140.246.195.48

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: ChinaNet Shandong Province Network

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Jul 29 23:03:10 abendstille sshd\[15978\]: Invalid user wangcl from 140.246.195.48 Jul 29 23:03:10 abendstille sshd\[15978\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.195.48 Jul 29 23:03:12 abendstille sshd\[15978\]: Failed password for invalid user wangcl from 140.246.195.48 port 53966 ssh2 Jul 29 23:07:24 abendstille sshd\[21161\]: Invalid user mysql from 140.246.195.48 Jul 29 23:07:24 abendstille sshd\[21161\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.195.48 ...	2020-07-30 05:10:49
attackbotsspam	Jul 18 18:18:41 sxvn sshd[130062]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.195.48	2020-07-19 00:31:57
attackspambots	Jul 17 21:39:41 PorscheCustomer sshd[5934]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.195.48 Jul 17 21:39:43 PorscheCustomer sshd[5934]: Failed password for invalid user johny from 140.246.195.48 port 52250 ssh2 Jul 17 21:43:17 PorscheCustomer sshd[6005]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.195.48 ...	2020-07-18 03:51:01
attackbotsspam	k+ssh-bruteforce	2020-07-02 08:39:14

Comments on same subnet:

IP	Type	Details	Datetime
140.246.195.193	attackspam	" "	2020-06-15 01:16:27

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 140.246.195.48
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26249
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;140.246.195.48.			IN	A

;; AUTHORITY SECTION:
.			233	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020061300 1800 900 604800 86400

;; Query time: 325 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jun 13 17:00:33 CST 2020
;; MSG SIZE  rcvd: 118

Host info

Host 48.195.246.140.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 48.195.246.140.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
222.186.42.7	attackspam	Unauthorized connection attempt detected from IP address 222.186.42.7 to port 22	2020-07-14 05:37:40
58.210.154.140	attack	SSH Brute-Force Attack	2020-07-14 05:19:27
218.92.0.138	attack	Jul 13 23:31:54 eventyay sshd[4720]: Failed password for root from 218.92.0.138 port 15156 ssh2 Jul 13 23:32:07 eventyay sshd[4720]: error: maximum authentication attempts exceeded for root from 218.92.0.138 port 15156 ssh2 [preauth] Jul 13 23:32:12 eventyay sshd[4723]: Failed password for root from 218.92.0.138 port 41196 ssh2 ...	2020-07-14 05:39:54
51.83.76.25	attackbotsspam	Jul 13 21:31:44 ajax sshd[16270]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.76.25 Jul 13 21:31:47 ajax sshd[16270]: Failed password for invalid user gaurav from 51.83.76.25 port 37058 ssh2	2020-07-14 05:09:02
95.141.141.39	attackspambots	Unauthorized connection attempt from IP address 95.141.141.39 on Port 445(SMB)	2020-07-14 05:34:29
162.247.74.202	attackspambots	Brute forcing RDP port 3389	2020-07-14 05:40:22
60.167.176.217	attackspam	Invalid user clio from 60.167.176.217 port 34014	2020-07-14 05:21:44
1.119.131.102	attackbots	Jul 13 22:24:44 server sshd[65262]: Failed password for invalid user el from 1.119.131.102 port 40831 ssh2 Jul 13 22:28:10 server sshd[2939]: Failed password for invalid user lab from 1.119.131.102 port 28858 ssh2 Jul 13 22:31:28 server sshd[5435]: Failed password for invalid user office from 1.119.131.102 port 16884 ssh2	2020-07-14 05:33:12
217.11.65.146	attack	Jul 13 22:31:18 smtp postfix/smtpd[25548]: NOQUEUE: reject: RCPT from unknown[217.11.65.146]: 554 5.7.1 Service unavailable; Client host [217.11.65.146] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?217.11.65.146; from= to= proto=ESMTP helo=<[217.11.65.146]> ...	2020-07-14 05:41:48
180.242.183.87	attackspambots	Unauthorized connection attempt from IP address 180.242.183.87 on Port 445(SMB)	2020-07-14 05:35:20
182.242.143.78	attack	SSH invalid-user multiple login attempts	2020-07-14 05:17:08
212.70.149.35	attackbotsspam	2020-07-14 00:04:04 dovecot_login authenticator failed for \(User\) \[212.70.149.35\]: 535 Incorrect authentication data \(set_id=omega@org.ua\)2020-07-14 00:04:23 dovecot_login authenticator failed for \(User\) \[212.70.149.35\]: 535 Incorrect authentication data \(set_id=one@org.ua\)2020-07-14 00:04:42 dovecot_login authenticator failed for \(User\) \[212.70.149.35\]: 535 Incorrect authentication data \(set_id=op@org.ua\) ...	2020-07-14 05:14:49
206.189.92.162	attack	Jul 13 22:43:21 mail sshd[23637]: Failed password for invalid user admin from 206.189.92.162 port 50002 ssh2 ...	2020-07-14 05:11:09
51.77.215.227	attackbots	Jul 13 23:06:06 OPSO sshd\[7438\]: Invalid user labuser from 51.77.215.227 port 56962 Jul 13 23:06:06 OPSO sshd\[7438\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.215.227 Jul 13 23:06:09 OPSO sshd\[7438\]: Failed password for invalid user labuser from 51.77.215.227 port 56962 ssh2 Jul 13 23:08:53 OPSO sshd\[7891\]: Invalid user vishnu from 51.77.215.227 port 52922 Jul 13 23:08:53 OPSO sshd\[7891\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.215.227	2020-07-14 05:14:15
2.228.139.36	attackspam	Unauthorized connection attempt from IP address 2.228.139.36 on Port 445(SMB)	2020-07-14 05:31:35

Recently Reported IPs

190.13.56.13	125.88.144.56	90.93.188.157	60.251.133.76
45.138.100.247	187.202.70.122	43.246.209.112	194.33.45.180
208.97.170.33	182.122.19.133	18.221.200.89	123.118.20.146
193.112.94.202	113.190.39.138	241.66.111.166	64.225.102.125
115.160.99.19	192.35.168.193	145.143.196.45	182.66.166.140