Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Netherlands

Internet Service Provider: Sijmen Klaas Bakker

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackbotsspam
 TCP (SYN) 45.148.122.102:51555 -> port 22, len 44
2020-10-06 06:09:44
attackbotsspam
Connection to SSH Honeypot - Detected by HoneypotDB
2020-10-05 22:14:13
attack
Oct  5 05:55:41 ip-172-31-42-142 sshd\[3921\]: Invalid user fake from 45.148.122.102\
Oct  5 05:55:43 ip-172-31-42-142 sshd\[3921\]: Failed password for invalid user fake from 45.148.122.102 port 58206 ssh2\
Oct  5 05:55:43 ip-172-31-42-142 sshd\[3923\]: Invalid user admin from 45.148.122.102\
Oct  5 05:55:45 ip-172-31-42-142 sshd\[3923\]: Failed password for invalid user admin from 45.148.122.102 port 34680 ssh2\
Oct  5 05:55:48 ip-172-31-42-142 sshd\[3925\]: Failed password for root from 45.148.122.102 port 39514 ssh2\
2020-10-05 14:08:42
attackbotsspam
Oct  3 17:54:08 localhost sshd[55958]: Invalid user fake from 45.148.122.102 port 46946
Oct  3 17:54:08 localhost sshd[55958]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=publish-property.ru
Oct  3 17:54:08 localhost sshd[55958]: Invalid user fake from 45.148.122.102 port 46946
Oct  3 17:54:10 localhost sshd[55958]: Failed password for invalid user fake from 45.148.122.102 port 46946 ssh2
Oct  3 17:54:11 localhost sshd[55968]: Invalid user admin from 45.148.122.102 port 51278
...
2020-10-04 02:42:26
attackbotsspam
SSH login attempts.
2020-10-03 18:31:33
Comments on same subnet:
IP Type Details Datetime
45.148.122.173 attack
Found on   Github Combined on 5 lists    / proto=6  .  srcport=38085  .  dstport=22 SSH  .     (1783)
2020-10-10 22:13:00
45.148.122.173 attackspambots
 TCP (SYN) 45.148.122.173:55294 -> port 22, len 44
2020-10-10 14:06:14
45.148.122.198 attackbots
45.148.122.198 (NL/Netherlands/-), 7 distributed sshd attacks on account [admin] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Oct  9 15:36:00 server2 sshd[588]: Invalid user admin from 141.98.10.211 port 38043
Oct  9 15:36:02 server2 sshd[588]: Failed password for invalid user admin from 141.98.10.211 port 38043 ssh2
Oct  9 15:53:29 server2 sshd[3928]: Invalid user admin from 45.148.122.198 port 38950
Oct  9 15:36:18 server2 sshd[711]: Invalid user admin from 141.98.10.214 port 42111
Oct  9 15:44:57 server2 sshd[2289]: Invalid user admin from 59.124.6.166 port 40431
Oct  9 15:44:59 server2 sshd[2289]: Failed password for invalid user admin from 59.124.6.166 port 40431 ssh2
Oct  9 15:36:20 server2 sshd[711]: Failed password for invalid user admin from 141.98.10.214 port 42111 ssh2

IP Addresses Blocked:

