IP address

Search at other sites:

.64645.148.10.111

Shodan(more info)

Passive DNS

Tags: Residential proxy

IP blacklists

AbuseIPDB

45.148.10.111 was recently listed on the AbuseIPDB blacklist, but currently it is not.

Description: AbuseIPDB is a project managed by Marathon Studios Inc. Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2026-10-04 04:00:00.664000
Was present on blacklist at: 2026-08-24 04:00, 2026-09-08 04:00, 2026-10-04 04:00

Spamhaus SBL

45.148.10.111 is listed on the Spamhaus SBL blacklist.

Description: The Spamhaus Block List ("SBL") Advisory is a database of IP addresses from which Spamhaus does not recommend the acceptance of electronic mail.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-10-12 04:01:24.556000
Was present on blacklist at: 2026-08-24 04:01, 2026-08-31 04:01, 2026-09-07 22:20, 2026-09-14 04:01, 2026-09-21 04:01, 2026-09-28 04:01, 2026-10-05 04:01, 2026-10-12 04:01

Spamhaus XBL CBL

45.148.10.111 is listed on the Spamhaus XBL CBL blacklist.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-10-12 04:01:24.556000
Was present on blacklist at: 2026-08-24 04:01, 2026-08-31 04:01, 2026-09-07 22:20, 2026-09-14 04:01, 2026-09-21 04:01, 2026-09-28 04:01, 2026-10-05 04:01, 2026-10-12 04:01

Spamhaus DROP

45.148.10.111 is listed on the Spamhaus DROP blacklist.

Description: Spamhaus DROP (Don't Route Or Peer) list. Netblocks controlled by spammers or cyber criminals. The DROP lists are a tiny subset of the SBL, designed for use by firewalls and routing equipment to filter out the malicious traffic from these netblocks.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-10-12 04:01:24.556000
Was present on blacklist at: 2026-08-24 04:01, 2026-08-31 04:01, 2026-09-07 22:20, 2026-09-14 04:01, 2026-09-21 04:01, 2026-09-28 04:01, 2026-10-05 04:01, 2026-10-12 04:01

TorProject

45.148.10.111 is listed on the TorProject blacklist.

Description: TorProject.org list of all current TOR exit points (TorDNSEL)
Type of feed: secondary (feed detail page)

Last checked at: 2026-10-12 04:10:00
Was present on blacklist at: 2026-08-24 04:10, 2026-08-25 04:10, 2026-08-26 04:10, 2026-08-27 04:10, 2026-08-28 04:10, 2026-08-29 04:10, 2026-08-30 04:10, 2026-08-31 04:10, 2026-09-01 04:10, 2026-09-02 04:10, 2026-09-03 04:10, 2026-09-04 04:10, 2026-09-05 04:10, 2026-09-06 04:10, 2026-09-08 00:10, 2026-09-08 04:10, 2026-09-09 04:10, 2026-09-10 04:10, 2026-09-11 04:10, 2026-09-12 04:10, 2026-09-13 04:10, 2026-09-14 04:10, 2026-09-15 04:10, 2026-09-16 04:10, 2026-09-17 04:10, 2026-09-18 04:10, 2026-09-19 04:10, 2026-09-20 04:10, 2026-09-21 04:10, 2026-09-22 04:10, 2026-09-23 04:10, 2026-09-24 04:10, 2026-09-25 04:10, 2026-09-26 04:10, 2026-09-27 04:10, 2026-09-28 04:10, 2026-09-29 04:10, 2026-09-30 04:10, 2026-10-01 04:10, 2026-10-02 04:10, 2026-10-03 04:10, 2026-10-04 04:10, 2026-10-05 04:10, 2026-10-06 04:10, 2026-10-07 04:10, 2026-10-08 04:10, 2026-10-09 04:10, 2026-10-10 04:10, 2026-10-11 04:10, 2026-10-12 04:10

FireHOL anonymizers

45.148.10.111 is listed on the FireHOL anonymizers blacklist.

