Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Germany

Internet Service Provider: combahton GmbH

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspam
-
2020-05-21 04:43:47
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 152.89.245.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58466
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;152.89.245.138.			IN	A

;; AUTHORITY SECTION:
.			278	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020052001 1800 900 604800 86400

;; Query time: 135 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu May 21 04:43:43 CST 2020
;; MSG SIZE  rcvd: 118
Host info
138.245.89.152.in-addr.arpa domain name pointer hosted-by-obhost.net.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
138.245.89.152.in-addr.arpa	name = hosted-by-obhost.net.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
41.136.248.154 attackspam
2019-07-05 09:15:39 unexpected disconnection while reading SMTP command from ([41.136.248.154]) [41.136.248.154]:58491 I=[10.100.18.22]:25 (error: Connection reset by peer)
2019-07-05 09:59:07 H=([41.136.248.154]) [41.136.248.154]:63367 I=[10.100.18.22]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=41.136.248.154)
2019-07-05 09:59:08 unexpected disconnection while reading SMTP command from ([41.136.248.154]) [41.136.248.154]:63367 I=[10.100.18.22]:25 (error: Connection reset by peer)


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=41.136.248.154
2019-07-05 16:46:20
177.84.244.96 attackspam
$f2bV_matches
2019-07-05 16:18:32
178.62.214.113 attack
Trying to deliver email spam, but blocked by RBL
2019-07-05 17:10:25
85.149.41.132 attackspam
2019-07-05T08:04:03.402627hub.schaetter.us sshd\[4868\]: Invalid user murai2 from 85.149.41.132
2019-07-05T08:04:03.498880hub.schaetter.us sshd\[4868\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=s55952984.adsl.online.nl
2019-07-05T08:04:05.204418hub.schaetter.us sshd\[4868\]: Failed password for invalid user murai2 from 85.149.41.132 port 42450 ssh2
2019-07-05T08:04:27.912685hub.schaetter.us sshd\[4870\]: Invalid user titan from 85.149.41.132
2019-07-05T08:04:27.947934hub.schaetter.us sshd\[4870\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=s55952984.adsl.online.nl
...
2019-07-05 17:03:57
85.209.0.11 attackbotsspam
Port scan on 6 port(s): 12817 26912 41530 48918 53201 57412
2019-07-05 16:56:21
125.20.0.62 attackspambots
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-05 07:36:02,072 INFO [amun_request_handler] PortScan Detected on Port: 445 (125.20.0.62)
2019-07-05 16:26:41
185.173.35.33 attackbots
MultiHost/MultiPort Probe, Scan, Hack -
2019-07-05 16:27:37
14.166.74.35 attackspambots
2019-07-05 09:27:23 H=(static.vnpt.vn) [14.166.74.35]:29169 I=[10.100.18.23]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=14.166.74.35)
2019-07-05 09:27:24 unexpected disconnection while reading SMTP command from (static.vnpt.vn) [14.166.74.35]:29169 I=[10.100.18.23]:25 (error: Connection reset by peer)
2019-07-05 10:00:07 H=(static.vnpt.vn) [14.166.74.35]:35448 I=[10.100.18.23]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=14.166.74.35)


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=14.166.74.35
2019-07-05 17:08:01
219.91.66.9 attack
Jul  5 10:29:31 localhost sshd\[26362\]: Invalid user simple from 219.91.66.9
Jul  5 10:29:31 localhost sshd\[26362\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.91.66.9
Jul  5 10:29:33 localhost sshd\[26362\]: Failed password for invalid user simple from 219.91.66.9 port 55310 ssh2
Jul  5 10:32:17 localhost sshd\[26791\]: Invalid user radius from 219.91.66.9
Jul  5 10:32:17 localhost sshd\[26791\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.91.66.9
...
2019-07-05 16:54:11
157.230.30.23 attackbotsspam
Jul  5 10:01:36 tux-35-217 sshd\[5109\]: Invalid user left4dead2 from 157.230.30.23 port 47322
Jul  5 10:01:36 tux-35-217 sshd\[5109\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.30.23
Jul  5 10:01:38 tux-35-217 sshd\[5109\]: Failed password for invalid user left4dead2 from 157.230.30.23 port 47322 ssh2
Jul  5 10:04:46 tux-35-217 sshd\[5120\]: Invalid user dale from 157.230.30.23 port 44536
Jul  5 10:04:46 tux-35-217 sshd\[5120\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.30.23
...
2019-07-05 16:51:03
141.144.120.163 attack
2019-07-05T15:05:00.308017enmeeting.mahidol.ac.th sshd\[30580\]: Invalid user test from 141.144.120.163 port 34762
2019-07-05T15:05:00.322484enmeeting.mahidol.ac.th sshd\[30580\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=oc-141-144-120-163.compute.oraclecloud.com
2019-07-05T15:05:02.514684enmeeting.mahidol.ac.th sshd\[30580\]: Failed password for invalid user test from 141.144.120.163 port 34762 ssh2
...
2019-07-05 16:41:18
117.252.66.44 attackspambots
Jul  5 11:04:21 srv-4 sshd\[20779\]: Invalid user admin from 117.252.66.44
Jul  5 11:04:21 srv-4 sshd\[20779\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.252.66.44
Jul  5 11:04:23 srv-4 sshd\[20779\]: Failed password for invalid user admin from 117.252.66.44 port 38325 ssh2
...
2019-07-05 17:05:38
112.85.42.187 attackbotsspam
Jul  5 10:04:54 ArkNodeAT sshd\[17644\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.187  user=root
Jul  5 10:04:57 ArkNodeAT sshd\[17644\]: Failed password for root from 112.85.42.187 port 41536 ssh2
Jul  5 10:04:59 ArkNodeAT sshd\[17644\]: Failed password for root from 112.85.42.187 port 41536 ssh2
2019-07-05 16:42:19
216.213.26.177 attackbots
Looking for resource vulnerabilities
2019-07-05 17:08:35
113.160.99.90 attack
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-05 07:33:13,032 INFO [amun_request_handler] PortScan Detected on Port: 445 (113.160.99.90)
2019-07-05 17:10:57

Recently Reported IPs

215.160.153.126 152.19.28.153 14.158.93.126 37.38.179.245
55.94.135.160 93.255.200.129 159.212.32.13 196.143.92.224
255.4.115.142 77.62.69.66 112.157.171.82 184.25.20.60
190.16.26.171 153.211.169.101 149.194.244.55 84.150.202.197
229.37.148.88 114.46.178.156 30.71.67.117 24.194.0.37