141.98.10.211 (LT/Republic of Lithuania/-)
2020-10-10 03:28:32
45.148.122.20 attack
Invalid user fake from 45.148.122.20 port 39788
2020-10-10 02:28:00
45.148.122.198 attackbots
Oct  9 12:33:03 hosting sshd[8474]: Invalid user fake from 45.148.122.198 port 59070
Oct  9 12:33:03 hosting sshd[8474]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.122.198
Oct  9 12:33:03 hosting sshd[8474]: Invalid user fake from 45.148.122.198 port 59070
Oct  9 12:33:05 hosting sshd[8474]: Failed password for invalid user fake from 45.148.122.198 port 59070 ssh2
Oct  9 12:33:05 hosting sshd[8478]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.122.198  user=admin
Oct  9 12:33:08 hosting sshd[8478]: Failed password for admin from 45.148.122.198 port 34242 ssh2
...
2020-10-09 19:22:02
45.148.122.20 attackbotsspam
Port scan denied
2020-10-09 18:13:26
45.148.122.20 attack
SmallBizIT.US 1 packets to tcp(22)
2020-10-08 06:30:10
45.148.122.197 attackspam
SSH break in attempt
...
2020-10-08 06:01:36
45.148.122.20 attackspambots
2020-10-07T14:00:17.447179abusebot-4.cloudsearch.cf sshd[25041]: Invalid user fake from 45.148.122.20 port 52020
2020-10-07T14:00:17.454999abusebot-4.cloudsearch.cf sshd[25041]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.122.20
2020-10-07T14:00:17.447179abusebot-4.cloudsearch.cf sshd[25041]: Invalid user fake from 45.148.122.20 port 52020
2020-10-07T14:00:19.062648abusebot-4.cloudsearch.cf sshd[25041]: Failed password for invalid user fake from 45.148.122.20 port 52020 ssh2
2020-10-07T14:00:19.672038abusebot-4.cloudsearch.cf sshd[25045]: Invalid user admin from 45.148.122.20 port 55756
2020-10-07T14:00:19.678447abusebot-4.cloudsearch.cf sshd[25045]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.122.20
2020-10-07T14:00:19.672038abusebot-4.cloudsearch.cf sshd[25045]: Invalid user admin from 45.148.122.20 port 55756
2020-10-07T14:00:21.560864abusebot-4.cloudsearch.cf sshd[25045]: Failed pa
...
2020-10-07 22:49:52
45.148.122.192 attackspambots
[portscan] tcp/22 [SSH]
in blocklist.de:'listed [ssh]'
*(RWIN=65535)(10061547)
2020-10-07 20:36:02
45.148.122.20 attackspambots
Oct  7 16:37:58 localhost sshd[2402005]: Disconnected from 45.148.122.20 port 49726 [preauth]
...
2020-10-07 14:53:59
45.148.122.197 attackspambots
Oct  7 08:36:41 server2 sshd\[17529\]: Invalid user fake from 45.148.122.197
Oct  7 08:36:42 server2 sshd\[17531\]: Invalid user admin from 45.148.122.197
Oct  7 08:36:42 server2 sshd\[17534\]: User root from 45.148.122.197 not allowed because not listed in AllowUsers
Oct  7 08:36:42 server2 sshd\[17536\]: Invalid user ubnt from 45.148.122.197
Oct  7 08:36:42 server2 sshd\[17538\]: Invalid user guest from 45.148.122.197
Oct  7 08:36:42 server2 sshd\[17540\]: Invalid user support from 45.148.122.197
2020-10-07 14:20:21
45.148.122.192 attack
(sshd) Failed SSH login from 45.148.122.192 (NL/Netherlands/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct  7 00:19:34 optimus sshd[6496]: Invalid user fake from 45.148.122.192
Oct  7 00:19:34 optimus sshd[6496]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.122.192 
Oct  7 00:19:36 optimus sshd[6496]: Failed password for invalid user fake from 45.148.122.192 port 43392 ssh2
Oct  7 00:19:37 optimus sshd[6511]: Invalid user admin from 45.148.122.192
Oct  7 00:19:37 optimus sshd[6511]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.122.192
2020-10-07 12:21:05
45.148.122.192 attack
Triggered by Fail2Ban at Ares web server
2020-10-07 07:45:12
45.148.122.155 attack
MultiHost/MultiPort Probe, Scan, Hack -
2020-10-07 05:14:58
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.148.122.102
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19289
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.148.122.102.			IN	A

;; AUTHORITY SECTION:
.			267	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020100300 1800 900 604800 86400