Description: List of anonymizing IPs, aggregated from multiple lists by FireHOL.
Type of feed: secondary (feed detail page)

Last checked at: 2026-10-12 00:05:17
Was present on blacklist at: 2026-08-24 00:05, 2026-08-25 00:05, 2026-08-26 00:05, 2026-08-27 00:05, 2026-08-28 00:05, 2026-08-29 00:05, 2026-08-30 00:05, 2026-08-31 00:05, 2026-09-01 00:05, 2026-09-02 00:05, 2026-09-03 00:05, 2026-09-04 00:05, 2026-09-05 00:05, 2026-09-06 00:05, 2026-09-08 00:05, 2026-09-08 00:05, 2026-09-09 00:05, 2026-09-10 00:05, 2026-09-11 00:05, 2026-09-12 00:05, 2026-09-13 00:05, 2026-09-14 00:05, 2026-09-15 00:05, 2026-09-16 00:05, 2026-09-17 00:05, 2026-09-18 00:05, 2026-09-19 00:05, 2026-09-20 00:05, 2026-09-21 00:05, 2026-09-22 00:05, 2026-09-23 00:05, 2026-09-24 00:05, 2026-09-25 00:05, 2026-09-26 00:05, 2026-09-27 00:05, 2026-09-28 00:05, 2026-09-29 00:05, 2026-09-30 00:05, 2026-10-01 00:05, 2026-10-02 00:05, 2026-10-03 00:05, 2026-10-04 00:05, 2026-10-05 00:05, 2026-10-06 00:05, 2026-10-07 00:05, 2026-10-08 00:05, 2026-10-09 00:05, 2026-10-10 00:05, 2026-10-11 00:05, 2026-10-12 00:05

dan.me.uk TOR Nodes

45.148.10.111 is listed on the dan.me.uk TOR Nodes blacklist.

Description: List of TOR node IPs by dan.me.uk.
Type of feed: secondary (feed detail page)

Last checked at: 2026-10-12 04:10:00
Was present on blacklist at: 2026-08-24 04:10, 2026-08-25 04:10, 2026-08-26 04:10, 2026-08-27 04:10, 2026-08-28 04:10, 2026-08-29 04:10, 2026-08-30 04:10, 2026-08-31 04:10, 2026-09-01 04:10, 2026-09-02 04:10, 2026-09-03 04:10, 2026-09-04 04:10, 2026-09-05 04:10, 2026-09-06 04:10, 2026-09-08 00:10, 2026-09-08 04:10, 2026-09-09 04:10, 2026-09-10 04:10, 2026-09-11 04:10, 2026-09-12 04:10, 2026-09-13 04:10, 2026-09-14 04:10, 2026-09-15 04:10, 2026-09-16 04:10, 2026-09-17 04:10, 2026-09-18 04:10, 2026-09-19 04:10, 2026-09-20 04:10, 2026-09-21 04:10, 2026-09-22 04:10, 2026-09-23 04:10, 2026-09-24 04:10, 2026-09-25 04:10, 2026-09-26 04:10, 2026-09-27 04:10, 2026-09-28 04:10, 2026-09-29 04:10, 2026-09-30 04:10, 2026-10-01 04:10, 2026-10-02 04:10, 2026-10-03 04:10, 2026-10-04 04:10, 2026-10-05 04:10, 2026-10-06 04:10, 2026-10-07 04:10, 2026-10-08 04:10, 2026-10-09 04:10, 2026-10-10 04:10, 2026-10-11 04:10, 2026-10-12 04:10

DShield Block

45.148.10.111 is listed on the DShield Block blacklist.

Description: Recommended Block List by DShield.org. It summarizes the top 20 attacking class C (/24) subnets over the last three days.
Type of feed: secondary (feed detail page)

Last checked at: 2026-10-12 04:50:00
Was present on blacklist at: 2026-08-24 04:50, 2026-08-25 04:50, 2026-08-30 04:50, 2026-09-01 04:50, 2026-09-05 04:50, 2026-09-10 04:50, 2026-09-11 04:50, 2026-09-12 04:50, 2026-09-13 04:50, 2026-09-16 04:50, 2026-09-17 04:50, 2026-09-18 04:50, 2026-09-19 04:50, 2026-09-20 04:50, 2026-09-21 04:50, 2026-09-22 04:50, 2026-09-23 04:50, 2026-09-24 04:50, 2026-09-30 04:50, 2026-10-03 04:50, 2026-10-04 04:50, 2026-10-06 04:50, 2026-10-07 04:50, 2026-10-08 04:50, 2026-10-11 04:50, 2026-10-12 04:50

Sblam!

