Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Netherlands

Internet Service Provider: Nice IT Services Group Inc.

Hostname: unknown

Organization: unknown

Usage Type: Commercial

Comments:
Type Details Datetime
attackspambots
fail2ban honeypot
2019-10-05 20:42:34
Comments on same subnet:
IP Type Details Datetime
45.9.148.29 attackbots
Fail2Ban Ban Triggered
2020-09-09 20:28:52
45.9.148.29 attack
Fail2Ban Ban Triggered
2020-09-09 14:26:03
45.9.148.29 attackbots
Fail2Ban Ban Triggered
2020-09-09 06:37:37
45.9.148.82 attackspam
Probable attack : HTTPS hit by IP; not hostname
2020-08-05 05:13:44
45.9.148.125 attack
2020-07-23 15:43:19
45.9.148.194 attack
/adminer/adminer.php
2020-07-08 02:48:46
45.9.148.91 attack
sca
2020-07-05 19:44:20
45.9.148.194 attackbotsspam
404 NOT FOUND
2020-07-04 16:33:20
45.9.148.91 attackspambots
Unauthorized connection attempt detected from IP address 45.9.148.91 to port 53
2020-06-24 12:48:06
45.9.148.213 attackbots
schuetzenmusikanten.de 45.9.148.213 [20/Jun/2020:14:18:46 +0200] "POST /xmlrpc.php HTTP/1.0" 301 511 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
schuetzenmusikanten.de 45.9.148.213 [20/Jun/2020:14:18:48 +0200] "POST /xmlrpc.php HTTP/1.0" 200 3595 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
2020-06-20 22:24:58
45.9.148.91 attackspambots
IP: 45.9.148.91
Ports affected
    HTTP protocol over TLS/SSL (443) 
Abuse Confidence rating 100%
Found in DNSBL('s)
ASN Details
   AS49447 Nice IT Services Group Inc.
   Netherlands (NL)
   CIDR 45.9.148.0/23
Log Date: 10/06/2020 8:12:49 AM UTC
2020-06-10 16:38:20
45.9.148.215 attackspambots
xmlrpc attack
2020-06-05 21:27:32
45.9.148.220 attackbotsspam
(mod_security) mod_security (id:210492) triggered by 45.9.148.220 (NL/Netherlands/-): 5 in the last 3600 secs
2020-05-31 07:52:05
45.9.148.131 attack
SSH login attempts.
2020-05-28 14:52:20
45.9.148.213 attackbots
Tor exit node
2020-05-28 02:35:30
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.9.148.71
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44451
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.9.148.71.			IN	A

;; AUTHORITY SECTION:
.			200	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019100500 1800 900 604800 86400

;; Query time: 98 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Oct 05 20:42:28 CST 2019
;; MSG SIZE  rcvd: 115
Host info
Host 71.148.9.45.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 71.148.9.45.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
27.147.146.138 attack
Mail sent to address hacked/leaked from Last.fm
2019-08-10 22:16:14
61.147.57.186 attackspambots
ssh failed login
2019-08-10 23:16:08
61.147.41.219 attackbotsspam
Aug 10 14:39:45 [host] sshd[15822]: Invalid user admin from 61.147.41.219
Aug 10 14:39:45 [host] sshd[15822]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.147.41.219
Aug 10 14:39:48 [host] sshd[15822]: Failed password for invalid user admin from 61.147.41.219 port 41496 ssh2
2019-08-10 23:11:55
50.62.177.110 attackbotsspam
fail2ban honeypot
2019-08-10 23:28:04
51.38.57.78 attackbots
Aug 10 17:07:10 master sshd[19558]: Failed password for invalid user shiny from 51.38.57.78 port 56330 ssh2
2019-08-10 22:29:22
160.153.153.31 attack
xmlrpc.php
2019-08-10 22:26:15
139.99.67.109 attackspam
Feb 25 17:19:20 motanud sshd\[2292\]: Invalid user teamspeak from 139.99.67.109 port 50082
Feb 25 17:19:20 motanud sshd\[2292\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.67.109
Feb 25 17:19:23 motanud sshd\[2292\]: Failed password for invalid user teamspeak from 139.99.67.109 port 50082 ssh2
2019-08-10 22:37:11
139.59.96.172 attackspambots
Dec 22 23:30:52 motanud sshd\[24475\]: Invalid user craig from 139.59.96.172 port 39807
Dec 22 23:30:52 motanud sshd\[24475\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.96.172
Dec 22 23:30:54 motanud sshd\[24475\]: Failed password for invalid user craig from 139.59.96.172 port 39807 ssh2
2019-08-10 22:45:09
139.59.93.89 attack
Jan  2 22:56:42 motanud sshd\[16205\]: Invalid user snmp from 139.59.93.89 port 33464
Jan  2 22:56:42 motanud sshd\[16205\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.93.89
Jan  2 22:56:43 motanud sshd\[16205\]: Failed password for invalid user snmp from 139.59.93.89 port 33464 ssh2
2019-08-10 22:48:02
139.59.84.55 attack
Mar  5 12:02:12 motanud sshd\[30673\]: Invalid user rs from 139.59.84.55 port 60720
Mar  5 12:02:12 motanud sshd\[30673\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.84.55
Mar  5 12:02:14 motanud sshd\[30673\]: Failed password for invalid user rs from 139.59.84.55 port 60720 ssh2
2019-08-10 22:58:29
114.119.4.74 attackbotsspam
Aug 10 14:32:51 bouncer sshd\[4960\]: Invalid user jboss from 114.119.4.74 port 47456
Aug 10 14:32:51 bouncer sshd\[4960\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.119.4.74 
Aug 10 14:32:53 bouncer sshd\[4960\]: Failed password for invalid user jboss from 114.119.4.74 port 47456 ssh2
...
2019-08-10 22:55:38
178.157.15.91 attackbotsspam
xmlrpc.php
2019-08-10 23:21:40
144.48.168.63 attack
Automatic report - Port Scan Attack
2019-08-10 23:28:43
164.132.119.83 attack
164.132.119.83 - - [10/Aug/2019:14:20:29  0200] "GET / HTTP/1.1" 301 237 "-" "Mozilla/5.0 (compatible; Googlebot/2.1;  http://www.google.com/bot.html)"
2019-08-10 22:50:21
69.171.206.254 attackbotsspam
Aug 10 16:00:49 ns3367391 sshd\[15247\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.171.206.254  user=root
Aug 10 16:00:51 ns3367391 sshd\[15247\]: Failed password for root from 69.171.206.254 port 5363 ssh2
...
2019-08-10 23:06:41

Recently Reported IPs

49.232.173.203 185.191.177.123 147.78.53.121 159.203.197.32
109.95.35.189 217.169.223.80 94.176.204.61 49.146.13.86
208.110.64.170 138.94.227.0 85.15.190.102 182.75.105.245
212.156.174.54 58.173.68.131 46.101.132.199 106.13.27.23
27.145.249.130 37.6.144.237 190.237.160.249 46.254.217.67