Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Latvia

Internet Service Provider: SIA Latnet

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackbots
SSH Brute Force, server-1 sshd[2755]: Failed password for invalid user cdb from 159.148.4.237 port 42582 ssh2
2019-09-03 13:18:30
attackspambots
Aug 31 08:26:11 vps200512 sshd\[21031\]: Invalid user test1 from 159.148.4.237
Aug 31 08:26:11 vps200512 sshd\[21031\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.148.4.237
Aug 31 08:26:13 vps200512 sshd\[21031\]: Failed password for invalid user test1 from 159.148.4.237 port 54952 ssh2
Aug 31 08:30:18 vps200512 sshd\[21162\]: Invalid user b from 159.148.4.237
Aug 31 08:30:18 vps200512 sshd\[21162\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.148.4.237
2019-08-31 20:31:00
attackbots
Invalid user tu from 159.148.4.237 port 35748
2019-08-31 14:36:59
attackspambots
Aug 27 12:58:45 eventyay sshd[27928]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.148.4.237
Aug 27 12:58:47 eventyay sshd[27928]: Failed password for invalid user aronne from 159.148.4.237 port 34622 ssh2
Aug 27 13:03:12 eventyay sshd[28052]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.148.4.237
...
2019-08-27 19:03:42
attackspam
Aug 26 03:17:27 www4 sshd\[54330\]: Invalid user ambilogger from 159.148.4.237
Aug 26 03:17:27 www4 sshd\[54330\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.148.4.237
Aug 26 03:17:29 www4 sshd\[54330\]: Failed password for invalid user ambilogger from 159.148.4.237 port 35210 ssh2
...
2019-08-26 08:46:25
Comments on same subnet:
IP Type Details Datetime
159.148.4.228 attackbotsspam
2019-09-04T06:29:17.119433abusebot-3.cloudsearch.cf sshd\[10702\]: Invalid user mcguitaruser from 159.148.4.228 port 35224
2019-09-04 14:46:48
159.148.4.227 attack
Sep  4 01:49:30 meumeu sshd[26982]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.148.4.227 
Sep  4 01:49:32 meumeu sshd[26982]: Failed password for invalid user admin from 159.148.4.227 port 38546 ssh2
Sep  4 01:53:40 meumeu sshd[27590]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.148.4.227 
...
2019-09-04 08:19:25
159.148.4.236 attack
Sep  3 11:54:22 kapalua sshd\[24268\]: Invalid user hr from 159.148.4.236
Sep  3 11:54:22 kapalua sshd\[24268\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.148.4.236
Sep  3 11:54:24 kapalua sshd\[24268\]: Failed password for invalid user hr from 159.148.4.236 port 60346 ssh2
Sep  3 11:59:31 kapalua sshd\[24743\]: Invalid user peter from 159.148.4.236
Sep  3 11:59:31 kapalua sshd\[24743\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.148.4.236
2019-09-04 06:14:20
159.148.4.228 attack
Sep  3 02:05:39 hcbb sshd\[6967\]: Invalid user linda from 159.148.4.228
Sep  3 02:05:39 hcbb sshd\[6967\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.148.4.228
Sep  3 02:05:41 hcbb sshd\[6967\]: Failed password for invalid user linda from 159.148.4.228 port 47992 ssh2
Sep  3 02:09:39 hcbb sshd\[7405\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.148.4.228  user=root
Sep  3 02:09:40 hcbb sshd\[7405\]: Failed password for root from 159.148.4.228 port 52244 ssh2
2019-09-03 21:15:45
159.148.4.235 attack
Sep  3 05:22:51 saschabauer sshd[4659]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.148.4.235
Sep  3 05:22:53 saschabauer sshd[4659]: Failed password for invalid user oracle from 159.148.4.235 port 57708 ssh2
2019-09-03 12:18:14
159.148.4.235 attackspam
Sep  2 19:51:57 ip-172-31-1-72 sshd\[19466\]: Invalid user public from 159.148.4.235
Sep  2 19:51:57 ip-172-31-1-72 sshd\[19466\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.148.4.235
Sep  2 19:51:58 ip-172-31-1-72 sshd\[19466\]: Failed password for invalid user public from 159.148.4.235 port 51306 ssh2
Sep  2 19:55:49 ip-172-31-1-72 sshd\[19545\]: Invalid user kp from 159.148.4.235
Sep  2 19:55:49 ip-172-31-1-72 sshd\[19545\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.148.4.235
2019-09-03 03:58:41
159.148.4.235 attackbots
Sep  1 01:51:19 sachi sshd\[10855\]: Invalid user stella from 159.148.4.235
Sep  1 01:51:19 sachi sshd\[10855\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.148.4.235
Sep  1 01:51:20 sachi sshd\[10855\]: Failed password for invalid user stella from 159.148.4.235 port 43534 ssh2
Sep  1 01:55:15 sachi sshd\[11203\]: Invalid user dulce from 159.148.4.235
Sep  1 01:55:15 sachi sshd\[11203\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.148.4.235
2019-09-01 20:00:58
159.148.4.235 attack
Aug 31 12:26:58 web8 sshd\[3736\]: Invalid user oz from 159.148.4.235
Aug 31 12:26:58 web8 sshd\[3736\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.148.4.235
Aug 31 12:27:00 web8 sshd\[3736\]: Failed password for invalid user oz from 159.148.4.235 port 50702 ssh2
Aug 31 12:31:18 web8 sshd\[5793\]: Invalid user kapil from 159.148.4.235
Aug 31 12:31:18 web8 sshd\[5793\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.148.4.235
2019-08-31 20:34:06
159.148.4.235 attack
Aug 31 07:50:45 marvibiene sshd[49829]: Invalid user tempo from 159.148.4.235 port 49600
Aug 31 07:50:45 marvibiene sshd[49829]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.148.4.235
Aug 31 07:50:45 marvibiene sshd[49829]: Invalid user tempo from 159.148.4.235 port 49600
Aug 31 07:50:47 marvibiene sshd[49829]: Failed password for invalid user tempo from 159.148.4.235 port 49600 ssh2
...
