193.148.70.253

Basic Info

City: unknown

Region: unknown

Country: Romania

Internet Service Provider: Parfumuri femei.com SRL

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbots	Jun 7 15:10:53 server sshd[15325]: Failed password for root from 193.148.70.253 port 54350 ssh2 Jun 7 15:18:02 server sshd[21065]: Failed password for root from 193.148.70.253 port 58348 ssh2 Jun 7 15:25:11 server sshd[27198]: Failed password for root from 193.148.70.253 port 34114 ssh2	2020-06-08 00:41:32
attackspam	SASL PLAIN auth failed: ruser=...	2020-06-05 06:23:10
attackbotsspam	Failed password for invalid user oasys from 193.148.70.253 port 54364 ssh2	2020-05-25 18:40:03
attackspambots	May 16 01:52:58 server sshd[65508]: Failed password for invalid user test3 from 193.148.70.253 port 47540 ssh2 May 16 02:00:39 server sshd[6134]: Failed password for invalid user ubuntu from 193.148.70.253 port 56458 ssh2 May 16 02:08:02 server sshd[11610]: Failed password for invalid user test from 193.148.70.253 port 37146 ssh2	2020-05-16 23:10:44
attack	2020-05-10T13:15:11.227999abusebot-3.cloudsearch.cf sshd[8590]: Invalid user nodejs from 193.148.70.253 port 47330 2020-05-10T13:15:11.234657abusebot-3.cloudsearch.cf sshd[8590]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.148.70.253 2020-05-10T13:15:11.227999abusebot-3.cloudsearch.cf sshd[8590]: Invalid user nodejs from 193.148.70.253 port 47330 2020-05-10T13:15:13.410849abusebot-3.cloudsearch.cf sshd[8590]: Failed password for invalid user nodejs from 193.148.70.253 port 47330 ssh2 2020-05-10T13:23:35.470892abusebot-3.cloudsearch.cf sshd[9012]: Invalid user wwwrun from 193.148.70.253 port 59522 2020-05-10T13:23:35.478410abusebot-3.cloudsearch.cf sshd[9012]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.148.70.253 2020-05-10T13:23:35.470892abusebot-3.cloudsearch.cf sshd[9012]: Invalid user wwwrun from 193.148.70.253 port 59522 2020-05-10T13:23:37.509346abusebot-3.cloudsearch.cf sshd[9012]: Fa ...	2020-05-10 22:26:33

Comments on same subnet:

IP	Type	Details	Datetime
193.148.70.150	attack	WebFormToEmail Comment SPAM	2020-10-10 06:40:50
193.148.70.150	attack	WebFormToEmail Comment SPAM	2020-10-09 22:53:25
193.148.70.150	attackspambots	1,39-12/04 [bc03/m08] PostRequest-Spammer scoring: brussels	2020-10-09 14:43:58
193.148.70.216	attackbotsspam	Invalid user git from 193.148.70.216 port 57624	2020-09-24 14:31:10
193.148.70.216	attackspam	Sep 23 20:31:50 mout sshd[15503]: Invalid user ftptest from 193.148.70.216 port 49772	2020-09-24 05:59:09
193.148.70.216	attack	leo_www	2020-09-10 19:52:23
193.148.70.216	attackbots	Sep 2 12:35:51 hell sshd[16948]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.148.70.216 Sep 2 12:35:53 hell sshd[16948]: Failed password for invalid user deploy from 193.148.70.216 port 37602 ssh2 ...	2020-09-02 22:35:15
193.148.70.216	attackbotsspam	$f2bV_matches	2020-09-02 14:23:38
193.148.70.216	attackspam	2020-09-01T16:39:21.987535shield sshd\[5079\]: Invalid user cisco from 193.148.70.216 port 44742 2020-09-01T16:39:21.996774shield sshd\[5079\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.148.70.216 2020-09-01T16:39:24.083717shield sshd\[5079\]: Failed password for invalid user cisco from 193.148.70.216 port 44742 ssh2 2020-09-01T16:46:23.582264shield sshd\[6259\]: Invalid user test from 193.148.70.216 port 50948 2020-09-01T16:46:23.592748shield sshd\[6259\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.148.70.216	2020-09-02 07:24:31
193.148.70.216	attack	Invalid user tian from 193.148.70.216 port 52814	2020-08-25 22:57:41
193.148.70.216	attackbots	Invalid user carol from 193.148.70.216 port 40206	2020-08-21 00:24:13
193.148.70.216	attackspam	Aug 15 06:02:55 ncomp sshd[30531]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.148.70.216 user=root Aug 15 06:02:57 ncomp sshd[30531]: Failed password for root from 193.148.70.216 port 34176 ssh2 Aug 15 06:11:34 ncomp sshd[30731]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.148.70.216 user=root Aug 15 06:11:36 ncomp sshd[30731]: Failed password for root from 193.148.70.216 port 50676 ssh2	2020-08-15 14:54:34
193.148.70.216	attackbotsspam	Banned for a week because repeated abuses, for example SSH, but not only	2020-08-12 14:50:45
193.148.70.216	attackbots	Aug 6 18:26:14 hidden sshd[28815]: Failed password for hidden from 193.148.70.216 port 33542 ssh2 Aug 6 18:34:20 hidden sshd[48231]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.148.70.216 user=root Aug 6 18:34:22 hidden sshd[48231]: Failed password for hidden from 193.148.70.216 port 45248 ssh2 Aug 6 18:42:13 hidden sshd[2419]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.148.70.216 user=root Aug 6 18:42:14 hidden sshd[2419]: Failed password for hidden from 193.148.70.216 port 56948 ssh2	2020-08-07 02:28:02
193.148.70.216	attackspambots	B: Abusive ssh attack	2020-08-06 02:39:14

