148.63.53.51 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Portugal

Internet Service Provider: Vodafone Portugal - Communicacoes Pessoais S.A.

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Invalid user guest from 148.63.53.51 port 47490	2020-01-19 00:29:47
attackbotsspam	Unauthorized connection attempt detected from IP address 148.63.53.51 to port 2220 [J]	2020-01-18 03:19:19
attackspambots	Jan 16 19:18:59 v22018076622670303 sshd\[7717\]: Invalid user tgu from 148.63.53.51 port 55576 Jan 16 19:18:59 v22018076622670303 sshd\[7717\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.63.53.51 Jan 16 19:19:01 v22018076622670303 sshd\[7717\]: Failed password for invalid user tgu from 148.63.53.51 port 55576 ssh2 ...	2020-01-17 02:34:09

Type

Details

Datetime

attack

Invalid user guest from 148.63.53.51 port 47490

2020-01-19 00:29:47

attackbotsspam

Unauthorized connection attempt detected from IP address 148.63.53.51 to port 2220 [J]

2020-01-18 03:19:19

attackspambots

Jan 16 19:18:59 v22018076622670303 sshd\[7717\]: Invalid user tgu from 148.63.53.51 port 55576
Jan 16 19:18:59 v22018076622670303 sshd\[7717\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.63.53.51
Jan 16 19:19:01 v22018076622670303 sshd\[7717\]: Failed password for invalid user tgu from 148.63.53.51 port 55576 ssh2
...

2020-01-17 02:34:09

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 148.63.53.51
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48874
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;148.63.53.51.			IN	A

;; AUTHORITY SECTION:
.			413	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020011601 1800 900 604800 86400

;; Query time: 66 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 17 02:34:06 CST 2020
;; MSG SIZE  rcvd: 116

Host info

51.53.63.148.in-addr.arpa domain name pointer 51.53.63.148.rev.vodafone.pt.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
51.53.63.148.in-addr.arpa	name = 51.53.63.148.rev.vodafone.pt.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
71.202.216.185	attackspam	ssh failed login	2019-07-27 10:09:34
37.208.44.54	attack	utm - spam	2019-07-27 10:09:14
36.227.101.132	attack	Jul 26 19:45:38 **** sshd[29111]: User root from 36.227.101.132 not allowed because not listed in AllowUsers	2019-07-27 09:59:06
206.189.122.133	attackbotsspam	Jul 27 00:08:03 ip-172-31-62-245 sshd\[25368\]: Invalid user steven from 206.189.122.133\ Jul 27 00:08:05 ip-172-31-62-245 sshd\[25368\]: Failed password for invalid user steven from 206.189.122.133 port 51584 ssh2\ Jul 27 00:12:04 ip-172-31-62-245 sshd\[25467\]: Invalid user maria from 206.189.122.133\ Jul 27 00:12:05 ip-172-31-62-245 sshd\[25467\]: Failed password for invalid user maria from 206.189.122.133 port 44772 ssh2\ Jul 27 00:16:01 ip-172-31-62-245 sshd\[25514\]: Invalid user shuai from 206.189.122.133\	2019-07-27 10:29:07
137.74.194.226	attackspambots	Jul 27 03:23:54 SilenceServices sshd[23544]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.194.226 Jul 27 03:23:56 SilenceServices sshd[23544]: Failed password for invalid user nancy from 137.74.194.226 port 49186 ssh2 Jul 27 03:28:11 SilenceServices sshd[28656]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.194.226	2019-07-27 10:05:01
52.212.187.228	attackbots	26.07.2019 21:41:20 - Wordpress fail Detected by ELinOX-ALM	2019-07-27 10:45:44
195.201.132.198	attackspambots	Too many connections or unauthorized access detected from Arctic banned ip	2019-07-27 10:15:22
42.99.180.135	attackspam	Jul 27 03:30:22 mail sshd\[9136\]: Invalid user mc from 42.99.180.135 port 33824 Jul 27 03:30:22 mail sshd\[9136\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.99.180.135 ...	2019-07-27 10:44:08
68.183.165.25	attackspambots	Jul 26 12:30:09 cac1d2 sshd\[16953\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.165.25 user=root Jul 26 12:30:11 cac1d2 sshd\[16953\]: Failed password for root from 68.183.165.25 port 50243 ssh2 Jul 26 12:42:44 cac1d2 sshd\[18328\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.165.25 user=root ...	2019-07-27 10:20:31
95.215.204.152	attack	2019-07-27T02:01:54.054425abusebot-7.cloudsearch.cf sshd\[6496\]: Invalid user @dmin!@\# from 95.215.204.152 port 47404	2019-07-27 10:13:27
2.226.177.233	attackbots	Automatic report - Banned IP Access	2019-07-27 10:13:54
63.143.35.146	attack	\[2019-07-26 22:30:05\] NOTICE\[2288\] chan_sip.c: Registration from '\' failed for '63.143.35.146:52020' - Wrong password \[2019-07-26 22:30:05\] SECURITY\[2326\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-26T22:30:05.306-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1010",SessionID="0x7ff4d004fe18",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/63.143.35.146/52020",Challenge="3c05934d",ReceivedChallenge="3c05934d",ReceivedHash="bd6eb600d8b562dcbdc137c34897c5b5" \[2019-07-26 22:30:59\] NOTICE\[2288\] chan_sip.c: Registration from '\' failed for '63.143.35.146:59487' - Wrong password \[2019-07-26 22:30:59\] SECURITY\[2326\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-26T22:30:59.483-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="9393",SessionID="0x7ff4d0424178",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/63.143.35	2019-07-27 10:34:03
94.191.40.39	attackbotsspam	Jul 26 21:11:18 xb3 sshd[17002]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.40.39 user=r.r Jul 26 21:11:20 xb3 sshd[17002]: Failed password for r.r from 94.191.40.39 port 49762 ssh2 Jul 26 21:11:21 xb3 sshd[17002]: Received disconnect from 94.191.40.39: 11: Bye Bye [preauth] Jul 26 21:32:17 xb3 sshd[12804]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.40.39 user=r.r Jul 26 21:32:19 xb3 sshd[12804]: Failed password for r.r from 94.191.40.39 port 48014 ssh2 Jul 26 21:32:19 xb3 sshd[12804]: Received disconnect from 94.191.40.39: 11: Bye Bye [preauth] Jul 26 21:34:43 xb3 sshd[17155]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.40.39 user=r.r Jul 26 21:34:45 xb3 sshd[17155]: Failed password for r.r from 94.191.40.39 port 43862 ssh2 Jul 26 21:34:45 xb3 sshd[17155]: Received disconnect from 94.191.40.39: 11: Bye Bye [preaut........ -------------------------------	2019-07-27 10:16:59
103.51.153.235	attackspambots	2019-07-26T19:43:25.351570abusebot-2.cloudsearch.cf sshd\[17803\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.51.153.235 user=root	2019-07-27 10:01:07
86.124.138.80	attackbots	Automatic report - Port Scan Attack	2019-07-27 10:32:46

Recently Reported IPs

9.167.114.46	102.243.243.116	104.168.237.171	103.243.164.251
67.205.174.230	51.91.159.46	12.33.34.73	14.250.122.233
5.253.17.160	5.29.191.195	3.104.156.83	125.129.238.144
59.140.155.222	222.223.32.228	230.124.59.164	48.140.192.20
44.10.86.134	40.17.236.167	203.6.237.234	48.35.108.235