2019-08-31 17:25:59
159.148.4.236 attackspambots
Aug 29 15:29:17 ubuntu-2gb-nbg1-dc3-1 sshd[18142]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.148.4.236
Aug 29 15:29:19 ubuntu-2gb-nbg1-dc3-1 sshd[18142]: Failed password for invalid user admin123 from 159.148.4.236 port 55274 ssh2
...
2019-08-29 21:42:48
159.148.4.235 attackspam
Invalid user hadoop from 159.148.4.235 port 45862
2019-08-29 15:11:38
159.148.4.236 attackbotsspam
Aug 28 15:31:12 tdfoods sshd\[30813\]: Invalid user elvira from 159.148.4.236
Aug 28 15:31:12 tdfoods sshd\[30813\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.148.4.236
Aug 28 15:31:15 tdfoods sshd\[30813\]: Failed password for invalid user elvira from 159.148.4.236 port 53184 ssh2
Aug 28 15:35:29 tdfoods sshd\[31233\]: Invalid user bobinas from 159.148.4.236
Aug 28 15:35:29 tdfoods sshd\[31233\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.148.4.236
2019-08-29 09:46:51
159.148.4.236 attack
Aug 26 19:22:32 ns315508 sshd[32596]: Invalid user sowmya from 159.148.4.236 port 57566
Aug 26 19:22:32 ns315508 sshd[32596]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.148.4.236
Aug 26 19:22:32 ns315508 sshd[32596]: Invalid user sowmya from 159.148.4.236 port 57566
Aug 26 19:22:34 ns315508 sshd[32596]: Failed password for invalid user sowmya from 159.148.4.236 port 57566 ssh2
Aug 26 19:26:55 ns315508 sshd[32678]: Invalid user qhsupport from 159.148.4.236 port 47858
...
2019-08-27 03:29:39
159.148.4.236 attackbotsspam
Aug 26 10:19:57 MK-Soft-VM3 sshd\[25934\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.148.4.236  user=root
Aug 26 10:19:59 MK-Soft-VM3 sshd\[25934\]: Failed password for root from 159.148.4.236 port 48894 ssh2
Aug 26 10:24:02 MK-Soft-VM3 sshd\[26140\]: Invalid user daniele from 159.148.4.236 port 38456
...
2019-08-26 18:53:16
159.148.4.228 attackspambots
Aug 25 20:16:31 mail-host sshd[59073]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.148.4.228  user=r.r
Aug 25 20:16:33 mail-host sshd[59073]: Failed password for r.r from 159.148.4.228 port 55432 ssh2
Aug 25 20:16:33 mail-host sshd[59074]: Received disconnect from 159.148.4.228: 11: Bye Bye
Aug 25 20:33:54 mail-host sshd[62179]: Invalid user tuo from 159.148.4.228
Aug 25 20:33:54 mail-host sshd[62179]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.148.4.228 
Aug 25 20:33:56 mail-host sshd[62179]: Failed password for invalid user tuo from 159.148.4.228 port 43648 ssh2
Aug 25 20:33:56 mail-host sshd[62181]: Received disconnect from 159.148.4.228: 11: Bye Bye
Aug 25 20:38:08 mail-host sshd[63079]: Invalid user cunningham from 159.148.4.228
Aug 25 20:38:08 mail-host sshd[63079]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.148.4.228 
A........
