Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Thuan An

Region: Tinh Quang Nam

Country: Vietnam

Internet Service Provider: AZDIGI Corporation

Hostname: unknown

Organization: AZDIGI Corporation

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
REQUESTED PAGE: /wp-login.php
2020-02-23 00:35:18
attack
45.252.248.18 - - \[21/Feb/2020:05:54:47 +0100\] "POST /wp-login.php HTTP/1.0" 200 7778 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
45.252.248.18 - - \[21/Feb/2020:05:54:50 +0100\] "POST /wp-login.php HTTP/1.0" 200 7768 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
45.252.248.18 - - \[21/Feb/2020:05:54:54 +0100\] "POST /wp-login.php HTTP/1.0" 200 7634 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2020-02-21 16:08:44
attackspam
45.252.248.18 - - [20/Jan/2020:04:57:59 +0000] "POST /wp-login.php HTTP/1.1" 200 6409 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
45.252.248.18 - - [20/Jan/2020:04:58:02 +0000] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-01-20 14:18:14
attackspam
WordPress wp-login brute force :: 45.252.248.18 0.080 BYPASS [10/Jan/2020:08:50:19  0000] [censored_4] "POST /wp-login.php HTTP/1.1" 200 2100 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-01-10 17:28:00
Comments on same subnet:
IP Type Details Datetime
45.252.248.16 attackspam
45.252.248.16 - - [24/Jun/2020:14:05:52 +0200] "POST /xmlrpc.php HTTP/2.0" 403 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
45.252.248.16 - - [24/Jun/2020:14:05:54 +0200] "POST /xmlrpc.php HTTP/2.0" 403 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
...
2020-06-25 00:08:23
45.252.248.16 attackspam
MYH,DEF GET /wp-login.php
GET /wp-login.php
2020-06-04 22:57:18
45.252.248.13 attack
REQUESTED PAGE: /wp-login.php
2020-05-09 05:24:23
45.252.248.23 attackspam
"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:
2020-05-04 20:52:57
45.252.248.23 attackspam
Apr  4 01:56:35 karger wordpress(buerg)[4145]: Authentication attempt for unknown user domi from 45.252.248.23
Apr  4 03:37:01 karger wordpress(buerg)[4145]: Authentication attempt for unknown user domi from 45.252.248.23
...
2020-04-04 09:57:10
45.252.248.23 attackbots
fail2ban/45.252.248.23 - - [02/Apr/2020:21:42:33 +0000] "POST /wp-login.php HTTP/1.0" 200 9822 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
45.252.248.23 - - [02/Apr/2020:21:46:22 +0000] "POST /wp-login.php HTTP/1.0" 200 9852 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
45.252.248.23 - - [02/Apr/2020:21:51:39 +0000] "POST /wp-login.php HTTP/1.0" 200 9823 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-04-03 07:02:49
45.252.248.23 attack
WordPress login Brute force / Web App Attack on client site.
2020-03-24 07:30:36
45.252.248.23 attack
php WP PHPmyadamin ABUSE blocked for 12h
2020-03-11 00:41:35
45.252.248.189 attackspam
Invalid user admin from 45.252.248.189 port 49318
2020-01-18 22:22:01
45.252.248.138 attackbotsspam
xmlrpc attack
2019-11-01 20:07:48
45.252.248.161 attack
Wordpress bruteforce
2019-10-08 04:25:39
45.252.248.161 attack
Automatic report - Banned IP Access
2019-09-24 21:11:25
45.252.248.161 attack
www.goldgier.de 45.252.248.161 \[29/Aug/2019:02:40:45 +0200\] "POST /wp-login.php HTTP/1.1" 200 8726 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
www.goldgier.de 45.252.248.161 \[29/Aug/2019:02:40:48 +0200\] "POST /wp-login.php HTTP/1.1" 200 8726 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2019-08-29 16:46:56
45.252.248.161 attackbots
xmlrpc attack
2019-08-22 19:05:37
45.252.248.192 attack
WordPress login Brute force / Web App Attack on client site.
2019-08-05 07:37:53
Whois info:
b
Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.252.248.18
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27539
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.252.248.18.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019040601 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Sun Apr 07 02:36:21 +08 2019
;; MSG SIZE  rcvd: 117

Host info
18.248.252.45.in-addr.arpa domain name pointer h-thorin.azdigi.com.
Nslookup info:
Server:		67.207.67.3
Address:	67.207.67.3#53

Non-authoritative answer:
18.248.252.45.in-addr.arpa	name = h-thorin.azdigi.com.