;; Query time: 46 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Oct 03 18:31:29 CST 2020
;; MSG SIZE  rcvd: 118
Host info
102.122.148.45.in-addr.arpa domain name pointer publish-property.ru.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
102.122.148.45.in-addr.arpa	name = publish-property.ru.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
66.42.43.150 attackspambots
Apr 10 13:59:42 server sshd[10498]: Failed password for invalid user apache from 66.42.43.150 port 43516 ssh2
Apr 10 14:05:34 server sshd[12180]: Failed password for invalid user kmiller from 66.42.43.150 port 42836 ssh2
Apr 10 14:09:25 server sshd[13194]: Failed password for root from 66.42.43.150 port 46246 ssh2
2020-04-10 23:06:51
103.39.50.147 attack
Apr 10 14:09:44 [host] sshd[1951]: Invalid user ub
Apr 10 14:09:44 [host] sshd[1951]: pam_unix(sshd:a
Apr 10 14:09:46 [host] sshd[1951]: Failed password
2020-04-10 22:41:06
178.57.89.222 attackbots
Unauthorised access (Apr 10) SRC=178.57.89.222 LEN=52 TTL=120 ID=18694 DF TCP DPT=445 WINDOW=8192 SYN
2020-04-10 22:34:40
68.56.195.109 attackspambots
Wordpress login scanning
2020-04-10 22:56:40
102.182.64.63 attack
2020-04-10T15:54:53.711549struts4.enskede.local sshd\[16598\]: Invalid user user from 102.182.64.63 port 32970
2020-04-10T15:54:53.722841struts4.enskede.local sshd\[16598\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.182.64.63
2020-04-10T15:54:57.311586struts4.enskede.local sshd\[16598\]: Failed password for invalid user user from 102.182.64.63 port 32970 ssh2
2020-04-10T16:00:55.095069struts4.enskede.local sshd\[16791\]: Invalid user uftp from 102.182.64.63 port 52684
2020-04-10T16:00:55.105827struts4.enskede.local sshd\[16791\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.182.64.63
...
2020-04-10 22:57:28
31.223.106.190 attackspambots
20/4/10@08:38:38: FAIL: Alarm-Network address from=31.223.106.190
20/4/10@08:38:38: FAIL: Alarm-Network address from=31.223.106.190
...
2020-04-10 23:14:26
51.38.48.242 attackspambots
Apr 10 12:12:56 localhost sshd[1554]: Invalid user developer from 51.38.48.242 port 51286
Apr 10 12:12:56 localhost sshd[1554]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=242.ip-51-38-48.eu
Apr 10 12:12:56 localhost sshd[1554]: Invalid user developer from 51.38.48.242 port 51286
Apr 10 12:12:59 localhost sshd[1554]: Failed password for invalid user developer from 51.38.48.242 port 51286 ssh2
Apr 10 12:16:25 localhost sshd[1925]: Invalid user teamspeak3 from 51.38.48.242 port 59510
...
2020-04-10 22:30:00
49.88.112.111 attack
Apr 10 14:10:36 scw-6657dc sshd[13237]: Failed password for root from 49.88.112.111 port 64304 ssh2
Apr 10 14:10:36 scw-6657dc sshd[13237]: Failed password for root from 49.88.112.111 port 64304 ssh2
Apr 10 14:10:39 scw-6657dc sshd[13237]: Failed password for root from 49.88.112.111 port 64304 ssh2
...
2020-04-10 22:50:10
51.255.170.237 attackspambots
51.255.170.237 - - [10/Apr/2020:18:19:12 +0400] "POST /GponForm/diag_Form?style/ HTTP/1.1" 502 157 "-" "curl/7.3.2"
...
2020-04-10 22:49:50
104.244.74.143 attack
" "
2020-04-10 23:05:51
49.88.112.77 attackbots
Apr 10 11:10:33 firewall sshd[29912]: Failed password for root from 49.88.112.77 port 56472 ssh2
Apr 10 11:10:35 firewall sshd[29912]: Failed password for root from 49.88.112.77 port 56472 ssh2
Apr 10 11:10:39 firewall sshd[29912]: Failed password for root from 49.88.112.77 port 56472 ssh2
...
2020-04-10 22:53:14
95.88.128.23 attack
Apr 10 15:27:41 DAAP sshd[1536]: Invalid user admin from 95.88.128.23 port 14659
Apr 10 15:27:41 DAAP sshd[1536]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.88.128.23
Apr 10 15:27:41 DAAP sshd[1536]: Invalid user admin from 95.88.128.23 port 14659
Apr 10 15:27:44 DAAP sshd[1536]: Failed password for invalid user admin from 95.88.128.23 port 14659 ssh2
Apr 10 15:31:48 DAAP sshd[1611]: Invalid user ftptest from 95.88.128.23 port 2738
...
2020-04-10 22:45:05
203.110.166.51 attackbots
Brute-force attempt banned
2020-04-10 23:11:21
222.186.30.218 attack
Apr 10 16:54:37 plex sshd[27809]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.218  user=root
Apr 10 16:54:39 plex sshd[27809]: Failed password for root from 222.186.30.218 port 48850 ssh2
2020-04-10 23:02:37
188.254.0.170 attackbots
Apr 10 16:19:35 host5 sshd[31835]: Invalid user contact from 188.254.0.170 port 38564
...
2020-04-10 22:50:40

Recently Reported IPs

43.231.162.84 254.12.189.151 115.78.186.82 90.33.124.211
197.37.18.184 69.59.127.229 118.91.100.230 51.255.37.160
3.41.231.206 64.72.155.141 121.237.139.69 181.70.229.16
177.139.129.17 37.157.191.182 34.217.84.104 27.77.115.4
89.40.70.135 111.72.196.94 178.128.210.230 176.212.100.15