148.63.158.141

Basic Info

City: unknown

Region: unknown

Country: Portugal

Internet Service Provider: Vodafone Portugal - Communicacoes Pessoais S.A.

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbotsspam	Jun 28 19:24:13 jupiter sshd\[33914\]: Invalid user service from 148.63.158.141 Jun 28 19:24:13 jupiter sshd\[33914\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.63.158.141 Jun 28 19:24:15 jupiter sshd\[33914\]: Failed password for invalid user service from 148.63.158.141 port 35641 ssh2 ...	2019-06-29 03:41:32

Type

Details

Datetime

attackbotsspam

Jun 28 19:24:13 jupiter sshd\[33914\]: Invalid user service from 148.63.158.141
Jun 28 19:24:13 jupiter sshd\[33914\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.63.158.141
Jun 28 19:24:15 jupiter sshd\[33914\]: Failed password for invalid user service from 148.63.158.141 port 35641 ssh2
...

2019-06-29 03:41:32

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 148.63.158.141
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51873
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;148.63.158.141.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019062801 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Jun 29 03:41:18 CST 2019
;; MSG SIZE  rcvd: 118

Host info

141.158.63.148.in-addr.arpa domain name pointer 141.158.63.148.rev.vodafone.pt.

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
141.158.63.148.in-addr.arpa	name = 141.158.63.148.rev.vodafone.pt.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
167.71.13.247	attackbotsspam	Aug 2 08:34:55 wildwolf ssh-honeypotd[26164]: Failed password for r.r from 167.71.13.247 port 47868 ssh2 (target: 158.69.100.138:22, password: r.r) Aug 2 08:34:56 wildwolf ssh-honeypotd[26164]: Failed password for admin from 167.71.13.247 port 49056 ssh2 (target: 158.69.100.138:22, password: admin) Aug 2 08:34:57 wildwolf ssh-honeypotd[26164]: Failed password for admin from 167.71.13.247 port 50248 ssh2 (target: 158.69.100.138:22, password: 1234) Aug 2 08:34:58 wildwolf ssh-honeypotd[26164]: Failed password for user from 167.71.13.247 port 51300 ssh2 (target: 158.69.100.138:22, password: user) Aug 2 08:34:59 wildwolf ssh-honeypotd[26164]: Failed password for ubnt from 167.71.13.247 port 52266 ssh2 (target: 158.69.100.138:22, password: ubnt) Aug 2 08:35:00 wildwolf ssh-honeypotd[26164]: Failed password for admin from 167.71.13.247 port 53330 ssh2 (target: 158.69.100.138:22, password: password) Aug 2 08:35:01 wildwolf ssh-honeypotd[26164]: Failed password for guest ........ ------------------------------	2019-08-02 21:52:11
111.72.25.175	attack	Aug 2 04:32:29 eola postfix/smtpd[6649]: connect from unknown[111.72.25.175] Aug 2 04:32:29 eola postfix/smtpd[6525]: connect from unknown[111.72.25.175] Aug 2 04:32:31 eola postfix/smtpd[6525]: lost connection after AUTH from unknown[111.72.25.175] Aug 2 04:32:31 eola postfix/smtpd[6525]: disconnect from unknown[111.72.25.175] ehlo=1 auth=0/1 commands=1/2 Aug 2 04:32:32 eola postfix/smtpd[6525]: connect from unknown[111.72.25.175] Aug 2 04:32:32 eola postfix/smtpd[6525]: lost connection after AUTH from unknown[111.72.25.175] Aug 2 04:32:32 eola postfix/smtpd[6525]: disconnect from unknown[111.72.25.175] ehlo=1 auth=0/1 commands=1/2 Aug 2 04:32:36 eola postfix/smtpd[6525]: connect from unknown[111.72.25.175] Aug 2 04:32:37 eola postfix/smtpd[6525]: lost connection after AUTH from unknown[111.72.25.175] Aug 2 04:32:37 eola postfix/smtpd[6525]: disconnect from unknown[111.72.25.175] ehlo=1 auth=0/1 commands=1/2 Aug 2 04:32:37 eola postfix/smtpd[6525]: connect f........ -------------------------------	2019-08-02 21:55:38
203.115.102.94	attack	Aug 2 10:43:17 server postfix/smtpd[6789]: NOQUEUE: reject: RCPT from unknown[203.115.102.94]: 554 5.7.1 Service unavailable; Client host [203.115.102.94] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/203.115.102.94 / https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=<[203.115.102.94]>	2019-08-02 22:55:37
85.209.0.115	attackspam	Port scan on 12 port(s): 12452 17724 19699 24830 36331 37602 41179 45180 53135 53695 55028 56424	2019-08-02 21:56:26
134.175.219.34	attackbots	2019-08-02T14:26:34.636363abusebot-6.cloudsearch.cf sshd\[28018\]: Invalid user guest from 134.175.219.34 port 18979	2019-08-02 22:54:37
