Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Thuan An

Region: Tinh Quang Nam

Country: Vietnam

Internet Service Provider: AZDIGI Corporation

Hostname: unknown

Organization: AZDIGI Corporation

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
REQUESTED PAGE: /wp-login.php
2020-02-23 00:35:18
attack
45.252.248.18 - - \[21/Feb/2020:05:54:47 +0100\] "POST /wp-login.php HTTP/1.0" 200 7778 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
45.252.248.18 - - \[21/Feb/2020:05:54:50 +0100\] "POST /wp-login.php HTTP/1.0" 200 7768 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
45.252.248.18 - - \[21/Feb/2020:05:54:54 +0100\] "POST /wp-login.php HTTP/1.0" 200 7634 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2020-02-21 16:08:44
attackspam
45.252.248.18 - - [20/Jan/2020:04:57:59 +0000] "POST /wp-login.php HTTP/1.1" 200 6409 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
45.252.248.18 - - [20/Jan/2020:04:58:02 +0000] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-01-20 14:18:14
attackspam
WordPress wp-login brute force :: 45.252.248.18 0.080 BYPASS [10/Jan/2020:08:50:19  0000] [censored_4] "POST /wp-login.php HTTP/1.1" 200 2100 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-01-10 17:28:00
Comments on same subnet:
IP Type Details Datetime
45.252.248.16 attackspam
45.252.248.16 - - [24/Jun/2020:14:05:52 +0200] "POST /xmlrpc.php HTTP/2.0" 403 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
45.252.248.16 - - [24/Jun/2020:14:05:54 +0200] "POST /xmlrpc.php HTTP/2.0" 403 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
...
2020-06-25 00:08:23
45.252.248.16 attackspam
MYH,DEF GET /wp-login.php
GET /wp-login.php
2020-06-04 22:57:18
45.252.248.13 attack
REQUESTED PAGE: /wp-login.php
2020-05-09 05:24:23
45.252.248.23 attackspam
"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:
2020-05-04 20:52:57
45.252.248.23 attackspam
Apr  4 01:56:35 karger wordpress(buerg)[4145]: Authentication attempt for unknown user domi from 45.252.248.23
Apr  4 03:37:01 karger wordpress(buerg)[4145]: Authentication attempt for unknown user domi from 45.252.248.23
...
2020-04-04 09:57:10
45.252.248.23 attackbots
fail2ban/45.252.248.23 - - [02/Apr/2020:21:42:33 +0000] "POST /wp-login.php HTTP/1.0" 200 9822 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
45.252.248.23 - - [02/Apr/2020:21:46:22 +0000] "POST /wp-login.php HTTP/1.0" 200 9852 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
45.252.248.23 - - [02/Apr/2020:21:51:39 +0000] "POST /wp-login.php HTTP/1.0" 200 9823 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-04-03 07:02:49
45.252.248.23 attack
WordPress login Brute force / Web App Attack on client site.
2020-03-24 07:30:36
45.252.248.23 attack
php WP PHPmyadamin ABUSE blocked for 12h
2020-03-11 00:41:35
45.252.248.189 attackspam
Invalid user admin from 45.252.248.189 port 49318
2020-01-18 22:22:01
45.252.248.138 attackbotsspam
xmlrpc attack
2019-11-01 20:07:48
45.252.248.161 attack
Wordpress bruteforce
2019-10-08 04:25:39
45.252.248.161 attack
Automatic report - Banned IP Access
2019-09-24 21:11:25
45.252.248.161 attack
www.goldgier.de 45.252.248.161 \[29/Aug/2019:02:40:45 +0200\] "POST /wp-login.php HTTP/1.1" 200 8726 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
www.goldgier.de 45.252.248.161 \[29/Aug/2019:02:40:48 +0200\] "POST /wp-login.php HTTP/1.1" 200 8726 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2019-08-29 16:46:56
45.252.248.161 attackbots
xmlrpc attack
2019-08-22 19:05:37
45.252.248.192 attack
WordPress login Brute force / Web App Attack on client site.
2019-08-05 07:37:53
Whois info:
b
Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.252.248.18
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27539
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.252.248.18.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019040601 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Sun Apr 07 02:36:21 +08 2019
;; MSG SIZE  rcvd: 117

Host info
18.248.252.45.in-addr.arpa domain name pointer h-thorin.azdigi.com.
Nslookup info:
Server:		67.207.67.3
Address:	67.207.67.3#53

Non-authoritative answer:
18.248.252.45.in-addr.arpa	name = h-thorin.azdigi.com.

