194.230.148.136

Basic Info

City: St. Gallen

Region: Saint Gallen

Country: Switzerland

Internet Service Provider: Sunrise

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
194.230.148.216	attack	Nov1307:25:29server2dovecot:imap-login:Abortedlogin$authfailed\,1attemptsin3secs$:user=\\,method=PLAIN\,rip=194.230.148.216\,lip=81.17.25.230\,session=\Nov1307:25:35server2dovecot:imap-login:Abortedlogin$authfailed\,1attemptsin6secs$:user=\\,method=PLAIN\,rip=194.230.148.216\,lip=81.17.25.230\,session=\Nov1307:25:46server2dovecot:imap-login:Abortedlogin$authfailed\,1attemptsin6secs$:user=\\,method=PLAIN\,rip=194.230.148.216\,lip=81.17.25.230\,session=\Nov1307:25:48server2dovecot:imap-login:Abortedlogin$authfailed\,1attemptsin2secs$:user=\\,method=PLAIN\,rip=194.230.148.216\,lip=81.17.25.230\,session=\Nov1307:25:52server2dovecot:imap-login:Abortedlogin$authfailed\,1attemptsin2secs$:user=\\,method=PLAIN\,rip=194.230.148.216\,lip=81.17.25.230\,session=\Nov1307:25:56server2dovecot:imap-login:Abortedlogin$authfailed\,1attemptsin2secs$:user=	2019-11-13 17:33:06
194.230.148.37	attack	''	2019-07-30 07:56:04
194.230.148.129	attackspambots	Jul1613:52:05server4dovecot:imap-login:Disconnected$authfailed\,1attemptsin3secs$:user=\\,method=PLAIN\,rip=194.230.148.129\,lip=148.251.104.70\,TLS:Connectionclosed\,session=\Jul1613:52:18server4dovecot:imap-login:Disconnected$authfailed\,1attemptsin6secs$:user=\\,method=PLAIN\,rip=194.230.148.129\,lip=148.251.104.70\,TLS\,session=\Jul1613:55:04server4dovecot:imap-login:Disconnected:Inactivity$authfailed\,1attemptsin179secs$:user=\\,method=PLAIN\,rip=194.230.148.129\,lip=148.251.104.70\,TLS\,session=\<4bpqAcuNOW/C5pSB\>Jul1614:37:34server4dovecot:imap-login:Disconnected$authfailed\,1attemptsin59secs$:user=\\,method=PLAIN\,rip=194.230.148.129\,lip=148.251.104.70\,TLS:Connectionclosed\,session=\Jul1614:37:34server4dovecot:imap-login:Disconnected$authfailed\,1attemptsin59secs$:user=\\,method=PLAIN\,rip=194.230.148.129\,lip=148.251.1	2019-07-17 03:32:24
194.230.148.214	attackspam	Jun2605:49:05server4dovecot:imap-login:Abortedlogin$authfailed\,1attemptsin2secs$:user=\\,method=PLAIN\,rip=194.230.148.214\,lip=148.251.104.70\,TLS\,session=\<1Scl7TGMLl7C5pTW\>Jun2605:49:05server4dovecot:imap-login:Abortedlogin$authfailed\,1attemptsin2secs$:user=\\,method=PLAIN\,rip=194.230.148.214\,lip=148.251.104.70\,TLS\,session=\Jun2605:49:05server4dovecot:imap-login:Abortedlogin$authfailed\,1attemptsin2secs$:user=\\,method=PLAIN\,rip=194.230.148.214\,lip=148.251.104.70\,TLS\,session=\Jun2605:49:11server4dovecot:imap-login:Abortedlogin$authfailed\,1attemptsin6secs$:user=\\,method=PLAIN\,rip=194.230.148.214\,lip=148.251.104.70\,TLS\,session=\<6tRE7TGML17C5pTW\>Jun2605:49:11server4dovecot:imap-login:Abortedlogin$authfailed\,1attemptsin6secs$:user=\\,method=PLAIN\,rip=194.230.148.214\,lip=148.251.104.70\,TLS\,session=\<14pE7TGMMF7C5pTW\>Jun2605:49:11serve	2019-06-26 16:14:36

Whois info:

Dig info:

b'
; <<>> DiG 9.11.3-1ubuntu1.15-Ubuntu <<>> 194.230.148.136
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 16009
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 65494
;; QUESTION SECTION:
;194.230.148.136.		IN	A

;; Query time: 1 msec
;; SERVER: 127.0.0.53#53(127.0.0.53)
;; WHEN: Sat Jun 26 17:53:53 CST 2021
;; MSG SIZE  rcvd: 44

'

