Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Netherlands

Internet Service Provider: Sijmen Klaas Bakker

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackbots
45.148.122.198 (NL/Netherlands/-), 7 distributed sshd attacks on account [admin] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Oct  9 15:36:00 server2 sshd[588]: Invalid user admin from 141.98.10.211 port 38043
Oct  9 15:36:02 server2 sshd[588]: Failed password for invalid user admin from 141.98.10.211 port 38043 ssh2
Oct  9 15:53:29 server2 sshd[3928]: Invalid user admin from 45.148.122.198 port 38950
Oct  9 15:36:18 server2 sshd[711]: Invalid user admin from 141.98.10.214 port 42111
Oct  9 15:44:57 server2 sshd[2289]: Invalid user admin from 59.124.6.166 port 40431
Oct  9 15:44:59 server2 sshd[2289]: Failed password for invalid user admin from 59.124.6.166 port 40431 ssh2
Oct  9 15:36:20 server2 sshd[711]: Failed password for invalid user admin from 141.98.10.214 port 42111 ssh2

IP Addresses Blocked:

141.98.10.211 (LT/Republic of Lithuania/-)
2020-10-10 03:28:32
attackbots
Oct  9 12:33:03 hosting sshd[8474]: Invalid user fake from 45.148.122.198 port 59070
Oct  9 12:33:03 hosting sshd[8474]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.122.198
Oct  9 12:33:03 hosting sshd[8474]: Invalid user fake from 45.148.122.198 port 59070
Oct  9 12:33:05 hosting sshd[8474]: Failed password for invalid user fake from 45.148.122.198 port 59070 ssh2
Oct  9 12:33:05 hosting sshd[8478]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.122.198  user=admin
Oct  9 12:33:08 hosting sshd[8478]: Failed password for admin from 45.148.122.198 port 34242 ssh2
...
2020-10-09 19:22:02
attackbots
Auto Fail2Ban report, multiple SSH login attempts.
2020-10-05 07:38:32
attack
 TCP (SYN) 45.148.122.198:56417 -> port 22, len 40
2020-10-04 23:55:44
attackbotsspam
 TCP (SYN) 45.148.122.198:42905 -> port 22, len 44
2020-10-04 15:39:15
Comments on same subnet:
IP Type Details Datetime
45.148.122.173 attack
Found on   Github Combined on 5 lists    / proto=6  .  srcport=38085  .  dstport=22 SSH  .     (1783)
2020-10-10 22:13:00
45.148.122.173 attackspambots
 TCP (SYN) 45.148.122.173:55294 -> port 22, len 44
2020-10-10 14:06:14
45.148.122.20 attack
Invalid user fake from 45.148.122.20 port 39788
2020-10-10 02:28:00
45.148.122.20 attackbotsspam
Port scan denied
2020-10-09 18:13:26
45.148.122.20 attack
SmallBizIT.US 1 packets to tcp(22)
2020-10-08 06:30:10
45.148.122.197 attackspam
SSH break in attempt
...
2020-10-08 06:01:36
45.148.122.20 attackspambots
2020-10-07T14:00:17.447179abusebot-4.cloudsearch.cf sshd[25041]: Invalid user fake from 45.148.122.20 port 52020
2020-10-07T14:00:17.454999abusebot-4.cloudsearch.cf sshd[25041]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.122.20
2020-10-07T14:00:17.447179abusebot-4.cloudsearch.cf sshd[25041]: Invalid user fake from 45.148.122.20 port 52020
2020-10-07T14:00:19.062648abusebot-4.cloudsearch.cf sshd[25041]: Failed password for invalid user fake from 45.148.122.20 port 52020 ssh2
2020-10-07T14:00:19.672038abusebot-4.cloudsearch.cf sshd[25045]: Invalid user admin from 45.148.122.20 port 55756
2020-10-07T14:00:19.678447abusebot-4.cloudsearch.cf sshd[25045]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.122.20
2020-10-07T14:00:19.672038abusebot-4.cloudsearch.cf sshd[25045]: Invalid user admin from 45.148.122.20 port 55756
2020-10-07T14:00:21.560864abusebot-4.cloudsearch.cf sshd[25045]: Failed pa
...
2020-10-07 22:49:52
45.148.122.192 attackspambots
[portscan] tcp/22 [SSH]
in blocklist.de:'listed [ssh]'
*(RWIN=65535)(10061547)
2020-10-07 20:36:02
45.148.122.20 attackspambots
Oct  7 16:37:58 localhost sshd[2402005]: Disconnected from 45.148.122.20 port 49726 [preauth]
...
2020-10-07 14:53:59
45.148.122.197 attackspambots
Oct  7 08:36:41 server2 sshd\[17529\]: Invalid user fake from 45.148.122.197
Oct  7 08:36:42 server2 sshd\[17531\]: Invalid user admin from 45.148.122.197
Oct  7 08:36:42 server2 sshd\[17534\]: User root from 45.148.122.197 not allowed because not listed in AllowUsers
Oct  7 08:36:42 server2 sshd\[17536\]: Invalid user ubnt from 45.148.122.197
Oct  7 08:36:42 server2 sshd\[17538\]: Invalid user guest from 45.148.122.197
Oct  7 08:36:42 server2 sshd\[17540\]: Invalid user support from 45.148.122.197
2020-10-07 14:20:21
45.148.122.192 attack
(sshd) Failed SSH login from 45.148.122.192 (NL/Netherlands/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct  7 00:19:34 optimus sshd[6496]: Invalid user fake from 45.148.122.192
Oct  7 00:19:34 optimus sshd[6496]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.122.192 
Oct  7 00:19:36 optimus sshd[6496]: Failed password for invalid user fake from 45.148.122.192 port 43392 ssh2
Oct  7 00:19:37 optimus sshd[6511]: Invalid user admin from 45.148.122.192
Oct  7 00:19:37 optimus sshd[6511]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.122.192
2020-10-07 12:21:05
45.148.122.192 attack
Triggered by Fail2Ban at Ares web server
2020-10-07 07:45:12
45.148.122.155 attack
MultiHost/MultiPort Probe, Scan, Hack -
2020-10-07 05:14:58
45.148.122.192 attack
Invalid user fake from 45.148.122.192 port 47588
2020-10-07 00:14:38
45.148.122.155 attackspam
MultiHost/MultiPort Probe, Scan, Hack -
2020-10-06 21:23:22
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.148.122.198
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52033
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.148.122.198.			IN	A

