Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Dominican Republic

Internet Service Provider: Compania Dominicana de Telefonos C. Por A. - Codetel

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attackbots
...
2020-02-02 00:14:26
attackspam
2020-01-13T06:40:34.079406scmdmz1 sshd[28390]: Invalid user mmy from 148.0.63.43 port 49124
2020-01-13T06:40:34.083074scmdmz1 sshd[28390]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.0.63.43
2020-01-13T06:40:34.079406scmdmz1 sshd[28390]: Invalid user mmy from 148.0.63.43 port 49124
2020-01-13T06:40:36.207470scmdmz1 sshd[28390]: Failed password for invalid user mmy from 148.0.63.43 port 49124 ssh2
2020-01-13T06:43:14.140161scmdmz1 sshd[28576]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.0.63.43  user=root
2020-01-13T06:43:16.229426scmdmz1 sshd[28576]: Failed password for root from 148.0.63.43 port 48230 ssh2
...
2020-01-13 18:42:42
Comments on same subnet:
IP Type Details Datetime
148.0.63.202 attack
[01/Jun/2020 14:43:09] Failed SMTP login from 148.0.63.202 whostnameh SASL method CRAM-MD5.
[01/Jun/2020 x@x
[01/Jun/2020 14:43:15] Failed SMTP login from 148.0.63.202 whostnameh SASL method PLAIN.


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=148.0.63.202
2020-06-02 00:32:53
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 148.0.63.43
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12499
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;148.0.63.43.			IN	A

;; AUTHORITY SECTION:
.			545	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020011300 1800 900 604800 86400