Host info

Host 136.148.230.194.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 136.148.230.194.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
139.129.58.9	attack	fail2ban honeypot	2019-09-26 05:35:54
197.52.176.174	attackspambots	Sep 25 22:59:41 dev sshd\[1021\]: Invalid user admin from 197.52.176.174 port 55451 Sep 25 22:59:41 dev sshd\[1021\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.52.176.174 Sep 25 22:59:43 dev sshd\[1021\]: Failed password for invalid user admin from 197.52.176.174 port 55451 ssh2	2019-09-26 05:19:13
62.234.95.55	attackspambots	Sep 25 16:55:10 TORMINT sshd\[21418\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.95.55 user=root Sep 25 16:55:11 TORMINT sshd\[21418\]: Failed password for root from 62.234.95.55 port 46520 ssh2 Sep 25 16:59:51 TORMINT sshd\[22107\]: Invalid user chrissie from 62.234.95.55 Sep 25 16:59:51 TORMINT sshd\[22107\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.95.55 ...	2019-09-26 05:15:11
178.77.90.220	attackbotsspam	Web App Attack	2019-09-26 05:26:23
106.13.99.245	attackbotsspam	2019-09-25T21:00:20.773792abusebot.cloudsearch.cf sshd\[16480\]: Invalid user crs from 106.13.99.245 port 43678	2019-09-26 05:10:11
124.159.186.69	attack	Sep 25 22:59:38 rpi sshd[6903]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.159.186.69 Sep 25 22:59:40 rpi sshd[6903]: Failed password for invalid user admin1234 from 124.159.186.69 port 12827 ssh2	2019-09-26 05:23:22
27.154.21.124	attack	Sep 25 17:41:09 shadeyouvpn sshd[26592]: Address 27.154.21.124 maps to 124.21.154.27.broad.xm.fj.dynamic.163data.com.cn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Sep 25 17:41:09 shadeyouvpn sshd[26592]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.154.21.124 user=r.r Sep 25 17:41:12 shadeyouvpn sshd[26592]: Failed password for r.r from 27.154.21.124 port 32412 ssh2 Sep 25 17:41:12 shadeyouvpn sshd[26592]: Received disconnect from 27.154.21.124: 11: Bye Bye [preauth] Sep 25 17:48:01 shadeyouvpn sshd[31860]: Address 27.154.21.124 maps to 124.21.154.27.broad.xm.fj.dynamic.163data.com.cn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Sep 25 17:48:01 shadeyouvpn sshd[31860]: Invalid user jocelyn from 27.154.21.124 Sep 25 17:48:01 shadeyouvpn sshd[31860]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.154.21.124 Sep 25 17:48:03 sha........ -------------------------------	2019-09-26 05:34:45
128.199.58.60	attackbots	fail2ban honeypot	2019-09-26 05:14:54
104.236.122.193	attack	Invalid user 1111 from 104.236.122.193 port 57588	2019-09-26 05:08:07
217.30.75.78	attack	Invalid user vpopmail from 217.30.75.78 port 56065	2019-09-26 05:06:00
91.121.142.225	attackspambots	$f2bV_matches	2019-09-26 05:32:45
113.80.86.2	attack	Sep 25 11:24:48 web1 sshd\[31353\]: Invalid user lu from 113.80.86.2 Sep 25 11:24:48 web1 sshd\[31353\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.80.86.2 Sep 25 11:24:50 web1 sshd\[31353\]: Failed password for invalid user lu from 113.80.86.2 port 36746 ssh2 Sep 25 11:27:20 web1 sshd\[31565\]: Invalid user kj from 113.80.86.2 Sep 25 11:27:20 web1 sshd\[31565\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.80.86.2	2019-09-26 05:29:37
175.197.74.237	attackspam	Sep 25 20:54:48 venus sshd\[17413\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.197.74.237 user=root Sep 25 20:54:50 venus sshd\[17413\]: Failed password for root from 175.197.74.237 port 34768 ssh2 Sep 25 20:59:39 venus sshd\[17464\]: Invalid user desire from 175.197.74.237 port 15938 Sep 25 20:59:39 venus sshd\[17464\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.197.74.237 ...	2019-09-26 05:26:55
59.23.190.100	attackspam	Sep 25 10:55:15 web1 sshd\[28851\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.23.190.100 user=root Sep 25 10:55:17 web1 sshd\[28851\]: Failed password for root from 59.23.190.100 port 28251 ssh2 Sep 25 10:59:47 web1 sshd\[29197\]: Invalid user administrator from 59.23.190.100 Sep 25 10:59:47 web1 sshd\[29197\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.23.190.100 Sep 25 10:59:49 web1 sshd\[29197\]: Failed password for invalid user administrator from 59.23.190.100 port 48086 ssh2	2019-09-26 05:16:18
222.186.175.161	attackspam	F2B jail: sshd. Time: 2019-09-25 23:36:01, Reported by: VKReport	2019-09-26 05:38:40

Recently Reported IPs

196.196.216.200	8.21.11.127	99.230.133.147	191.95.40.104
108.52.190.213	2404:160:8117:fa1d:1:2:b77e:9517	140.213.11.178	85.93.218.126
172.10.238.245	213.108.200.207	220.201.135.5	218.241.213.2
185.244.173.178	193.250.17.244	218.102.208.14	136.233.132.34
187.0.191.211	139.129.102.170	168.205.223.140	149.210.115.9