Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Romania

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
45.148.10.241 attack
DDoS Inbound
2023-11-15 18:54:04
45.148.10.28 attackspam
Oct 13 20:18:40 sshgateway sshd\[2360\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.28  user=root
Oct 13 20:18:43 sshgateway sshd\[2360\]: Failed password for root from 45.148.10.28 port 40178 ssh2
Oct 13 20:19:07 sshgateway sshd\[2364\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.28  user=root
2020-10-14 02:28:44
45.148.10.15 attackspambots
Bruteforce detected by fail2ban
2020-10-13 21:25:53
45.148.10.186 attackspam
Unable to negotiate with 45.148.10.186 port 47964: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth]
2020-10-13 21:24:21
45.148.10.28 attackbotsspam
SSH Server Abuse (45.148.10.28 as ): 
...
2020-10-13 17:43:00
45.148.10.15 attackbotsspam
Oct 13 05:18:03 server2 sshd\[31409\]: Invalid user user from 45.148.10.15
Oct 13 05:18:48 server2 sshd\[31424\]: Invalid user server from 45.148.10.15
Oct 13 05:19:33 server2 sshd\[31465\]: Invalid user steam from 45.148.10.15
Oct 13 05:20:17 server2 sshd\[31678\]: Invalid user vmware from 45.148.10.15
Oct 13 05:21:00 server2 sshd\[31685\]: Invalid user microsoft from 45.148.10.15
Oct 13 05:21:44 server2 sshd\[31730\]: Invalid user cloud from 45.148.10.15
2020-10-13 12:52:46
45.148.10.186 attackspam
Oct 13 05:33:03 ns308116 sshd[11001]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.186  user=root
Oct 13 05:33:05 ns308116 sshd[11001]: Failed password for root from 45.148.10.186 port 41866 ssh2
Oct 13 05:33:38 ns308116 sshd[11016]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.186  user=root
Oct 13 05:33:40 ns308116 sshd[11016]: Failed password for root from 45.148.10.186 port 39380 ssh2
Oct 13 05:34:15 ns308116 sshd[11027]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.186  user=root
...
2020-10-13 12:50:57
45.148.10.15 attack
Oct 12 23:36:06 srv-ubuntu-dev3 sshd[31523]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.15
Oct 12 23:36:06 srv-ubuntu-dev3 sshd[31523]: Invalid user user from 45.148.10.15
Oct 12 23:36:08 srv-ubuntu-dev3 sshd[31523]: Failed password for invalid user user from 45.148.10.15 port 40704 ssh2
Oct 12 23:36:38 srv-ubuntu-dev3 sshd[31590]: Invalid user 123Diego from 45.148.10.15
Oct 12 23:36:38 srv-ubuntu-dev3 sshd[31590]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.15
Oct 12 23:36:38 srv-ubuntu-dev3 sshd[31590]: Invalid user 123Diego from 45.148.10.15
Oct 12 23:36:40 srv-ubuntu-dev3 sshd[31590]: Failed password for invalid user 123Diego from 45.148.10.15 port 59760 ssh2
Oct 12 23:37:17 srv-ubuntu-dev3 sshd[31656]: Invalid user Alphanetworks from 45.148.10.15
Oct 12 23:37:17 srv-ubuntu-dev3 sshd[31656]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rh
...
2020-10-13 05:40:39
45.148.10.186 attack
Fail2Ban
2020-10-13 05:39:02
45.148.10.15 attackbotsspam
Fail2Ban
2020-10-12 05:52:51
45.148.10.65 attackbots
Invalid user ubuntu from 45.148.10.65 port 43138
2020-10-12 05:36:52
45.148.10.15 attack
Brute force attempt
2020-10-11 21:59:38
45.148.10.65 attackspam
Oct 01 10:49:15 host sshd[12378]: Invalid user ubuntu from 45.148.10.65 port 41060
2020-10-11 21:43:21
45.148.10.28 attack
Fail2Ban automatic report:
SSH brute-force:
2020-10-11 21:05:28
45.148.10.15 attackspam
Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2020-10-11T05:41:40Z and 2020-10-11T05:47:54Z
2020-10-11 13:57:38
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.148.10.249
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25684
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;45.148.10.249.			IN	A

;; AUTHORITY SECTION:
.			223	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022091502 1800 900 604800 86400

