148.70.19.82 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
148.70.195.242	attack	Unauthorised connection attempt detected at AUO MAIN. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)	2020-10-06 04:20:45
148.70.195.242	attackbots	Oct 5 09:41:58 haigwepa sshd[11877]: Failed password for root from 148.70.195.242 port 46034 ssh2 ...	2020-10-05 20:21:17
148.70.195.242	attackspambots	2020-10-05T05:17:32.709953billing sshd[28846]: Failed password for root from 148.70.195.242 port 60804 ssh2 2020-10-05T05:21:03.151556billing sshd[4309]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.195.242 user=root 2020-10-05T05:21:05.243073billing sshd[4309]: Failed password for root from 148.70.195.242 port 60006 ssh2 ...	2020-10-05 12:12:21
148.70.195.242	attackspambots	148.70.195.242 (CN/China/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 18 04:08:09 jbs1 sshd[9437]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.116.131.206 user=root Sep 18 04:08:11 jbs1 sshd[9437]: Failed password for root from 128.116.131.206 port 39270 ssh2 Sep 18 04:08:21 jbs1 sshd[9602]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.195.242 user=root Sep 18 04:06:12 jbs1 sshd[8756]: Failed password for root from 77.27.168.117 port 42906 ssh2 Sep 18 04:06:03 jbs1 sshd[8703]: Failed password for root from 103.20.188.18 port 34532 ssh2 Sep 18 04:06:01 jbs1 sshd[8703]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.20.188.18 user=root IP Addresses Blocked: 128.116.131.206 (IT/Italy/-)	2020-09-18 20:06:12
148.70.195.242	attackbots	Sep 18 05:33:51 hidden sshd[21839]: Failed password for hidden from 148.70.195.242 port 47348 ssh2 Sep 18 05:38:50 hidden sshd[22914]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.195.242 user=root Sep 18 05:38:52 hidden sshd[22914]: Failed password for hidden from 148.70.195.242 port 56520 ssh2	2020-09-18 12:23:56
148.70.195.242	attackbotsspam	2020-08-06T17:20:55.674032amanda2.illicoweb.com sshd\[42403\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.195.242 user=root 2020-08-06T17:20:57.442968amanda2.illicoweb.com sshd\[42403\]: Failed password for root from 148.70.195.242 port 59918 ssh2 2020-08-06T17:24:29.829910amanda2.illicoweb.com sshd\[43392\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.195.242 user=root 2020-08-06T17:24:32.313093amanda2.illicoweb.com sshd\[43392\]: Failed password for root from 148.70.195.242 port 51366 ssh2 2020-08-06T17:28:01.099203amanda2.illicoweb.com sshd\[44207\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.195.242 user=root ...	2020-08-06 23:37:50
148.70.195.242	attackspambots	Jul 25 10:04:58 server1 sshd\[14446\]: Invalid user joe from 148.70.195.242 Jul 25 10:04:58 server1 sshd\[14446\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.195.242 Jul 25 10:04:59 server1 sshd\[14446\]: Failed password for invalid user joe from 148.70.195.242 port 59558 ssh2 Jul 25 10:07:44 server1 sshd\[15227\]: Invalid user lr from 148.70.195.242 Jul 25 10:07:44 server1 sshd\[15227\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.195.242 ...	2020-07-26 02:16:30
148.70.195.242	attackspam	Jul 23 19:18:02 tdfoods sshd\[19434\]: Invalid user minecraft from 148.70.195.242 Jul 23 19:18:02 tdfoods sshd\[19434\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.195.242 Jul 23 19:18:05 tdfoods sshd\[19434\]: Failed password for invalid user minecraft from 148.70.195.242 port 38150 ssh2 Jul 23 19:19:55 tdfoods sshd\[19585\]: Invalid user testmail from 148.70.195.242 Jul 23 19:19:55 tdfoods sshd\[19585\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.195.242	2020-07-24 14:55:35
148.70.195.242	attack	Jul 23 09:28:48 NPSTNNYC01T sshd[6982]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.195.242 Jul 23 09:28:50 NPSTNNYC01T sshd[6982]: Failed password for invalid user team from 148.70.195.242 port 60996 ssh2 Jul 23 09:31:40 NPSTNNYC01T sshd[7273]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.195.242 ...	2020-07-24 02:06:15
148.70.195.242	attackbotsspam	Fail2Ban - SSH Bruteforce Attempt	2020-07-23 17:17:39
148.70.191.149	attackspambots	Invalid user cacti from 148.70.191.149 port 43564	2020-07-18 21:55:40
148.70.195.242	attack	$f2bV_matches	2020-07-18 06:20:09
148.70.191.149	attackspam	Jul 11 08:52:41 NPSTNNYC01T sshd[31309]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.191.149 Jul 11 08:52:43 NPSTNNYC01T sshd[31309]: Failed password for invalid user xautomation from 148.70.191.149 port 45980 ssh2 Jul 11 08:57:30 NPSTNNYC01T sshd[31797]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.191.149 ...	2020-07-11 22:06:45
148.70.195.54	attackspam	Jul 7 09:18:29 nextcloud sshd\[2095\]: Invalid user scs from 148.70.195.54 Jul 7 09:18:29 nextcloud sshd\[2095\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.195.54 Jul 7 09:18:31 nextcloud sshd\[2095\]: Failed password for invalid user scs from 148.70.195.54 port 39150 ssh2	2020-07-07 15:20:25
148.70.195.54	attackspambots	SSH Honeypot -> SSH Bruteforce / Login	2020-06-30 03:55:12

