109.248.11.148

Basic Info

City: unknown

Region: unknown

Country: Czech Republic

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
109.248.11.115	attack	Hit honeypot r.	2020-08-29 04:26:49
109.248.11.85	attack	Spam comment : Isposable face mask Buy face masks for yourself and your family! Price US $0.02 Isposable face mask	2020-07-29 04:37:51
109.248.11.5	attack	TCP (SYN) 109.248.11.5:55125 -> port 25271, len 44	2020-07-01 02:46:34
109.248.11.85	attack	0,45-04/30 [bc02/m27] PostRequest-Spammer scoring: brussels	2020-06-25 19:41:05
109.248.11.5	attackspam	TCP (SYN) 109.248.11.5:57624 -> port 32301, len 44	2020-06-25 03:15:29
109.248.11.19	attackspam	Feb 14 00:48:40 mercury kernel: [905249.747649] [UFW ALLOW] IN=eth0 OUT= MAC=f2:3c:91:bc:4d:f8:84:78:ac:0d:8f:41:08:00 SRC=109.248.11.19 DST=109.74.200.221 LEN=37 TOS=0x00 PREC=0x00 TTL=57 ID=21635 DF PROTO=UDP SPT=54221 DPT=123 LEN=17 ...	2020-03-03 21:49:26
109.248.11.201	attackspam	Oct 19 02:01:55 mercury kernel: [UFW ALLOW] IN=eth0 OUT= MAC=f2:3c:91:bc:4d:f8:84:78:ac:0d:8f:41:08:00 SRC=109.248.11.201 DST=109.74.200.221 LEN=37 TOS=0x00 PREC=0x00 TTL=53 ID=52826 DF PROTO=UDP SPT=58177 DPT=123 LEN=17 ...	2020-03-03 21:44:42
109.248.11.161	attackspambots	Dec 29 15:52:31 tuxlinux sshd[1865]: Invalid user webmaster from 109.248.11.161 port 33168 Dec 29 15:52:31 tuxlinux sshd[1865]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.248.11.161 Dec 29 15:52:31 tuxlinux sshd[1865]: Invalid user webmaster from 109.248.11.161 port 33168 Dec 29 15:52:31 tuxlinux sshd[1865]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.248.11.161 Dec 29 15:52:31 tuxlinux sshd[1865]: Invalid user webmaster from 109.248.11.161 port 33168 Dec 29 15:52:31 tuxlinux sshd[1865]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.248.11.161 Dec 29 15:52:32 tuxlinux sshd[1865]: Failed password for invalid user webmaster from 109.248.11.161 port 33168 ssh2 ...	2019-12-30 00:41:19
109.248.11.161	attackbotsspam	Dec 8 08:29:35 cvbnet sshd[21540]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.248.11.161 Dec 8 08:29:38 cvbnet sshd[21540]: Failed password for invalid user admin from 109.248.11.161 port 60346 ssh2 ...	2019-12-08 15:53:36
109.248.11.161	attackspambots	Dec 4 20:28:10 * sshd[14899]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.248.11.161 Dec 4 20:28:13 * sshd[14899]: Failed password for invalid user dorota from 109.248.11.161 port 50384 ssh2	2019-12-05 03:38:04
109.248.11.161	attackspam	Dec 1 23:49:24 lnxweb61 sshd[2776]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.248.11.161	2019-12-02 08:12:43
109.248.11.161	attackbotsspam	Dec 1 22:25:30 lnxweb61 sshd[22703]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.248.11.161 Dec 1 22:25:32 lnxweb61 sshd[22703]: Failed password for invalid user wwwrun from 109.248.11.161 port 55622 ssh2 Dec 1 22:31:11 lnxweb61 sshd[28241]: Failed password for root from 109.248.11.161 port 39600 ssh2	2019-12-02 06:20:35
109.248.11.201	attack	109.248.11.201 was recorded 5 times by 5 hosts attempting to connect to the following ports: 1900. Incident counter (4h, 24h, all-time): 5, 9, 43	2019-11-08 08:17:51
109.248.11.161	attack	Invalid user di from 109.248.11.161 port 45574	2019-10-30 07:23:50
109.248.11.69	attack	Illegal actions on webapp	2019-10-14 17:19:52

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 109.248.11.148
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62430
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;109.248.11.148.			IN	A