-------------------------------
2019-08-26 10:28:10
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 159.148.4.237
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60338
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;159.148.4.237.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019082501 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Aug 26 08:46:20 CST 2019
;; MSG SIZE  rcvd: 117
Host info
Host 237.4.148.159.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 237.4.148.159.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
5.39.93.158 attackspambots
Mar  4 22:54:33 * sshd[30553]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.39.93.158
Mar  4 22:54:34 * sshd[30553]: Failed password for invalid user ellen from 5.39.93.158 port 40452 ssh2
2020-03-05 06:06:48
41.32.153.102 attackspambots
trying to access non-authorized port
2020-03-05 06:12:10
106.12.160.220 attackbots
Mar  4 22:54:15 ns381471 sshd[26741]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.160.220
Mar  4 22:54:16 ns381471 sshd[26741]: Failed password for invalid user cvsadmin from 106.12.160.220 port 50035 ssh2
2020-03-05 06:16:55
222.186.3.249 attackspambots
2020-03-04T23:14:27.311280scmdmz1 sshd[27764]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.3.249  user=root
2020-03-04T23:14:29.315096scmdmz1 sshd[27764]: Failed password for root from 222.186.3.249 port 59954 ssh2
2020-03-04T23:14:31.482425scmdmz1 sshd[27764]: Failed password for root from 222.186.3.249 port 59954 ssh2
...
2020-03-05 06:23:07
138.68.92.121 attackbots
Mar  4 22:54:28 ns41 sshd[21261]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.92.121
Mar  4 22:54:28 ns41 sshd[21261]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.92.121
2020-03-05 06:08:30
92.63.194.59 attack
2020-03-04T23:07:24.349908  sshd[13203]: Invalid user admin from 92.63.194.59 port 46863
2020-03-04T23:07:24.364788  sshd[13203]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.63.194.59
2020-03-04T23:07:24.349908  sshd[13203]: Invalid user admin from 92.63.194.59 port 46863
2020-03-04T23:07:26.634639  sshd[13203]: Failed password for invalid user admin from 92.63.194.59 port 46863 ssh2
...
2020-03-05 06:24:56
54.38.241.162 attack
Mar  4 22:51:03 lnxmysql61 sshd[16660]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.241.162
Mar  4 22:51:05 lnxmysql61 sshd[16660]: Failed password for invalid user postgres from 54.38.241.162 port 54072 ssh2
Mar  4 22:54:14 lnxmysql61 sshd[16772]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.241.162
2020-03-05 06:18:44
162.241.65.175 attackbotsspam
Mar  4 11:46:13 web1 sshd\[2258\]: Invalid user rr from 162.241.65.175
Mar  4 11:46:13 web1 sshd\[2258\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.241.65.175
Mar  4 11:46:15 web1 sshd\[2258\]: Failed password for invalid user rr from 162.241.65.175 port 36588 ssh2
Mar  4 11:54:19 web1 sshd\[3012\]: Invalid user centos from 162.241.65.175
Mar  4 11:54:19 web1 sshd\[3012\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.241.65.175
2020-03-05 06:14:56
222.186.175.151 attackspambots
Mar  4 23:27:26 SilenceServices sshd[31132]: Failed password for root from 222.186.175.151 port 63906 ssh2
Mar  4 23:27:38 SilenceServices sshd[31132]: error: maximum authentication attempts exceeded for root from 222.186.175.151 port 63906 ssh2 [preauth]
Mar  4 23:27:44 SilenceServices sshd[1217]: Failed password for root from 222.186.175.151 port 55510 ssh2
2020-03-05 06:34:59
40.124.4.131 attack
$f2bV_matches
2020-03-05 06:33:45
167.114.216.127 attackbotsspam
Mar  4 22:54:06 debian-2gb-nbg1-2 kernel: \[5618018.553720\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=167.114.216.127 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=64476 PROTO=TCP SPT=58627 DPT=3389 WINDOW=1024 RES=0x00 SYN URGP=0
2020-03-05 06:24:08
192.241.210.178 attackspambots
Trying ports that it shouldn't be.
2020-03-05 06:03:49
35.227.35.222 attackspambots
$f2bV_matches
2020-03-05 06:12:47
218.92.0.175 attackspam
Mar  4 22:57:50 nextcloud sshd\[2418\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.175  user=root
Mar  4 22:57:53 nextcloud sshd\[2418\]: Failed password for root from 218.92.0.175 port 6663 ssh2
Mar  4 22:57:56 nextcloud sshd\[2418\]: Failed password for root from 218.92.0.175 port 6663 ssh2
2020-03-05 06:02:15
103.218.242.10 attackbots
Mar  4 11:46:05 web1 sshd\[2234\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.218.242.10  user=gnats
Mar  4 11:46:08 web1 sshd\[2234\]: Failed password for gnats from 103.218.242.10 port 54770 ssh2
Mar  4 11:54:39 web1 sshd\[3036\]: Invalid user julien from 103.218.242.10
Mar  4 11:54:39 web1 sshd\[3036\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.218.242.10
Mar  4 11:54:41 web1 sshd\[3036\]: Failed password for invalid user julien from 103.218.242.10 port 37244 ssh2
2020-03-05 05:59:47

Recently Reported IPs

122.176.57.51 221.65.224.149 4.55.88.243 221.93.11.170
217.47.253.93 195.202.166.17 199.1.9.143 219.196.77.194
6.187.129.146 116.220.118.34 198.122.237.119 228.155.242.16
213.17.177.225 254.92.245.159 208.61.246.185 243.164.201.72
205.90.164.56 198.221.110.71 225.15.131.183 159.65.219.48