Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Netherlands

Internet Service Provider: Nice IT Services Group Inc.

Hostname: unknown

Organization: unknown

Usage Type: Commercial

Comments:
Type Details Datetime
attack
Invalid user admin from 45.9.148.35 port 42352
2019-10-16 06:45:34
attackbotsspam
SSH Bruteforce
2019-10-11 21:26:12
attackbotsspam
Fail2Ban - SSH Bruteforce Attempt
2019-10-10 04:11:29
Comments on same subnet:
IP Type Details Datetime
45.9.148.29 attackbots
Fail2Ban Ban Triggered
2020-09-09 20:28:52
45.9.148.29 attack
Fail2Ban Ban Triggered
2020-09-09 14:26:03
45.9.148.29 attackbots
Fail2Ban Ban Triggered
2020-09-09 06:37:37
45.9.148.82 attackspam
Probable attack : HTTPS hit by IP; not hostname
2020-08-05 05:13:44
45.9.148.125 attack
2020-07-23 15:43:19
45.9.148.194 attack
/adminer/adminer.php
2020-07-08 02:48:46
45.9.148.91 attack
sca
2020-07-05 19:44:20
45.9.148.194 attackbotsspam
404 NOT FOUND
2020-07-04 16:33:20
45.9.148.91 attackspambots
Unauthorized connection attempt detected from IP address 45.9.148.91 to port 53
2020-06-24 12:48:06
45.9.148.213 attackbots
schuetzenmusikanten.de 45.9.148.213 [20/Jun/2020:14:18:46 +0200] "POST /xmlrpc.php HTTP/1.0" 301 511 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
schuetzenmusikanten.de 45.9.148.213 [20/Jun/2020:14:18:48 +0200] "POST /xmlrpc.php HTTP/1.0" 200 3595 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
2020-06-20 22:24:58
45.9.148.91 attackspambots
IP: 45.9.148.91
Ports affected
    HTTP protocol over TLS/SSL (443) 
Abuse Confidence rating 100%
Found in DNSBL('s)
ASN Details
   AS49447 Nice IT Services Group Inc.
   Netherlands (NL)
   CIDR 45.9.148.0/23
Log Date: 10/06/2020 8:12:49 AM UTC
2020-06-10 16:38:20
45.9.148.215 attackspambots
xmlrpc attack
2020-06-05 21:27:32
45.9.148.220 attackbotsspam
(mod_security) mod_security (id:210492) triggered by 45.9.148.220 (NL/Netherlands/-): 5 in the last 3600 secs
2020-05-31 07:52:05
45.9.148.131 attack
SSH login attempts.
2020-05-28 14:52:20
45.9.148.213 attackbots
Tor exit node
2020-05-28 02:35:30
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.9.148.35
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54342
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.9.148.35.			IN	A

;; AUTHORITY SECTION:
.			362	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019100901 1800 900 604800 86400

;; Query time: 260 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Oct 10 04:11:26 CST 2019
;; MSG SIZE  rcvd: 115
Host info
Host 35.148.9.45.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 35.148.9.45.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
160.153.245.123 attackspambots
160.153.245.123 - - [11/Jun/2020:14:11:41 +0200] "GET /wp-login.php HTTP/1.1" 200 6183 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
160.153.245.123 - - [11/Jun/2020:14:11:42 +0200] "POST /wp-login.php HTTP/1.1" 200 6434 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
160.153.245.123 - - [11/Jun/2020:14:11:43 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-06-12 01:37:27
45.143.223.178 attackbots
spam (f2b h2)
2020-06-12 01:15:58
200.73.128.100 attackbots
Jun 11 15:23:05 scw-6657dc sshd[10512]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.73.128.100  user=root
Jun 11 15:23:05 scw-6657dc sshd[10512]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.73.128.100  user=root
Jun 11 15:23:07 scw-6657dc sshd[10512]: Failed password for root from 200.73.128.100 port 50148 ssh2
...
2020-06-12 01:19:01
178.128.239.176 attack
Invalid user arasawa from 178.128.239.176 port 38514
2020-06-12 01:40:39
51.38.127.227 attackspambots
(sshd) Failed SSH login from 51.38.127.227 (DE/Germany/227.ip-51-38-127.eu): 5 in the last 3600 secs
2020-06-12 01:48:13
62.68.146.229 attack
nft/Honeypot/139/73e86
2020-06-12 01:51:32
78.128.113.42 attackspambots
Jun 11 19:05:03 debian-2gb-nbg1-2 kernel: \[14153828.376057\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=78.128.113.42 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=61724 PROTO=TCP SPT=52445 DPT=6409 WINDOW=1024 RES=0x00 SYN URGP=0
2020-06-12 01:24:31
121.121.158.251 attack
Automatic report - Port Scan Attack
2020-06-12 01:22:20
139.199.119.76 attack
Jun 11 14:44:29 vps639187 sshd\[23338\]: Invalid user admin from 139.199.119.76 port 49448
Jun 11 14:44:29 vps639187 sshd\[23338\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.119.76
Jun 11 14:44:31 vps639187 sshd\[23338\]: Failed password for invalid user admin from 139.199.119.76 port 49448 ssh2
...
2020-06-12 01:21:45
180.76.165.254 attackbotsspam
Unauthorized access or intrusion attempt detected from Thor banned IP
2020-06-12 01:19:36
205.252.40.218 attack
Failed password for invalid user password from 205.252.40.218 port 57506 ssh2
2020-06-12 01:18:39
106.13.82.54 attackspam
Jun 11 19:14:13 vps sshd[722207]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.82.54  user=root
Jun 11 19:14:16 vps sshd[722207]: Failed password for root from 106.13.82.54 port 57910 ssh2
Jun 11 19:16:47 vps sshd[735860]: Invalid user digicel from 106.13.82.54 port 36052
Jun 11 19:16:47 vps sshd[735860]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.82.54
Jun 11 19:16:49 vps sshd[735860]: Failed password for invalid user digicel from 106.13.82.54 port 36052 ssh2
...
2020-06-12 01:32:22
46.101.139.73 attackbotsspam
11.06.2020 18:25:41 - Wordpress fail 
Detected by ELinOX-ALM
2020-06-12 01:32:50
220.180.248.152 attackbotsspam
Email rejected due to spam filtering
2020-06-12 01:37:05
87.251.74.48 attackspam
[MK-Root1] Blocked by UFW
2020-06-12 01:40:26

Recently Reported IPs

68.215.106.74 208.8.148.90 45.24.84.136 109.154.22.138
119.29.162.17 23.234.114.128 101.74.197.172 183.15.121.252
112.85.195.30 1.203.80.2 157.230.188.24 95.9.147.24
46.23.238.218 1.162.111.45 217.71.131.243 178.132.154.151
189.69.44.56 73.5.248.118 46.101.142.17 114.237.188.184