Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Turkey

Internet Service Provider: Radore Veri Merkezi Hizmetleri A.S.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
Automatic report - Banned IP Access
2019-07-25 06:01:03
attack
46.45.138.42 - - \[11/Jul/2019:16:13:33 +0200\] "POST /wp-login.php HTTP/1.1" 200 2110 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
46.45.138.42 - - \[11/Jul/2019:16:13:34 +0200\] "POST /wp-login.php HTTP/1.1" 200 2091 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
...
2019-07-12 02:07:27
attack
[munged]::443 46.45.138.42 - - [05/Jul/2019:20:01:29 +0200] "POST /[munged]: HTTP/1.1" 200 8925 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 46.45.138.42 - - [05/Jul/2019:20:01:30 +0200] "POST /[munged]: HTTP/1.1" 200 8925 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 46.45.138.42 - - [05/Jul/2019:20:01:30 +0200] "POST /[munged]: HTTP/1.1" 200 8925 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 46.45.138.42 - - [05/Jul/2019:20:01:31 +0200] "POST /[munged]: HTTP/1.1" 200 8925 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 46.45.138.42 - - [05/Jul/2019:20:01:31 +0200] "POST /[munged]: HTTP/1.1" 200 8925 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 46.45.138.42 - - [05/Jul/2019:20:01:32 +0200] "POST /[munged]: HTTP/1.1" 200 8925 "-" "Mozilla/5.0 (X11; Ubuntu; Li
2019-07-06 06:19:49
attackspam
WordPress login Brute force / Web App Attack on client site.
2019-06-28 22:42:00
attack
Automatic report generated by Wazuh
2019-06-27 07:17:41
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 46.45.138.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63698
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;46.45.138.42.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019051601 1800 900 604800 86400

;; Query time: 1 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Fri May 17 08:50:44 CST 2019
;; MSG SIZE  rcvd: 116

Host info
42.138.45.46.in-addr.arpa domain name pointer .
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
42.138.45.46.in-addr.arpa	name = .

Authoritative answers can be found from:

Related IP info:
Related comments:
IP Type Details Datetime
198.144.184.34 attack
Aug  7 06:39:40 XXX sshd[55584]: Invalid user larry from 198.144.184.34 port 52468
2019-08-07 16:35:21
119.233.143.21 attackspam
2019-08-07 08:48:30 H=(4mt7g5z.jkb) [119.233.143.21]:7177 I=[10.100.18.25]:25 sender verify fail for : Unrouteable address
2019-08-07 x@x
2019-08-07 08:48:31 unexpected disconnection while reading SMTP command from (4mt7g5z.jkb) [119.233.143.21]:7177 I=[10.100.18.25]:25


