Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Amsterdam

Region: North Holland

Country: Netherlands

Internet Service Provider: Bunea Telecom SRL

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackbots
MultiHost/MultiPort Probe, Scan, Hack -
2020-05-23 00:02:47
attackspambots
smtp attack
2019-11-20 00:46:28
Comments on same subnet:
IP Type Details Datetime
45.148.10.247 botsattack
45.148.10.247/Trojan Linux
2025-11-19 14:09:00
45.148.10.241 attack
DDoS Inbound
2023-11-15 18:54:04
45.148.10.28 attackspam
Oct 13 20:18:40 sshgateway sshd\[2360\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.28  user=root
Oct 13 20:18:43 sshgateway sshd\[2360\]: Failed password for root from 45.148.10.28 port 40178 ssh2
Oct 13 20:19:07 sshgateway sshd\[2364\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.28  user=root
2020-10-14 02:28:44
45.148.10.15 attackspambots
Bruteforce detected by fail2ban
2020-10-13 21:25:53
45.148.10.186 attackspam
Unable to negotiate with 45.148.10.186 port 47964: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth]
2020-10-13 21:24:21
45.148.10.28 attackbotsspam
SSH Server Abuse (45.148.10.28 as ): 
...
2020-10-13 17:43:00
45.148.10.15 attackbotsspam
Oct 13 05:18:03 server2 sshd\[31409\]: Invalid user user from 45.148.10.15
Oct 13 05:18:48 server2 sshd\[31424\]: Invalid user server from 45.148.10.15
Oct 13 05:19:33 server2 sshd\[31465\]: Invalid user steam from 45.148.10.15
Oct 13 05:20:17 server2 sshd\[31678\]: Invalid user vmware from 45.148.10.15
Oct 13 05:21:00 server2 sshd\[31685\]: Invalid user microsoft from 45.148.10.15
Oct 13 05:21:44 server2 sshd\[31730\]: Invalid user cloud from 45.148.10.15
2020-10-13 12:52:46
45.148.10.186 attackspam
Oct 13 05:33:03 ns308116 sshd[11001]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.186  user=root
Oct 13 05:33:05 ns308116 sshd[11001]: Failed password for root from 45.148.10.186 port 41866 ssh2
Oct 13 05:33:38 ns308116 sshd[11016]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.186  user=root
Oct 13 05:33:40 ns308116 sshd[11016]: Failed password for root from 45.148.10.186 port 39380 ssh2
Oct 13 05:34:15 ns308116 sshd[11027]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.186  user=root
...
2020-10-13 12:50:57
45.148.10.15 attack
Oct 12 23:36:06 srv-ubuntu-dev3 sshd[31523]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.15
Oct 12 23:36:06 srv-ubuntu-dev3 sshd[31523]: Invalid user user from 45.148.10.15
Oct 12 23:36:08 srv-ubuntu-dev3 sshd[31523]: Failed password for invalid user user from 45.148.10.15 port 40704 ssh2
Oct 12 23:36:38 srv-ubuntu-dev3 sshd[31590]: Invalid user 123Diego from 45.148.10.15
Oct 12 23:36:38 srv-ubuntu-dev3 sshd[31590]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.15
Oct 12 23:36:38 srv-ubuntu-dev3 sshd[31590]: Invalid user 123Diego from 45.148.10.15
Oct 12 23:36:40 srv-ubuntu-dev3 sshd[31590]: Failed password for invalid user 123Diego from 45.148.10.15 port 59760 ssh2
Oct 12 23:37:17 srv-ubuntu-dev3 sshd[31656]: Invalid user Alphanetworks from 45.148.10.15
Oct 12 23:37:17 srv-ubuntu-dev3 sshd[31656]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rh
...
2020-10-13 05:40:39
45.148.10.186 attack
Fail2Ban
2020-10-13 05:39:02
45.148.10.15 attackbotsspam
Fail2Ban
2020-10-12 05:52:51
45.148.10.65 attackbots
Invalid user ubuntu from 45.148.10.65 port 43138
2020-10-12 05:36:52
45.148.10.15 attack
Brute force attempt
2020-10-11 21:59:38
45.148.10.65 attackspam
Oct 01 10:49:15 host sshd[12378]: Invalid user ubuntu from 45.148.10.65 port 41060
2020-10-11 21:43:21
45.148.10.28 attack
Fail2Ban automatic report:
SSH brute-force:
2020-10-11 21:05:28
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.148.10.9
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54813
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.148.10.9.			IN	A

;; AUTHORITY SECTION:
.			550	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019110401 1800 900 604800 86400

