Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States of America

Internet Service Provider: Marquette University

Hostname: unknown

Organization: unknown

Usage Type: University/College/School

Comments:
Type Details Datetime
attackspam
Feb 23 14:29:00 MK-Soft-VM3 sshd[16876]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.48.5.7 
Feb 23 14:29:02 MK-Soft-VM3 sshd[16876]: Failed password for invalid user jmiller from 134.48.5.7 port 43976 ssh2
...
2020-02-23 21:49:15
Comments on same subnet:
IP Type Details Datetime
134.48.5.250 attack
Jan  9 14:11:33 lakhesis sshd[31144]: Invalid user mlsmhostnameh from 134.48.5.250 port 52842
Jan  9 14:11:33 lakhesis sshd[31144]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.48.5.250
Jan  9 14:11:35 lakhesis sshd[31144]: Failed password for invalid user mlsmhostnameh from 134.48.5.250 port 52842 ssh2
Jan  9 14:14:35 lakhesis sshd[32198]: Invalid user hta from 134.48.5.250 port 57002
Jan  9 14:14:35 lakhesis sshd[32198]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.48.5.250

........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=134.48.5.250
2020-01-09 21:44:17
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 134.48.5.7
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 15323
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;134.48.5.7.			IN	A

;; AUTHORITY SECTION:
.			575	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020022300 1800 900 604800 86400

;; Query time: 125 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 23 21:49:11 CST 2020
;; MSG SIZE  rcvd: 114
Host info
7.5.48.134.in-addr.arpa domain name pointer ubicompgpu.mscs.mu.edu.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
7.5.48.134.in-addr.arpa	name = ubicompgpu.mscs.mu.edu.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
51.15.126.127 attackspambots
Sep 28 13:33:38 rocket sshd[21699]: Failed password for root from 51.15.126.127 port 55434 ssh2
Sep 28 13:37:09 rocket sshd[22221]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.126.127
...
2020-09-28 20:54:16
68.183.28.35 attackspam
Bruteforce detected by fail2ban
2020-09-28 21:16:51
62.210.103.204 attackbots
Port scan denied
2020-09-28 20:47:42
45.148.122.184 attackspambots
1601291557 - 09/28/2020 18:12:37 Host: 45.148.122.184/45.148.122.184 Port: 6379 TCP Blocked
...
2020-09-28 20:50:25
188.254.0.160 attackbots
Time:     Sun Sep 27 04:54:34 2020 +0000
IP:       188.254.0.160 (RU/Russia/-)
Failures: 5 (sshd)
Interval: 3600 seconds
Blocked:  Permanent Block [LF_SSHD]

Log entries:

Sep 27 04:34:52 3 sshd[19939]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.254.0.160  user=git
Sep 27 04:34:54 3 sshd[19939]: Failed password for git from 188.254.0.160 port 49666 ssh2
Sep 27 04:51:01 3 sshd[23611]: Invalid user vnc from 188.254.0.160 port 56344
Sep 27 04:51:02 3 sshd[23611]: Failed password for invalid user vnc from 188.254.0.160 port 56344 ssh2
Sep 27 04:54:29 3 sshd[31290]: Invalid user jboss from 188.254.0.160 port 50468
2020-09-28 21:20:12
36.148.23.50 attack
Sep 28 04:09:37 Tower sshd[34539]: Connection from 36.148.23.50 port 41692 on 192.168.10.220 port 22 rdomain ""
Sep 28 04:09:38 Tower sshd[34539]: Invalid user ccc from 36.148.23.50 port 41692
Sep 28 04:09:38 Tower sshd[34539]: error: Could not get shadow information for NOUSER
Sep 28 04:09:38 Tower sshd[34539]: Failed password for invalid user ccc from 36.148.23.50 port 41692 ssh2
Sep 28 04:09:38 Tower sshd[34539]: Received disconnect from 36.148.23.50 port 41692:11: Bye Bye [preauth]
Sep 28 04:09:38 Tower sshd[34539]: Disconnected from invalid user ccc 36.148.23.50 port 41692 [preauth]
2020-09-28 21:01:37
104.144.213.106 attackbots
Port Scan: TCP/443
2020-09-28 21:16:19
185.74.4.17 attackbots
Time:     Sun Sep 27 04:04:49 2020 +0000
IP:       185.74.4.17 (UZ/Uzbekistan/-)
Failures: 5 (sshd)
Interval: 3600 seconds
Blocked:  Permanent Block [LF_SSHD]

Log entries:

Sep 27 03:55:11 3 sshd[22526]: Failed password for invalid user oracle from 185.74.4.17 port 58869 ssh2
Sep 27 04:00:56 3 sshd[5156]: Invalid user mark from 185.74.4.17 port 34820
Sep 27 04:00:58 3 sshd[5156]: Failed password for invalid user mark from 185.74.4.17 port 34820 ssh2
Sep 27 04:04:45 3 sshd[14111]: Invalid user uftp from 185.74.4.17 port 47017
Sep 27 04:04:47 3 sshd[14111]: Failed password for invalid user uftp from 185.74.4.17 port 47017 ssh2
2020-09-28 21:23:13
61.177.144.130 attack
Sep 28 07:54:41 host2 sshd[1978175]: Invalid user info from 61.177.144.130 port 41543
Sep 28 07:54:42 host2 sshd[1978175]: Failed password for invalid user info from 61.177.144.130 port 41543 ssh2
Sep 28 07:54:41 host2 sshd[1978175]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.144.130 
Sep 28 07:54:41 host2 sshd[1978175]: Invalid user info from 61.177.144.130 port 41543
Sep 28 07:54:42 host2 sshd[1978175]: Failed password for invalid user info from 61.177.144.130 port 41543 ssh2
...
2020-09-28 20:53:43
185.239.242.27 attack
trying to access non-authorized port
2020-09-28 21:23:48
106.12.12.84 attackbotsspam
leo_www
2020-09-28 20:48:12
112.85.42.176 attack
$f2bV_matches
2020-09-28 21:01:00
178.62.52.150 attack
Sep 28 12:17:11 sshgateway sshd\[22990\]: Invalid user bootcamp from 178.62.52.150
Sep 28 12:17:11 sshgateway sshd\[22990\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.52.150
Sep 28 12:17:13 sshgateway sshd\[22990\]: Failed password for invalid user bootcamp from 178.62.52.150 port 51134 ssh2
2020-09-28 21:24:45
39.48.78.101 attackbots
/wp-login.php
2020-09-28 21:17:30
139.199.94.51 attackbots
Sep 28 10:37:15 vps sshd[28567]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.94.51 
Sep 28 10:37:17 vps sshd[28567]: Failed password for invalid user test01 from 139.199.94.51 port 53350 ssh2
Sep 28 10:48:46 vps sshd[29310]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.94.51 
...
2020-09-28 21:11:43

Recently Reported IPs

211.20.144.12 62.210.181.138 3.6.214.6 83.234.14.81
80.210.28.9 185.234.217.60 124.115.135.25 49.89.217.54
23.254.209.173 222.85.232.125 201.150.114.212 178.216.52.105
139.212.58.235 221.220.109.166 1.85.118.107 180.142.153.116
114.241.246.233 114.239.105.249 49.70.209.23 213.16.210.156