Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Amsterdam

Region: Noord Holland

Country: Netherlands

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
45.148.10.241 attack
DDoS Inbound
2023-11-15 18:54:04
45.148.10.28 attackspam
Oct 13 20:18:40 sshgateway sshd\[2360\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.28  user=root
Oct 13 20:18:43 sshgateway sshd\[2360\]: Failed password for root from 45.148.10.28 port 40178 ssh2
Oct 13 20:19:07 sshgateway sshd\[2364\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.28  user=root
2020-10-14 02:28:44
45.148.10.15 attackspambots
Bruteforce detected by fail2ban
2020-10-13 21:25:53
45.148.10.186 attackspam
Unable to negotiate with 45.148.10.186 port 47964: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth]
2020-10-13 21:24:21
45.148.10.28 attackbotsspam
SSH Server Abuse (45.148.10.28 as ): 
...
2020-10-13 17:43:00
45.148.10.15 attackbotsspam
Oct 13 05:18:03 server2 sshd\[31409\]: Invalid user user from 45.148.10.15
Oct 13 05:18:48 server2 sshd\[31424\]: Invalid user server from 45.148.10.15
Oct 13 05:19:33 server2 sshd\[31465\]: Invalid user steam from 45.148.10.15
Oct 13 05:20:17 server2 sshd\[31678\]: Invalid user vmware from 45.148.10.15
Oct 13 05:21:00 server2 sshd\[31685\]: Invalid user microsoft from 45.148.10.15
Oct 13 05:21:44 server2 sshd\[31730\]: Invalid user cloud from 45.148.10.15
2020-10-13 12:52:46
45.148.10.186 attackspam
Oct 13 05:33:03 ns308116 sshd[11001]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.186  user=root
Oct 13 05:33:05 ns308116 sshd[11001]: Failed password for root from 45.148.10.186 port 41866 ssh2
Oct 13 05:33:38 ns308116 sshd[11016]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.186  user=root
Oct 13 05:33:40 ns308116 sshd[11016]: Failed password for root from 45.148.10.186 port 39380 ssh2
Oct 13 05:34:15 ns308116 sshd[11027]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.186  user=root
...
2020-10-13 12:50:57
45.148.10.15 attack
Oct 12 23:36:06 srv-ubuntu-dev3 sshd[31523]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.15
Oct 12 23:36:06 srv-ubuntu-dev3 sshd[31523]: Invalid user user from 45.148.10.15
Oct 12 23:36:08 srv-ubuntu-dev3 sshd[31523]: Failed password for invalid user user from 45.148.10.15 port 40704 ssh2
Oct 12 23:36:38 srv-ubuntu-dev3 sshd[31590]: Invalid user 123Diego from 45.148.10.15
Oct 12 23:36:38 srv-ubuntu-dev3 sshd[31590]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.15
Oct 12 23:36:38 srv-ubuntu-dev3 sshd[31590]: Invalid user 123Diego from 45.148.10.15
Oct 12 23:36:40 srv-ubuntu-dev3 sshd[31590]: Failed password for invalid user 123Diego from 45.148.10.15 port 59760 ssh2
Oct 12 23:37:17 srv-ubuntu-dev3 sshd[31656]: Invalid user Alphanetworks from 45.148.10.15
Oct 12 23:37:17 srv-ubuntu-dev3 sshd[31656]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rh
...
2020-10-13 05:40:39
45.148.10.186 attack
Fail2Ban
2020-10-13 05:39:02
45.148.10.15 attackbotsspam
Fail2Ban
2020-10-12 05:52:51
45.148.10.65 attackbots
Invalid user ubuntu from 45.148.10.65 port 43138
2020-10-12 05:36:52
45.148.10.15 attack
Brute force attempt
2020-10-11 21:59:38
45.148.10.65 attackspam
Oct 01 10:49:15 host sshd[12378]: Invalid user ubuntu from 45.148.10.65 port 41060
2020-10-11 21:43:21
45.148.10.28 attack
Fail2Ban automatic report:
SSH brute-force:
2020-10-11 21:05:28
45.148.10.15 attackspam
Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2020-10-11T05:41:40Z and 2020-10-11T05:47:54Z
2020-10-11 13:57:38
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.148.10.225
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10800
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;45.148.10.225.			IN	A

;; AUTHORITY SECTION:
.			403	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022091502 1800 900 604800 86400

