City: Amsterdam
Region: Noord Holland
Country: Netherlands
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 45.148.10.247 | botsattack | 45.148.10.247/Trojan Linux |
2025-11-19 14:09:00 |
| 45.148.10.241 | attack | DDoS Inbound |
2023-11-15 18:54:04 |
| 45.148.10.28 | attackspam | Oct 13 20:18:40 sshgateway sshd\[2360\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.28 user=root Oct 13 20:18:43 sshgateway sshd\[2360\]: Failed password for root from 45.148.10.28 port 40178 ssh2 Oct 13 20:19:07 sshgateway sshd\[2364\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.28 user=root |
2020-10-14 02:28:44 |
| 45.148.10.15 | attackspambots | Bruteforce detected by fail2ban |
2020-10-13 21:25:53 |
| 45.148.10.186 | attackspam | Unable to negotiate with 45.148.10.186 port 47964: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] |
2020-10-13 21:24:21 |
| 45.148.10.28 | attackbotsspam | SSH Server Abuse (45.148.10.28 as |
2020-10-13 17:43:00 |
| 45.148.10.15 | attackbotsspam | Oct 13 05:18:03 server2 sshd\[31409\]: Invalid user user from 45.148.10.15 Oct 13 05:18:48 server2 sshd\[31424\]: Invalid user server from 45.148.10.15 Oct 13 05:19:33 server2 sshd\[31465\]: Invalid user steam from 45.148.10.15 Oct 13 05:20:17 server2 sshd\[31678\]: Invalid user vmware from 45.148.10.15 Oct 13 05:21:00 server2 sshd\[31685\]: Invalid user microsoft from 45.148.10.15 Oct 13 05:21:44 server2 sshd\[31730\]: Invalid user cloud from 45.148.10.15 |
2020-10-13 12:52:46 |
| 45.148.10.186 | attackspam | Oct 13 05:33:03 ns308116 sshd[11001]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.186 user=root Oct 13 05:33:05 ns308116 sshd[11001]: Failed password for root from 45.148.10.186 port 41866 ssh2 Oct 13 05:33:38 ns308116 sshd[11016]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.186 user=root Oct 13 05:33:40 ns308116 sshd[11016]: Failed password for root from 45.148.10.186 port 39380 ssh2 Oct 13 05:34:15 ns308116 sshd[11027]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.186 user=root ... |
2020-10-13 12:50:57 |
| 45.148.10.15 | attack | Oct 12 23:36:06 srv-ubuntu-dev3 sshd[31523]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.15 Oct 12 23:36:06 srv-ubuntu-dev3 sshd[31523]: Invalid user user from 45.148.10.15 Oct 12 23:36:08 srv-ubuntu-dev3 sshd[31523]: Failed password for invalid user user from 45.148.10.15 port 40704 ssh2 Oct 12 23:36:38 srv-ubuntu-dev3 sshd[31590]: Invalid user 123Diego from 45.148.10.15 Oct 12 23:36:38 srv-ubuntu-dev3 sshd[31590]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.15 Oct 12 23:36:38 srv-ubuntu-dev3 sshd[31590]: Invalid user 123Diego from 45.148.10.15 Oct 12 23:36:40 srv-ubuntu-dev3 sshd[31590]: Failed password for invalid user 123Diego from 45.148.10.15 port 59760 ssh2 Oct 12 23:37:17 srv-ubuntu-dev3 sshd[31656]: Invalid user Alphanetworks from 45.148.10.15 Oct 12 23:37:17 srv-ubuntu-dev3 sshd[31656]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rh ... |
2020-10-13 05:40:39 |
| 45.148.10.186 | attack | Fail2Ban |
2020-10-13 05:39:02 |
| 45.148.10.15 | attackbotsspam | Fail2Ban |
2020-10-12 05:52:51 |
| 45.148.10.65 | attackbots | Invalid user ubuntu from 45.148.10.65 port 43138 |
2020-10-12 05:36:52 |
| 45.148.10.15 | attack | Brute force attempt |
2020-10-11 21:59:38 |
| 45.148.10.65 | attackspam | Oct 01 10:49:15 host sshd[12378]: Invalid user ubuntu from 45.148.10.65 port 41060 |
2020-10-11 21:43:21 |
| 45.148.10.28 | attack | Fail2Ban automatic report: SSH brute-force: |
2020-10-11 21:05:28 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.148.10.47
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11005
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;45.148.10.47. IN A
;; AUTHORITY SECTION:
. 549 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022091502 1800 900 604800 86400
;; Query time: 60 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Sep 16 10:15:31 CST 2022
;; MSG SIZE rcvd: 105
47.10.148.45.in-addr.arpa domain name pointer nuidy.co.uk.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
47.10.148.45.in-addr.arpa name = nuidy.co.uk.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 154.209.2.39 | attackbotsspam | Scanning and Vuln Attempts |
2019-06-26 16:40:13 |
| 180.247.134.122 | attackbots | Unauthorized connection attempt from IP address 180.247.134.122 on Port 445(SMB) |
2019-06-26 16:58:55 |
| 150.95.108.33 | attackbotsspam | Scanning and Vuln Attempts |
2019-06-26 17:07:50 |
| 94.23.144.102 | attackbots | 94.23.144.102 - - \[26/Jun/2019:08:02:20 +0200\] "POST /wp-login.php HTTP/1.1" 200 2110 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 94.23.144.102 - - \[26/Jun/2019:08:02:20 +0200\] "POST /wp-login.php HTTP/1.1" 200 2091 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" ... |
2019-06-26 17:04:50 |
| 41.242.50.73 | attack | Unauthorised access (Jun 26) SRC=41.242.50.73 LEN=40 TTL=243 ID=63816 TCP DPT=445 WINDOW=1024 SYN |
2019-06-26 17:07:27 |
| 156.54.202.242 | attackbots | WordPress login Brute force / Web App Attack on client site. |
2019-06-26 16:34:39 |
| 36.251.148.228 | attackspambots | Automated report - ssh fail2ban: Jun 26 06:04:39 wrong password, user=root, port=55492, ssh2 Jun 26 06:04:43 wrong password, user=root, port=55492, ssh2 Jun 26 06:04:47 wrong password, user=root, port=55492, ssh2 |
2019-06-26 16:48:42 |
| 134.209.239.68 | attack | DATE:2019-06-26_05:47:58, IP:134.209.239.68, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc) |
2019-06-26 17:03:40 |
| 81.177.142.149 | attackspam | 445/tcp 445/tcp 445/tcp... [2019-05-05/06-26]9pkt,1pt.(tcp) |
2019-06-26 17:14:02 |
| 69.50.64.34 | attack | firewall-block, port(s): 445/tcp |
2019-06-26 16:38:06 |
| 99.37.246.236 | attack | Brute force attempt |
2019-06-26 16:43:29 |
| 154.212.180.66 | attackspambots | Unauthorized connection attempt from IP address 154.212.180.66 on Port 445(SMB) |
2019-06-26 16:37:08 |
| 14.98.39.14 | attackspambots | 445/tcp 445/tcp 445/tcp [2019-05-27/06-26]3pkt |
2019-06-26 17:12:27 |
| 150.138.117.223 | attackspambots | Scanning and Vuln Attempts |
2019-06-26 17:09:40 |
| 115.188.120.244 | attackspambots | Looking for resource vulnerabilities |
2019-06-26 16:35:03 |