Authoritative answers can be found from:

Related IP info:
Related comments:
IP Type Details Datetime
67.205.151.63 attackspam
07/06/2020-00:38:23.170605 67.205.151.63 Protocol: 6 ET SCAN NMAP -sS window 1024
2020-07-06 13:59:16
139.199.228.133 attackbotsspam
Jul  6 06:56:59 server sshd[21032]: Failed password for root from 139.199.228.133 port 23221 ssh2
Jul  6 07:00:19 server sshd[23884]: Failed password for root from 139.199.228.133 port 43436 ssh2
Jul  6 07:03:35 server sshd[26353]: Failed password for root from 139.199.228.133 port 63656 ssh2
2020-07-06 13:54:59
62.57.227.12 attackbotsspam
Jul  6 05:53:09 zulu412 sshd\[1246\]: Invalid user sam from 62.57.227.12 port 53782
Jul  6 05:53:09 zulu412 sshd\[1246\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.57.227.12
Jul  6 05:53:11 zulu412 sshd\[1246\]: Failed password for invalid user sam from 62.57.227.12 port 53782 ssh2
...
2020-07-06 14:16:32
222.186.180.142 attack
Jul  6 07:18:24 rocket sshd[20227]: Failed password for root from 222.186.180.142 port 20868 ssh2
Jul  6 07:18:42 rocket sshd[20252]: Failed password for root from 222.186.180.142 port 58900 ssh2
...
2020-07-06 14:19:34
190.96.200.14 attackspam
2020-07-06T05:52:27.072976+02:00  sshd[11956]: Failed password for invalid user lazare from 190.96.200.14 port 5313 ssh2
2020-07-06 14:24:59
192.241.224.185 attackbots
Unauthorized connection attempt detected from IP address 192.241.224.185 to port 8181 [T]
2020-07-06 13:54:17
185.176.27.26 attackbotsspam
Port scan on 2 port(s): 35096 35097
2020-07-06 14:15:10
100.12.37.7 attack
port scan and connect, tcp 23 (telnet)
2020-07-06 14:03:19
45.125.65.52 attackbots
Autoban   45.125.65.52 AUTH FAILED
2020-07-06 14:27:27
117.62.22.55 attack
Jul  6 05:28:56 marvibiene sshd[39835]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.62.22.55  user=root
Jul  6 05:28:57 marvibiene sshd[39835]: Failed password for root from 117.62.22.55 port 52792 ssh2
Jul  6 05:45:16 marvibiene sshd[40096]: Invalid user dev from 117.62.22.55 port 56832
...
2020-07-06 14:23:39
218.92.0.189 attackspambots
07/06/2020-02:04:10.815954 218.92.0.189 Protocol: 6 ET SCAN Potential SSH Scan
2020-07-06 14:06:05
106.54.201.240 attackbots
Jul  6 06:53:56 jane sshd[26548]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.201.240 
Jul  6 06:53:58 jane sshd[26548]: Failed password for invalid user huanghao from 106.54.201.240 port 44768 ssh2
...
2020-07-06 13:47:29
37.59.48.181 attackbots
$f2bV_matches
2020-07-06 14:00:31
175.192.183.81 attack
Automatic report - Banned IP Access
2020-07-06 14:17:15
134.209.176.220 attackspam
 TCP (SYN) 134.209.176.220:42825 -> port 10015, len 44
2020-07-06 13:53:01

Recently Reported IPs

46.4.72.109 45.124.94.223 37.191.107.84 37.187.152.83
36.89.228.57 35.186.160.115 23.254.251.54 5.178.87.183
5.145.175.80 211.119.131.232 198.23.213.114 185.246.66.190
177.43.90.250 149.210.158.6 115.84.182.210 103.206.245.72
103.25.130.150 88.208.252.154 52.8.2.36 27.118.26.42