148.251.199.12

Basic Info

City: unknown

Region: unknown

Country: Germany

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
148.251.199.18	attackbots	2020-05-04T06:13:04.939696 sshd[6307]: Invalid user ml from 148.251.199.18 port 38968 2020-05-04T06:13:04.954298 sshd[6307]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.251.199.18 2020-05-04T06:13:04.939696 sshd[6307]: Invalid user ml from 148.251.199.18 port 38968 2020-05-04T06:13:07.113297 sshd[6307]: Failed password for invalid user ml from 148.251.199.18 port 38968 ssh2 ...	2020-05-04 14:25:39
148.251.199.20	attackspam	Nov 10 02:11:23 MK-Soft-Root2 sshd[14874]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.251.199.20 Nov 10 02:11:25 MK-Soft-Root2 sshd[14874]: Failed password for invalid user elmer from 148.251.199.20 port 38724 ssh2 ...	2019-11-10 09:25:04

Type

Details

Datetime

148.251.199.18

attackbots

2020-05-04T06:13:04.939696  sshd[6307]: Invalid user ml from 148.251.199.18 port 38968
2020-05-04T06:13:04.954298  sshd[6307]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.251.199.18
2020-05-04T06:13:04.939696  sshd[6307]: Invalid user ml from 148.251.199.18 port 38968
2020-05-04T06:13:07.113297  sshd[6307]: Failed password for invalid user ml from 148.251.199.18 port 38968 ssh2
...

2020-05-04 14:25:39

148.251.199.20

attackspam

Nov 10 02:11:23 MK-Soft-Root2 sshd[14874]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.251.199.20 
Nov 10 02:11:25 MK-Soft-Root2 sshd[14874]: Failed password for invalid user elmer from 148.251.199.20 port 38724 ssh2
...

2019-11-10 09:25:04

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 148.251.199.12
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41581
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;148.251.199.12.			IN	A

;; AUTHORITY SECTION:
.			599	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021300 1800 900 604800 86400

;; Query time: 59 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 13 14:45:59 CST 2022
;; MSG SIZE  rcvd: 107

Host info

12.199.251.148.in-addr.arpa domain name pointer mx10.mailstudio.gr.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
12.199.251.148.in-addr.arpa	name = mx10.mailstudio.gr.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
120.52.120.166	attack	$f2bV_matches	2019-08-09 01:51:59
81.22.63.235	attackspam	[portscan] Port scan	2019-08-09 02:05:00
198.27.70.174	attackspambots	Automatic report - Banned IP Access	2019-08-09 02:07:14
167.71.71.215	attackbots	scan z	2019-08-09 01:42:25
42.112.231.200	attackspam	Unauthorized connection attempt from IP address 42.112.231.200 on Port 445(SMB)	2019-08-09 01:58:52
112.85.42.89	attackspam	Aug 8 14:49:41 dcd-gentoo sshd[23603]: User root from 112.85.42.89 not allowed because none of user's groups are listed in AllowGroups Aug 8 14:49:43 dcd-gentoo sshd[23603]: error: PAM: Authentication failure for illegal user root from 112.85.42.89 Aug 8 14:49:41 dcd-gentoo sshd[23603]: User root from 112.85.42.89 not allowed because none of user's groups are listed in AllowGroups Aug 8 14:49:43 dcd-gentoo sshd[23603]: error: PAM: Authentication failure for illegal user root from 112.85.42.89 Aug 8 14:49:41 dcd-gentoo sshd[23603]: User root from 112.85.42.89 not allowed because none of user's groups are listed in AllowGroups Aug 8 14:49:43 dcd-gentoo sshd[23603]: error: PAM: Authentication failure for illegal user root from 112.85.42.89 Aug 8 14:49:43 dcd-gentoo sshd[23603]: Failed keyboard-interactive/pam for invalid user root from 112.85.42.89 port 32690 ssh2 ...	2019-08-09 02:11:36
125.214.57.48	attackbotsspam	Aug 8 13:59:05 server postfix/smtpd[9488]: NOQUEUE: reject: RCPT from unknown[125.214.57.48]: 554 5.7.1 Service unavailable; Client host [125.214.57.48] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/125.214.57.48 / https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=<[125.214.57.48]>	2019-08-09 02:26:53
122.245.132.147	attackbotsspam	Time: Thu Aug 8 08:43:15 2019 -0300 IP: 122.245.132.147 (CN/China/-) Failures: 5 (smtpauth) Interval: 3600 seconds Blocked: Permanent Block	2019-08-09 01:51:30
178.62.239.249	attackspambots	Aug 8 20:03:35 dedicated sshd[7105]: Invalid user wks from 178.62.239.249 port 44154	2019-08-09 02:25:08
221.237.208.239	attackspambots	failed_logins	2019-08-09 02:15:40
167.114.234.52	attack	Detected by Synology server trying to access the inactive 'admin' account	2019-08-09 01:42:04
185.2.196.196	attackspambots	Automatic report - Banned IP Access	2019-08-09 02:02:47
51.38.186.228	attack	Aug 8 17:55:29 XXX sshd[59019]: Invalid user ali from 51.38.186.228 port 52390	2019-08-09 01:43:34
164.132.104.58	attack	Aug 8 17:42:50 tuxlinux sshd[59734]: Invalid user cmi from 164.132.104.58 port 43628 Aug 8 17:42:50 tuxlinux sshd[59734]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.104.58 Aug 8 17:42:50 tuxlinux sshd[59734]: Invalid user cmi from 164.132.104.58 port 43628 Aug 8 17:42:50 tuxlinux sshd[59734]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.104.58 Aug 8 17:42:50 tuxlinux sshd[59734]: Invalid user cmi from 164.132.104.58 port 43628 Aug 8 17:42:50 tuxlinux sshd[59734]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.104.58 Aug 8 17:42:52 tuxlinux sshd[59734]: Failed password for invalid user cmi from 164.132.104.58 port 43628 ssh2 ...	2019-08-09 02:08:49
46.105.81.105	attackspam	Aug 8 13:59:32 host sshd\[36414\]: Invalid user mikeg from 46.105.81.105 port 60428 Aug 8 13:59:34 host sshd\[36414\]: Failed password for invalid user mikeg from 46.105.81.105 port 60428 ssh2 ...	2019-08-09 02:23:33

Recently Reported IPs

148.245.31.77	148.246.182.7	148.251.182.79	148.251.41.235
148.251.77.184	148.255.155.208	148.59.181.23	148.255.96.240
148.255.108.123	148.255.135.44	148.255.72.255	148.3.230.223
148.251.210.198	148.63.77.3	148.255.187.218	148.3.41.14
148.69.239.61	148.69.155.234	148.70.210.242	148.69.73.156