148.101.85.194

Basic Info

City: Canongo

Region: Provincia de Dajabon

Country: Dominican Republic

Internet Service Provider: Compania Dominicana de Telefonos C. Por A. - Codetel

Hostname: unknown

Organization: Compañía Dominicana de Teléfonos, C. por A. - CODETEL

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspambots	Jun 30 16:04:29 XXX sshd[45675]: Invalid user passpos1 from 148.101.85.194 port 53556	2019-07-01 01:43:28

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 148.101.85.194
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10634
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;148.101.85.194.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019063000 1800 900 604800 86400

;; Query time: 4 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Jul 01 01:43:20 CST 2019
;; MSG SIZE  rcvd: 118

Host info

194.85.101.148.in-addr.arpa domain name pointer 194.85.101.148.d.dyn.claro.net.do.

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
194.85.101.148.in-addr.arpa	name = 194.85.101.148.d.dyn.claro.net.do.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
191.35.161.129	attackbots	20/9/6@12:45:22: FAIL: Alarm-Network address from=191.35.161.129 20/9/6@12:45:22: FAIL: Alarm-Network address from=191.35.161.129 ...	2020-09-07 20:08:06
117.61.241.147	attack	20/9/6@19:20:51: FAIL: Alarm-Network address from=117.61.241.147 ...	2020-09-07 20:36:51
222.186.175.167	attack	2020-09-07T12:46:43.350772abusebot-2.cloudsearch.cf sshd[3777]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.167 user=root 2020-09-07T12:46:44.869223abusebot-2.cloudsearch.cf sshd[3777]: Failed password for root from 222.186.175.167 port 32326 ssh2 2020-09-07T12:46:48.385873abusebot-2.cloudsearch.cf sshd[3777]: Failed password for root from 222.186.175.167 port 32326 ssh2 2020-09-07T12:46:43.350772abusebot-2.cloudsearch.cf sshd[3777]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.167 user=root 2020-09-07T12:46:44.869223abusebot-2.cloudsearch.cf sshd[3777]: Failed password for root from 222.186.175.167 port 32326 ssh2 2020-09-07T12:46:48.385873abusebot-2.cloudsearch.cf sshd[3777]: Failed password for root from 222.186.175.167 port 32326 ssh2 2020-09-07T12:46:43.350772abusebot-2.cloudsearch.cf sshd[3777]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ...	2020-09-07 20:49:34
176.210.160.189	attackbots	Honeypot attack, port: 445, PTR: PTR record not found	2020-09-07 20:18:59
222.186.175.183	attack	2020-09-07T15:50:23.852230lavrinenko.info sshd[19550]: Failed password for root from 222.186.175.183 port 47300 ssh2 2020-09-07T15:50:28.124180lavrinenko.info sshd[19550]: Failed password for root from 222.186.175.183 port 47300 ssh2 2020-09-07T15:50:31.776586lavrinenko.info sshd[19550]: Failed password for root from 222.186.175.183 port 47300 ssh2 2020-09-07T15:50:35.572803lavrinenko.info sshd[19550]: Failed password for root from 222.186.175.183 port 47300 ssh2 2020-09-07T15:50:39.844702lavrinenko.info sshd[19550]: Failed password for root from 222.186.175.183 port 47300 ssh2 ...	2020-09-07 20:52:24
192.241.220.88	attack	TCP ports : 3306 / 5431 / 8443	2020-09-07 20:25:36
213.39.55.13	attackbotsspam	Sep 7 14:28:07 buvik sshd[18452]: Invalid user ec2-user from 213.39.55.13 Sep 7 14:28:07 buvik sshd[18452]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.39.55.13 Sep 7 14:28:09 buvik sshd[18452]: Failed password for invalid user ec2-user from 213.39.55.13 port 47542 ssh2 ...	2020-09-07 20:50:30
112.85.42.238	attackbotsspam	Sep 7 12:10:40 plex-server sshd[2850120]: Failed password for root from 112.85.42.238 port 20400 ssh2 Sep 7 12:10:43 plex-server sshd[2850120]: Failed password for root from 112.85.42.238 port 20400 ssh2 Sep 7 12:10:48 plex-server sshd[2850120]: Failed password for root from 112.85.42.238 port 20400 ssh2 Sep 7 12:11:47 plex-server sshd[2850734]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.238 user=root Sep 7 12:11:49 plex-server sshd[2850734]: Failed password for root from 112.85.42.238 port 41289 ssh2 ...	2020-09-07 20:33:15
51.195.7.14	attack	[2020-09-07 08:21:45] NOTICE[1194] chan_sip.c: Registration from '' failed for '51.195.7.14:61767' - Wrong password [2020-09-07 08:21:45] SECURITY[1233] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-07T08:21:45.823-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="131",SessionID="0x7f2ddc332e38",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/51.195.7.14/61767",Challenge="6aebd5a9",ReceivedChallenge="6aebd5a9",ReceivedHash="2800fe009e4e64d9bd95a3d2cfceceaf" [2020-09-07 08:22:02] NOTICE[1194] chan_sip.c: Registration from '' failed for '51.195.7.14:55250' - Wrong password [2020-09-07 08:22:02] SECURITY[1233] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-07T08:22:02.810-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="93000",SessionID="0x7f2ddc52c198",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/51.195.7.14/55250", ...	2020-09-07 20:22:09
167.172.38.238	attackspam	TCP (SYN) 167.172.38.238:55585 -> port 32602, len 44	2020-09-07 20:14:25
112.85.42.194	attack	$f2bV_matches	2020-09-07 20:41:22
180.233.123.221	attackspambots	20/9/6@20:45:18: FAIL: Alarm-Network address from=180.233.123.221 ...	2020-09-07 20:08:21
83.239.38.2	attackspambots	Sep 7 15:50:11 dhoomketu sshd[2936615]: Invalid user maryann1 from 83.239.38.2 port 56076 Sep 7 15:50:11 dhoomketu sshd[2936615]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.239.38.2 Sep 7 15:50:11 dhoomketu sshd[2936615]: Invalid user maryann1 from 83.239.38.2 port 56076 Sep 7 15:50:13 dhoomketu sshd[2936615]: Failed password for invalid user maryann1 from 83.239.38.2 port 56076 ssh2 Sep 7 15:54:02 dhoomketu sshd[2936681]: Invalid user gators from 83.239.38.2 port 59000 ...	2020-09-07 20:24:14
112.119.33.54	attackbotsspam	Honeypot attack, port: 5555, PTR: n11211933054.netvigator.com.	2020-09-07 20:31:16
4.7.94.244	attack	SSH bruteforce	2020-09-07 20:19:51

Recently Reported IPs

177.199.93.54	2403:6200:89a6:237c:18ba:8263:2b27:7823	175.22.174.124	90.58.148.173
125.123.141.190	192.206.35.105	218.88.27.146	88.184.119.154
134.73.161.43	99.87.227.18	171.224.131.167	177.74.182.171
116.115.231.95	181.206.88.234	69.89.23.39	2001:44c8:4519:1275:711b:1041:405e:cb02
111.197.169.4	112.80.116.91	18.22.92.31	3.13.106.122