Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: Bunea Telecom SRL

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspambots
Unauthorized connection attempt detected from IP address 45.148.10.22 to port 8089
2020-05-20 10:02:28
Comments on same subnet:
IP Type Details Datetime
45.148.10.247 botsattack
45.148.10.247/Trojan Linux
2025-11-19 14:09:00
45.148.10.241 attack
DDoS Inbound
2023-11-15 18:54:04
45.148.10.28 attackspam
Oct 13 20:18:40 sshgateway sshd\[2360\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.28  user=root
Oct 13 20:18:43 sshgateway sshd\[2360\]: Failed password for root from 45.148.10.28 port 40178 ssh2
Oct 13 20:19:07 sshgateway sshd\[2364\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.28  user=root
2020-10-14 02:28:44
45.148.10.15 attackspambots
Bruteforce detected by fail2ban
2020-10-13 21:25:53
45.148.10.186 attackspam
Unable to negotiate with 45.148.10.186 port 47964: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth]
2020-10-13 21:24:21
45.148.10.28 attackbotsspam
SSH Server Abuse (45.148.10.28 as ): 
...
2020-10-13 17:43:00
45.148.10.15 attackbotsspam
Oct 13 05:18:03 server2 sshd\[31409\]: Invalid user user from 45.148.10.15
Oct 13 05:18:48 server2 sshd\[31424\]: Invalid user server from 45.148.10.15
Oct 13 05:19:33 server2 sshd\[31465\]: Invalid user steam from 45.148.10.15
Oct 13 05:20:17 server2 sshd\[31678\]: Invalid user vmware from 45.148.10.15
Oct 13 05:21:00 server2 sshd\[31685\]: Invalid user microsoft from 45.148.10.15
Oct 13 05:21:44 server2 sshd\[31730\]: Invalid user cloud from 45.148.10.15
2020-10-13 12:52:46
45.148.10.186 attackspam
Oct 13 05:33:03 ns308116 sshd[11001]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.186  user=root
Oct 13 05:33:05 ns308116 sshd[11001]: Failed password for root from 45.148.10.186 port 41866 ssh2
Oct 13 05:33:38 ns308116 sshd[11016]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.186  user=root
Oct 13 05:33:40 ns308116 sshd[11016]: Failed password for root from 45.148.10.186 port 39380 ssh2
Oct 13 05:34:15 ns308116 sshd[11027]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.186  user=root
...
2020-10-13 12:50:57
45.148.10.15 attack
Oct 12 23:36:06 srv-ubuntu-dev3 sshd[31523]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.15
Oct 12 23:36:06 srv-ubuntu-dev3 sshd[31523]: Invalid user user from 45.148.10.15
Oct 12 23:36:08 srv-ubuntu-dev3 sshd[31523]: Failed password for invalid user user from 45.148.10.15 port 40704 ssh2
Oct 12 23:36:38 srv-ubuntu-dev3 sshd[31590]: Invalid user 123Diego from 45.148.10.15
Oct 12 23:36:38 srv-ubuntu-dev3 sshd[31590]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.15
Oct 12 23:36:38 srv-ubuntu-dev3 sshd[31590]: Invalid user 123Diego from 45.148.10.15
Oct 12 23:36:40 srv-ubuntu-dev3 sshd[31590]: Failed password for invalid user 123Diego from 45.148.10.15 port 59760 ssh2
Oct 12 23:37:17 srv-ubuntu-dev3 sshd[31656]: Invalid user Alphanetworks from 45.148.10.15
Oct 12 23:37:17 srv-ubuntu-dev3 sshd[31656]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rh
...
2020-10-13 05:40:39
45.148.10.186 attack
Fail2Ban
2020-10-13 05:39:02
45.148.10.15 attackbotsspam
Fail2Ban
2020-10-12 05:52:51
45.148.10.65 attackbots
Invalid user ubuntu from 45.148.10.65 port 43138
2020-10-12 05:36:52
45.148.10.15 attack
Brute force attempt
2020-10-11 21:59:38
45.148.10.65 attackspam
Oct 01 10:49:15 host sshd[12378]: Invalid user ubuntu from 45.148.10.65 port 41060
2020-10-11 21:43:21
45.148.10.28 attack
Fail2Ban automatic report:
SSH brute-force:
2020-10-11 21:05:28
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.148.10.22
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 576
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.148.10.22.			IN	A

;; AUTHORITY SECTION:
.			382	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020051800 1800 900 604800 86400

