Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Amsterdam

Region: Noord Holland

Country: Netherlands

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
45.9.148.29 attackbots
Fail2Ban Ban Triggered
2020-09-09 20:28:52
45.9.148.29 attack
Fail2Ban Ban Triggered
2020-09-09 14:26:03
45.9.148.29 attackbots
Fail2Ban Ban Triggered
2020-09-09 06:37:37
45.9.148.82 attackspam
Probable attack : HTTPS hit by IP; not hostname
2020-08-05 05:13:44
45.9.148.125 attack
2020-07-23 15:43:19
45.9.148.194 attack
/adminer/adminer.php
2020-07-08 02:48:46
45.9.148.91 attack
sca
2020-07-05 19:44:20
45.9.148.194 attackbotsspam
404 NOT FOUND
2020-07-04 16:33:20
45.9.148.91 attackspambots
Unauthorized connection attempt detected from IP address 45.9.148.91 to port 53
2020-06-24 12:48:06
45.9.148.213 attackbots
schuetzenmusikanten.de 45.9.148.213 [20/Jun/2020:14:18:46 +0200] "POST /xmlrpc.php HTTP/1.0" 301 511 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
schuetzenmusikanten.de 45.9.148.213 [20/Jun/2020:14:18:48 +0200] "POST /xmlrpc.php HTTP/1.0" 200 3595 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
2020-06-20 22:24:58
45.9.148.91 attackspambots
IP: 45.9.148.91
Ports affected
    HTTP protocol over TLS/SSL (443) 
Abuse Confidence rating 100%
Found in DNSBL('s)
ASN Details
   AS49447 Nice IT Services Group Inc.
   Netherlands (NL)
   CIDR 45.9.148.0/23
Log Date: 10/06/2020 8:12:49 AM UTC
2020-06-10 16:38:20
45.9.148.215 attackspambots
xmlrpc attack
2020-06-05 21:27:32
45.9.148.220 attackbotsspam
(mod_security) mod_security (id:210492) triggered by 45.9.148.220 (NL/Netherlands/-): 5 in the last 3600 secs
2020-05-31 07:52:05
45.9.148.131 attack
SSH login attempts.
2020-05-28 14:52:20
45.9.148.213 attackbots
Tor exit node
2020-05-28 02:35:30
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.9.148.244
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14783
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;45.9.148.244.			IN	A

;; AUTHORITY SECTION:
.			479	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2023061501 1800 900 604800 86400

;; Query time: 33 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jun 16 02:31:43 CST 2023
;; MSG SIZE  rcvd: 105
Host info
Host 244.148.9.45.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 244.148.9.45.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
37.57.179.56 attackspambots
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-03 01:51:51,563 INFO [shellcode_manager] (37.57.179.56) no match, writing hexdump (941a4d62397ad4db2657b8f2fb807486 :2212578) - MS17010 (EternalBlue)
2019-07-03 15:58:31
94.191.49.38 attackbots
Lines containing failures of 94.191.49.38
Jul  2 00:26:01 ariston sshd[12870]: Invalid user postgres from 94.191.49.38 port 46500
Jul  2 00:26:01 ariston sshd[12870]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.49.38
Jul  2 00:26:03 ariston sshd[12870]: Failed password for invalid user postgres from 94.191.49.38 port 46500 ssh2
Jul  2 00:26:03 ariston sshd[12870]: Received disconnect from 94.191.49.38 port 46500:11: Bye Bye [preauth]
Jul  2 00:26:03 ariston sshd[12870]: Disconnected from invalid user postgres 94.191.49.38 port 46500 [preauth]
Jul  2 00:39:00 ariston sshd[15031]: Invalid user jiao from 94.191.49.38 port 46226
Jul  2 00:39:00 ariston sshd[15031]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.49.38
Jul  2 00:39:02 ariston sshd[15031]: Failed password for invalid user jiao from 94.191.49.38 port 46226 ssh2
Jul  2 00:39:04 ariston sshd[15031]: Received disconne........
------------------------------
2019-07-03 15:56:21
117.7.223.148 attack
Jul  3 05:37:02 m3061 sshd[22156]: Address 117.7.223.148 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Jul  3 05:37:02 m3061 sshd[22156]: Invalid user admin from 117.7.223.148
Jul  3 05:37:02 m3061 sshd[22156]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.7.223.148