;; Query time: 91 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jan 13 18:42:38 CST 2020
;; MSG SIZE  rcvd: 115
Host info
43.63.0.148.in-addr.arpa domain name pointer 43.63.0.148.d.dyn.claro.net.do.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
43.63.0.148.in-addr.arpa	name = 43.63.0.148.d.dyn.claro.net.do.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
175.197.233.197 attackspambots
Dec  5 06:22:22 nextcloud sshd\[4085\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.197.233.197  user=root
Dec  5 06:22:25 nextcloud sshd\[4085\]: Failed password for root from 175.197.233.197 port 51766 ssh2
Dec  5 06:32:49 nextcloud sshd\[15487\]: Invalid user lisa from 175.197.233.197
Dec  5 06:32:49 nextcloud sshd\[15487\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.197.233.197
...
2019-12-05 13:34:16
50.116.101.52 attackspam
Dec  5 05:57:05 vpn01 sshd[10789]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=50.116.101.52
Dec  5 05:57:07 vpn01 sshd[10789]: Failed password for invalid user Admin from 50.116.101.52 port 60686 ssh2
...
2019-12-05 13:30:17
112.220.24.131 attackspam
Dec  5 04:57:16 venus sshd\[26708\]: Invalid user danny from 112.220.24.131 port 56860
Dec  5 04:57:16 venus sshd\[26708\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.220.24.131
Dec  5 04:57:18 venus sshd\[26708\]: Failed password for invalid user danny from 112.220.24.131 port 56860 ssh2
...
2019-12-05 13:21:17
159.65.184.79 attackspambots
WordPress XMLRPC scan :: 159.65.184.79 0.096 BYPASS [05/Dec/2019:04:57:17  0000] [censored_4] "POST /xmlrpc.php HTTP/1.1" 200 236 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2019-12-05 13:22:43
160.153.234.236 attack
$f2bV_matches
2019-12-05 13:29:26
129.211.77.44 attack
Dec  4 19:30:33 auw2 sshd\[15328\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.77.44  user=root
Dec  4 19:30:35 auw2 sshd\[15328\]: Failed password for root from 129.211.77.44 port 54814 ssh2
Dec  4 19:37:27 auw2 sshd\[15944\]: Invalid user schonfisch from 129.211.77.44
Dec  4 19:37:27 auw2 sshd\[15944\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.77.44
Dec  4 19:37:28 auw2 sshd\[15944\]: Failed password for invalid user schonfisch from 129.211.77.44 port 33486 ssh2
2019-12-05 13:43:03
182.239.43.161 attackspambots
xmlrpc attack
2019-12-05 13:53:11
103.95.12.132 attackbots
$f2bV_matches
2019-12-05 13:43:48
59.148.173.231 attackbotsspam
2019-12-05T05:28:06.246312shield sshd\[19180\]: Invalid user cav from 59.148.173.231 port 35360
2019-12-05T05:28:06.250537shield sshd\[19180\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=059148173231.ctinets.com
2019-12-05T05:28:08.631294shield sshd\[19180\]: Failed password for invalid user cav from 59.148.173.231 port 35360 ssh2
2019-12-05T05:34:01.795505shield sshd\[20594\]: Invalid user webadmin from 59.148.173.231 port 46850
2019-12-05T05:34:01.799766shield sshd\[20594\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=059148173231.ctinets.com
2019-12-05 13:40:19
112.85.42.182 attack
Dec  5 06:56:04 MainVPS sshd[24230]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.182  user=root
Dec  5 06:56:06 MainVPS sshd[24230]: Failed password for root from 112.85.42.182 port 52796 ssh2
Dec  5 06:56:09 MainVPS sshd[24230]: Failed password for root from 112.85.42.182 port 52796 ssh2
Dec  5 06:56:04 MainVPS sshd[24230]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.182  user=root
Dec  5 06:56:06 MainVPS sshd[24230]: Failed password for root from 112.85.42.182 port 52796 ssh2
Dec  5 06:56:09 MainVPS sshd[24230]: Failed password for root from 112.85.42.182 port 52796 ssh2
Dec  5 06:56:04 MainVPS sshd[24230]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.182  user=root
Dec  5 06:56:06 MainVPS sshd[24230]: Failed password for root from 112.85.42.182 port 52796 ssh2
Dec  5 06:56:09 MainVPS sshd[24230]: Failed password for root from 112.85.42.182 port 527
2019-12-05 13:56:33
78.192.6.4 attackbotsspam
Dec  4 19:52:19 kapalua sshd\[18428\]: Invalid user channing from 78.192.6.4
Dec  4 19:52:19 kapalua sshd\[18428\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.192.6.4
Dec  4 19:52:21 kapalua sshd\[18428\]: Failed password for invalid user channing from 78.192.6.4 port 52618 ssh2
Dec  4 19:57:51 kapalua sshd\[19084\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.192.6.4  user=root
Dec  4 19:57:53 kapalua sshd\[19084\]: Failed password for root from 78.192.6.4 port 35342 ssh2
2019-12-05 14:01:19
218.92.0.134 attackspam
Dec  5 06:24:01 localhost sshd[37358]: Failed none for root from 218.92.0.134 port 59887 ssh2
Dec  5 06:24:03 localhost sshd[37358]: Failed password for root from 218.92.0.134 port 59887 ssh2
Dec  5 06:24:06 localhost sshd[37358]: Failed password for root from 218.92.0.134 port 59887 ssh2
2019-12-05 13:28:44
195.24.207.199 attack
Dec  5 10:43:38 gw1 sshd[27688]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.24.207.199
Dec  5 10:43:41 gw1 sshd[27688]: Failed password for invalid user ladarius from 195.24.207.199 port 39794 ssh2
...
2019-12-05 13:57:57
46.38.144.17 attackspambots
brute force email attack
2019-12-05 13:46:15
37.187.99.3 attack
Dec  4 18:50:00 php1 sshd\[32087\]: Invalid user student from 37.187.99.3
Dec  4 18:50:00 php1 sshd\[32087\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns3072558.ip-37-187-99.eu
Dec  4 18:50:02 php1 sshd\[32087\]: Failed password for invalid user student from 37.187.99.3 port 48462 ssh2
Dec  4 18:57:15 php1 sshd\[678\]: Invalid user NetLinx from 37.187.99.3
Dec  4 18:57:15 php1 sshd\[678\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns3072558.ip-37-187-99.eu
2019-12-05 13:24:31

Recently Reported IPs

230.95.32.87 14.161.48.254 36.77.209.78 50.235.236.44
221.225.21.205 127.145.182.28 31.43.95.254 103.126.151.26
125.165.179.206 91.96.254.72 219.77.120.152 190.207.71.103
45.225.140.208 85.214.60.185 85.172.107.95 36.249.180.67
117.240.137.90 159.166.17.204 47.111.229.152 88.133.239.207