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 193.148.70.253
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47054
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;193.148.70.253.			IN	A

;; AUTHORITY SECTION:
.			211	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020050901 1800 900 604800 86400

;; Query time: 69 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun May 10 02:20:37 CST 2020
;; MSG SIZE  rcvd: 118

Host info

Host 253.70.148.193.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 253.70.148.193.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
37.49.230.128	attack	Mailserver and mailaccount attacks	2020-08-12 18:12:06
86.105.217.13	attack	Aug 12 08:31:23 vpn01 sshd[24315]: Failed password for root from 86.105.217.13 port 46516 ssh2 ...	2020-08-12 17:03:12
209.99.134.82	attack	Unauthorized access detected from black listed ip!	2020-08-12 17:37:20
145.239.252.226	attackspam	Aug 12 08:57:41 abendstille sshd\[4301\]: Invalid user admin from 145.239.252.226 Aug 12 08:57:41 abendstille sshd\[4301\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.239.252.226 Aug 12 08:57:42 abendstille sshd\[4301\]: Failed password for invalid user admin from 145.239.252.226 port 46034 ssh2 Aug 12 08:57:43 abendstille sshd\[4367\]: Invalid user admin from 145.239.252.226 Aug 12 08:57:44 abendstille sshd\[4367\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.239.252.226 ...	2020-08-12 18:01:22
65.49.20.84	attackbots	1597204083 - 08/12/2020 05:48:03 Host: 65.49.20.84/65.49.20.84 Port: 22 TCP Blocked ...	2020-08-12 18:10:23
202.102.90.21	attackbotsspam	(sshd) Failed SSH login from 202.102.90.21 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Aug 12 12:00:34 amsweb01 sshd[23177]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.102.90.21 user=root Aug 12 12:00:36 amsweb01 sshd[23177]: Failed password for root from 202.102.90.21 port 60822 ssh2 Aug 12 12:04:06 amsweb01 sshd[23671]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.102.90.21 user=root Aug 12 12:04:07 amsweb01 sshd[23671]: Failed password for root from 202.102.90.21 port 32306 ssh2 Aug 12 12:06:55 amsweb01 sshd[24168]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.102.90.21 user=root	2020-08-12 18:10:49
218.75.72.82	attack	Aug 12 02:52:03 mail sshd\[706\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.75.72.82 user=root ...	2020-08-12 18:02:23
54.37.205.241	attackbotsspam	Aug 12 06:51:43 server sshd[21292]: Failed password for root from 54.37.205.241 port 40216 ssh2 Aug 12 06:55:47 server sshd[26824]: Failed password for root from 54.37.205.241 port 49820 ssh2 Aug 12 06:59:52 server sshd[2476]: Failed password for root from 54.37.205.241 port 59426 ssh2	2020-08-12 17:14:30
145.239.78.143	attack	145.239.78.143 has been banned for [WebApp Attack] ...	2020-08-12 18:34:44
198.23.236.153	attackbotsspam	TCP (SYN) 198.23.236.153:58165 -> port 22, len 44	2020-08-12 18:35:37
61.177.172.54	attackbotsspam	Aug 12 20:05:25 localhost sshd[1325535]: Unable to negotiate with 61.177.172.54 port 48118: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth] ...	2020-08-12 18:39:56
51.255.28.53	attackspambots	SSH authentication failure x 6 reported by Fail2Ban ...	2020-08-12 17:12:23
154.70.208.66	attackbots	Aug 12 08:01:10 journals sshd\[34671\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.70.208.66 user=root Aug 12 08:01:13 journals sshd\[34671\]: Failed password for root from 154.70.208.66 port 37244 ssh2 Aug 12 08:05:27 journals sshd\[35001\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.70.208.66 user=root Aug 12 08:05:29 journals sshd\[35001\]: Failed password for root from 154.70.208.66 port 40980 ssh2 Aug 12 08:09:52 journals sshd\[35390\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.70.208.66 user=root ...	2020-08-12 17:12:48
49.233.63.234	attackspam	Port Scan/VNC login attempt ...	2020-08-12 18:04:19
106.124.140.36	attack	Aug 12 12:03:21 webhost01 sshd[13753]: Failed password for root from 106.124.140.36 port 43081 ssh2 ...	2020-08-12 18:39:22

Recently Reported IPs

164.51.234.75	227.19.54.182	94.197.253.69	123.21.7.126
233.247.41.27	175.132.232.242	113.250.251.52	130.94.225.162
234.153.241.207	210.72.220.236	153.156.144.223	123.228.132.227
92.175.167.226	20.13.48.191	16.81.34.145	147.78.13.30
245.2.192.66	164.56.198.49	124.142.8.93	124.128.196.59