;; Query time: 51 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon May 18 23:09:13 CST 2020
;; MSG SIZE  rcvd: 116
Host info
22.10.148.45.in-addr.arpa domain name pointer edc52.howacc.pro.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
22.10.148.45.in-addr.arpa	name = edc52.howacc.pro.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
59.126.69.60 attackspam
2019-11-01T11:50:28.643850shield sshd\[15719\]: Invalid user klod from 59.126.69.60 port 48484
2019-11-01T11:50:28.648031shield sshd\[15719\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59-126-69-60.hinet-ip.hinet.net
2019-11-01T11:50:30.582976shield sshd\[15719\]: Failed password for invalid user klod from 59.126.69.60 port 48484 ssh2
2019-11-01T11:55:00.889569shield sshd\[16508\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59-126-69-60.hinet-ip.hinet.net  user=root
2019-11-01T11:55:02.834502shield sshd\[16508\]: Failed password for root from 59.126.69.60 port 59480 ssh2
2019-11-01 19:59:24
185.233.105.176 attack
Nov  1 04:46:33 srv1-bit sshd[6788]: User root from v22018076621370291.bestsrv.de not allowed because not listed in AllowUsers
Nov  1 04:46:33 srv1-bit sshd[6787]: User root from v22018076621370291.bestsrv.de not allowed because not listed in AllowUsers
Nov  1 04:46:33 srv1-bit sshd[6790]: User root from v22018076621370291.bestsrv.de not allowed because not listed in AllowUsers
Nov  1 04:46:33 srv1-bit sshd[6768]: User root from v22018076621370291.bestsrv.de not allowed because not listed in AllowUsers
Nov  1 04:46:33 srv1-bit sshd[6785]: User root from v22018076621370291.bestsrv.de not allowed because not listed in AllowUsers
Nov  1 04:46:33 srv1-bit sshd[6751]: User root from v22018076621370291.bestsrv.de not allowed because not listed in AllowUsers
Nov  1 04:46:33 srv1-bit sshd[6791]: User root from v22018076621370291.bestsrv.de not allowed because not listed in AllowUsers
Nov  1 04:46:33 srv1-bit sshd[6763]: User root from v22018076621370291.bestsrv.de not allowed because not listed in AllowUsers
Nov  1 0
2019-11-01 19:48:07
223.206.250.228 attack
Unauthorized connection attempt from IP address 223.206.250.228 on Port 445(SMB)
2019-11-01 19:26:03
103.81.85.21 attackspambots
103.81.85.21 - - [01/Nov/2019:12:54:56 +0100] "GET /wp-login.php HTTP/1.1" 200 1238 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
103.81.85.21 - - [01/Nov/2019:12:54:57 +0100] "POST /wp-login.php HTTP/1.1" 200 1632 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
103.81.85.21 - - [01/Nov/2019:12:54:57 +0100] "GET /wp-login.php HTTP/1.1" 200 1238 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
103.81.85.21 - - [01/Nov/2019:12:54:59 +0100] "POST /wp-login.php HTTP/1.1" 200 1608 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
103.81.85.21 - - [01/Nov/2019:12:54:59 +0100] "GET /wp-login.php HTTP/1.1" 200 1238 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
103.81.85.21 - - [01/Nov/2019:12:55:00 +0100] "POST /wp-login.php HTTP/1.1" 200 1608 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2019-11-01 20:00:56
75.31.93.181 attackbotsspam
*Port Scan* detected from 75.31.93.181 (US/United States/-). 4 hits in the last 120 seconds
2019-11-01 19:59:58
189.14.135.202 attackspambots
SSH/22 MH Probe, BF, Hack -
2019-11-01 19:56:31
192.99.196.222 attack
MultiHost/MultiPort Probe, Scan, Hack -
2019-11-01 20:00:18
109.194.54.126 attackbots
SSH invalid-user multiple login try
2019-11-01 20:00:32
154.126.176.125 attackbotsspam
Unauthorized connection attempt from IP address 154.126.176.125 on Port 445(SMB)
2019-11-01 19:54:09
124.42.99.11 attack
Nov  1 09:21:00 dev0-dcde-rnet sshd[22750]: Failed password for root from 124.42.99.11 port 40186 ssh2
Nov  1 09:26:48 dev0-dcde-rnet sshd[22757]: Failed password for root from 124.42.99.11 port 48190 ssh2
2019-11-01 19:35:31
122.51.2.33 attackbots
Oct 31 05:31:06 h2022099 sshd[29538]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.2.33  user=r.r
Oct 31 05:31:08 h2022099 sshd[29538]: Failed password for r.r from 122.51.2.33 port 50624 ssh2
Oct 31 05:31:08 h2022099 sshd[29538]: Received disconnect from 122.51.2.33: 11: Bye Bye [preauth]
Oct 31 05:37:04 h2022099 sshd[30160]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.2.33  user=r.r
Oct 31 05:37:05 h2022099 sshd[30160]: Failed password for r.r from 122.51.2.33 port 41132 ssh2
Oct 31 05:37:06 h2022099 sshd[30160]: Received disconnect from 122.51.2.33: 11: Bye Bye [preauth]
Oct 31 05:41:21 h2022099 sshd[30763]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.2.33  user=r.r
Oct 31 05:41:23 h2022099 sshd[30763]: Failed password for r.r from 122.51.2.33 port 50492 ssh2
Oct 31 05:41:23 h2022099 sshd[30763]: Received disconnect f........
-------------------------------
2019-11-01 19:32:22
65.39.133.8 attackbots
techno.ws 65.39.133.8 \[01/Nov/2019:12:54:53 +0100\] "POST /wp-login.php HTTP/1.1" 200 5604 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
techno.ws 65.39.133.8 \[01/Nov/2019:12:54:54 +0100\] "POST /xmlrpc.php HTTP/1.1" 200 4070 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2019-11-01 20:05:20
128.106.115.79 attack
Automatic report - Port Scan Attack
2019-11-01 19:51:25
171.241.137.150 attackspam
Unauthorized connection attempt from IP address 171.241.137.150 on Port 445(SMB)
2019-11-01 19:31:11
222.186.190.92 attack
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.190.92  user=root
Failed password for root from 222.186.190.92 port 54556 ssh2
Failed password for root from 222.186.190.92 port 54556 ssh2
Failed password for root from 222.186.190.92 port 54556 ssh2
Failed password for root from 222.186.190.92 port 54556 ssh2
2019-11-01 20:01:48

Recently Reported IPs

217.150.146.62 185.173.235.104 181.117.169.173 134.122.69.18
66.56.186.14 134.209.169.202 123.51.152.52 162.243.138.106
195.54.160.202 106.75.141.223 185.234.219.11 104.47.4.36
182.154.243.85 213.15.241.154 220.255.71.82 85.217.204.38
250.39.149.224 8.156.82.4 41.219.181.207 114.39.186.36