113.248.148.109

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: ChinaNet Chongqing Province Network

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	(ftpd) Failed FTP login from 113.248.148.109 (CN/China/-): 10 in the last 3600 secs	2020-04-12 19:16:08

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 113.248.148.109
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23966
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;113.248.148.109.		IN	A

;; AUTHORITY SECTION:
.			465	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020041200 1800 900 604800 86400

;; Query time: 102 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Apr 12 19:16:04 CST 2020
;; MSG SIZE  rcvd: 119

Host info

Host 109.148.248.113.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 109.148.248.113.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
36.155.114.82	attackspambots	SSH bruteforce	2020-04-27 04:11:00
50.115.173.131	attack	DATE:2020-04-26 13:58:34, IP:50.115.173.131, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc)	2020-04-27 04:18:03
62.28.253.197	attackspambots	Apr 26 22:06:58 legacy sshd[10893]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.28.253.197 Apr 26 22:07:00 legacy sshd[10893]: Failed password for invalid user test from 62.28.253.197 port 40445 ssh2 Apr 26 22:11:11 legacy sshd[11160]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.28.253.197 ...	2020-04-27 04:13:10
195.181.168.138	attackspambots	[2020-04-26 16:10:14] NOTICE[1170] chan_sip.c: Registration from '' failed for '195.181.168.138:61047' - Wrong password [2020-04-26 16:10:14] SECURITY[1184] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-04-26T16:10:14.293-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="270",SessionID="0x7f6c086f7488",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/195.181.168.138/61047",Challenge="63bd8839",ReceivedChallenge="63bd8839",ReceivedHash="440e0df8118611bf4722d7a30f4b74d4" [2020-04-26 16:13:07] NOTICE[1170] chan_sip.c: Registration from '' failed for '195.181.168.138:62008' - Wrong password [2020-04-26 16:13:07] SECURITY[1184] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-04-26T16:13:07.825-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="70",SessionID="0x7f6c087c6998",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/195.181.168.1 ...	2020-04-27 04:33:13
51.178.50.244	attack	Apr 26 12:34:17 mail sshd[1420]: Failed password for root from 51.178.50.244 port 52260 ssh2 Apr 26 12:40:48 mail sshd[2567]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.178.50.244 Apr 26 12:40:50 mail sshd[2567]: Failed password for invalid user qswang from 51.178.50.244 port 50518 ssh2 ...	2020-04-27 04:41:03
222.186.15.114	attack	Apr 26 20:05:21 ip-172-31-61-156 sshd[28439]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.114 user=root Apr 26 20:05:23 ip-172-31-61-156 sshd[28439]: Failed password for root from 222.186.15.114 port 40983 ssh2 ...	2020-04-27 04:06:04
128.73.176.67	attackspambots	Port scanning	2020-04-27 04:40:45
116.131.16.94	attack	Unauthorized connection attempt detected from IP address 116.131.16.94 to port 23 [T]	2020-04-27 04:21:20
103.84.63.5	attackbotsspam	web-1 [ssh_2] SSH Attack	2020-04-27 04:25:42
186.207.31.71	attackspam	Port probing on unauthorized port 23	2020-04-27 04:45:00
51.255.168.254	attack	Apr 26 13:19:25 sigma sshd\[2935\]: Invalid user hf from 51.255.168.254Apr 26 13:19:27 sigma sshd\[2935\]: Failed password for invalid user hf from 51.255.168.254 port 38690 ssh2 ...	2020-04-27 04:10:09
203.206.172.68	attack	Automatic report - Banned IP Access	2020-04-27 04:26:03
51.38.213.136	attack	fail2ban -- 51.38.213.136 ...	2020-04-27 04:07:26
202.70.66.228	attackspambots	Apr 26 14:58:29 server sshd[45482]: Failed password for invalid user hunter from 202.70.66.228 port 53452 ssh2 Apr 26 14:58:41 server sshd[45681]: Failed password for invalid user alexander from 202.70.66.228 port 36953 ssh2 Apr 26 14:58:51 server sshd[45804]: Failed password for invalid user alexander from 202.70.66.228 port 48695 ssh2	2020-04-27 04:22:56
138.68.178.64	attackbots	Apr 26 22:02:57 vps647732 sshd[17456]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.178.64 Apr 26 22:02:59 vps647732 sshd[17456]: Failed password for invalid user remote from 138.68.178.64 port 56452 ssh2 ...	2020-04-27 04:16:41

Recently Reported IPs

123.206.206.45	201.250.223.171	80.48.133.138	108.209.118.83
188.18.47.31	105.143.134.239	210.212.53.249	62.187.193.132
113.162.146.28	149.15.65.20	243.62.68.224	117.50.117.98
67.219.145.4	194.146.36.79	67.219.146.235	117.48.227.152
85.25.185.240	45.155.124.238	193.124.206.27	119.28.131.229