;; Query time: 190 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Nov 05 09:50:53 CST 2019
;; MSG SIZE  rcvd: 115
Host info
Host 9.10.148.45.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 9.10.148.45.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
103.253.42.54 attack
Oct  7 08:42:28 mail postfix/smtpd\[22798\]: warning: unknown\[103.253.42.54\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Oct  7 08:51:36 mail postfix/smtpd\[23474\]: warning: unknown\[103.253.42.54\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Oct  7 09:28:53 mail postfix/smtpd\[25061\]: warning: unknown\[103.253.42.54\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Oct  7 09:38:13 mail postfix/smtpd\[25256\]: warning: unknown\[103.253.42.54\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
2020-10-07 15:40:31
213.32.23.54 attackbotsspam
Oct  7 06:40:15 sshgateway sshd\[2820\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.ip-213-32-23.eu  user=root
Oct  7 06:40:17 sshgateway sshd\[2820\]: Failed password for root from 213.32.23.54 port 59162 ssh2
Oct  7 06:44:46 sshgateway sshd\[2870\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.ip-213-32-23.eu  user=root
2020-10-07 15:49:56
149.28.171.204 attackbots
"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:
2020-10-07 15:22:41
141.98.9.166 attackbots
Oct  7 04:11:03 firewall sshd[32321]: Invalid user admin from 141.98.9.166
Oct  7 04:11:05 firewall sshd[32321]: Failed password for invalid user admin from 141.98.9.166 port 41197 ssh2
Oct  7 04:11:37 firewall sshd[32362]: Invalid user ubnt from 141.98.9.166
...
2020-10-07 15:23:06
45.142.120.149 attackbots
Oct  7 09:46:59 srv01 postfix/smtpd\[11750\]: warning: unknown\[45.142.120.149\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Oct  7 09:47:06 srv01 postfix/smtpd\[11874\]: warning: unknown\[45.142.120.149\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Oct  7 09:47:07 srv01 postfix/smtpd\[11914\]: warning: unknown\[45.142.120.149\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Oct  7 09:47:09 srv01 postfix/smtpd\[11996\]: warning: unknown\[45.142.120.149\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Oct  7 09:47:10 srv01 postfix/smtpd\[11969\]: warning: unknown\[45.142.120.149\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2020-10-07 15:48:13
116.12.251.132 attackbotsspam
Oct  6 19:34:00 mockhub sshd[758984]: Failed password for root from 116.12.251.132 port 58848 ssh2
Oct  6 19:38:04 mockhub sshd[759137]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.12.251.132  user=root
Oct  6 19:38:06 mockhub sshd[759137]: Failed password for root from 116.12.251.132 port 48331 ssh2
...
2020-10-07 15:52:54
14.157.101.128 attack
MultiHost/MultiPort Probe, Scan, Hack -
2020-10-07 15:34:03
192.241.221.114 attackspam
Port scanning [2 denied]
2020-10-07 15:27:20
45.56.70.92 attack
Port scan denied
2020-10-07 15:39:28
165.22.216.217 attack
Oct  7 06:33:14 scw-gallant-ride sshd[6179]: Failed password for root from 165.22.216.217 port 38320 ssh2
2020-10-07 15:56:31
221.229.218.50 attackbotsspam
Oct  7 06:14:57 sso sshd[20905]: Failed password for root from 221.229.218.50 port 44002 ssh2
...
2020-10-07 15:19:00
119.45.48.108 attackbotsspam
Oct  7 09:03:43 fhem-rasp sshd[11112]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.45.48.108  user=root
Oct  7 09:03:45 fhem-rasp sshd[11112]: Failed password for root from 119.45.48.108 port 53290 ssh2
...
2020-10-07 15:45:19
49.234.216.204 attack
Lines containing failures of 49.234.216.204
Oct  6 21:03:46 *** sshd[95980]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.216.204  user=r.r
Oct  6 21:03:48 *** sshd[95980]: Failed password for r.r from 49.234.216.204 port 42510 ssh2
Oct  6 21:03:49 *** sshd[95980]: Received disconnect from 49.234.216.204 port 42510:11: Bye Bye [preauth]
Oct  6 21:03:49 *** sshd[95980]: Disconnected from authenticating user r.r 49.234.216.204 port 42510 [preauth]
Oct  6 21:09:37 *** sshd[96455]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.216.204  user=r.r
Oct  6 21:09:40 *** sshd[96455]: Failed password for r.r from 49.234.216.204 port 43812 ssh2
Oct  6 21:09:40 *** sshd[96455]: Received disconnect from 49.234.216.204 port 43812:11: Bye Bye [preauth]
Oct  6 21:09:40 *** sshd[96455]: Disconnected from authenticating user r.r 49.234.216.204 port 43812 [preauth]
Oct  6 21:11:23 *** sshd[9662........
------------------------------
2020-10-07 15:42:44
45.234.30.21 attack
[Wed Oct 07 03:42:09.143505 2020] [:error] [pid 19921:tid 140276056164096] [client 45.234.30.21:37675] [client 45.234.30.21] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/coreruleset-3.3.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "756"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197:80"] [severity "WARNING"] [ver "OWASP_CRS/3.3.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/"] [unique_id "X3zWoae6zWKD7BmBq4pJDQAAAME"]
...
2020-10-07 15:25:40
51.158.145.216 attackbotsspam
Automatic report - Banned IP Access
2020-10-07 15:56:47

Recently Reported IPs

134.209.169.82 222.187.226.88 201.81.167.142 222.106.216.123
177.207.44.217 213.109.235.231 169.236.236.7 106.120.132.5
101.6.6.219 212.56.131.70 45.76.33.159 172.69.134.233
106.13.134.164 201.81.167.244 201.81.167.26 201.81.167.81
201.81.167.134 36.234.143.214 141.136.76.217 104.13.221.147