;; Query time: 69 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Sep 16 10:36:23 CST 2022
;; MSG SIZE  rcvd: 106
Host info
Host 225.10.148.45.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 225.10.148.45.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
111.226.235.209 attack
2020-04-05T12:45:04.364341 X postfix/smtpd[219413]: lost connection after AUTH from unknown[111.226.235.209]
2020-04-05T12:45:05.226904 X postfix/smtpd[219404]: lost connection after AUTH from unknown[111.226.235.209]
2020-04-05T12:45:06.083885 X postfix/smtpd[219413]: lost connection after AUTH from unknown[111.226.235.209]
2020-04-05 21:38:22
146.185.130.101 attackspambots
Apr  5 14:42:10 v22019038103785759 sshd\[31484\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.185.130.101  user=root
Apr  5 14:42:12 v22019038103785759 sshd\[31484\]: Failed password for root from 146.185.130.101 port 39366 ssh2
Apr  5 14:43:38 v22019038103785759 sshd\[31564\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.185.130.101  user=root
Apr  5 14:43:40 v22019038103785759 sshd\[31564\]: Failed password for root from 146.185.130.101 port 34112 ssh2
Apr  5 14:44:56 v22019038103785759 sshd\[31634\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.185.130.101  user=root
...
2020-04-05 21:49:25
195.130.137.88 attackspam
Sent UK TV licence scam email:
X-TM-Received-SPF: Pass (domain of rsfqktmk-ejvwj1xi-9dnw@telenet-ops.be 
	designates 195.130.137.88 as permitted sender) client-ip=195.130.137.88; 
	envelope-from=rsfqktmk-ejvwj1xi-9dnw@telenet-ops.be; 
	helo=michel.telenet-ops.be
X-TM-Authentication-Results: dkim=pass; No processed signatures and verification is not enforced
X-TM-AS-ERS: 195.130.137.88-127.9.0.1
X-TMASE-Version: StarCloud-1.3-8.5.1020-25336.006

Hyperlinks in email http://www.tvlicensing-3kyjh.securityassistants.com/
2020-04-05 22:06:09
156.197.52.70 attack
Automatic report - XMLRPC Attack
2020-04-05 22:20:57
106.13.72.190 attackspam
Apr  5 14:35:52 vserver sshd\[14991\]: Failed password for root from 106.13.72.190 port 32888 ssh2Apr  5 14:38:56 vserver sshd\[15039\]: Failed password for root from 106.13.72.190 port 44002 ssh2Apr  5 14:41:58 vserver sshd\[15121\]: Failed password for root from 106.13.72.190 port 55138 ssh2Apr  5 14:45:00 vserver sshd\[15163\]: Failed password for root from 106.13.72.190 port 38016 ssh2
...
2020-04-05 21:47:21
192.207.202.2 attackspambots
Apr  5 09:52:55 ws22vmsma01 sshd[751]: Failed password for root from 192.207.202.2 port 35792 ssh2
...
2020-04-05 22:17:51
69.229.6.32 attackspambots
2020-04-05T12:19:31.144740randservbullet-proofcloud-66.localdomain sshd[21088]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.229.6.32  user=root
2020-04-05T12:19:33.261044randservbullet-proofcloud-66.localdomain sshd[21088]: Failed password for root from 69.229.6.32 port 38674 ssh2
2020-04-05T12:44:16.281066randservbullet-proofcloud-66.localdomain sshd[21190]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.229.6.32  user=root
2020-04-05T12:44:18.597584randservbullet-proofcloud-66.localdomain sshd[21190]: Failed password for root from 69.229.6.32 port 44330 ssh2
...
2020-04-05 22:26:32
178.137.82.147 attackbots
xmlrpc attack
2020-04-05 21:41:21
185.36.81.39 attack
2020-04-05 07:44:46 H=(gHYd2yL8uB) [185.36.81.39]:61441 I=[192.147.25.65]:25 F= rejected RCPT : Sender verify failed
2020-04-05 07:44:50 dovecot_login authenticator failed for (rtYMgtT7H) [185.36.81.39]:61974 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=mhogan@lerctr.org)
2020-04-05 07:44:57 dovecot_login authenticator failed for (RLtQbdpYx) [185.36.81.39]:63338 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=mhogan@lerctr.org)
...
2020-04-05 21:49:55
123.4.60.241 attackspambots
TCP Port Scanning
2020-04-05 22:04:49
186.105.190.168 attackbots
Apr  4 22:04:26 host sshd[10192]: User r.r from 186.105.190.168 not allowed because none of user's groups are listed in AllowGroups
Apr  4 22:04:26 host sshd[10192]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.105.190.168  user=r.r
Apr  4 22:04:28 host sshd[10192]: Failed password for invalid user r.r from 186.105.190.168 port 46282 ssh2
Apr  4 22:04:28 host sshd[10192]: Received disconnect from 186.105.190.168 port 46282:11: Bye Bye [preauth]
Apr  4 22:04:28 host sshd[10192]: Disconnected from invalid user r.r 186.105.190.168 port 46282 [preauth]
Apr  4 22:13:23 host sshd[12220]: User r.r from 186.105.190.168 not allowed because none of user's groups are listed in AllowGroups
Apr  4 22:13:23 host sshd[12220]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.105.190.168  user=r.r
Apr  4 22:13:25 host sshd[12220]: Failed password for invalid user r.r from 186.105.190.168 port 51074........
-------------------------------
2020-04-05 22:24:22
115.75.223.65 attackbotsspam
trying to access non-authorized port
2020-04-05 22:18:48
34.92.239.56 attack
SSH invalid-user multiple login try
2020-04-05 21:46:17
213.141.132.29 attackbots
Bruteforce detected by fail2ban
2020-04-05 21:52:25
178.171.44.128 attackbots
signing into all my accounts
2020-04-05 22:11:41

Recently Reported IPs

185.173.35.80 185.62.189.125 162.142.125.126 5.182.39.188
167.94.146.252 93.174.93.9 89.248.168.43 167.94.146.135
93.174.89.218 89.248.172.74 93.174.93.1 89.248.168.120
85.62.188.198 176.121.14.9 176.121.14.44 45.138.103.130
92.118.161.215 185.11.146.187 45.148.10.118 13.49.51.92