;; AUTHORITY SECTION:
.			533	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020100301 1800 900 604800 86400

;; Query time: 93 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Oct 04 15:39:10 CST 2020
;; MSG SIZE  rcvd: 118
Host info
Host 198.122.148.45.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 198.122.148.45.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
51.77.141.154 attack
51.77.141.154 - - \[17/Feb/2020:19:20:25 +0100\] "POST /wp-login.php HTTP/1.0" 200 7561 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
51.77.141.154 - - \[17/Feb/2020:19:20:26 +0100\] "POST /wp-login.php HTTP/1.0" 200 7563 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
51.77.141.154 - - \[17/Feb/2020:19:20:27 +0100\] "POST /wp-login.php HTTP/1.0" 200 7419 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2020-02-18 04:22:41
51.75.18.215 attack
Feb 17 15:47:23 sd-53420 sshd\[20272\]: Invalid user 123456 from 51.75.18.215
Feb 17 15:47:23 sd-53420 sshd\[20272\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.18.215
Feb 17 15:47:25 sd-53420 sshd\[20272\]: Failed password for invalid user 123456 from 51.75.18.215 port 41144 ssh2
Feb 17 15:49:28 sd-53420 sshd\[21769\]: Invalid user sinus from 51.75.18.215
Feb 17 15:49:28 sd-53420 sshd\[21769\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.18.215
...
2020-02-18 04:32:21
217.23.194.27 attackspambots
Feb 17 20:19:21 powerpi2 sshd[12109]: Invalid user ts3 from 217.23.194.27 port 47908
Feb 17 20:19:23 powerpi2 sshd[12109]: Failed password for invalid user ts3 from 217.23.194.27 port 47908 ssh2
Feb 17 20:22:03 powerpi2 sshd[12292]: Invalid user openerp from 217.23.194.27 port 47972
...
2020-02-18 04:51:53
222.186.180.6 attack
Feb 17 10:36:19 auw2 sshd\[15595\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.6  user=root
Feb 17 10:36:21 auw2 sshd\[15595\]: Failed password for root from 222.186.180.6 port 8472 ssh2
Feb 17 10:36:24 auw2 sshd\[15595\]: Failed password for root from 222.186.180.6 port 8472 ssh2
Feb 17 10:36:36 auw2 sshd\[15621\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.6  user=root
Feb 17 10:36:38 auw2 sshd\[15621\]: Failed password for root from 222.186.180.6 port 5484 ssh2
2020-02-18 04:47:16
106.13.200.50 attack
2019-11-11T06:29:44.523402suse-nuc sshd[1660]: Invalid user traska from 106.13.200.50 port 48400
...
2020-02-18 04:55:54
213.248.151.138 attackspam
MultiHost/MultiPort Probe, Scan, Hack -
2020-02-18 04:21:49
142.4.121.197 attackspam
(RDP) trying to logon to a computer they shouldn't be
2020-02-18 04:27:39
220.134.174.118 attackbots
MultiHost/MultiPort Probe, Scan, Hack -
2020-02-18 04:21:14
61.91.56.250 attackspambots
Brute force attempt
2020-02-18 04:42:27
114.198.172.103 attackbotsspam
Port probing on unauthorized port 23
2020-02-18 04:25:52
68.41.109.231 attackbotsspam
ssh port 22
2020-02-18 04:19:58
104.40.95.185 attackbots
Feb 17 15:29:00 jane sshd[15948]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.40.95.185 
Feb 17 15:29:02 jane sshd[15948]: Failed password for invalid user sammy from 104.40.95.185 port 44038 ssh2
...
2020-02-18 04:23:32
139.219.6.50 attackbotsspam
" "
2020-02-18 04:47:58
134.209.148.107 attackbotsspam
Feb 17 19:49:39 lnxmysql61 sshd[24139]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.148.107
2020-02-18 04:41:28
213.248.137.162 attack
MultiHost/MultiPort Probe, Scan, Hack -
2020-02-18 04:36:29

Recently Reported IPs

219.156.15.221 161.35.168.98 119.74.66.157 108.39.236.234
123.28.21.146 218.214.92.35 103.68.1.234 81.215.202.162
128.2.248.216 34.94.192.185 210.37.215.66 171.253.176.31
144.172.66.103 120.85.61.193 110.247.20.94 179.184.64.168
3.36.171.105 214.253.145.43 187.52.217.254 149.246.61.161