136.144.24.148

Basic Info

City: unknown

Region: unknown

Country: Poland

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
136.144.242.253	attackspambots	Port Scan detected from 136.144.242.253 (NL/Netherlands/South Holland/Rotterdam/136-144-242-253.colo.transip.net). 4 hits in the last 170 seconds	2020-08-09 17:26:32
136.144.242.253	attack	Lines containing failures of 136.144.242.253 Aug 7 01:08:05 siirappi sshd[10345]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=136.144.242.253 user=r.r Aug 7 01:08:08 siirappi sshd[10345]: Failed password for r.r from 136.144.242.253 port 57298 ssh2 Aug 7 01:08:09 siirappi sshd[10345]: Received disconnect from 136.144.242.253 port 57298:11: Bye Bye [preauth] Aug 7 01:08:09 siirappi sshd[10345]: Disconnected from authenticating user r.r 136.144.242.253 port 57298 [preauth] Aug 7 01:16:35 siirappi sshd[10460]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=136.144.242.253 user=r.r Aug 7 01:16:36 siirappi sshd[10460]: Failed password for r.r from 136.144.242.253 port 34952 ssh2 Aug 7 01:16:38 siirappi sshd[10460]: Received disconnect from 136.144.242.253 port 34952:11: Bye Bye [preauth] Aug 7 01:16:38 siirappi sshd[10460]: Disconnected from authenticating user r.r 136.144.242.253 p........ ------------------------------	2020-08-09 00:30:35
136.144.242.253	attackspambots	Aug 3 00:06:54 server sshd[24507]: Failed password for root from 136.144.242.253 port 46398 ssh2 Aug 3 00:10:36 server sshd[29789]: Failed password for root from 136.144.242.253 port 59070 ssh2 Aug 3 00:14:19 server sshd[3122]: Failed password for root from 136.144.242.253 port 43516 ssh2	2020-08-03 06:35:54

Type

Details

Datetime

136.144.242.253

attackspambots

*Port Scan* detected from 136.144.242.253 (NL/Netherlands/South Holland/Rotterdam/136-144-242-253.colo.transip.net). 4 hits in the last 170 seconds

2020-08-09 17:26:32

136.144.242.253

attack

Lines containing failures of 136.144.242.253
Aug  7 01:08:05 siirappi sshd[10345]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=136.144.242.253  user=r.r
Aug  7 01:08:08 siirappi sshd[10345]: Failed password for r.r from 136.144.242.253 port 57298 ssh2
Aug  7 01:08:09 siirappi sshd[10345]: Received disconnect from 136.144.242.253 port 57298:11: Bye Bye [preauth]
Aug  7 01:08:09 siirappi sshd[10345]: Disconnected from authenticating user r.r 136.144.242.253 port 57298 [preauth]
Aug  7 01:16:35 siirappi sshd[10460]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=136.144.242.253  user=r.r
Aug  7 01:16:36 siirappi sshd[10460]: Failed password for r.r from 136.144.242.253 port 34952 ssh2
Aug  7 01:16:38 siirappi sshd[10460]: Received disconnect from 136.144.242.253 port 34952:11: Bye Bye [preauth]
Aug  7 01:16:38 siirappi sshd[10460]: Disconnected from authenticating user r.r 136.144.242.253 p........
------------------------------

2020-08-09 00:30:35

136.144.242.253

attackspambots

Aug  3 00:06:54 server sshd[24507]: Failed password for root from 136.144.242.253 port 46398 ssh2
Aug  3 00:10:36 server sshd[29789]: Failed password for root from 136.144.242.253 port 59070 ssh2
Aug  3 00:14:19 server sshd[3122]: Failed password for root from 136.144.242.253 port 43516 ssh2

2020-08-03 06:35:54

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 136.144.24.148
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40528
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;136.144.24.148.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025020901 1800 900 604800 86400

;; Query time: 39 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 10 04:51:30 CST 2025
;; MSG SIZE  rcvd: 107

