Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Netherlands

Internet Service Provider: Sijmen Klaas Bakker

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspam
SSH break in attempt
...
2020-10-08 06:01:36
attackspambots
Oct  7 08:36:41 server2 sshd\[17529\]: Invalid user fake from 45.148.122.197
Oct  7 08:36:42 server2 sshd\[17531\]: Invalid user admin from 45.148.122.197
Oct  7 08:36:42 server2 sshd\[17534\]: User root from 45.148.122.197 not allowed because not listed in AllowUsers
Oct  7 08:36:42 server2 sshd\[17536\]: Invalid user ubnt from 45.148.122.197
Oct  7 08:36:42 server2 sshd\[17538\]: Invalid user guest from 45.148.122.197
Oct  7 08:36:42 server2 sshd\[17540\]: Invalid user support from 45.148.122.197
2020-10-07 14:20:21
Comments on same subnet:
IP Type Details Datetime
45.148.122.173 attack
Found on   Github Combined on 5 lists    / proto=6  .  srcport=38085  .  dstport=22 SSH  .     (1783)
2020-10-10 22:13:00
45.148.122.173 attackspambots
 TCP (SYN) 45.148.122.173:55294 -> port 22, len 44
2020-10-10 14:06:14
45.148.122.198 attackbots
45.148.122.198 (NL/Netherlands/-), 7 distributed sshd attacks on account [admin] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Oct  9 15:36:00 server2 sshd[588]: Invalid user admin from 141.98.10.211 port 38043
Oct  9 15:36:02 server2 sshd[588]: Failed password for invalid user admin from 141.98.10.211 port 38043 ssh2
Oct  9 15:53:29 server2 sshd[3928]: Invalid user admin from 45.148.122.198 port 38950
Oct  9 15:36:18 server2 sshd[711]: Invalid user admin from 141.98.10.214 port 42111
Oct  9 15:44:57 server2 sshd[2289]: Invalid user admin from 59.124.6.166 port 40431
Oct  9 15:44:59 server2 sshd[2289]: Failed password for invalid user admin from 59.124.6.166 port 40431 ssh2
Oct  9 15:36:20 server2 sshd[711]: Failed password for invalid user admin from 141.98.10.214 port 42111 ssh2

IP Addresses Blocked:

141.98.10.211 (LT/Republic of Lithuania/-)
2020-10-10 03:28:32
45.148.122.20 attack
Invalid user fake from 45.148.122.20 port 39788
2020-10-10 02:28:00
45.148.122.198 attackbots
Oct  9 12:33:03 hosting sshd[8474]: Invalid user fake from 45.148.122.198 port 59070
Oct  9 12:33:03 hosting sshd[8474]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.122.198
Oct  9 12:33:03 hosting sshd[8474]: Invalid user fake from 45.148.122.198 port 59070
Oct  9 12:33:05 hosting sshd[8474]: Failed password for invalid user fake from 45.148.122.198 port 59070 ssh2
Oct  9 12:33:05 hosting sshd[8478]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.122.198  user=admin
Oct  9 12:33:08 hosting sshd[8478]: Failed password for admin from 45.148.122.198 port 34242 ssh2
...
2020-10-09 19:22:02
45.148.122.20 attackbotsspam
Port scan denied
2020-10-09 18:13:26
45.148.122.20 attack
SmallBizIT.US 1 packets to tcp(22)
2020-10-08 06:30:10
45.148.122.20 attackspambots
2020-10-07T14:00:17.447179abusebot-4.cloudsearch.cf sshd[25041]: Invalid user fake from 45.148.122.20 port 52020
2020-10-07T14:00:17.454999abusebot-4.cloudsearch.cf sshd[25041]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.122.20
2020-10-07T14:00:17.447179abusebot-4.cloudsearch.cf sshd[25041]: Invalid user fake from 45.148.122.20 port 52020
2020-10-07T14:00:19.062648abusebot-4.cloudsearch.cf sshd[25041]: Failed password for invalid user fake from 45.148.122.20 port 52020 ssh2
2020-10-07T14:00:19.672038abusebot-4.cloudsearch.cf sshd[25045]: Invalid user admin from 45.148.122.20 port 55756
2020-10-07T14:00:19.678447abusebot-4.cloudsearch.cf sshd[25045]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.122.20
2020-10-07T14:00:19.672038abusebot-4.cloudsearch.cf sshd[25045]: Invalid user admin from 45.148.122.20 port 55756
2020-10-07T14:00:21.560864abusebot-4.cloudsearch.cf sshd[25045]: Failed pa
...
2020-10-07 22:49:52
45.148.122.192 attackspambots
[portscan] tcp/22 [SSH]
in blocklist.de:'listed [ssh]'
*(RWIN=65535)(10061547)
2020-10-07 20:36:02
45.148.122.20 attackspambots
Oct  7 16:37:58 localhost sshd[2402005]: Disconnected from 45.148.122.20 port 49726 [preauth]
...
2020-10-07 14:53:59
45.148.122.192 attack
(sshd) Failed SSH login from 45.148.122.192 (NL/Netherlands/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct  7 00:19:34 optimus sshd[6496]: Invalid user fake from 45.148.122.192
Oct  7 00:19:34 optimus sshd[6496]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.122.192 
Oct  7 00:19:36 optimus sshd[6496]: Failed password for invalid user fake from 45.148.122.192 port 43392 ssh2
Oct  7 00:19:37 optimus sshd[6511]: Invalid user admin from 45.148.122.192
Oct  7 00:19:37 optimus sshd[6511]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.122.192
2020-10-07 12:21:05
45.148.122.192 attack
Triggered by Fail2Ban at Ares web server
2020-10-07 07:45:12
45.148.122.155 attack
MultiHost/MultiPort Probe, Scan, Hack -
2020-10-07 05:14:58
45.148.122.192 attack
Invalid user fake from 45.148.122.192 port 47588
2020-10-07 00:14:38
45.148.122.155 attackspam
MultiHost/MultiPort Probe, Scan, Hack -
2020-10-06 21:23:22
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.148.122.197
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13122
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.148.122.197.			IN	A

