148.109.200.157

Basic Info

City: unknown

Region: unknown

Country: Japan

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 148.109.200.157
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55623
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;148.109.200.157.		IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025021800 1800 900 604800 86400

;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 18 21:29:41 CST 2025
;; MSG SIZE  rcvd: 108

Host info

Host 157.200.109.148.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 157.200.109.148.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
149.56.19.4	attackbotsspam	Wordpress login scanning	2019-11-29 05:01:11
110.143.38.169	attack	RDP Bruteforce	2019-11-29 05:21:50
192.3.70.108	attack	191128 9:16:07 \[Warning\] Access denied for user 'mysqldump'@'192.3.70.108' $using password: YES$ 191128 9:16:08 \[Warning\] Access denied for user 'mysqldump'@'192.3.70.108' $using password: YES$ 191128 9:16:09 \[Warning\] Access denied for user 'mysqldump'@'192.3.70.108' $using password: YES$ 191128 9:16:10 \[Warning\] Access denied for user 'mysqldump'@'192.3.70.108' $using password: YES$ ...	2019-11-29 05:20:02
35.200.180.182	attack	Automatic report - XMLRPC Attack	2019-11-29 05:20:31
184.105.139.67	attackspambots	UTC: 2019-11-27 port: 161/udp	2019-11-29 04:58:40
118.89.35.251	attackbotsspam	Nov 28 12:20:06 ws19vmsma01 sshd[23611]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.35.251 Nov 28 12:20:07 ws19vmsma01 sshd[23611]: Failed password for invalid user othilia from 118.89.35.251 port 42292 ssh2 ...	2019-11-29 05:09:06
104.131.36.183	attack	104.131.36.183 - - \[28/Nov/2019:18:04:10 +0100\] "POST /wp-login.php HTTP/1.0" 200 7656 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" 104.131.36.183 - - \[28/Nov/2019:18:04:12 +0100\] "POST /wp-login.php HTTP/1.0" 200 7486 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" 104.131.36.183 - - \[28/Nov/2019:18:04:18 +0100\] "POST /wp-login.php HTTP/1.0" 200 7480 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0"	2019-11-29 05:12:37
64.31.35.218	attack	\[2019-11-28 15:19:47\] NOTICE\[2754\] chan_sip.c: Registration from '"5011" \' failed for '64.31.35.218:5714' - Wrong password \[2019-11-28 15:19:47\] SECURITY\[2765\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-28T15:19:47.857-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="5011",SessionID="0x7f26c42e3898",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/64.31.35.218/5714",Challenge="0db866d1",ReceivedChallenge="0db866d1",ReceivedHash="dc7e8acda8a4ed83c0318a5eb3bd06eb" \[2019-11-28 15:19:47\] NOTICE\[2754\] chan_sip.c: Registration from '"5011" \' failed for '64.31.35.218:5714' - Wrong password \[2019-11-28 15:19:47\] SECURITY\[2765\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-28T15:19:47.981-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="5011",SessionID="0x7f26c48cb7d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/6	2019-11-29 05:03:08
180.241.44.100	attack	Invalid user dietpi from 180.241.44.100 port 50220	2019-11-29 05:17:30
171.88.42.170	attackbotsspam	Nov 26 12:40:12 new sshd[14832]: Failed password for invalid user bobh from 171.88.42.170 port 34542 ssh2 Nov 26 12:40:12 new sshd[14832]: Received disconnect from 171.88.42.170: 11: Bye Bye [preauth] Nov 26 12:44:34 new sshd[16106]: Failed password for invalid user jaziel from 171.88.42.170 port 46203 ssh2 Nov 26 12:44:34 new sshd[16106]: Received disconnect from 171.88.42.170: 11: Bye Bye [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=171.88.42.170	2019-11-29 05:30:19
185.143.223.148	attackspambots	11/28/2019-14:59:17.029714 185.143.223.148 Protocol: 6 ET SCAN NMAP -sS window 1024	2019-11-29 05:16:32
219.84.213.74	attackbotsspam	Fail2Ban Ban Triggered	2019-11-29 04:54:52
45.76.111.146	attack	[ThuNov2815:27:52.6385682019][:error][pid14631:tid46931092817664][client45.76.111.146:36738][client45.76.111.146]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch"\\\\\\\\.sql\$"atREQUEST_FILENAME.[file"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf"][line"1288"][id"350590"][rev"2"][msg"Atomicorp.comWAFRules:AttackBlocked-Dataleakage-attempttoaccessrawSQLfiles$disablethisruleifyourequireaccesstofilesthatendwith.sql$"][severity"CRITICAL"][hostname"boltonholding.com"][uri"/05-2019.sql"][unique_id"Xd-ZaHBehvkmEUUeKgEI-gAAAMw"][ThuNov2815:27:54.5416742019][:error][pid14505:tid46931078108928][client45.76.111.146:37080][client45.76.111.146]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch"\\\\\\\\.sql\$"atREQUEST_FILENAME.[file"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf"][line"1288"][id"350590"][rev"2"][msg"Atomicorp.comWAFRules:AttackBlocked-Dataleakage-attempttoaccessrawSQLfiles$disablethisruleifyourequireaccesstofilesthatendwith.sql$"][severity"C	2019-11-29 05:04:26
140.143.200.251	attackspam	tried to login illegally to my server.	2019-11-29 05:10:11
177.67.0.234	attack	postfix (unknown user, SPF fail or relay access denied)	2019-11-29 05:01:48

Recently Reported IPs

89.61.44.253	45.19.210.224	115.43.217.182	4.96.197.61
26.47.251.95	239.53.86.233	221.26.37.248	221.82.240.147
238.2.185.101	251.7.174.222	217.188.98.231	153.236.160.166
12.30.45.158	60.50.194.129	42.248.209.166	43.220.37.88
156.20.25.27	14.202.38.128	34.59.212.156	4.249.191.107