140.148.248.8 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Mexico

Internet Service Provider: Universidad de las Americas-Puebla

Hostname: unknown

Organization: unknown

Usage Type: University/College/School

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbotsspam	[Tue Oct 13 06:53:47 2020] IN=enp34s0 OUT= MAC=SERVERMAC SRC=140.148.248.8 DST=MYSERVERIP LEN=52 TOS=0x00 PREC=0x00 TTL=107 ID=3184 DF PROTO=TCP SPT=44932 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 Ports: 445	2020-10-14 01:42:15
attack	[Tue Oct 13 06:53:47 2020] IN=enp34s0 OUT= MAC=SERVERMAC SRC=140.148.248.8 DST=MYSERVERIP LEN=52 TOS=0x00 PREC=0x00 TTL=107 ID=3184 DF PROTO=TCP SPT=44932 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 Ports: 445	2020-10-13 16:53:15
attackspam	Unauthorized connection attempt from IP address 140.148.248.8 on Port 445(SMB)	2020-09-01 23:42:10
attackbots	20/8/31@18:22:11: FAIL: Alarm-Network address from=140.148.248.8 ...	2020-09-01 07:03:54
attackspambots	TCP (SYN) 140.148.248.8:44827 -> port 445, len 52	2020-08-01 04:03:36
attack	Unauthorized connection attempt from IP address 140.148.248.8 on Port 445(SMB)	2020-07-09 01:21:16

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 140.148.248.8
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1496
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;140.148.248.8.			IN	A

;; AUTHORITY SECTION:
.			483	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020070800 1800 900 604800 86400

;; Query time: 53 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jul 09 01:21:07 CST 2020
;; MSG SIZE  rcvd: 117

Host info

Host 8.248.148.140.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 8.248.148.140.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
122.51.82.22	attackspambots	2020-09-14T11:54:13.047561morrigan.ad5gb.com sshd[1992200]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.82.22 user=root 2020-09-14T11:54:15.052064morrigan.ad5gb.com sshd[1992200]: Failed password for root from 122.51.82.22 port 34848 ssh2	2020-09-15 01:00:20
212.33.199.171	attackbotsspam	TCP (SYN) 212.33.199.171:4023 -> port 22, len 48	2020-09-15 00:35:35
209.17.96.2	attackbots	HTTP_USER_AGENT Mozilla/5.0 (compatible; Nimbostratus-Bot/v1.3.2; http://cloudsystemnetworks.com)	2020-09-15 01:10:21
115.98.63.188	attackspam	1600016087 - 09/13/2020 23:54:47 Host: 115.98.63.188/115.98.63.188 Port: 23 TCP Blocked ...	2020-09-15 00:31:08
103.145.12.225	attack	SIPVicious Scanner Detection	2020-09-15 00:27:00
218.92.0.224	attack	Sep 14 18:46:58 ns3164893 sshd[22102]: Failed password for root from 218.92.0.224 port 19451 ssh2 Sep 14 18:47:01 ns3164893 sshd[22102]: Failed password for root from 218.92.0.224 port 19451 ssh2 ...	2020-09-15 00:54:11
51.68.139.151	attackbotsspam	until 2020-09-14T06:36:42+01:00, observations: 6, bad account names: 1	2020-09-15 00:40:54
206.189.153.222	attack	Sep 14 06:41:38 Tower sshd[19484]: Connection from 206.189.153.222 port 39556 on 192.168.10.220 port 22 rdomain "" Sep 14 06:41:39 Tower sshd[19484]: Failed password for root from 206.189.153.222 port 39556 ssh2 Sep 14 06:41:40 Tower sshd[19484]: Received disconnect from 206.189.153.222 port 39556:11: Bye Bye [preauth] Sep 14 06:41:40 Tower sshd[19484]: Disconnected from authenticating user root 206.189.153.222 port 39556 [preauth]	2020-09-15 00:50:09
117.50.12.104	attackspambots	2020-09-14 00:37:07.280073-0500 localhost sshd[41937]: Failed password for root from 117.50.12.104 port 44614 ssh2	2020-09-15 01:00:36
60.15.67.178	attack	SSH login attempts brute force.	2020-09-15 00:31:38
43.225.151.252	attack	Invalid user css from 43.225.151.252 port 52320	2020-09-15 01:09:00
58.213.198.74	attack	Sep 14 02:10:37 mellenthin sshd[27349]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.198.74 user=root Sep 14 02:10:40 mellenthin sshd[27349]: Failed password for invalid user root from 58.213.198.74 port 12770 ssh2	2020-09-15 00:25:09
119.45.202.25	attack	Sep 14 16:20:46 xeon sshd[49012]: Failed password for root from 119.45.202.25 port 44744 ssh2	2020-09-15 00:42:12
89.250.148.154	attack	2020-09-14T09:01:16.948407n23.at sshd[514650]: Failed password for invalid user device from 89.250.148.154 port 48720 ssh2 2020-09-14T09:09:53.772617n23.at sshd[521275]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.250.148.154 user=root 2020-09-14T09:09:55.319715n23.at sshd[521275]: Failed password for root from 89.250.148.154 port 53162 ssh2 ...	2020-09-15 00:53:08
111.229.50.131	attackbots	SSH invalid-user multiple login try	2020-09-15 00:56:49

Recently Reported IPs

93.195.81.149	197.45.179.88	179.184.184.18	155.153.186.202
49.234.50.235	201.243.184.110	73.213.205.140	103.138.251.10
1.164.222.31	118.179.198.193	113.22.128.227	85.114.22.26
216.183.212.91	14.250.162.227	192.241.215.101	216.227.85.170
62.54.179.3	200.161.220.235	197.40.163.108	112.78.177.18