107.148.130.47

Basic Info

City: unknown

Region: unknown

Country: United States of America

Internet Service Provider: Junxing Cai

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbotsspam	Portscan or hack attempt detected by psad/fwsnort	2020-07-26 00:15:03

Comments on same subnet:

IP	Type	Details	Datetime
107.148.130.164	attackbotsspam	May 23 22:14:15 debian-2gb-nbg1-2 kernel: \[12523666.093397\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=107.148.130.164 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=237 ID=62088 PROTO=TCP SPT=57072 DPT=1433 WINDOW=1024 RES=0x00 SYN URGP=0	2020-05-24 06:03:05

Type

Details

Datetime

107.148.130.164

attackbotsspam

May 23 22:14:15 debian-2gb-nbg1-2 kernel: \[12523666.093397\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=107.148.130.164 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=237 ID=62088 PROTO=TCP SPT=57072 DPT=1433 WINDOW=1024 RES=0x00 SYN URGP=0

2020-05-24 06:03:05

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 107.148.130.47
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 21466
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;107.148.130.47.			IN	A

;; AUTHORITY SECTION:
.			173	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020072500 1800 900 604800 86400

;; Query time: 265 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jul 26 00:15:00 CST 2020
;; MSG SIZE  rcvd: 118

Host info

Host 47.130.148.107.in-addr.arpa not found: 2(SERVFAIL)

Nslookup info:

;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 47.130.148.107.in-addr.arpa: SERVFAIL

Related IP info:

Related comments:

IP	Type	Details	Datetime
81.70.40.155	attackbotsspam	Oct 10 22:46:19 xeon sshd[30861]: Failed password for invalid user nagios from 81.70.40.155 port 45292 ssh2	2020-10-11 05:57:35
140.143.1.207	attackspambots	SSH bruteforce	2020-10-11 05:45:52
176.127.140.84	attackbots	Port Scan: TCP/443	2020-10-11 06:16:42
95.178.172.67	attackspam	Port Scan: TCP/443	2020-10-11 06:22:44
112.74.94.219	attackbots	[portscan] Port scan	2020-10-11 05:57:05
118.24.234.79	attackspam	Oct 10 22:29:25 vm1 sshd[9685]: Failed password for root from 118.24.234.79 port 37410 ssh2 ...	2020-10-11 06:11:26
111.229.234.109	attack	SSH Invalid Login	2020-10-11 05:49:03
79.129.29.237	attack	SSH Brute Force	2020-10-11 05:50:53
46.101.173.231	attackspambots	2020-10-10T21:23:17.356535abusebot.cloudsearch.cf sshd[22670]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.173.231 user=root 2020-10-10T21:23:19.580375abusebot.cloudsearch.cf sshd[22670]: Failed password for root from 46.101.173.231 port 55168 ssh2 2020-10-10T21:28:00.230191abusebot.cloudsearch.cf sshd[22990]: Invalid user marketing from 46.101.173.231 port 60230 2020-10-10T21:28:00.234785abusebot.cloudsearch.cf sshd[22990]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.173.231 2020-10-10T21:28:00.230191abusebot.cloudsearch.cf sshd[22990]: Invalid user marketing from 46.101.173.231 port 60230 2020-10-10T21:28:01.976731abusebot.cloudsearch.cf sshd[22990]: Failed password for invalid user marketing from 46.101.173.231 port 60230 ssh2 2020-10-10T21:32:27.423953abusebot.cloudsearch.cf sshd[23302]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101 ...	2020-10-11 05:53:25
158.177.123.152	attackspam	www.goldgier.de 158.177.123.152 [10/Oct/2020:22:49:45 +0200] "POST /wp-login.php HTTP/1.1" 200 8762 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" www.goldgier.de 158.177.123.152 [10/Oct/2020:22:49:45 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4338 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-10-11 06:09:07
51.68.122.147	attack	Oct 10 21:39:17 scw-gallant-ride sshd[16413]: Failed password for root from 51.68.122.147 port 56252 ssh2	2020-10-11 05:52:54
139.59.102.170	attackbots	SSH Brute Force	2020-10-11 05:55:16
154.74.132.234	attackspambots	1602362963 - 10/10/2020 22:49:23 Host: 154.74.132.234/154.74.132.234 Port: 445 TCP Blocked	2020-10-11 06:24:09
82.223.82.221	attackbots	Oct 10 23:09:44 vm0 sshd[3515]: Failed password for root from 82.223.82.221 port 42238 ssh2 Oct 10 23:19:20 vm0 sshd[22279]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.223.82.221 ...	2020-10-11 05:50:39
45.55.58.74	attackbots	TCP (SYN) 45.55.58.74:52006 -> port 22, len 44	2020-10-11 06:01:33

Recently Reported IPs

224.54.111.248	181.40.200.60	49.36.73.218	169.102.122.32
121.83.117.36	179.225.222.96	144.179.154.162	175.160.207.123
104.121.187.101	140.82.17.48	209.239.115.163	1.53.36.178
136.13.132.10	113.175.221.134	113.170.236.254	112.133.236.17
36.57.65.52	181.211.7.245	45.148.121.134	162.243.41.77