IP address

Passive DNS

Tags: Scanner

IP blacklists

DataPlane SSH conn

147.45.48.166 is listed on the DataPlane SSH conn blacklist.

Description: DataPlane.org is a community-powered Internet data, feeds, and measurement resource for operators, by operators. IP addresses that has been seen initiating an unsolicited SSH connection to a remote host.
Type of feed: primary (feed detail page)

Last checked at: 2024-11-14 15:10:01.656000
Was present on blacklist at: 2024-11-03 19:10, 2024-11-03 23:10, 2024-11-04 03:10, 2024-11-04 07:10, 2024-11-04 11:10, 2024-11-04 15:10, 2024-11-04 19:10, 2024-11-04 23:10, 2024-11-05 03:10, 2024-11-05 07:10, 2024-11-05 11:10, 2024-11-05 15:10, 2024-11-05 19:10, 2024-11-05 23:10, 2024-11-06 03:10, 2024-11-06 07:10, 2024-11-06 11:10, 2024-11-06 15:10, 2024-11-06 19:10, 2024-11-06 23:10, 2024-11-07 03:10, 2024-11-07 07:10, 2024-11-07 11:10, 2024-11-07 15:10, 2024-11-07 19:10, 2024-11-07 23:10, 2024-11-08 03:10, 2024-11-08 07:10, 2024-11-08 11:10, 2024-11-08 15:10, 2024-11-08 19:10, 2024-11-08 23:10, 2024-11-09 03:10, 2024-11-09 07:10, 2024-11-09 11:10, 2024-11-09 15:10, 2024-11-09 19:10, 2024-11-09 23:10, 2024-11-10 03:10, 2024-11-10 07:10, 2024-11-10 11:10, 2024-11-10 15:10, 2024-11-10 19:10, 2024-11-10 23:10, 2024-11-11 03:10, 2024-11-11 07:10, 2024-11-11 11:10, 2024-11-11 15:10, 2024-11-11 19:10, 2024-11-11 23:10, 2024-11-12 03:10, 2024-11-12 07:10, 2024-11-12 11:10, 2024-11-12 15:10, 2024-11-12 19:10, 2024-11-12 23:10, 2024-11-13 03:10, 2024-11-13 07:10, 2024-11-13 11:10, 2024-11-13 15:10, 2024-11-13 19:10, 2024-11-13 23:10, 2024-11-14 03:10, 2024-11-14 07:10, 2024-11-14 11:10, 2024-11-14 15:10

blocklist.de SSH

147.45.48.166 is listed on the blocklist.de SSH blacklist.

Description: Blocklist.de feed is a free and voluntary service provided by a Fraud/Abuse-specialist. IPs performing SSH attacks.
Type of feed: primary (feed detail page)

Last checked at: 2024-11-14 11:05:00.599000
Was present on blacklist at: 2024-11-03 23:05, 2024-11-04 05:05, 2024-11-04 11:05, 2024-11-04 17:05, 2024-11-04 23:05, 2024-11-05 05:05, 2024-11-05 11:05, 2024-11-05 17:05, 2024-11-05 23:05, 2024-11-06 05:05, 2024-11-12 17:05, 2024-11-12 23:05, 2024-11-13 05:05, 2024-11-13 11:05, 2024-11-13 17:05, 2024-11-13 23:05, 2024-11-14 05:05, 2024-11-14 11:05

AbuseIPDB

147.45.48.166 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc. Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2024-11-14 05:00:00.339000
Was present on blacklist at: 2024-11-04 05:00, 2024-11-13 05:00, 2024-11-14 05:00

Blocklist.net.ua

147.45.48.166 is listed on the Blocklist.net.ua blacklist.

Description: BlockList contains IP addresses that perform attacks, send spam or brute force passwords to the blocking list.
Type of feed: primary (feed detail page)

Last checked at: 2024-11-14 15:15:04.647000
Was present on blacklist at: 2024-11-09 19:15, 2024-11-09 23:15, 2024-11-10 03:15, 2024-11-10 07:15, 2024-11-10 11:15, 2024-11-10 15:15, 2024-11-10 19:15, 2024-11-10 23:15, 2024-11-11 03:15, 2024-11-11 07:15, 2024-11-11 11:15, 2024-11-11 15:15, 2024-11-11 19:15, 2024-11-11 23:15, 2024-11-12 03:15, 2024-11-12 07:15, 2024-11-12 11:15, 2024-11-12 15:15, 2024-11-12 19:15, 2024-11-12 23:15, 2024-11-13 03:15, 2024-11-13 07:15, 2024-11-13 11:15, 2024-11-13 15:15, 2024-11-13 19:15, 2024-11-13 23:15, 2024-11-14 03:15, 2024-11-14 07:15, 2024-11-14 11:15, 2024-11-14 15:15

Warden events (200)

2024-11-13: ReconScanning (node.ce2b59): 27
2024-11-12: ReconScanning (node.ce2b59): 12; AttemptLogin (node.5870ac): 1; ReconScanning (node.4dc198): 1
2024-11-08: ReconScanning (node.ce2b59): 5
2024-11-07: ReconScanning (node.ce2b59): 29
2024-11-06: ReconScanning (node.ce2b59): 31
2024-11-05: ReconScanning (node.ce2b59): 32
2024-11-04: ReconScanning (node.ce2b59): 31
2024-11-03: ReconScanning (node.ce2b59): 27; AttemptLogin (node.ce2b59): 3
2024-11-02: ReconScanning (node.ce2b59): 1

DShield reports (IP summary, reports)

2024-11-03: Number of reports: 134; Distinct targets: 32
2024-11-04: Number of reports: 151; Distinct targets: 32
2024-11-05: Number of reports: 313; Distinct targets: 8
2024-11-06: Number of reports: 16; Distinct targets: 11
2024-11-08: Number of reports: 12; Distinct targets: 7
2024-11-09: Number of reports: 31; Distinct targets: 11
2024-11-12: Number of reports: 121; Distinct targets: 37
2024-11-13: Number of reports: 366; Distinct targets: 70

Origin AS: AS207713 - GIR-AS
BGP Prefix: 147.45.48.0/24
geo: Russia, Novosibirsk; 🕑 Asia/Novosibirsk
hostname: 45302.ip-ptr.tech
Address block ('inetnum' or 'NetRange' in whois database): 147.45.0.0 - 147.45.255.255
last_activity: 2024-11-13 19:52:51
last_warden_event: 2024-11-13 19:52:51
rep: 0.36651124500093
reserved_range: 0
ts_added: 2024-11-02 22:45:11.552000
ts_last_update: 2024-11-14 15:25:36.525000

Warden event timeline

DShield event timeline

Presence on blacklists