Log in to view charts and search reports for this IP.
Log In
Reports Activity
Example preview
Report Categories (Last 60 Days)
Example preview
Top Reporter Countries (Last 60 Days)
Example preview
Account required for the enhanced features
Log inSign up
IP Abuse Reports for 45.141.148.134
This IP address has been reported a total of
12
times from
10 distinct
sources.
45.141.148.134 was first reported on
, and the most recent report was
.
In the last 60 days, the only reporter location was:
United Kingdom of Great Britain and Northern Ireland
with 1
report.
The most common categories in these recent reports were:
Phishing
1
time;
Hacking
1
time.
Old Reports
The most recent abuse report for this IP address is from
. It is possible that this IP is no
longer involved in abusive activities.
Investigation identified this IP as command-and-control infrastructure used during a confirmed malwa ...
show moreInvestigation identified this IP as command-and-control infrastructure used during a confirmed malware compromise. A phishing email delivered a JavaScript payload (JS.MonoGlyphRAT) which executed via wscript.exe and launched an obfuscated PowerShell loader.
Analysis of the decoded PowerShell identified direct communication with: https://45.141.148.134:2002/AymxbQ Firewall telemetry independently confirmed repeated outbound communications from the affected endpoint to 45.141.148.134:2002 during the compromise.
Associated campaign identifier:
UULWWNBBPNU7OJLNN
show less
(PERMBLOCK) 45.141.148.134 (TR/Turkey/23833-21368) has had more than 4 temp blocks in the last 86400 ...
show more(PERMBLOCK) 45.141.148.134 (TR/Turkey/23833-21368) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs:
show less
(smtpauth) Failed SMTP AUTH login from 45.141.148.134 (TR/Turkey/23833-21368): 5 in the last 3600 se ...
show more(smtpauth) Failed SMTP AUTH login from 45.141.148.134 (TR/Turkey/23833-21368): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-01-21 19:53:07 dovecot_login authenticator failed for H=(ADMIN) [45.141.148.134]:53688: 535 Incorrect authentication data ([email protected])
2026-01-21 19:53:50 dovecot_login authenticator failed for H=(ADMIN) [45.141.148.134]:47786: 535 Incorrect authentication data ([email protected])
2026-01-21 19:54:33 dovecot_login authenticator failed for H=(ADMIN) [45.141.148.134]:38822: 535 Incorrect authentication data ([email protected])
2026-01-21 19:55:17 dovecot_login authenticator failed for H=(ADMIN) [45.141.148.134]:39324: 535 Incorrect authentication data ([email protected])
2026-01-21 19:56:00 dovecot_login authenticator failed for H=(ADMIN) [45.141.148.134]:36208: 535 Incorrect authentication data ([email protected])
show less
(smtpauth) Failed SMTP AUTH login from 45.141.148.134 (TR/Turkey/23833-21368): 5 in the last 3600 se ...
show more(smtpauth) Failed SMTP AUTH login from 45.141.148.134 (TR/Turkey/23833-21368): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-01-21 19:30:19 dovecot_login authenticator failed for H=(ADMIN) [45.141.148.134]:46590: 535 Incorrect authentication data ([email protected])
2026-01-21 19:38:39 dovecot_login authenticator failed for H=(ADMIN) [45.141.148.134]:34716: 535 Incorrect authentication data ([email protected])
2026-01-21 19:39:25 dovecot_login authenticator failed for H=(ADMIN) [45.141.148.134]:60858: 535 Incorrect authentication data ([email protected])
2026-01-21 19:40:08 dovecot_login authenticator failed for H=(ADMIN) [45.141.148.134]:38296: 535 Incorrect authentication data ([email protected])
2026-01-21 19:40:49 dovecot_login authenticator failed for H=(ADMIN) [45.141.148.134]:41156: 535 Incorrect authentication data ([email protected])
show less
