178.0.248.48 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Germany

Internet Service Provider: Vodafone GmbH

Hostname: unknown

Organization: unknown

Usage Type: Mobile ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbots	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/178.0.248.48/ DE - 1H : (37) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : DE NAME ASN : ASN3209 IP : 178.0.248.48 CIDR : 178.0.0.0/13 PREFIX COUNT : 165 UNIQUE IP COUNT : 8314624 ATTACKS DETECTED ASN3209 : 1H - 3 3H - 3 6H - 3 12H - 3 24H - 4 DateTime : 2019-11-23 07:20:51 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery	2019-11-23 20:33:00

Type

Details

Datetime

attackbots

IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/178.0.248.48/ 
 
 DE - 1H : (37)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : DE 
 NAME ASN : ASN3209 
 
 IP : 178.0.248.48 
 
 CIDR : 178.0.0.0/13 
 
 PREFIX COUNT : 165 
 
 UNIQUE IP COUNT : 8314624 
 
 
 ATTACKS DETECTED ASN3209 :  
  1H - 3 
  3H - 3 
  6H - 3 
 12H - 3 
 24H - 4 
 
 DateTime : 2019-11-23 07:20:51 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery

2019-11-23 20:33:00

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 178.0.248.48
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14076
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;178.0.248.48.			IN	A

;; AUTHORITY SECTION:
.			511	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019112300 1800 900 604800 86400

;; Query time: 46 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Nov 23 20:32:57 CST 2019
;; MSG SIZE  rcvd: 116

Host info

48.248.0.178.in-addr.arpa domain name pointer dslb-178-000-248-048.178.000.pools.vodafone-ip.de.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
48.248.0.178.in-addr.arpa	name = dslb-178-000-248-048.178.000.pools.vodafone-ip.de.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
83.115.93.77	attackspam	Automatic report - Web App Attack	2019-11-01 18:48:53
5.79.131.32	attackspam	Automatic report - Port Scan	2019-11-01 18:27:22
112.33.253.60	attack	SSH Brute Force, server-1 sshd[17675]: Failed password for invalid user iii from 112.33.253.60 port 42904 ssh2	2019-11-01 18:16:30
132.247.172.26	attack	Nov 1 06:19:01 sauna sshd[149873]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.247.172.26 Nov 1 06:19:02 sauna sshd[149873]: Failed password for invalid user shmymshdx from 132.247.172.26 port 55462 ssh2 ...	2019-11-01 18:11:42
185.176.27.14	attackspambots	ET DROP Dshield Block Listed Source group 1 - port: 3799 proto: TCP cat: Misc Attack	2019-11-01 18:21:38
36.237.4.240	attackspam	Honeypot attack, port: 23, PTR: 36-237-4-240.dynamic-ip.hinet.net.	2019-11-01 18:17:41
58.150.46.6	attack	Invalid user in from 58.150.46.6 port 49914	2019-11-01 18:36:01
81.171.85.138	attackspam	\[2019-11-01 06:22:02\] NOTICE\[2601\] chan_sip.c: Registration from '\' failed for '81.171.85.138:51689' - Wrong password \[2019-11-01 06:22:02\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-01T06:22:02.209-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="291",SessionID="0x7fdf2c003608",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/81.171.85.138/51689",Challenge="30fe8058",ReceivedChallenge="30fe8058",ReceivedHash="60e6ea38f5f89aa05a6b5e5590e46f64" \[2019-11-01 06:22:54\] NOTICE\[2601\] chan_sip.c: Registration from '\' failed for '81.171.85.138:61423' - Wrong password \[2019-11-01 06:22:54\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-01T06:22:54.543-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="740",SessionID="0x7fdf2cda50b8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/81.171.85.138	2019-11-01 18:35:32
124.74.154.66	attackbots	SSH Brute Force	2019-11-01 18:43:07
139.59.3.151	attackbots	Nov 1 11:24:35 tuxlinux sshd[34981]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.3.151 user=root Nov 1 11:24:37 tuxlinux sshd[34981]: Failed password for root from 139.59.3.151 port 40874 ssh2 Nov 1 11:24:35 tuxlinux sshd[34981]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.3.151 user=root Nov 1 11:24:37 tuxlinux sshd[34981]: Failed password for root from 139.59.3.151 port 40874 ssh2 Nov 1 11:33:42 tuxlinux sshd[35100]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.3.151 user=root ...	2019-11-01 18:36:42
182.252.0.188	attackbotsspam	no	2019-11-01 18:25:54
203.129.226.99	attack	Nov 1 06:53:16 venus sshd\[26360\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.129.226.99 user=root Nov 1 06:53:18 venus sshd\[26360\]: Failed password for root from 203.129.226.99 port 23622 ssh2 Nov 1 06:58:02 venus sshd\[26386\]: Invalid user 123 from 203.129.226.99 port 58809 Nov 1 06:58:02 venus sshd\[26386\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.129.226.99 ...	2019-11-01 18:10:10
81.4.111.189	attackbotsspam	Invalid user peuser from 81.4.111.189 port 52658	2019-11-01 18:12:57
128.0.130.116	attackbots	Nov 1 09:16:05 host sshd[34789]: Invalid user csgoserver from 128.0.130.116 port 50028 ...	2019-11-01 18:18:48
185.216.32.170	attackspam	[portscan] tcp/5938 [tcp/5938] [portscan] tcp/81 [alter-web/web-proxy] [portscan] tcp/993 [imaps] [scan/connect: 3 time(s)] in stopforumspam:'listed [392 times]' in spfbl.net:'listed' *(RWIN=65535)(11011243)	2019-11-01 18:40:41

Recently Reported IPs

184.92.171.146	245.4.239.219	212.16.209.135	121.142.242.54
24.8.47.12	62.168.126.239	198.244.26.9	215.130.28.143
158.58.170.97	79.160.39.170	9.18.115.79	236.149.255.111
133.17.169.177	126.239.105.2	247.20.243.109	201.126.3.88
70.110.13.96	212.102.45.91	187.111.220.28	114.97.219.117