Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Netherlands

Internet Service Provider: Nice IT Services Group Inc.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackbots
DATE:2019-12-09 07:32:27, IP:45.9.148.134, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc)
2019-12-09 15:32:28
Comments on same subnet:
IP Type Details Datetime
45.9.148.29 attackbots
Fail2Ban Ban Triggered
2020-09-09 20:28:52
45.9.148.29 attack
Fail2Ban Ban Triggered
2020-09-09 14:26:03
45.9.148.29 attackbots
Fail2Ban Ban Triggered
2020-09-09 06:37:37
45.9.148.82 attackspam
Probable attack : HTTPS hit by IP; not hostname
2020-08-05 05:13:44
45.9.148.125 attack
2020-07-23 15:43:19
45.9.148.194 attack
/adminer/adminer.php
2020-07-08 02:48:46
45.9.148.91 attack
sca
2020-07-05 19:44:20
45.9.148.194 attackbotsspam
404 NOT FOUND
2020-07-04 16:33:20
45.9.148.91 attackspambots
Unauthorized connection attempt detected from IP address 45.9.148.91 to port 53
2020-06-24 12:48:06
45.9.148.213 attackbots
schuetzenmusikanten.de 45.9.148.213 [20/Jun/2020:14:18:46 +0200] "POST /xmlrpc.php HTTP/1.0" 301 511 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
schuetzenmusikanten.de 45.9.148.213 [20/Jun/2020:14:18:48 +0200] "POST /xmlrpc.php HTTP/1.0" 200 3595 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
2020-06-20 22:24:58
45.9.148.91 attackspambots
IP: 45.9.148.91
Ports affected
    HTTP protocol over TLS/SSL (443) 
Abuse Confidence rating 100%
Found in DNSBL('s)
ASN Details
   AS49447 Nice IT Services Group Inc.
   Netherlands (NL)
   CIDR 45.9.148.0/23
Log Date: 10/06/2020 8:12:49 AM UTC
2020-06-10 16:38:20
45.9.148.215 attackspambots
xmlrpc attack
2020-06-05 21:27:32
45.9.148.220 attackbotsspam
(mod_security) mod_security (id:210492) triggered by 45.9.148.220 (NL/Netherlands/-): 5 in the last 3600 secs
2020-05-31 07:52:05
45.9.148.131 attack
SSH login attempts.
2020-05-28 14:52:20
45.9.148.213 attackbots
Tor exit node
2020-05-28 02:35:30
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.9.148.134
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3187
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.9.148.134.			IN	A

;; AUTHORITY SECTION:
.			555	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019120900 1800 900 604800 86400

;; Query time: 139 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Dec 09 15:32:25 CST 2019
;; MSG SIZE  rcvd: 116
Host info
Host 134.148.9.45.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 134.148.9.45.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
45.142.120.89 attackbots
2020-09-08 00:20:19 auth_plain authenticator failed for (User) [45.142.120.89]: 535 Incorrect authentication data (set_id=surgery@lavrinenko.info)
2020-09-08 00:20:58 auth_plain authenticator failed for (User) [45.142.120.89]: 535 Incorrect authentication data (set_id=s4@lavrinenko.info)
...
2020-09-08 05:24:49
3.131.95.190 attackspambots
mue-0 : Trying access unauthorized files=>/images/jdownloads/screenshots/update.php()
2020-09-08 05:05:34
129.211.73.2 attackspam
$f2bV_matches
2020-09-08 05:21:38
93.51.176.72 attackspam
*Port Scan* detected from 93.51.176.72 (IT/Italy/Lombardy/Milan/93-51-176-72.ip268.fastwebnet.it). 4 hits in the last 185 seconds
2020-09-08 05:04:32
37.59.55.14 attackbotsspam
Sep  7 19:27:54 ns381471 sshd[30871]: Failed password for root from 37.59.55.14 port 42712 ssh2
2020-09-08 05:28:24
202.147.198.154 attackspam
Sep  7 22:21:29 serwer sshd\[23605\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.147.198.154  user=root
Sep  7 22:21:31 serwer sshd\[23605\]: Failed password for root from 202.147.198.154 port 34840 ssh2
Sep  7 22:27:38 serwer sshd\[24210\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.147.198.154  user=root
...
2020-09-08 05:26:06
192.81.208.44 attackbotsspam
Sep  7 23:00:07 lnxded64 sshd[16417]: Failed password for root from 192.81.208.44 port 54622 ssh2
Sep  7 23:00:07 lnxded64 sshd[16417]: Failed password for root from 192.81.208.44 port 54622 ssh2
2020-09-08 05:12:08
176.31.31.185 attack
Sep  7 18:19:27 l02a sshd[19058]: Invalid user ubuntu from 176.31.31.185
Sep  7 18:19:27 l02a sshd[19058]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.31.31.185 
Sep  7 18:19:27 l02a sshd[19058]: Invalid user ubuntu from 176.31.31.185
Sep  7 18:19:30 l02a sshd[19058]: Failed password for invalid user ubuntu from 176.31.31.185 port 57248 ssh2
2020-09-08 04:54:04
142.93.100.171 attack
Automatic report BANNED IP
2020-09-08 05:21:24
49.234.163.220 attackbotsspam
2020-09-07T16:54:28.963397upcloud.m0sh1x2.com sshd[27602]: Invalid user alice from 49.234.163.220 port 43340
2020-09-08 05:00:57
51.91.157.101 attack
*Port Scan* detected from 51.91.157.101 (FR/France/Grand Est/Strasbourg/101.ip-51-91-157.eu). 4 hits in the last 266 seconds
2020-09-08 05:06:59
212.64.5.28 attackspambots
2020-09-07T18:59:32.314052upcloud.m0sh1x2.com sshd[28227]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.5.28  user=root
2020-09-07T18:59:34.040283upcloud.m0sh1x2.com sshd[28227]: Failed password for root from 212.64.5.28 port 44826 ssh2
2020-09-08 05:27:07
142.93.52.3 attack
Triggered by Fail2Ban at Ares web server
2020-09-08 04:54:31
162.144.83.51 attackbotsspam
SpamScore above: 10.0
2020-09-08 05:27:29
176.122.129.114 attack
Sep  7 18:55:58 jumpserver sshd[48428]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.122.129.114 
Sep  7 18:55:58 jumpserver sshd[48428]: Invalid user test from 176.122.129.114 port 58664
Sep  7 18:56:00 jumpserver sshd[48428]: Failed password for invalid user test from 176.122.129.114 port 58664 ssh2
...
2020-09-08 05:13:28

Recently Reported IPs

189.181.198.255 188.254.0.2 176.36.2.197 88.86.81.176
187.32.254.202 182.72.170.186 134.249.157.239 92.15.37.75
78.13.213.10 45.237.239.245 113.173.84.220 113.53.29.163
72.113.208.95 254.51.204.73 103.76.22.118 201.121.120.13
91.192.40.67 73.216.194.209 49.234.201.90 45.189.74.183