Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Taipei

Region: Taipei City

Country: Taiwan, China

Internet Service Provider: Chief Telecom Inc.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspambots
IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/150.116.48.2/ 
 
 TW - 1H : (167)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : TW 
 NAME ASN : ASN131627 
 
 IP : 150.116.48.2 
 
 CIDR : 150.116.48.0/22 
 
 PREFIX COUNT : 45 
 
 UNIQUE IP COUNT : 90624 
 
 
 ATTACKS DETECTED ASN131627 :  
  1H - 1 
  3H - 2 
  6H - 2 
 12H - 2 
 24H - 2 
 
 DateTime : 2019-11-16 15:47:34 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery
2019-11-17 04:02:15
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 150.116.48.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41371
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;150.116.48.2.			IN	A

;; AUTHORITY SECTION:
.			437	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019111601 1800 900 604800 86400

;; Query time: 95 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Nov 17 04:02:12 CST 2019
;; MSG SIZE  rcvd: 116
Host info
2.48.116.150.in-addr.arpa domain name pointer 2-48-116-150-static.chief.net.tw.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
2.48.116.150.in-addr.arpa	name = 2-48-116-150-static.chief.net.tw.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
113.161.227.129 attack
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-08-08 11:52:45,529 INFO [amun_request_handler] PortScan Detected on Port: 445 (113.161.227.129)
2019-08-09 03:52:42
180.253.174.200 attack
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-08-08 12:02:35,059 INFO [shellcode_manager] (180.253.174.200) no match, writing hexdump (39b0ed53981e5c3f947ac0cb720920f5 :12244) - SMB (Unknown)
2019-08-09 04:22:22
82.178.208.249 attackspambots
Aug  8 13:55:54 [munged] sshd[12003]: Invalid user admin from 82.178.208.249 port 35944
Aug  8 13:55:54 [munged] sshd[12003]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.178.208.249
2019-08-09 03:40:28
175.164.22.137 attack
Lines containing failures of 175.164.22.137
Aug  8 13:47:45 mailserver sshd[31950]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.164.22.137  user=r.r
Aug  8 13:47:46 mailserver sshd[31950]: Failed password for r.r from 175.164.22.137 port 50964 ssh2
Aug  8 13:47:50 mailserver sshd[31950]: Failed password for r.r from 175.164.22.137 port 50964 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=175.164.22.137
2019-08-09 03:29:49
78.83.113.161 attackbotsspam
Aug  8 19:29:20 yesfletchmain sshd\[15221\]: Invalid user cisco from 78.83.113.161 port 44760
Aug  8 19:29:20 yesfletchmain sshd\[15221\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.83.113.161
Aug  8 19:29:22 yesfletchmain sshd\[15221\]: Failed password for invalid user cisco from 78.83.113.161 port 44760 ssh2
Aug  8 19:33:39 yesfletchmain sshd\[15289\]: Invalid user spider from 78.83.113.161 port 38450
Aug  8 19:33:39 yesfletchmain sshd\[15289\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.83.113.161
...
2019-08-09 03:28:28
49.88.112.68 attackspam
Failed password for root from 49.88.112.68 port 55296 ssh2
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.68  user=root
Failed password for root from 49.88.112.68 port 34170 ssh2
Failed password for root from 49.88.112.68 port 34170 ssh2
Failed password for root from 49.88.112.68 port 34170 ssh2
2019-08-09 03:30:08
14.177.210.11 attackspam
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-08-08 12:12:29,046 INFO [shellcode_manager] (14.177.210.11) no match, writing hexdump (9e5b18e2fb77b556c4173e875f3d304f :1875012) - MS17010 (EternalBlue)
2019-08-09 04:11:28
112.85.42.172 attack
Aug  8 18:41:59 apollo sshd\[21175\]: Failed password for root from 112.85.42.172 port 40568 ssh2Aug  8 18:42:02 apollo sshd\[21175\]: Failed password for root from 112.85.42.172 port 40568 ssh2Aug  8 18:42:05 apollo sshd\[21175\]: Failed password for root from 112.85.42.172 port 40568 ssh2
...
2019-08-09 04:20:17
177.94.208.54 attackbots
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-08-08 11:49:00,995 INFO [amun_request_handler] PortScan Detected on Port: 445 (177.94.208.54)
2019-08-09 04:16:30
66.68.33.58 attackbots
/wp-login.php
2019-08-09 03:35:14
95.161.235.227 attackspambots
Unauthorised access (Aug  8) SRC=95.161.235.227 LEN=52 TTL=113 ID=25315 DF TCP DPT=445 WINDOW=8192 SYN
2019-08-09 03:50:51
103.88.76.66 attackbotsspam
2019-08-08 07:14:27 H=(logosexpress.it) [103.88.76.66]:48463 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.11, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBLCSS)
2019-08-08 07:14:28 H=(logosexpress.it) [103.88.76.66]:48463 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3, 127.0.0.11) (https://www.spamhaus.org/query/ip/103.88.76.66)
2019-08-08 07:14:28 H=(logosexpress.it) [103.88.76.66]:48463 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3, 127.0.0.11) (https://www.spamhaus.org/query/ip/103.88.76.66)
...
2019-08-09 04:06:09
68.183.195.198 attackbotsspam
Lines containing failures of 68.183.195.198
Aug  8 18:03:55 s390x sshd[30394]: Connection from 68.183.195.198 port 51422 on 10.42.2.18 port 22
Aug  8 18:03:59 s390x sshd[30394]: User r.r from 68.183.195.198 not allowed because not listed in AllowUsers
Aug  8 18:03:59 s390x sshd[30394]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.195.198  user=r.r
Aug  8 18:04:01 s390x sshd[30394]: Failed password for invalid user r.r from 68.183.195.198 port 51422 ssh2
Aug  8 18:04:02 s390x sshd[30394]: Connection closed by invalid user r.r 68.183.195.198 port 51422 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=68.183.195.198
2019-08-09 03:37:19
141.85.13.6 attackbotsspam
Automatic report - Banned IP Access
2019-08-09 03:28:44
163.172.192.210 attackspambots
\[2019-08-08 15:50:33\] SECURITY\[2326\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-08-08T15:50:33.502-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="9110011972592277524",SessionID="0x7ff4d0160998",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/163.172.192.210/53631",ACLName="no_extension_match"
\[2019-08-08 15:55:17\] SECURITY\[2326\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-08-08T15:55:17.444-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="9111011972592277524",SessionID="0x7ff4d0160998",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/163.172.192.210/54856",ACLName="no_extension_match"
\[2019-08-08 15:59:56\] SECURITY\[2326\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-08-08T15:59:56.770-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="9112011972592277524",SessionID="0x7ff4d0160998",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/163.172.192.210/6391
2019-08-09 04:04:48

Recently Reported IPs

202.138.254.74 153.37.64.206 167.60.2.51 14.100.227.31
202.82.49.172 77.237.2.225 168.3.66.139 188.69.159.80
84.109.191.147 87.255.110.217 188.238.131.132 68.212.177.250
112.5.124.100 117.39.199.254 2.70.88.43 103.132.30.191
139.193.109.139 27.60.83.255 129.150.152.68 77.105.216.184