Host info

Host 148.24.144.136.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 148.24.144.136.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
190.54.18.202	attack	Unauthorized connection attempt from IP address 190.54.18.202 on Port 445(SMB)	2020-05-23 07:19:40
139.59.40.240	attackspambots	Invalid user kdw from 139.59.40.240 port 49810	2020-05-23 07:00:33
122.51.24.177	attack	May 23 00:51:05 ns382633 sshd\[24049\]: Invalid user vga from 122.51.24.177 port 55044 May 23 00:51:05 ns382633 sshd\[24049\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.24.177 May 23 00:51:07 ns382633 sshd\[24049\]: Failed password for invalid user vga from 122.51.24.177 port 55044 ssh2 May 23 01:03:33 ns382633 sshd\[26046\]: Invalid user saleed from 122.51.24.177 port 45348 May 23 01:03:33 ns382633 sshd\[26046\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.24.177	2020-05-23 07:12:19
104.248.142.140	attack	www.goldgier.de 104.248.142.140 [19/May/2020:08:27:16 +0200] "POST /wp-login.php HTTP/1.1" 200 8695 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" www.goldgier.de 104.248.142.140 [19/May/2020:08:27:16 +0200] "POST /wp-login.php HTTP/1.1" 200 8695 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-05-23 07:08:20
58.246.174.74	attack	May 22 17:27:27 firewall sshd[13329]: Invalid user kdu from 58.246.174.74 May 22 17:27:29 firewall sshd[13329]: Failed password for invalid user kdu from 58.246.174.74 port 17926 ssh2 May 22 17:30:29 firewall sshd[13421]: Invalid user zdu from 58.246.174.74 ...	2020-05-23 07:13:02
195.54.167.40	attack	SmallBizIT.US 3 packets to tcp(22262,30163,56752)	2020-05-23 06:53:54
185.147.215.12	attack	[2020-05-22 18:42:57] NOTICE[1157] chan_sip.c: Registration from '' failed for '185.147.215.12:54489' - Wrong password [2020-05-22 18:42:57] SECURITY[1173] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-05-22T18:42:57.786-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="38303",SessionID="0x7f5f100266a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.215.12/54489",Challenge="76cba1a2",ReceivedChallenge="76cba1a2",ReceivedHash="be763f7990fd354199db8ea1efd85bd7" [2020-05-22 18:45:19] NOTICE[1157] chan_sip.c: Registration from '' failed for '185.147.215.12:52687' - Wrong password [2020-05-22 18:45:19] SECURITY[1173] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-05-22T18:45:19.364-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="40439",SessionID="0x7f5f100266a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.14 ...	2020-05-23 06:56:38
91.121.155.192	attack	(sshd) Failed SSH login from 91.121.155.192 (FR/France/ns342345.ip-91-121-155.eu): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: May 22 22:15:58 ubnt-55d23 sshd[17414]: Invalid user guest from 91.121.155.192 port 45849 May 22 22:16:00 ubnt-55d23 sshd[17414]: Failed password for invalid user guest from 91.121.155.192 port 45849 ssh2	2020-05-23 07:21:24
106.12.208.31	attackspam	Invalid user egu from 106.12.208.31 port 59754	2020-05-23 07:16:36
92.63.194.108	attackbotsspam	SSH Brute-Force reported by Fail2Ban	2020-05-23 07:00:48
201.182.72.250	attackspambots	May 23 00:45:01 lnxmail61 sshd[13326]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.182.72.250 May 23 00:45:03 lnxmail61 sshd[13326]: Failed password for invalid user ucl from 201.182.72.250 port 37304 ssh2 May 23 00:54:43 lnxmail61 sshd[14356]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.182.72.250	2020-05-23 07:24:23
146.185.161.40	attackbots	Invalid user btf from 146.185.161.40 port 38762	2020-05-23 06:54:30
92.63.194.107	attack	SSH Brute-Force reported by Fail2Ban	2020-05-23 07:04:51
5.101.0.209	attackspam	Brute force attack stopped by firewall	2020-05-23 06:53:23
111.229.172.178	attackbotsspam	sshd: Failed password for invalid user .... from 111.229.172.178 port 45438 ssh2	2020-05-23 06:52:54

Recently Reported IPs

123.20.248.176	200.207.133.39	101.218.48.125	184.3.174.83
8.74.116.232	225.174.111.168	14.87.29.65	133.225.120.114
178.237.10.171	195.131.90.138	247.169.186.153	38.231.162.187
224.219.251.126	198.89.188.65	232.118.197.118	151.201.176.146
231.233.142.9	154.108.163.229	68.195.189.180	32.147.32.184