45.148.234.141

Basic Info

City: unknown

Region: unknown

Country: Russian Federation

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
45.148.234.125	attackspambots	(mod_security) mod_security (id:210730) triggered by 45.148.234.125 (RU/Russia/-): 5 in the last 300 secs	2020-10-04 02:31:09
45.148.234.125	attack	(mod_security) mod_security (id:210730) triggered by 45.148.234.125 (RU/Russia/-): 5 in the last 300 secs	2020-10-03 18:18:43
45.148.234.161	attack	Chat Spam	2020-08-19 13:51:18
45.148.234.164	attack	Forbidden access	2020-07-16 20:12:01
45.148.234.173	attackspam	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/45.148.234.173/ EU - 1H : (4) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : EU NAME ASN : ASN0 IP : 45.148.234.173 CIDR : 45.148.0.0/14 PREFIX COUNT : 50242 UNIQUE IP COUNT : 856039856 ATTACKS DETECTED ASN0 : 1H - 3 3H - 6 6H - 7 12H - 8 24H - 16 DateTime : 2019-11-24 07:19:23 INFO : Server 301 - Looking for resource vulnerabilities Detected and Blocked by ADMIN - data recovery	2019-11-24 20:59:17
45.148.234.88	attack	45.148.234.88 - - [20/Oct/2019:08:03:26 -0400] "GET /?page=products&action=../../etc/passwd%00&manufacturerID=12&productID=973&linkID=15902 HTTP/1.1" 200 17150 "https://newportbrassfaucets.com/?page=products&action=../../etc/passwd%00&manufacturerID=12&productID=973&linkID=15902" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36" ...	2019-10-20 21:59:09

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.148.234.141
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47760
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;45.148.234.141.			IN	A

;; AUTHORITY SECTION:
.			599	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020701 1800 900 604800 86400

;; Query time: 36 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 02:51:31 CST 2022
;; MSG SIZE  rcvd: 107

Host info

Host 141.234.148.45.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 141.234.148.45.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
103.74.254.242	attackbotsspam	Nov 3 06:51:43 zulu412 sshd\[23836\]: Invalid user event from 103.74.254.242 port 37718 Nov 3 06:51:43 zulu412 sshd\[23836\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.74.254.242 Nov 3 06:51:46 zulu412 sshd\[23836\]: Failed password for invalid user event from 103.74.254.242 port 37718 ssh2 ...	2019-11-03 17:22:28
222.154.224.3	attackbots	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/222.154.224.3/ NZ - 1H : (4) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : NZ NAME ASN : ASN4771 IP : 222.154.224.3 CIDR : 222.154.224.0/19 PREFIX COUNT : 574 UNIQUE IP COUNT : 1009664 ATTACKS DETECTED ASN4771 : 1H - 1 3H - 1 6H - 1 12H - 1 24H - 1 DateTime : 2019-11-03 06:51:58 INFO :	2019-11-03 17:12:12
120.253.198.102	attackbotsspam	DATE:2019-11-03 06:52:12, IP:120.253.198.102, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc)	2019-11-03 16:59:55
163.172.61.214	attackbots	Invalid user user from 163.172.61.214 port 49332	2019-11-03 17:20:39
192.99.17.189	attack	Nov 2 19:48:03 tdfoods sshd\[4486\]: Invalid user csm from 192.99.17.189 Nov 2 19:48:03 tdfoods sshd\[4486\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns4005626.ip-192-99-17.net Nov 2 19:48:05 tdfoods sshd\[4486\]: Failed password for invalid user csm from 192.99.17.189 port 36976 ssh2 Nov 2 19:51:45 tdfoods sshd\[4797\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns4005626.ip-192-99-17.net user=root Nov 2 19:51:47 tdfoods sshd\[4797\]: Failed password for root from 192.99.17.189 port 56301 ssh2	2019-11-03 17:22:03
49.236.198.123	attackspambots	port scan and connect, tcp 1433 (ms-sql-s)	2019-11-03 17:20:24
94.102.57.169	attack	2019-11-03T08:46:01.373644host3.slimhost.com.ua dovecot[2479259]: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=94.102.57.169, lip=207.180.241.50, session= 2019-11-03T08:48:37.250312host3.slimhost.com.ua dovecot[2479259]: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=94.102.57.169, lip=207.180.241.50, session=<3IcjbWyWrL5eZjmp> 2019-11-03T08:49:49.149968host3.slimhost.com.ua dovecot[2479259]: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=94.102.57.169, lip=207.180.241.50, session= 2019-11-03T08:50:16.464228host3.slimhost.com.ua dovecot[2479259]: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=94.102.57.169, lip=207.180.241.50, session= 2019-11-03T08:50:35.050265host3.slimhost.com.ua ...	2019-11-03 17:21:39
113.228.177.167	attack	60001/tcp [2019-11-03]1pkt	2019-11-03 17:15:17
191.248.116.112	attack	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/191.248.116.112/ AU - 1H : (40) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : AU NAME ASN : ASN18881 IP : 191.248.116.112 CIDR : 191.248.96.0/19 PREFIX COUNT : 938 UNIQUE IP COUNT : 4233472 ATTACKS DETECTED ASN18881 : 1H - 3 3H - 5 6H - 13 12H - 29 24H - 60 DateTime : 2019-11-03 06:51:58 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery	2019-11-03 17:12:57
45.136.109.15	attack	11/03/2019-04:03:22.738071 45.136.109.15 Protocol: 6 ET SCAN NMAP -sS window 1024	2019-11-03 17:27:39
59.42.88.242	attackspambots	1433/tcp [2019-11-03]1pkt	2019-11-03 17:18:50
146.88.240.4	attackbots	Scanning random ports - tries to find possible vulnerable services	2019-11-03 17:02:11
185.209.0.18	attackspam	Scanning (more than 2 packets) random ports - tries to find possible vulnerable services	2019-11-03 17:04:30
54.37.130.197	attackbotsspam	Nov 3 06:48:40 localhost sshd\[1071\]: Invalid user administrator from 54.37.130.197 Nov 3 06:48:40 localhost sshd\[1071\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.130.197 Nov 3 06:48:42 localhost sshd\[1071\]: Failed password for invalid user administrator from 54.37.130.197 port 43808 ssh2 Nov 3 06:52:21 localhost sshd\[1361\]: Invalid user qing from 54.37.130.197 Nov 3 06:52:21 localhost sshd\[1361\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.130.197 ...	2019-11-03 16:51:37
61.19.22.162	attackspam	ssh failed login	2019-11-03 17:10:43

Recently Reported IPs

102.141.10.118	89.228.140.21	67.84.80.120	212.192.246.182
151.28.102.141	92.100.77.130	34.210.0.4	36.110.142.212
201.39.15.218	14.245.240.175	152.67.62.120	31.58.28.188
185.159.157.129	172.70.211.102	211.36.141.72	116.249.140.229
177.23.187.187	182.126.79.194	40.83.7.125	114.219.70.110