40.114.65.21	attackspambots	Invalid user legal2 from 40.114.65.21 port 58646	2019-08-02 21:45:12
145.239.88.184	attack	Aug 2 13:23:04 SilenceServices sshd[1865]: Failed password for root from 145.239.88.184 port 41272 ssh2 Aug 2 13:30:11 SilenceServices sshd[7751]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.239.88.184 Aug 2 13:30:13 SilenceServices sshd[7751]: Failed password for invalid user buero from 145.239.88.184 port 39264 ssh2	2019-08-02 22:21:40
104.248.229.8	attackspam	Aug 1 14:27:04 srv1 sshd[32597]: Invalid user frida from 104.248.229.8 Aug 1 14:27:04 srv1 sshd[32597]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.229.8 Aug 1 14:27:06 srv1 sshd[32597]: Failed password for invalid user frida from 104.248.229.8 port 43890 ssh2 Aug 1 14:27:06 srv1 sshd[32597]: Received disconnect from 104.248.229.8: 11: Bye Bye [preauth] Aug 1 14:36:52 srv1 sshd[1184]: Invalid user joseph from 104.248.229.8 Aug 1 14:36:52 srv1 sshd[1184]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.229.8 Aug 1 14:36:54 srv1 sshd[1184]: Failed password for invalid user joseph from 104.248.229.8 port 55354 ssh2 Aug 1 14:36:54 srv1 sshd[1184]: Received disconnect from 104.248.229.8: 11: Bye Bye [preauth] Aug 1 14:41:01 srv1 sshd[1637]: Invalid user akbar from 104.248.229.8 Aug 1 14:41:01 srv1 sshd[1637]: pam_unix(sshd:auth): authentication failure; logname= ui........ -------------------------------	2019-08-02 22:36:39
165.255.77.176	attack	Aug 2 10:37:28 server3 sshd[1032765]: reveeclipse mapping checking getaddrinfo for 165-255-77-176.ip.adsl.co.za [165.255.77.176] failed - POSSIBLE BREAK-IN ATTEMPT! Aug 2 10:37:28 server3 sshd[1032765]: Invalid user joseph from 165.255.77.176 Aug 2 10:37:29 server3 sshd[1032765]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.255.77.176 Aug 2 10:37:30 server3 sshd[1032765]: Failed password for invalid user joseph from 165.255.77.176 port 36792 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=165.255.77.176	2019-08-02 22:03:56
153.36.242.143	attackbots	$f2bV_matches	2019-08-02 21:52:47
168.195.46.186	attackbots	Try access to SMTP/POP/IMAP server.	2019-08-02 22:22:51
206.72.194.220	attackbots	Aug 2 17:29:55 yabzik sshd[8155]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.72.194.220 Aug 2 17:29:58 yabzik sshd[8155]: Failed password for invalid user ha from 206.72.194.220 port 59542 ssh2 Aug 2 17:34:16 yabzik sshd[9568]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.72.194.220	2019-08-02 22:46:25
2.38.90.101	attack	Aug 2 15:21:27 srv206 sshd[2578]: Invalid user top from 2.38.90.101 ...	2019-08-02 22:16:48
220.142.222.238	attackspam	Aug 1 06:58:47 localhost kernel: [15901320.769765] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=220.142.222.238 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=39412 PROTO=TCP SPT=55384 DPT=37215 WINDOW=47156 RES=0x00 SYN URGP=0 Aug 1 06:58:47 localhost kernel: [15901320.769789] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=220.142.222.238 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=39412 PROTO=TCP SPT=55384 DPT=37215 SEQ=758669438 ACK=0 WINDOW=47156 RES=0x00 SYN URGP=0 Aug 2 04:44:34 localhost kernel: [15979667.335704] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=220.142.222.238 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=41461 PROTO=TCP SPT=55384 DPT=37215 WINDOW=47156 RES=0x00 SYN URGP=0 Aug 2 04:44:34 localhost kernel: [15979667.335733] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=220.142.222.238 DST=[mungedIP2] LEN=40	2019-08-02 22:09:41
152.249.253.98	attackspambots	2019-08-02T11:08:13.956839centos sshd\[9473\]: Invalid user zhao from 152.249.253.98 port 1587 2019-08-02T11:08:13.963131centos sshd\[9473\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.249.253.98 2019-08-02T11:08:16.197401centos sshd\[9473\]: Failed password for invalid user zhao from 152.249.253.98 port 1587 ssh2	2019-08-02 22:07:44

Recently Reported IPs

218.173.64.26	41.207.194.11	188.166.188.152	217.182.201.146
177.23.58.56	201.105.206.172	190.214.49.2	185.107.215.216
77.222.101.128	14.120.183.178	249.50.193.209	197.156.80.108
125.105.106.211	94.249.93.175	119.53.18.166	191.53.254.100
36.92.71.138	197.253.87.12	185.93.97.172	115.48.185.211