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 148.70.19.82
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 46890
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;148.70.19.82.			IN	A

;; AUTHORITY SECTION:
.			371	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022032401 1800 900 604800 86400

;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 25 05:39:54 CST 2022
;; MSG SIZE  rcvd: 105

Host info

Host 82.19.70.148.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 82.19.70.148.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
110.49.71.245	attack	$f2bV_matches	2020-09-08 01:06:55
180.76.109.16	attack	Sep 7 14:38:32 minden010 sshd[5671]: Failed password for root from 180.76.109.16 port 56360 ssh2 Sep 7 14:43:17 minden010 sshd[7407]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.109.16 Sep 7 14:43:19 minden010 sshd[7407]: Failed password for invalid user dominic from 180.76.109.16 port 57026 ssh2 ...	2020-09-08 00:57:06
86.123.126.117	attackspambots	Port Scan: TCP/443	2020-09-08 01:20:34
49.235.153.220	attackbots	Sep 7 08:41:48 rancher-0 sshd[1476910]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.153.220 user=root Sep 7 08:41:51 rancher-0 sshd[1476910]: Failed password for root from 49.235.153.220 port 42866 ssh2 ...	2020-09-08 00:48:09
110.159.86.94	attackspam	rdp brute-force attack (aggressivity: medium)	2020-09-08 01:31:27
91.192.136.43	attack	Sep 7 08:09:32 santamaria sshd\[6562\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.192.136.43 user=root Sep 7 08:09:34 santamaria sshd\[6562\]: Failed password for root from 91.192.136.43 port 46004 ssh2 Sep 7 08:13:21 santamaria sshd\[6599\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.192.136.43 user=root ...	2020-09-08 01:20:00
200.45.147.129	attack	(sshd) Failed SSH login from 200.45.147.129 (AR/Argentina/host129.200-45-147.telecom.net.ar): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 7 07:24:32 server sshd[8827]: Invalid user rawlinson from 200.45.147.129 port 63109 Sep 7 07:24:34 server sshd[8827]: Failed password for invalid user rawlinson from 200.45.147.129 port 63109 ssh2 Sep 7 07:35:18 server sshd[12721]: Failed password for root from 200.45.147.129 port 29462 ssh2 Sep 7 07:38:01 server sshd[13549]: Failed password for root from 200.45.147.129 port 44226 ssh2 Sep 7 07:40:42 server sshd[15000]: Failed password for root from 200.45.147.129 port 36018 ssh2	2020-09-08 01:18:02