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=119.233.143.21
2019-08-07 16:45:07
202.154.159.204 attack
Aug  7 09:01:52 MK-Soft-Root1 sshd\[8806\]: Invalid user mooon from 202.154.159.204 port 50242
Aug  7 09:01:52 MK-Soft-Root1 sshd\[8806\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.154.159.204
Aug  7 09:01:54 MK-Soft-Root1 sshd\[8806\]: Failed password for invalid user mooon from 202.154.159.204 port 50242 ssh2
...
2019-08-07 16:56:42
185.137.111.5 attackspam
Aug  7 17:52:46 ns1 postfix/smtpd\[16087\]: warning: unknown\[185.137.111.5\]: SASL LOGIN authentication failed: authentication failure
Aug  7 17:53:27 ns1 postfix/smtpd\[16087\]: warning: unknown\[185.137.111.5\]: SASL LOGIN authentication failed: authentication failure
Aug  7 17:54:11 ns1 postfix/smtpd\[16087\]: warning: unknown\[185.137.111.5\]: SASL LOGIN authentication failed: authentication failure
Aug  7 17:54:54 ns1 postfix/smtpd\[16087\]: warning: unknown\[185.137.111.5\]: SASL LOGIN authentication failed: authentication failure
Aug  7 17:55:38 ns1 postfix/smtpd\[16087\]: warning: unknown\[185.137.111.5\]: SASL LOGIN authentication failed: authentication failure
Aug  7 17:56:30 ns1 postfix/smtpd\[16087\]: warning: unknown\[185.137.111.5\]: SASL LOGIN authentication failed: authentication failure
Aug  7 17:57:06 ns1 postfix/smtpd\[16087\]: warning: unknown\[185.137.111.5\]: SASL LOGIN authentication failed: authentication failure
Aug  7 17:57:47 ns1 postfix/smtpd\[16087\]: warning: unknown\[185.137.11
2019-08-07 17:09:10
158.69.206.218 attackbotsspam
xmlrpc attack
2019-08-07 16:36:09
130.185.156.95 attackbots
Unauthorized connection attempt from IP address 130.185.156.95 on Port 445(SMB)
2019-08-07 17:22:20
37.143.160.18 attackbotsspam
Aug  7 10:38:34 localhost sshd\[3978\]: Invalid user smhyun from 37.143.160.18 port 56828
Aug  7 10:38:34 localhost sshd\[3978\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.143.160.18
Aug  7 10:38:36 localhost sshd\[3978\]: Failed password for invalid user smhyun from 37.143.160.18 port 56828 ssh2
2019-08-07 17:15:24
27.154.225.186 attack
Aug  7 10:08:04 localhost sshd\[837\]: Invalid user misson from 27.154.225.186 port 59364
Aug  7 10:08:04 localhost sshd\[837\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.154.225.186
Aug  7 10:08:06 localhost sshd\[837\]: Failed password for invalid user misson from 27.154.225.186 port 59364 ssh2
2019-08-07 16:39:05
27.151.138.29 attack
FTP brute-force attack
2019-08-07 17:28:31
106.12.92.88 attack
Aug  7 09:05:02 MK-Soft-VM7 sshd\[4053\]: Invalid user will from 106.12.92.88 port 37824
Aug  7 09:05:02 MK-Soft-VM7 sshd\[4053\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.92.88
Aug  7 09:05:04 MK-Soft-VM7 sshd\[4053\]: Failed password for invalid user will from 106.12.92.88 port 37824 ssh2
...
2019-08-07 17:24:07
82.94.29.220 attackbotsspam
BadRequests
2019-08-07 16:54:42
109.191.149.255 attackspam
RU - - [06 Aug 2019:19:31:48 +0300] HEAD  redirect ?go=http:  hqtube.mobi  HTTP 1.1 302 - - Xenu Link Sleuth 1.3.8
2019-08-07 17:02:47
178.62.103.95 attackbotsspam
Aug  7 04:24:39 vps200512 sshd\[5361\]: Invalid user alan from 178.62.103.95
Aug  7 04:24:39 vps200512 sshd\[5361\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.103.95
Aug  7 04:24:41 vps200512 sshd\[5361\]: Failed password for invalid user alan from 178.62.103.95 port 46006 ssh2
Aug  7 04:30:37 vps200512 sshd\[5468\]: Invalid user nagios from 178.62.103.95
Aug  7 04:30:37 vps200512 sshd\[5468\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.103.95
2019-08-07 16:39:33
51.83.32.88 attackspam
Aug  7 09:00:35 mail sshd\[16653\]: Failed password for invalid user rt from 51.83.32.88 port 43786 ssh2
Aug  7 09:19:54 mail sshd\[16876\]: Invalid user jamese from 51.83.32.88 port 59494
Aug  7 09:19:54 mail sshd\[16876\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.32.88
...
2019-08-07 16:40:47
107.170.201.213 attackspam
firewall-block, port(s): 27375/tcp
2019-08-07 16:45:24

Recently Reported IPs

139.92.26.208 226.85.21.197 25.104.239.109 5.158.50.63
33.70.211.108 236.232.124.124 206.174.174.115 228.172.118.254
177.52.246.170 75.246.174.6 48.26.158.123 101.68.70.14
122.225.76.214 186.10.88.130 233.8.125.184 173.66.230.4
187.4.52.2 103.227.176.19 103.54.216.186 139.159.48.123