;; Query time: 83 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Sep 16 06:00:47 CST 2022
;; MSG SIZE  rcvd: 106
Host info
249.10.148.45.in-addr.arpa domain name pointer mx3.edgewiseure.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
249.10.148.45.in-addr.arpa	name = mx3.edgewiseure.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
178.128.246.54 attackspam
no
2019-09-10 01:13:30
138.68.101.199 attackbots
Sep  9 18:43:12 legacy sshd[20286]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.101.199
Sep  9 18:43:13 legacy sshd[20286]: Failed password for invalid user ansible@123 from 138.68.101.199 port 58456 ssh2
Sep  9 18:48:54 legacy sshd[20516]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.101.199
...
2019-09-10 01:00:38
79.1.212.37 attack
Sep  9 19:05:10 SilenceServices sshd[4453]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.1.212.37
Sep  9 19:05:12 SilenceServices sshd[4453]: Failed password for invalid user Password from 79.1.212.37 port 54439 ssh2
Sep  9 19:10:58 SilenceServices sshd[7107]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.1.212.37
2019-09-10 01:25:45
83.48.29.116 attackspambots
Sep  9 18:51:28 vps01 sshd[11316]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.48.29.116
Sep  9 18:51:30 vps01 sshd[11316]: Failed password for invalid user teamspeak from 83.48.29.116 port 31144 ssh2
2019-09-10 01:25:09
37.187.178.245 attackspambots
Sep  9 19:12:15 SilenceServices sshd[7668]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.178.245
Sep  9 19:12:18 SilenceServices sshd[7668]: Failed password for invalid user 1234 from 37.187.178.245 port 49360 ssh2
Sep  9 19:19:55 SilenceServices sshd[10521]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.178.245
2019-09-10 01:43:27
200.98.146.168 attack
Unauthorized connection attempt from IP address 200.98.146.168 on Port 445(SMB)
2019-09-10 01:16:48
51.83.78.109 attackbots
Sep  9 06:46:02 auw2 sshd\[25278\]: Invalid user minecraft from 51.83.78.109
Sep  9 06:46:02 auw2 sshd\[25278\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.ip-51-83-78.eu
Sep  9 06:46:04 auw2 sshd\[25278\]: Failed password for invalid user minecraft from 51.83.78.109 port 56678 ssh2
Sep  9 06:51:59 auw2 sshd\[25788\]: Invalid user zabbix from 51.83.78.109
Sep  9 06:51:59 auw2 sshd\[25788\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.ip-51-83-78.eu
2019-09-10 01:02:56
141.98.10.62 attackspambots
Sep  9 18:06:40 herz-der-gamer postfix/smtpd[1364]: warning: unknown[141.98.10.62]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2019-09-10 02:06:27
167.71.68.203 spambotsattack
Spam 
Return-Path: 
Received: from mx.devoutness.pepped.xyz ([167.71.68.203]:38882)
2019-09-10 01:56:43
103.36.84.180 attackbotsspam
Sep  9 19:08:52 h2177944 sshd\[28106\]: Invalid user deploy from 103.36.84.180 port 38704
Sep  9 19:08:52 h2177944 sshd\[28106\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.36.84.180
Sep  9 19:08:54 h2177944 sshd\[28106\]: Failed password for invalid user deploy from 103.36.84.180 port 38704 ssh2
Sep  9 19:15:41 h2177944 sshd\[28342\]: Invalid user git from 103.36.84.180 port 43694
...
2019-09-10 01:38:50
140.143.241.251 attack
Sep  9 05:51:57 auw2 sshd\[19109\]: Invalid user amsftp from 140.143.241.251
Sep  9 05:51:57 auw2 sshd\[19109\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.241.251
Sep  9 05:51:59 auw2 sshd\[19109\]: Failed password for invalid user amsftp from 140.143.241.251 port 47292 ssh2
Sep  9 05:56:44 auw2 sshd\[19555\]: Invalid user user from 140.143.241.251
Sep  9 05:56:44 auw2 sshd\[19555\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.241.251
2019-09-10 01:57:51
49.88.112.112 attackbots
Sep  9 20:01:14 rpi sshd[12847]: Failed password for root from 49.88.112.112 port 51408 ssh2
Sep  9 20:01:18 rpi sshd[12847]: Failed password for root from 49.88.112.112 port 51408 ssh2
2019-09-10 02:02:00
218.98.26.168 attackbotsspam
Sep  9 04:57:57 debian sshd[26313]: Unable to negotiate with 218.98.26.168 port 34937: no matching key exchange method found. Their offer: ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth]
Sep  9 11:41:03 debian sshd[12753]: Unable to negotiate with 218.98.26.168 port 44238: no matching key exchange method found. Their offer: ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth]
...
2019-09-10 00:25:58
104.243.41.97 attackbots
Sep  9 13:15:28 ny01 sshd[14932]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.243.41.97
Sep  9 13:15:30 ny01 sshd[14932]: Failed password for invalid user node from 104.243.41.97 port 59768 ssh2
Sep  9 13:20:43 ny01 sshd[15886]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.243.41.97
2019-09-10 01:24:13
114.237.134.176 attackspambots
Brute force SMTP login attempts.
2019-09-10 02:00:07

Recently Reported IPs

89.248.172.151 5.182.39.3 45.148.10.223 45.148.10.230
185.62.190.7 185.62.189.253 190.14.39.55 84.54.57.168
169.45.161.165 188.209.52.169 89.248.174.34 92.119.160.215
188.209.52.173 181.174.164.252 103.146.196.24 176.121.14.16
167.94.145.204 185.100.87.244 188.74.168.98 89.248.171.159