148.215.2.2 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Mexico

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 148.215.2.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23131
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;148.215.2.2.			IN	A

;; AUTHORITY SECTION:
.			572	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021702 1800 900 604800 86400

;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 12:40:28 CST 2022
;; MSG SIZE  rcvd: 104

Host info

2.2.215.148.in-addr.arpa domain name pointer amelica.org.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
2.2.215.148.in-addr.arpa	name = amelica.org.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
93.174.93.171	attack	Apr 01 13:23:54 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=93.174.93.171, lip=192.168.100.101, session=\\ Apr 01 13:25:25 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=93.174.93.171, lip=192.168.100.101, session=\\ Apr 01 13:42:11 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=93.174.93.171, lip=192.168.100.101, session=\\ Apr 01 13:57:09 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=93.174.93.171, lip=192.168.100.101, session=\<9RAvYjmiLABdrl2r\>\ Apr 01 14:05:51 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=93.174.93.171, lip=192.168.100.101, session=\\ Apr 0	2020-04-01 22:31:24
193.42.40.68	attack	Apr 1 23:26:54 our-server-hostname sshd[26625]: reveeclipse mapping checking getaddrinfo for 193-42-40-68.idc-ip.axxxxxxx34823.net [193.42.40.68] failed - POSSIBLE BREAK-IN ATTEMPT! Apr 1 23:26:55 our-server-hostname sshd[26625]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.42.40.68 user=r.r Apr 1 23:26:57 our-server-hostname sshd[26625]: Failed password for r.r from 193.42.40.68 port 53266 ssh2 Apr 1 23:32:47 our-server-hostname sshd[27734]: reveeclipse mapping checking getaddrinfo for 193-42-40-68.idc-ip.axxxxxxx34823.net [193.42.40.68] failed - POSSIBLE BREAK-IN ATTEMPT! Apr 1 23:32:47 our-server-hostname sshd[27734]: Invalid user rw from 193.42.40.68 Apr 1 23:32:47 our-server-hostname sshd[27734]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.42.40.68 Apr 1 23:32:50 our-server-hostname sshd[27734]: Failed password for invalid user rw from 193.42.40.68 port 56990 ssh........ -------------------------------	2020-04-01 22:32:56
220.142.170.215	attackspam	5555/tcp [2020-04-01]1pkt	2020-04-01 22:06:32
222.80.196.16	attackbotsspam	Invalid user woongyoon from 222.80.196.16 port 41106	2020-04-01 22:17:34
185.156.73.65	attack	04/01/2020-08:53:12.088053 185.156.73.65 Protocol: 6 ET SCAN NMAP -sS window 1024	2020-04-01 22:14:12
180.167.137.103	attackspambots	Apr 1 14:17:34 sip sshd[15652]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.167.137.103 Apr 1 14:17:37 sip sshd[15652]: Failed password for invalid user ms from 180.167.137.103 port 38749 ssh2 Apr 1 14:34:10 sip sshd[19685]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.167.137.103	2020-04-01 22:42:00
91.121.116.65	attack	Invalid user sysadm from 91.121.116.65 port 43898	2020-04-01 22:33:42
34.76.172.157	attackbotsspam	34.76.172.157 - - \[01/Apr/2020:14:34:16 +0200\] "POST /wp-login.php HTTP/1.0" 200 6997 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 34.76.172.157 - - \[01/Apr/2020:14:34:17 +0200\] "POST /wp-login.php HTTP/1.0" 200 6864 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 34.76.172.157 - - \[01/Apr/2020:14:34:18 +0200\] "POST /wp-login.php HTTP/1.0" 200 6860 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"	2020-04-01 22:29:34
122.170.109.190	attack	445/tcp [2020-04-01]1pkt	2020-04-01 22:35:40
163.172.160.152	attack	Invalid user uvl from 163.172.160.152 port 58336	2020-04-01 22:50:36
62.173.139.246	attack	445/tcp [2020-04-01]1pkt	2020-04-01 22:29:09
219.142.22.66	attackspambots	Apr 1 15:50:44 legacy sshd[24044]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.142.22.66 Apr 1 15:50:45 legacy sshd[24044]: Failed password for invalid user 123456Qwe! from 219.142.22.66 port 7759 ssh2 Apr 1 15:53:52 legacy sshd[24146]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.142.22.66 ...	2020-04-01 22:09:07
191.54.223.236	attack	23/tcp [2020-04-01]1pkt	2020-04-01 22:26:47
58.7.207.174	attackbotsspam	22/tcp [2020-04-01]1pkt	2020-04-01 22:24:13
92.222.66.234	attack	Apr 1 10:30:06 vps46666688 sshd[1810]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.222.66.234 Apr 1 10:30:09 vps46666688 sshd[1810]: Failed password for invalid user suyansheng from 92.222.66.234 port 38272 ssh2 ...	2020-04-01 22:04:02

Recently Reported IPs

148.214.50.10	148.216.0.22	148.218.66.10	148.225.105.142
148.215.2.1	148.225.105.36	148.233.170.242	148.233.136.210
148.227.1.12	148.237.3.137	148.233.66.30	148.234.5.222
148.240.200.160	148.239.220.117	148.240.201.224	148.237.3.169
148.240.201.121	148.240.201.6	148.240.4.221	148.240.5.23