171.224.203.164	attack	171.224.203.164 - - [07/Sep/2020:07:10:14 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Linux i686; rv:2.0.1) Gecko/20100101 Firefox/4.0.1" 171.224.203.164 - - [07/Sep/2020:07:10:16 +0100] "POST /wp-login.php HTTP/1.1" 200 7820 "-" "Mozilla/5.0 (X11; Linux i686; rv:2.0.1) Gecko/20100101 Firefox/4.0.1" 171.224.203.164 - - [07/Sep/2020:07:12:10 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Linux i686; rv:2.0.1) Gecko/20100101 Firefox/4.0.1" ...	2020-09-08 00:49:01
80.32.131.229	attack	Repeated brute force against a port	2020-09-08 01:01:56
192.42.116.26	attackbots	Sep 7 17:38:54 rotator sshd\[1860\]: Failed password for root from 192.42.116.26 port 38776 ssh2Sep 7 17:38:55 rotator sshd\[1860\]: Failed password for root from 192.42.116.26 port 38776 ssh2Sep 7 17:38:57 rotator sshd\[1860\]: Failed password for root from 192.42.116.26 port 38776 ssh2Sep 7 17:38:59 rotator sshd\[1860\]: Failed password for root from 192.42.116.26 port 38776 ssh2Sep 7 17:39:02 rotator sshd\[1860\]: Failed password for root from 192.42.116.26 port 38776 ssh2Sep 7 17:39:04 rotator sshd\[1860\]: Failed password for root from 192.42.116.26 port 38776 ssh2 ...	2020-09-08 01:04:55
209.141.48.230	attackspambots	TCP (SYN) 209.141.48.230:39845 -> port 23, len 44	2020-09-08 01:32:52
106.13.190.84	attackspam	Sep 7 18:44:10 lnxmail61 sshd[9993]: Failed password for root from 106.13.190.84 port 45690 ssh2 Sep 7 18:44:10 lnxmail61 sshd[9993]: Failed password for root from 106.13.190.84 port 45690 ssh2	2020-09-08 00:56:07
218.92.0.251	attack	Sep 7 19:13:16 markkoudstaal sshd[18731]: Failed password for root from 218.92.0.251 port 4611 ssh2 Sep 7 19:13:19 markkoudstaal sshd[18731]: Failed password for root from 218.92.0.251 port 4611 ssh2 Sep 7 19:13:22 markkoudstaal sshd[18731]: Failed password for root from 218.92.0.251 port 4611 ssh2 Sep 7 19:13:25 markkoudstaal sshd[18731]: Failed password for root from 218.92.0.251 port 4611 ssh2 ...	2020-09-08 01:14:14
62.210.136.231	attack	2020-09-07T05:09:01.310634morrigan.ad5gb.com sshd[1986177]: Failed password for root from 62.210.136.231 port 40144 ssh2 2020-09-07T05:09:01.767550morrigan.ad5gb.com sshd[1986177]: Disconnected from authenticating user root 62.210.136.231 port 40144 [preauth]	2020-09-08 01:29:59
218.92.0.158	attackbots	Sep 7 17:41:55 rocket sshd[32498]: Failed password for root from 218.92.0.158 port 29856 ssh2 Sep 7 17:42:07 rocket sshd[32498]: error: maximum authentication attempts exceeded for root from 218.92.0.158 port 29856 ssh2 [preauth] ...	2020-09-08 01:14:31

Recently Reported IPs

102.130.138.26	102.140.197.187	102.152.130.92	102.152.150.182
102.165.193.114	140.32.22.191	102.191.145.50	37.169.142.182
102.219.28.10	102.244.194.106	102.47.146.67	102.50.249.7
102.53.13.88	102.65.36.197	102.65.85.36	102.66.232.196
103.101.228.65	103.107.183.100	103.107.78.211	103.11.106.201