45.148.10.111 was recently listed on the Sblam! blacklist, but currently it is not.

Description: Sblam! is a service that effectively protects forms for comments in blogs, forums and guestbooks from spam.
Type of feed: primary (feed detail page)

Last checked at: 2026-09-24 02:15:00.233000
Was present on blacklist at: 2026-08-25 02:15, 2026-08-26 02:15, 2026-08-27 02:15, 2026-08-28 02:15, 2026-08-29 02:15, 2026-08-30 02:15, 2026-08-31 02:15, 2026-09-01 02:15, 2026-09-02 02:15, 2026-09-03 02:15, 2026-09-04 02:15, 2026-09-05 02:15, 2026-09-06 02:15, 2026-09-08 02:15, 2026-09-09 02:15, 2026-09-10 02:15, 2026-09-11 02:15, 2026-09-12 02:15, 2026-09-13 02:15, 2026-09-14 02:15, 2026-09-15 02:15, 2026-09-16 02:15, 2026-09-17 02:15, 2026-09-18 02:15, 2026-09-19 02:15, 2026-09-20 02:15, 2026-09-21 02:15, 2026-09-22 02:15, 2026-09-23 02:15, 2026-09-24 02:15

Echelon admin panel hunt

45.148.10.111 was recently listed on the Echelon admin panel hunt blacklist, but currently it is not.

Description: IPs detected by Echelon sensors (honeypots) as performing this activity: Scanning for administrative interfaces
Type of feed: primary (feed detail page)

Last checked at: 2026-09-03 09:05:04.067000
Was present on blacklist at: 2026-08-28 09:05, 2026-08-29 09:05, 2026-08-30 09:05, 2026-08-31 09:05, 2026-09-01 09:05, 2026-09-02 09:05, 2026-09-03 09:05

Echelon CMS enumeration

45.148.10.111 was recently listed on the Echelon CMS enumeration blacklist, but currently it is not.

Description: IPs detected by Echelon sensors (honeypots) as performing this activity: Content management system discovery and enumeration
Type of feed: primary (feed detail page)

Last checked at: 2026-09-03 09:05:00.981000
Was present on blacklist at: 2026-08-28 09:05, 2026-08-29 09:05, 2026-08-30 09:05, 2026-08-31 09:05, 2026-09-01 09:05, 2026-09-02 09:05, 2026-09-03 09:05

Echelon TLS/SSL crawler

45.148.10.111 was recently listed on the Echelon TLS/SSL crawler blacklist, but currently it is not.

Description: IPs detected by Echelon sensors (honeypots) as performing this activity: TLS/SSL connection fingerprinting detected via Suricata
Type of feed: primary (feed detail page)

Last checked at: 2026-09-24 09:40:00.404000
Was present on blacklist at: 2026-08-28 09:40, 2026-08-29 09:40, 2026-08-30 09:40, 2026-08-31 09:40, 2026-09-01 09:40, 2026-09-02 09:40, 2026-09-03 09:40, 2026-09-18 09:40, 2026-09-23 09:40, 2026-09-24 09:40

Echelon web crawler

45.148.10.111 was recently listed on the Echelon web crawler blacklist, but currently it is not.

Description: IPs detected by Echelon sensors (honeypots) as performing this activity: HTTP web crawling activity detected on web honeypots
Type of feed: primary (feed detail page)

Last checked at: 2026-09-03 09:50:00.419000
Was present on blacklist at: 2026-08-28 09:50, 2026-08-29 09:50, 2026-08-30 09:50, 2026-08-31 09:50, 2026-09-01 09:50, 2026-09-02 09:50, 2026-09-03 09:50

blocklist.de bots

45.148.10.111 was recently listed on the blocklist.de bots blacklist, but currently it is not.

