134.48.5.7 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States of America

Internet Service Provider: Marquette University

Hostname: unknown

Organization: unknown

Usage Type: University/College/School

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	Feb 23 14:29:00 MK-Soft-VM3 sshd[16876]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.48.5.7 Feb 23 14:29:02 MK-Soft-VM3 sshd[16876]: Failed password for invalid user jmiller from 134.48.5.7 port 43976 ssh2 ...	2020-02-23 21:49:15

Type

Details

Datetime

attackspam

Feb 23 14:29:00 MK-Soft-VM3 sshd[16876]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.48.5.7 
Feb 23 14:29:02 MK-Soft-VM3 sshd[16876]: Failed password for invalid user jmiller from 134.48.5.7 port 43976 ssh2
...

2020-02-23 21:49:15

Comments on same subnet:

IP	Type	Details	Datetime
134.48.5.250	attack	Jan 9 14:11:33 lakhesis sshd[31144]: Invalid user mlsmhostnameh from 134.48.5.250 port 52842 Jan 9 14:11:33 lakhesis sshd[31144]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.48.5.250 Jan 9 14:11:35 lakhesis sshd[31144]: Failed password for invalid user mlsmhostnameh from 134.48.5.250 port 52842 ssh2 Jan 9 14:14:35 lakhesis sshd[32198]: Invalid user hta from 134.48.5.250 port 57002 Jan 9 14:14:35 lakhesis sshd[32198]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.48.5.250 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=134.48.5.250	2020-01-09 21:44:17

Type

Details

Datetime

134.48.5.250

attack

Jan  9 14:11:33 lakhesis sshd[31144]: Invalid user mlsmhostnameh from 134.48.5.250 port 52842
Jan  9 14:11:33 lakhesis sshd[31144]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.48.5.250
Jan  9 14:11:35 lakhesis sshd[31144]: Failed password for invalid user mlsmhostnameh from 134.48.5.250 port 52842 ssh2
Jan  9 14:14:35 lakhesis sshd[32198]: Invalid user hta from 134.48.5.250 port 57002
Jan  9 14:14:35 lakhesis sshd[32198]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.48.5.250

........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=134.48.5.250

2020-01-09 21:44:17

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 134.48.5.7
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 15323
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;134.48.5.7.			IN	A

;; AUTHORITY SECTION:
.			575	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020022300 1800 900 604800 86400

;; Query time: 125 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 23 21:49:11 CST 2020
;; MSG SIZE  rcvd: 114

Host info

7.5.48.134.in-addr.arpa domain name pointer ubicompgpu.mscs.mu.edu.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
7.5.48.134.in-addr.arpa	name = ubicompgpu.mscs.mu.edu.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
190.90.251.227	attackbotsspam	Telnet Server BruteForce Attack	2020-10-02 07:08:38
20.185.42.104	attackbots	20 attempts against mh-ssh on soil	2020-10-02 07:04:37
182.126.87.22	attackbots	Telnet Server BruteForce Attack	2020-10-02 07:12:41
95.111.245.15	attackspambots	Invalid user spark from 95.111.245.15 port 34130	2020-10-02 07:03:52
122.155.174.36	attackspam	Oct 1 18:06:03 ws24vmsma01 sshd[207035]: Failed password for root from 122.155.174.36 port 38316 ssh2 ...	2020-10-02 07:08:55
195.54.160.183	attackbotsspam	2020-10-01T15:38:46.372924correo.[domain] sshd[28726]: Invalid user guest from 195.54.160.183 port 22688 2020-10-01T15:38:48.324740correo.[domain] sshd[28726]: Failed password for invalid user guest from 195.54.160.183 port 22688 ssh2 2020-10-01T15:38:49.815501correo.[domain] sshd[28729]: Invalid user install from 195.54.160.183 port 34045 ...	2020-10-02 07:30:22
195.223.211.242	attackspambots	Oct 2 00:33:26 hidden sshd[19265]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.223.211.242 Oct 2 00:33:28 hidden sshd[19265]: Failed password for invalid user teamspeak from 195.223.211.242 port 49314 ssh2 Oct 2 00:37:13 hidden sshd[20100]: Invalid user xxx from 195.223.211.242 port 57812	2020-10-02 07:01:41
92.62.131.106	attack	Oct 2 00:35:09 xeon sshd[37553]: Failed password for invalid user julia from 92.62.131.106 port 40951 ssh2	2020-10-02 07:13:28
203.217.101.237	attackspambots	203.217.101.237 - - [01/Oct/2020:23:48:37 +0100] "POST /wp-login.php HTTP/1.1" 200 2307 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 203.217.101.237 - - [01/Oct/2020:23:48:40 +0100] "POST /wp-login.php HTTP/1.1" 200 2243 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 203.217.101.237 - - [01/Oct/2020:23:48:44 +0100] "POST /wp-login.php HTTP/1.1" 200 2240 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-10-02 07:27:06
195.54.160.180	attackbotsspam	2020-10-01T16:55:53.758574correo.[domain] sshd[36945]: Invalid user plex from 195.54.160.180 port 55638 2020-10-01T16:55:55.799400correo.[domain] sshd[36945]: Failed password for invalid user plex from 195.54.160.180 port 55638 ssh2 2020-10-01T16:55:56.457526correo.[domain] sshd[36947]: Invalid user qwe123 from 195.54.160.180 port 2725 ...	2020-10-02 07:00:16
195.154.176.37	attack	Oct 1 23:25:19 ns3164893 sshd[7071]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.154.176.37 Oct 1 23:25:20 ns3164893 sshd[7071]: Failed password for invalid user ftpuser from 195.154.176.37 port 56556 ssh2 ...	2020-10-02 07:27:18
114.201.236.237	attack	Oct 1 23:18:18 ws25vmsma01 sshd[1960]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.201.236.237 ...	2020-10-02 07:31:17
216.245.209.230	attackspam	TCP (SYN) 216.245.209.230:52202 -> port 23, len 40	2020-10-02 06:54:25
93.39.116.254	attackspambots	Oct 1 22:17:49 vlre-nyc-1 sshd\[17422\]: Invalid user uno85 from 93.39.116.254 Oct 1 22:17:49 vlre-nyc-1 sshd\[17422\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.39.116.254 Oct 1 22:17:51 vlre-nyc-1 sshd\[17422\]: Failed password for invalid user uno85 from 93.39.116.254 port 59177 ssh2 Oct 1 22:21:14 vlre-nyc-1 sshd\[17498\]: Invalid user steam from 93.39.116.254 Oct 1 22:21:14 vlre-nyc-1 sshd\[17498\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.39.116.254 ...	2020-10-02 06:54:00
106.75.211.130	attackbots	SSH Invalid Login	2020-10-02 07:16:05

Recently Reported IPs

211.20.144.12	62.210.181.138	3.6.214.6	83.234.14.81
80.210.28.9	185.234.217.60	124.115.135.25	49.89.217.54
23.254.209.173	222.85.232.125	201.150.114.212	178.216.52.105
139.212.58.235	221.220.109.166	1.85.118.107	180.142.153.116
114.241.246.233	114.239.105.249	49.70.209.23	213.16.210.156