;; AUTHORITY SECTION:
.			541	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020100700 1800 900 604800 86400

;; Query time: 63 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Oct 07 14:20:14 CST 2020
;; MSG SIZE  rcvd: 118
Host info
Host 197.122.148.45.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 197.122.148.45.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
112.85.42.227 attackspambots
Aug  1 19:24:06 aat-srv002 sshd[26158]: Failed password for root from 112.85.42.227 port 40364 ssh2
Aug  1 19:26:29 aat-srv002 sshd[26238]: Failed password for root from 112.85.42.227 port 32738 ssh2
Aug  1 19:28:02 aat-srv002 sshd[26270]: Failed password for root from 112.85.42.227 port 53982 ssh2
...
2019-08-02 08:50:57
185.220.101.70 attack
SSH Brute Force
2019-08-02 08:49:02
51.77.231.213 attack
Aug  2 06:18:10 vibhu-HP-Z238-Microtower-Workstation sshd\[30756\]: Invalid user maven from 51.77.231.213
Aug  2 06:18:10 vibhu-HP-Z238-Microtower-Workstation sshd\[30756\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.231.213
Aug  2 06:18:12 vibhu-HP-Z238-Microtower-Workstation sshd\[30756\]: Failed password for invalid user maven from 51.77.231.213 port 44634 ssh2
Aug  2 06:22:36 vibhu-HP-Z238-Microtower-Workstation sshd\[30885\]: Invalid user skomemer from 51.77.231.213
Aug  2 06:22:36 vibhu-HP-Z238-Microtower-Workstation sshd\[30885\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.231.213
...
2019-08-02 08:52:40
81.22.45.54 attackbotsspam
MultiHost/MultiPort Probe, Scan, Hack -
2019-08-02 08:37:47
129.232.155.190 attackbots
RDP Bruteforce
2019-08-02 09:06:27
106.52.25.204 attackspam
Invalid user kristen from 106.52.25.204 port 35102
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.25.204
Failed password for invalid user kristen from 106.52.25.204 port 35102 ssh2
Invalid user mirror03 from 106.52.25.204 port 44472
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.25.204
2019-08-02 08:41:08
61.32.112.246 attackbotsspam
Aug  2 01:24:28 localhost sshd\[35435\]: Invalid user ftptest from 61.32.112.246 port 47994
Aug  2 01:24:28 localhost sshd\[35435\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.32.112.246
...
2019-08-02 08:39:22
114.108.177.69 attackspambots
SMB Server BruteForce Attack
2019-08-02 08:24:30
43.226.38.26 attack
Aug  2 01:13:45 ms-srv sshd[48788]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.226.38.26
Aug  2 01:13:47 ms-srv sshd[48788]: Failed password for invalid user fabio from 43.226.38.26 port 47024 ssh2
2019-08-02 08:47:15
46.166.160.68 attackbotsspam
MultiHost/MultiPort Probe, Scan, Hack -
2019-08-02 08:44:27
213.136.80.247 attack
213.136.80.247 - - [02/Aug/2019:01:26:42 +0200] "GET /wp-login.php HTTP/1.1" 200 1301 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
213.136.80.247 - - [02/Aug/2019:01:26:42 +0200] "POST /wp-login.php HTTP/1.1" 200 1704 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
213.136.80.247 - - [02/Aug/2019:01:26:42 +0200] "GET /wp-login.php HTTP/1.1" 200 1301 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
213.136.80.247 - - [02/Aug/2019:01:26:43 +0200] "POST /wp-login.php HTTP/1.1" 200 1684 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
213.136.80.247 - - [02/Aug/2019:01:26:43 +0200] "GET /wp-login.php HTTP/1.1" 200 1301 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
213.136.80.247 - - [02/Aug/2019:01:26:43 +0200] "POST /wp-login.php HTTP/1.1" 200 1688 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2019-08-02 08:17:05
193.171.202.150 attack
Automatic report - Banned IP Access
2019-08-02 08:55:44
110.137.235.63 attackspambots
Automatic report - Port Scan Attack
2019-08-02 08:49:32
157.230.128.195 attackbots
01.08.2019 23:25:50 Connection to port 916 blocked by firewall
2019-08-02 08:44:44
116.228.53.173 attackbots
Aug  2 02:44:47 srv206 sshd[32096]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.228.53.173  user=root
Aug  2 02:44:49 srv206 sshd[32096]: Failed password for root from 116.228.53.173 port 33398 ssh2
...
2019-08-02 08:58:24

Recently Reported IPs

113.184.0.184 165.232.35.209 115.96.111.15 225.112.139.82
65.52.228.155 179.191.87.166 103.207.7.222 81.68.200.73
92.223.89.140 46.228.205.237 56.213.244.182 46.8.106.35
144.91.113.165 205.128.165.53 106.55.251.81 142.112.164.121
83.199.211.116 176.111.173.21 193.112.164.105 179.75.168.219