayu sshd[839042]: Failed password for r.r from 102.65.110.11 port 45686 ssh2
Oct 28 19:16:42 vayu sshd[839042]: Received disconnect from 102.65.110.11: 11: Bye Bye [preauth]
Oct 28 19:28:08 vayu sshd[844850]: Invalid user martin from 102.65.110.11
Oct 28 19:28:08 vayu sshd[844850]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102-65-110-11.ftth.web.africa 
Oct 28 19:28:09 vayu sshd[844850]: Failed password for invalid user martin from 102.65.110.11 port 41654 ssh2
Oct 28 19:28:10 vayu sshd[844850]: Received disconnect from 102.65.110.11: 11: Bye Bye [preauth]
Oct 28 19:37:18 vayu sshd[849477]: Invalid user kroener from 102.65.110.11
Oct 28 19:37:18 vayu sshd[849477]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rho........
-------------------------------
2019-11-01 06:13:34
2.183.88.25 attackbotsspam
Telnet Server BruteForce Attack
2019-11-01 05:47:24
92.118.160.17 attackbotsspam
31.10.2019 20:18:59 Connection to port 2160 blocked by firewall
2019-11-01 06:16:17
217.30.64.26 attack
Automatic report - XMLRPC Attack
2019-11-01 05:50:01
188.35.187.50 attackbots
Oct 31 22:17:26 nextcloud sshd\[11978\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.35.187.50  user=root
Oct 31 22:17:27 nextcloud sshd\[11978\]: Failed password for root from 188.35.187.50 port 45630 ssh2
Oct 31 22:21:26 nextcloud sshd\[16157\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.35.187.50  user=root
...
2019-11-01 05:50:40
206.81.4.235 attackspam
Oct 31 18:45:11 ws22vmsma01 sshd[55391]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.81.4.235
Oct 31 18:45:13 ws22vmsma01 sshd[55391]: Failed password for invalid user ben from 206.81.4.235 port 46556 ssh2
...
2019-11-01 06:15:05
81.22.45.65 attackbotsspam
Oct 31 22:16:28 h2177944 kernel: \[5432310.993283\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.65 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=28941 PROTO=TCP SPT=46347 DPT=39742 WINDOW=1024 RES=0x00 SYN URGP=0 
Oct 31 22:20:50 h2177944 kernel: \[5432572.907484\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.65 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=41135 PROTO=TCP SPT=46347 DPT=39894 WINDOW=1024 RES=0x00 SYN URGP=0 
Oct 31 22:29:31 h2177944 kernel: \[5433093.228673\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.65 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=53889 PROTO=TCP SPT=46347 DPT=39563 WINDOW=1024 RES=0x00 SYN URGP=0 
Oct 31 22:29:46 h2177944 kernel: \[5433108.785418\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.65 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=43148 PROTO=TCP SPT=46347 DPT=39558 WINDOW=1024 RES=0x00 SYN URGP=0 
Oct 31 22:31:47 h2177944 kernel: \[5433229.725491\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.65 DST=85.214.117.9 LEN=4
2019-11-01 05:43:05
181.67.169.136 attack
Oct 31 21:06:30 mxgate1 postfix/postscreen[23097]: CONNECT from [181.67.169.136]:49470 to [176.31.12.44]:25
Oct 31 21:06:30 mxgate1 postfix/dnsblog[23098]: addr 181.67.169.136 listed by domain zen.spamhaus.org as 127.0.0.4
Oct 31 21:06:30 mxgate1 postfix/dnsblog[23098]: addr 181.67.169.136 listed by domain zen.spamhaus.org as 127.0.0.11
Oct 31 21:06:30 mxgate1 postfix/dnsblog[23098]: addr 181.67.169.136 listed by domain zen.spamhaus.org as 127.0.0.3
Oct 31 21:06:30 mxgate1 postfix/dnsblog[23099]: addr 181.67.169.136 listed by domain cbl.abuseat.org as 127.0.0.2
Oct 31 21:06:30 mxgate1 postfix/dnsblog[23102]: addr 181.67.169.136 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2
Oct 31 21:06:30 mxgate1 postfix/dnsblog[23100]: addr 181.67.169.136 listed by domain bl.spamcop.net as 127.0.0.2
Oct 31 21:06:30 mxgate1 postfix/dnsblog[23101]: addr 181.67.169.136 listed by domain b.barracudacentral.org as 127.0.0.2
Oct 31 21:06:36 mxgate1 postfix/postscreen[23097]: DNSBL rank 6 ........
-------------------------------
2019-11-01 06:03:07
69.171.74.150 attackspambots
Oct 31 22:42:20 vps01 sshd[23940]: Failed password for root from 69.171.74.150 port 55340 ssh2
2019-11-01 05:53:37

Recently Reported IPs

39.61.57.18 134.236.131.82 59.91.237.150 37.49.226.40
217.107.106.67 184.22.75.166 162.243.143.49 39.35.35.247
36.71.234.136 117.242.135.122 74.84.255.220 14.176.121.233
176.111.104.46 162.243.137.209 103.145.12.72 162.243.136.142
187.123.92.70 162.243.142.61 162.243.141.119 201.34.221.2