Authoritative answers can be found from:

Related IP info:
Related comments:
IP Type Details Datetime
171.244.139.178 attackbots
SSH brutforce
2020-05-20 19:41:21
93.174.93.10 attackbotsspam
571. On May 17 2020 experienced a Brute Force SSH login attempt -> 2 unique times by 93.174.93.10.
2020-05-20 19:18:29
157.33.159.57 attack
Unauthorized connection attempt from IP address 157.33.159.57 on Port 445(SMB)
2020-05-20 19:38:07
88.244.237.145 attack
/adv,/cgi-bin/weblogin.cgi%3Fusername=admin%27%3Bls%20%23%26password=asdf
2020-05-20 19:03:27
106.13.118.102 attackspam
May 20 05:06:22 ny01 sshd[23272]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.118.102
May 20 05:06:23 ny01 sshd[23272]: Failed password for invalid user mvb from 106.13.118.102 port 37996 ssh2
May 20 05:11:23 ny01 sshd[24013]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.118.102
2020-05-20 19:15:39
157.41.237.201 attack
Unauthorized connection attempt from IP address 157.41.237.201 on Port 445(SMB)
2020-05-20 19:34:21
93.39.116.254 attack
detected by Fail2Ban
2020-05-20 19:19:08
114.67.110.227 attackspam
May 20 12:39:08 nextcloud sshd\[23316\]: Invalid user fsg from 114.67.110.227
May 20 12:39:08 nextcloud sshd\[23316\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.110.227
May 20 12:39:10 nextcloud sshd\[23316\]: Failed password for invalid user fsg from 114.67.110.227 port 30269 ssh2
2020-05-20 19:27:54
149.202.55.18 attackbots
May 20 09:34:08 ns382633 sshd\[32452\]: Invalid user lok from 149.202.55.18 port 43546
May 20 09:34:08 ns382633 sshd\[32452\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.202.55.18
May 20 09:34:10 ns382633 sshd\[32452\]: Failed password for invalid user lok from 149.202.55.18 port 43546 ssh2
May 20 09:47:07 ns382633 sshd\[2632\]: Invalid user ocf from 149.202.55.18 port 45996
May 20 09:47:07 ns382633 sshd\[2632\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.202.55.18
2020-05-20 19:07:56
87.251.74.56 attackbots
May 20 13:20:17 ns1 sshd[10536]: Failed password for root from 87.251.74.56 port 5416 ssh2
May 20 13:20:17 ns1 sshd[10537]: Failed password for root from 87.251.74.56 port 5436 ssh2
2020-05-20 19:35:24
98.152.217.142 attack
May 20 12:30:36 ns382633 sshd\[1979\]: Invalid user eox from 98.152.217.142 port 56700
May 20 12:30:36 ns382633 sshd\[1979\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=98.152.217.142
May 20 12:30:38 ns382633 sshd\[1979\]: Failed password for invalid user eox from 98.152.217.142 port 56700 ssh2
May 20 13:01:54 ns382633 sshd\[7314\]: Invalid user vo from 98.152.217.142 port 54032
May 20 13:01:54 ns382633 sshd\[7314\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=98.152.217.142
2020-05-20 19:08:20
46.48.134.58 attackbots
1589961836 - 05/20/2020 10:03:56 Host: 46.48.134.58/46.48.134.58 Port: 445 TCP Blocked
2020-05-20 19:26:47
85.209.0.31 attackspambots
546. On May 17 2020 experienced a Brute Force SSH login attempt -> 2 unique times by 85.209.0.31.
2020-05-20 19:42:07
95.88.128.23 attackbots
May 20 12:59:35 cp sshd[24085]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.88.128.23
May 20 12:59:35 cp sshd[24085]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.88.128.23
2020-05-20 19:13:40
14.239.85.2 attack
Unauthorized connection attempt from IP address 14.239.85.2 on Port 445(SMB)
2020-05-20 19:04:07

Recently Reported IPs

46.4.72.109 45.124.94.223 37.191.107.84 37.187.152.83
36.89.228.57 35.186.160.115 23.254.251.54 5.178.87.183
5.145.175.80 211.119.131.232 198.23.213.114 185.246.66.190
177.43.90.250 149.210.158.6 115.84.182.210 103.206.245.72
103.25.130.150 88.208.252.154 52.8.2.36 27.118.26.42