Description: Blocklist.de feed is a free and voluntary service provided by a Fraud/Abuse-specialist. IPs performing attacks on the RFI-Attacks, REG-Bots, IRC-Bots or BadBots.
Type of feed: primary (feed detail page)

Last checked at: 2026-09-09 22:05:00.282000
Was present on blacklist at: 2026-09-08 04:05, 2026-09-08 10:05, 2026-09-08 16:05, 2026-09-08 22:05, 2026-09-09 04:05, 2026-09-09 10:05, 2026-09-09 16:05, 2026-09-09 22:05

UCEPROTECT L1

45.148.10.111 was recently listed on the UCEPROTECT L1 blacklist, but currently it is not.

Description: UCEPROTECT-NETWORK list of spam IPs.
Type of feed: primary (feed detail page)

Last checked at: 2026-09-14 23:45:00.634000
Was present on blacklist at: 2026-09-08 15:45, 2026-09-08 23:45, 2026-09-09 07:45, 2026-09-09 15:45, 2026-09-09 23:45, 2026-09-10 07:45, 2026-09-10 15:45, 2026-09-11 07:45, 2026-09-11 15:45, 2026-09-11 23:45, 2026-09-12 07:45, 2026-09-12 23:45, 2026-09-13 07:45, 2026-09-13 15:45, 2026-09-13 23:45, 2026-09-14 07:45, 2026-09-14 15:45, 2026-09-14 23:45

blocklist.de web-login

45.148.10.111 was recently listed on the blocklist.de web-login blacklist, but currently it is not.

Description: Blocklist.de feed is a free and voluntary service provided by a Fraud/Abuse-specialist. IPs that attacks Joomla, Wordpress and other Web-Logins with Brute-Force Logins.
Type of feed: primary (feed detail page)

Last checked at: 2026-09-13 10:05:00.122000
Was present on blacklist at: 2026-09-11 16:05, 2026-09-11 22:05, 2026-09-12 04:05, 2026-09-12 10:05, 2026-09-12 16:05, 2026-09-12 22:05, 2026-09-13 04:05, 2026-09-13 10:05

blocklist.de Apache

45.148.10.111 was recently listed on the blocklist.de Apache blacklist, but currently it is not.

Description: Blocklist.de feed is a free and voluntary service provided by a Fraud/Abuse-specialist. IPs performing attacks on the service Apache, Apache-DDOS, RFI-Attacks.
Type of feed: primary (feed detail page)

Last checked at: 2026-09-13 10:05:00.371000
Was present on blacklist at: 2026-09-11 16:05, 2026-09-11 22:05, 2026-09-12 04:05, 2026-09-12 10:05, 2026-09-12 16:05, 2026-09-12 22:05, 2026-09-13 04:05, 2026-09-13 10:05

Threat categories

TL	Role	Category	Details
50	src	scan
25	src	—

Warden events (61)

2026-09-19: ReconScanning (node.ce2b59): 1
2026-09-17: IntrusionUserCompromise (node.cfb4f7): 60

DShield reports (IP summary, reports)

2026-09-30: Number of reports: 10; Distinct targets: 3

Residential proxy info (data provided by Layer3 Intel)

Last seen: 2026-10-11 06:01:21}

Percent days seen: 53 %

Networks: OXYLABS, INFATICA, PACKETSTREAM, BOTTINGTOOLS, BIRDPROXIES, PROXYEMPIRE, BYTEPROXIES, KOOKEY, PROXYWING, GONZOPROXY, THORDATA, BYTEFUL, FLASHPROXY, PROXY-SELLER, FLOPPYDATA, THUNDERPROXY, DATAIMPULSE, PROXYMA, AKE.NET, 2CAPTCHA

Details: https://layer3intel.com/context/45.148.10.111

Origin AS: AS48090 - PPTECHNOLOGY
BGP Prefix: 45.148.10.0/24
geo: Netherlands, Amsterdam; 🕑 Europe/Amsterdam
hostname: (null)
Address block ('inetnum' or 'NetRange' in whois database): 45.148.8.0 - 45.148.11.255
last_activity: 2026-09-19 06:07:42
last_warden_event: 2026-09-19 06:07:42
rep: 0.6464468491508139
reserved_range: 0
Shodan's InternetDB: Open ports: 80, 81, 82, 83, 84, 9000; Tags: tor; CPEs: –
ts_added: 2026-08-24 04:01:19.252000
ts_last_update: 2026-10-12 04:01:24.645000

Warden event timeline

DShield event timeline

Presence on blacklists