Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Portugal

Internet Service Provider: PT Comunicacoes S.A.

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:
Type Details Datetime
attackspam
Jul 24 20:11:00 debian64 sshd\[9880\]: Invalid user pi from 2.82.41.148 port 39128
Jul 24 20:11:00 debian64 sshd\[9880\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.82.41.148
Jul 24 20:11:00 debian64 sshd\[9882\]: Invalid user pi from 2.82.41.148 port 39138
...
2019-07-25 06:20:10
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 2.82.41.148
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19581
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;2.82.41.148.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019072401 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Jul 25 06:20:03 CST 2019
;; MSG SIZE  rcvd: 115
Host info
148.41.82.2.in-addr.arpa domain name pointer bl21-41-148.dsl.telepac.pt.
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
148.41.82.2.in-addr.arpa	name = bl21-41-148.dsl.telepac.pt.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
194.0.252.57 attackbots
SSH-BruteForce
2020-03-17 09:18:03
178.88.164.31 attack
SSH Brute Force
2020-03-17 09:34:56
1.245.61.144 attack
SSH / Telnet Brute Force Attempts on Honeypot
2020-03-17 09:14:20
36.67.111.27 attackbotsspam
Tried sshing with brute force.
2020-03-17 09:37:56
203.195.235.135 attack
Mar 17 00:35:51 srv-ubuntu-dev3 sshd[29836]: Invalid user ts3server from 203.195.235.135
Mar 17 00:35:51 srv-ubuntu-dev3 sshd[29836]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.195.235.135
Mar 17 00:35:51 srv-ubuntu-dev3 sshd[29836]: Invalid user ts3server from 203.195.235.135
Mar 17 00:35:54 srv-ubuntu-dev3 sshd[29836]: Failed password for invalid user ts3server from 203.195.235.135 port 49476 ssh2
Mar 17 00:36:33 srv-ubuntu-dev3 sshd[30031]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.195.235.135  user=root
Mar 17 00:36:36 srv-ubuntu-dev3 sshd[30031]: Failed password for root from 203.195.235.135 port 58138 ssh2
Mar 17 00:37:17 srv-ubuntu-dev3 sshd[30143]: Invalid user seesbot from 203.195.235.135
Mar 17 00:37:17 srv-ubuntu-dev3 sshd[30143]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.195.235.135
Mar 17 00:37:17 srv-ubuntu-dev3 sshd[30143]: 
...
2020-03-17 09:09:55
54.38.177.98 attackbots
Mar 17 01:58:12 vps647732 sshd[17335]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.177.98
Mar 17 01:58:14 vps647732 sshd[17335]: Failed password for invalid user prateek from 54.38.177.98 port 41880 ssh2
...
2020-03-17 09:08:36
151.80.144.39 attack
SSH Brute-Force Attack
2020-03-17 09:13:30
218.92.0.191 attack
Mar 17 02:26:30 dcd-gentoo sshd[27667]: User root from 218.92.0.191 not allowed because none of user's groups are listed in AllowGroups
Mar 17 02:26:32 dcd-gentoo sshd[27667]: error: PAM: Authentication failure for illegal user root from 218.92.0.191
Mar 17 02:26:30 dcd-gentoo sshd[27667]: User root from 218.92.0.191 not allowed because none of user's groups are listed in AllowGroups
Mar 17 02:26:32 dcd-gentoo sshd[27667]: error: PAM: Authentication failure for illegal user root from 218.92.0.191
Mar 17 02:26:30 dcd-gentoo sshd[27667]: User root from 218.92.0.191 not allowed because none of user's groups are listed in AllowGroups
Mar 17 02:26:32 dcd-gentoo sshd[27667]: error: PAM: Authentication failure for illegal user root from 218.92.0.191
Mar 17 02:26:32 dcd-gentoo sshd[27667]: Failed keyboard-interactive/pam for invalid user root from 218.92.0.191 port 25174 ssh2
...
2020-03-17 09:31:46
114.242.145.45 attackbotsspam
DATE:2020-03-17 02:14:21, IP:114.242.145.45, PORT:ssh SSH brute force auth (docker-dc)
2020-03-17 09:45:22
77.68.112.81 attack
Mar 17 01:36:04 server2 sshd\[16947\]: Invalid user ubnt from 77.68.112.81
Mar 17 01:36:04 server2 sshd\[16949\]: Invalid user admin from 77.68.112.81
Mar 17 01:36:05 server2 sshd\[16951\]: User root from 77.68.112.81 not allowed because not listed in AllowUsers
Mar 17 01:36:05 server2 sshd\[16953\]: Invalid user 1234 from 77.68.112.81
Mar 17 01:36:05 server2 sshd\[16955\]: Invalid user usuario from 77.68.112.81
Mar 17 01:36:05 server2 sshd\[16957\]: Invalid user support from 77.68.112.81
2020-03-17 09:42:39
198.98.52.141 attackspam
16.03.2020 23:37:09 Connection to port 8080 blocked by firewall
2020-03-17 09:17:12
94.191.91.18 attackbotsspam
Mar 17 01:36:07 v22018086721571380 sshd[15519]: Failed password for invalid user mella from 94.191.91.18 port 59982 ssh2
Mar 17 01:41:16 v22018086721571380 sshd[17003]: Failed password for invalid user pi from 94.191.91.18 port 54302 ssh2
2020-03-17 09:19:25
99.191.118.206 attack
Mar 17 00:36:48 tor-proxy-06 sshd\[4135\]: Invalid user pi from 99.191.118.206 port 45208
Mar 17 00:36:49 tor-proxy-06 sshd\[4136\]: Invalid user pi from 99.191.118.206 port 45210
Mar 17 00:36:49 tor-proxy-06 sshd\[4135\]: Connection closed by 99.191.118.206 port 45208 \[preauth\]
Mar 17 00:36:49 tor-proxy-06 sshd\[4136\]: Connection closed by 99.191.118.206 port 45210 \[preauth\]
...
2020-03-17 09:29:11
89.109.23.190 attack
Mar 17 01:41:38 SilenceServices sshd[32248]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.109.23.190
Mar 17 01:41:40 SilenceServices sshd[32248]: Failed password for invalid user ts3server from 89.109.23.190 port 60804 ssh2
Mar 17 01:48:47 SilenceServices sshd[1782]: Failed password for root from 89.109.23.190 port 41462 ssh2
2020-03-17 09:11:24
51.77.212.235 attackspambots
Mar 17 00:37:06 [host] sshd[6738]: Invalid user or
Mar 17 00:37:06 [host] sshd[6738]: pam_unix(sshd:a
Mar 17 00:37:08 [host] sshd[6738]: Failed password
2020-03-17 09:16:47

Recently Reported IPs

180.126.232.84 109.245.229.229 221.214.9.91 89.40.110.36
115.68.32.231 119.18.63.233 46.8.208.200 13.232.74.36
182.151.15.242 226.73.107.39 114.142.210.59 185.183.106.109
187.58.192.171 202.71.13.84 188.32.9.154 179.106.103.107
156.210.63.220 179.104.230.119 41.43.9.226 221.122.122.34