148.3.149.116 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Spain

Internet Service Provider: Vodafone Espana S.A.U.

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	UTC: 2019-10-21 port: 88/tcp	2019-10-22 13:10:29

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 148.3.149.116
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49303
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;148.3.149.116.			IN	A

;; AUTHORITY SECTION:
.			590	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019102101 1800 900 604800 86400

;; Query time: 110 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Oct 22 13:10:26 CST 2019
;; MSG SIZE  rcvd: 117

Host info

Host 116.149.3.148.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 116.149.3.148.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
37.6.191.145	attack	$f2bV_matches	2020-08-07 05:16:00
211.253.129.225	attack	k+ssh-bruteforce	2020-08-07 04:59:30
106.13.233.186	attackspambots	2020-08-06T22:27:23.234095amanda2.illicoweb.com sshd\[4796\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.233.186 user=root 2020-08-06T22:27:25.358469amanda2.illicoweb.com sshd\[4796\]: Failed password for root from 106.13.233.186 port 51240 ssh2 2020-08-06T22:30:21.761549amanda2.illicoweb.com sshd\[5163\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.233.186 user=root 2020-08-06T22:30:23.655128amanda2.illicoweb.com sshd\[5163\]: Failed password for root from 106.13.233.186 port 43001 ssh2 2020-08-06T22:33:18.876354amanda2.illicoweb.com sshd\[5700\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.233.186 user=root ...	2020-08-07 05:15:30
179.84.134.149	attack	Aug 6 23:17:36 web1 sshd[13463]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.84.134.149 user=root Aug 6 23:17:38 web1 sshd[13463]: Failed password for root from 179.84.134.149 port 64489 ssh2 Aug 6 23:17:42 web1 sshd[13497]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.84.134.149 user=root Aug 6 23:17:45 web1 sshd[13497]: Failed password for root from 179.84.134.149 port 64490 ssh2 Aug 6 23:17:48 web1 sshd[13530]: Invalid user ubnt from 179.84.134.149 port 64491 Aug 6 23:17:49 web1 sshd[13530]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.84.134.149 Aug 6 23:17:48 web1 sshd[13530]: Invalid user ubnt from 179.84.134.149 port 64491 Aug 6 23:17:50 web1 sshd[13530]: Failed password for invalid user ubnt from 179.84.134.149 port 64491 ssh2 Aug 6 23:17:54 web1 sshd[13561]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tt ...	2020-08-07 05:17:15
37.49.224.192	attack	$f2bV_matches	2020-08-07 05:13:01
103.107.187.252	attack	Aug 6 10:53:49 mockhub sshd[3099]: Failed password for root from 103.107.187.252 port 38932 ssh2 ...	2020-08-07 05:27:33
192.35.168.251	attackspam	1596743343 - 08/07/2020 02:49:03 Host: worker-15.sfj.censys-scanner.com/192.35.168.251 Port: 6379 TCP Blocked ...	2020-08-07 05:06:23
182.208.252.91	attackbotsspam	2020-08-06T22:00:28.698283amanda2.illicoweb.com sshd\[49109\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.208.252.91 user=root 2020-08-06T22:00:30.777704amanda2.illicoweb.com sshd\[49109\]: Failed password for root from 182.208.252.91 port 45378 ssh2 2020-08-06T22:04:14.018486amanda2.illicoweb.com sshd\[969\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.208.252.91 user=root 2020-08-06T22:04:15.791614amanda2.illicoweb.com sshd\[969\]: Failed password for root from 182.208.252.91 port 58484 ssh2 2020-08-06T22:07:51.223665amanda2.illicoweb.com sshd\[1635\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.208.252.91 user=root ...	2020-08-07 05:26:09
