148.63.53.166 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Portugal

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
148.63.53.51	attack	Invalid user guest from 148.63.53.51 port 47490	2020-01-19 00:29:47
148.63.53.51	attackbotsspam	Unauthorized connection attempt detected from IP address 148.63.53.51 to port 2220 [J]	2020-01-18 03:19:19
148.63.53.51	attackspambots	Jan 16 19:18:59 v22018076622670303 sshd\[7717\]: Invalid user tgu from 148.63.53.51 port 55576 Jan 16 19:18:59 v22018076622670303 sshd\[7717\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.63.53.51 Jan 16 19:19:01 v22018076622670303 sshd\[7717\]: Failed password for invalid user tgu from 148.63.53.51 port 55576 ssh2 ...	2020-01-17 02:34:09

Type

Details

Datetime

148.63.53.51

attack

Invalid user guest from 148.63.53.51 port 47490

2020-01-19 00:29:47

148.63.53.51

attackbotsspam

Unauthorized connection attempt detected from IP address 148.63.53.51 to port 2220 [J]

2020-01-18 03:19:19

148.63.53.51

attackspambots

Jan 16 19:18:59 v22018076622670303 sshd\[7717\]: Invalid user tgu from 148.63.53.51 port 55576
Jan 16 19:18:59 v22018076622670303 sshd\[7717\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.63.53.51
Jan 16 19:19:01 v22018076622670303 sshd\[7717\]: Failed password for invalid user tgu from 148.63.53.51 port 55576 ssh2
...

2020-01-17 02:34:09

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 148.63.53.166
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50292
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;148.63.53.166.			IN	A

;; AUTHORITY SECTION:
.			59	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020702 1800 900 604800 86400

;; Query time: 20 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 10:06:41 CST 2022
;; MSG SIZE  rcvd: 106

Host info

b'166.53.63.148.in-addr.arpa domain name pointer 166.53.63.148.rev.vodafone.pt.
'