;; AUTHORITY SECTION:
.			462	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022800 1800 900 604800 86400

;; Query time: 59 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 28 18:26:55 CST 2022
;; MSG SIZE  rcvd: 107

Host info

148.11.248.109.in-addr.arpa domain name pointer 413257.cloud4box.ru.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
148.11.248.109.in-addr.arpa	name = 413257.cloud4box.ru.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
80.211.84.100	attackspambots	DK_ARUBA-MNT_<177>1582032422 [1:2403430:55446] ET CINS Active Threat Intelligence Poor Reputation IP TCP group 66 [Classification: Misc Attack] [Priority: 2] {TCP} 80.211.84.100:57502	2020-02-18 21:51:11
180.76.57.58	attackbotsspam	Lines containing failures of 180.76.57.58 Feb 18 13:59:23 shared01 sshd[11112]: Invalid user python from 180.76.57.58 port 60676 Feb 18 13:59:23 shared01 sshd[11112]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.57.58 Feb 18 13:59:25 shared01 sshd[11112]: Failed password for invalid user python from 180.76.57.58 port 60676 ssh2 Feb 18 13:59:25 shared01 sshd[11112]: Received disconnect from 180.76.57.58 port 60676:11: Bye Bye [preauth] Feb 18 13:59:25 shared01 sshd[11112]: Disconnected from invalid user python 180.76.57.58 port 60676 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=180.76.57.58	2020-02-18 21:27:44
222.186.30.209	attackspam	Feb 18 08:39:54 plusreed sshd[14941]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.209 user=root Feb 18 08:39:56 plusreed sshd[14941]: Failed password for root from 222.186.30.209 port 60232 ssh2 ...	2020-02-18 21:40:46
51.38.179.179	attackspam	Feb 18 14:01:05 MK-Soft-VM3 sshd[15063]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.179.179 Feb 18 14:01:06 MK-Soft-VM3 sshd[15063]: Failed password for invalid user wangw from 51.38.179.179 port 35126 ssh2 ...	2020-02-18 21:24:44
42.112.21.203	attack	Automatic report - XMLRPC Attack	2020-02-18 21:41:48
106.12.27.213	attackbots	SSH brutforce	2020-02-18 21:43:12
121.192.179.226	attackspam	Feb 18 14:38:26 haigwepa sshd[21917]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.192.179.226 Feb 18 14:38:28 haigwepa sshd[21917]: Failed password for invalid user martin from 121.192.179.226 port 60218 ssh2 ...	2020-02-18 21:46:42
94.153.144.58	attack	Port probing on unauthorized port 1433	2020-02-18 21:43:35
49.176.175.223	attack	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-18 21:27:07
69.229.6.56	attackbotsspam	$f2bV_matches	2020-02-18 21:16:58
103.27.238.202	attack	Feb 18 18:27:25 gw1 sshd[22155]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.27.238.202 Feb 18 18:27:26 gw1 sshd[22155]: Failed password for invalid user test from 103.27.238.202 port 42600 ssh2 ...	2020-02-18 21:37:00
49.176.176.24	attack	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-18 21:26:11
185.101.69.144	attack	B: Magento admin pass test (wrong country)	2020-02-18 21:17:39
223.245.212.218	attack	Feb 18 14:27:01 grey postfix/smtpd\[25703\]: NOQUEUE: reject: RCPT from unknown\[223.245.212.218\]: 554 5.7.1 Service unavailable\; Client host \[223.245.212.218\] blocked using dul.dnsbl.sorbs.net\; Dynamic IP Addresses See: http://www.sorbs.net/lookup.shtml\?223.245.212.218\; from=\ to=\ proto=ESMTP helo=\ ...	2020-02-18 21:55:18
217.35.75.193	attackbots	Invalid user user from 217.35.75.193 port 57367	2020-02-18 21:21:04

Recently Reported IPs

109.247.75.13	109.247.98.149	109.248.113.129	109.248.115.107
106.185.160.77	109.248.119.108	109.248.118.238	109.248.115.99
109.248.119.86	109.248.12.164	109.248.12.74	109.248.131.124
109.248.134.99	109.248.13.54	109.248.138.196	109.248.138.48
109.248.129.56	109.248.139.134	109.248.139.173	138.76.244.147