167.172.195.99	attackspambots	Too many connections or unauthorized access detected from Arctic banned ip	2020-08-07 05:22:41
2.36.136.146	attackspam	Aug 6 19:46:01 nextcloud sshd\[821\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.36.136.146 user=root Aug 6 19:46:03 nextcloud sshd\[821\]: Failed password for root from 2.36.136.146 port 37246 ssh2 Aug 6 19:49:55 nextcloud sshd\[5532\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.36.136.146 user=root	2020-08-07 05:30:19
108.190.190.48	attack	Aug 6 23:07:46 * sshd[24041]: Failed password for root from 108.190.190.48 port 42734 ssh2	2020-08-07 05:27:06
58.250.44.53	attackspam	Aug 6 11:23:28 firewall sshd[12255]: Failed password for root from 58.250.44.53 port 45661 ssh2 Aug 6 11:28:10 firewall sshd[12382]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.250.44.53 user=root Aug 6 11:28:12 firewall sshd[12382]: Failed password for root from 58.250.44.53 port 18566 ssh2 ...	2020-08-07 05:23:55
9.9.9.9	attack	Aug 6 19:36:40 hidden kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:30:e4:db:97:3e:3f:08:00 SRC=9.9.9.9 DST=217.198.117.163 LEN=40 TOS=0x00 PREC=0x00 TTL=58 ID=40875 DF PROTO=TCP SPT=853 DPT=43836 WINDOW=0 RES=0x00 RST URGP=0 Aug 6 19:37:19 hidden kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:30:e4:db:97:3e:3f:08:00 SRC=9.9.9.9 DST=217.198.117.163 LEN=40 TOS=0x00 PREC=0x00 TTL=58 ID=48387 DF PROTO=TCP SPT=853 DPT=43854 WINDOW=0 RES=0x00 RST URGP=0 Aug 6 19:37:19 hidden kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:30:e4:db:97:3e:3f:08:00 SRC=9.9.9.9 DST=217.198.117.163 LEN=40 TOS=0x00 PREC=0x00 TTL=58 ID=48388 DF PROTO=TCP SPT=853 DPT=43854 WINDOW=0 RES=0x00 RST URGP=0 Aug 6 19:37:46 hidden kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:30:e4:db:97:3e:3f:08:00 SRC=9.9.9.9 DST=217.198.117.163 LEN=40 TOS=0x00 PREC=0x00 TTL=58 ID=61917 DF PROTO=TCP SPT=853 DPT=43858 WINDOW=0 RES=0x00 RST URGP=0 Aug 6 19:37:46 hidden kernel: [UFW BLOCK] ...	2020-08-07 05:26:21
104.236.112.52	attack	2020-08-06T16:17:34.855296amanda2.illicoweb.com sshd\[26627\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.112.52 user=root 2020-08-06T16:17:36.816802amanda2.illicoweb.com sshd\[26627\]: Failed password for root from 104.236.112.52 port 58344 ssh2 2020-08-06T16:20:54.060172amanda2.illicoweb.com sshd\[27365\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.112.52 user=root 2020-08-06T16:20:55.811046amanda2.illicoweb.com sshd\[27365\]: Failed password for root from 104.236.112.52 port 55519 ssh2 2020-08-06T16:24:17.425424amanda2.illicoweb.com sshd\[28458\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.112.52 user=root ...	2020-08-07 05:22:14
103.225.149.101	attackbots	2020-08-06 08:15:33.943773-0500 localhost smtpd[81944]: NOQUEUE: reject: RCPT from unknown[103.225.149.101]: 554 5.7.1 Service unavailable; Client host [103.225.149.101] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/103.225.149.101; from= to= proto=ESMTP helo=<[103.225.149.101]>	2020-08-07 05:07:25

Recently Reported IPs

36.77.218.120	191.178.166.39	92.50.105.150	114.172.176.80
178.205.254.22	198.71.238.4	160.153.153.11	225.176.252.46
159.203.201.1	86.70.176.147	108.110.98.162	164.195.182.181
101.249.233.164	207.234.46.153	127.157.162.110	54.184.234.51
227.174.41.232	251.97.198.203	152.87.134.124	135.12.40.199