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
166.53.63.148.in-addr.arpa	name = 166.53.63.148.rev.vodafone.pt.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
222.186.175.163	attack	Dec 28 13:20:44 web9 sshd\[28028\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.163 user=root Dec 28 13:20:46 web9 sshd\[28028\]: Failed password for root from 222.186.175.163 port 23692 ssh2 Dec 28 13:21:02 web9 sshd\[28075\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.163 user=root Dec 28 13:21:04 web9 sshd\[28075\]: Failed password for root from 222.186.175.163 port 36740 ssh2 Dec 28 13:21:07 web9 sshd\[28075\]: Failed password for root from 222.186.175.163 port 36740 ssh2	2019-12-29 07:23:35
45.82.153.142	attackbotsspam	Dec 28 23:46:20 relay postfix/smtpd\[9528\]: warning: unknown\[45.82.153.142\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 28 23:47:46 relay postfix/smtpd\[13002\]: warning: unknown\[45.82.153.142\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 28 23:48:06 relay postfix/smtpd\[9178\]: warning: unknown\[45.82.153.142\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 28 23:48:30 relay postfix/smtpd\[15815\]: warning: unknown\[45.82.153.142\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 28 23:48:52 relay postfix/smtpd\[12987\]: warning: unknown\[45.82.153.142\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2019-12-29 06:53:46
188.165.215.138	attack	\[2019-12-28 18:20:50\] SECURITY\[2857\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-12-28T18:20:50.306-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="00441902933947",SessionID="0x7f0fb43ef588",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/188.165.215.138/62693",ACLName="no_extension_match" \[2019-12-28 18:23:01\] SECURITY\[2857\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-12-28T18:23:01.547-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="000441902933947",SessionID="0x7f0fb4a5a908",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/188.165.215.138/59692",ACLName="no_extension_match" \[2019-12-28 18:25:14\] SECURITY\[2857\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-12-28T18:25:14.860-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="900441902933947",SessionID="0x7f0fb4a5a908",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/188.165.215.138/57148",ACLName="n	2019-12-29 07:26:21
85.209.0.24	attackspambots	Dec 28 22:01:03 v26 sshd[25004]: Did not receive identification string from 85.209.0.24 port 30326 Dec 28 22:01:03 v26 sshd[25009]: Did not receive identification string from 85.209.0.24 port 60674 Dec 28 22:01:03 v26 sshd[25005]: Did not receive identification string from 85.209.0.24 port 34640 Dec 28 22:01:03 v26 sshd[25008]: Did not receive identification string from 85.209.0.24 port 7560 Dec 28 22:01:03 v26 sshd[25006]: Did not receive identification string from 85.209.0.24 port 2840 Dec 28 22:01:03 v26 sshd[25007]: Did not receive identification string from 85.209.0.24 port 10092 Dec 28 22:01:06 v26 sshd[25010]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.209.0.24 user=r.r Dec 28 22:01:06 v26 sshd[25014]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.209.0.24 user=r.r Dec 28 22:01:06 v26 sshd[25013]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ss........ -------------------------------	2019-12-29 07:14:47
186.101.251.105	attackbots	Invalid user riksaasen from 186.101.251.105 port 56348	2019-12-29 07:17:20
67.55.118.171	attackspam	Automatic report - XMLRPC Attack	2019-12-29 07:25:40
139.215.217.180	attackspam	Dec 28 23:33:27 MK-Soft-Root1 sshd[12820]: Failed password for root from 139.215.217.180 port 48699 ssh2 ...	2019-12-29 07:30:51
198.71.239.7	attackbotsspam	Automatic report - XMLRPC Attack	2019-12-29 07:07:29
222.186.175.155	attack	Dec 28 13:25:14 sachi sshd\[11881\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.155 user=root Dec 28 13:25:16 sachi sshd\[11881\]: Failed password for root from 222.186.175.155 port 63396 ssh2 Dec 28 13:25:32 sachi sshd\[11891\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.155 user=root Dec 28 13:25:34 sachi sshd\[11891\]: Failed password for root from 222.186.175.155 port 19952 ssh2 Dec 28 13:25:38 sachi sshd\[11891\]: Failed password for root from 222.186.175.155 port 19952 ssh2	2019-12-29 07:27:06
176.185.218.124	attack	Lines containing failures of 176.185.218.124 Dec 23 12:39:03 shared01 sshd[19767]: Invalid user pi from 176.185.218.124 port 57200 Dec 23 12:39:03 shared01 sshd[19766]: Invalid user pi from 176.185.218.124 port 57194 Dec 23 12:39:03 shared01 sshd[19767]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.185.218.124 Dec 23 12:39:03 shared01 sshd[19766]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.185.218.124 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=176.185.218.124	2019-12-29 07:12:59
46.246.63.133	attackbots	Invalid user anonymous from 46.246.63.133 port 37542	2019-12-29 07:02:54
141.77.145.45	attack	Invalid user bekkby from 141.77.145.45 port 51920	2019-12-29 07:20:49
82.146.48.235	attackbotsspam	Dec 28 23:37:43 grey postfix/smtpd\[12783\]: NOQUEUE: reject: RCPT from unknown\[82.146.48.235\]: 554 5.7.1 Service unavailable\; Client host \[82.146.48.235\] blocked using db.wpbl.info\; Spam source - http://wpbl.info/record\?ip=82.146.48.235\; from=\ to=\ proto=ESMTP helo=\ ...	2019-12-29 07:09:35
106.54.160.59	attack	Dec 28 23:35:35 MK-Soft-VM4 sshd[13128]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.160.59 Dec 28 23:35:37 MK-Soft-VM4 sshd[13128]: Failed password for invalid user gp from 106.54.160.59 port 47176 ssh2 ...	2019-12-29 07:06:12
79.112.8.43	attackbots	Looking for resource vulnerabilities	2019-12-29 07:01:48

Recently Reported IPs

61.52.16.101	61.238.54.177	190.120.62.110	45.235.155.177
190.1.7.164	210.117.122.129	5.2.73.169	95.241.38.129
121.4.160.59	159.223.54.176	111.250.247.62	74.213.39.131
197.162.255.220	68.183.41.46	172.70.37.125	185.146.58.100
116.196.82.107	61.227.88.51	47.241.241.174	161.35.116.146