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=117.7.223.148
2019-07-03 16:04:43
198.108.66.212 attackbots
445/tcp 9200/tcp 5901/tcp...
[2019-05-10/07-03]14pkt,11pt.(tcp),1pt.(udp)
2019-07-03 15:54:21
124.158.7.146 attackbots
Jun 30 07:37:00 own sshd[23252]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.158.7.146  user=r.r
Jun 30 07:37:01 own sshd[23252]: Failed password for r.r from 124.158.7.146 port 57938 ssh2
Jun 30 07:37:04 own sshd[23252]: Failed password for r.r from 124.158.7.146 port 57938 ssh2
Jun 30 07:37:06 own sshd[23252]: Failed password for r.r from 124.158.7.146 port 57938 ssh2
Jun 30 07:37:11 own sshd[23252]: message repeated 2 times: [ Failed password for r.r from 124.158.7.146 port 57938 ssh2]
Jun 30 07:37:11 own sshd[23252]: Connection reset by 124.158.7.146 port 57938 [preauth]
Jun 30 07:37:11 own sshd[23252]: PAM 4 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.158.7.146  user=r.r
Jul  2 12:35:58 own sshd[18912]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.158.7.146  user=r.r
Jul  2 12:36:00 own sshd[18912]: Failed password for r.r from 124.158.7.1........
-------------------------------
2019-07-03 16:05:28
203.122.21.26 attackbotsspam
Jul  3 07:03:36 cp sshd[16701]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.122.21.26
2019-07-03 15:55:30
190.69.152.115 attack
firewall-block, port(s): 445/tcp
2019-07-03 16:12:27
107.170.238.150 attackspambots
Port scan attempt detected by AWS-CCS, CTS, India
2019-07-03 16:32:35
124.81.107.153 attackbotsspam
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-03 02:21:19,626 INFO [amun_request_handler] PortScan Detected on Port: 445 (124.81.107.153)
2019-07-03 16:16:48
41.202.163.76 attackbots
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-03 01:51:46,390 INFO [shellcode_manager] (41.202.163.76) no match, writing hexdump (39bf2d517c4f13b27919bd13bb59a24f :2410300) - MS17010 (EternalBlue)
2019-07-03 16:27:49
209.17.96.106 attack
Port scan attempt detected by AWS-CCS, CTS, India
2019-07-03 16:02:48
118.25.10.61 attackspam
Invalid user hadoop from 118.25.10.61 port 35770
2019-07-03 16:19:06
121.29.249.44 attack
firewall-block, port(s): 23/tcp
2019-07-03 16:21:47
174.75.32.242 attackbots
Invalid user ba from 174.75.32.242 port 37994
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.75.32.242
Failed password for invalid user ba from 174.75.32.242 port 37994 ssh2
Invalid user mongodb from 174.75.32.242 port 40698
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.75.32.242
2019-07-03 16:19:55
197.230.101.34 attackspambots
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-03 02:25:07,878 INFO [shellcode_manager] (197.230.101.34) no match, writing hexdump (c5c992fb33d5615bdc5e0cb9a7aefcce :2307670) - MS17010 (EternalBlue)
2019-07-03 16:32:12

Recently Reported IPs

41.5.83.0 243.167.203.191 46.10.148.236 154.92.64.131
170.14.249.122 71.37.110.245 146.21.238.250 9.134.14.123
35.190.186.204 35.190.67.235 52.167.144.178 186.189.177.198
132.204.27.129 208.187.21.88 101.246.196.112 106.79.94.55
37.111.12.235 9.149.177.197 10.222.62.209 58.168.242.227