207.8.148.148 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: Windstream Communications LLC

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
207.8.148.41	attackbotsspam	Oct 17 03:27:03 web9 sshd\[31771\]: Invalid user Metal2017 from 207.8.148.41 Oct 17 03:27:03 web9 sshd\[31771\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.8.148.41 Oct 17 03:27:05 web9 sshd\[31771\]: Failed password for invalid user Metal2017 from 207.8.148.41 port 44053 ssh2 Oct 17 03:31:32 web9 sshd\[32321\]: Invalid user lia from 207.8.148.41 Oct 17 03:31:32 web9 sshd\[32321\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.8.148.41	2019-10-17 22:28:46
207.8.148.41	attackbotsspam	2019-10-15T07:25:11.719063abusebot-5.cloudsearch.cf sshd\[1986\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.8.148.41 user=root	2019-10-15 15:40:01

Type

Details

Datetime

207.8.148.41

attackbotsspam

Oct 17 03:27:03 web9 sshd\[31771\]: Invalid user Metal2017 from 207.8.148.41
Oct 17 03:27:03 web9 sshd\[31771\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.8.148.41
Oct 17 03:27:05 web9 sshd\[31771\]: Failed password for invalid user Metal2017 from 207.8.148.41 port 44053 ssh2
Oct 17 03:31:32 web9 sshd\[32321\]: Invalid user lia from 207.8.148.41
Oct 17 03:31:32 web9 sshd\[32321\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.8.148.41

2019-10-17 22:28:46

207.8.148.41

attackbotsspam

2019-10-15T07:25:11.719063abusebot-5.cloudsearch.cf sshd\[1986\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.8.148.41  user=root

2019-10-15 15:40:01

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 207.8.148.148
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 16767
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;207.8.148.148.			IN	A

;; AUTHORITY SECTION:
.			2850	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019082800 1800 900 604800 86400

;; Query time: 1 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Aug 29 00:12:54 CST 2019
;; MSG SIZE  rcvd: 117

Host info

Host 148.148.8.207.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 148.148.8.207.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
159.203.169.16	attackspam	11/13/2019-05:24:54.436692 159.203.169.16 Protocol: 6 ET COMPROMISED Known Compromised or Hostile Host Traffic group 11	2019-11-13 19:14:15
178.33.12.237	attackspambots	Nov 13 12:02:44 vps691689 sshd[25965]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.33.12.237 Nov 13 12:02:46 vps691689 sshd[25965]: Failed password for invalid user aknet from 178.33.12.237 port 52810 ssh2 ...	2019-11-13 19:24:48
220.181.108.114	attackspambots	Automatic report - Banned IP Access	2019-11-13 19:49:09
87.245.86.112	attack	TCP Port Scanning	2019-11-13 19:35:24
106.12.105.193	attackbots	2019-11-13T11:16:47.578563abusebot-3.cloudsearch.cf sshd\[32046\]: Invalid user kornfeld from 106.12.105.193 port 57504	2019-11-13 19:44:59
164.132.74.64	attackbots	Nov 13 09:47:21 SilenceServices sshd[7318]: Failed password for root from 164.132.74.64 port 50482 ssh2 Nov 13 09:50:53 SilenceServices sshd[9666]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.74.64 Nov 13 09:50:55 SilenceServices sshd[9666]: Failed password for invalid user qwer from 164.132.74.64 port 59220 ssh2	2019-11-13 19:26:53
195.158.11.30	attackbotsspam	Nov 12 23:55:58 mailman postfix/smtpd[31531]: NOQUEUE: reject: RCPT from unknown[195.158.11.30]: 554 5.7.1 Service unavailable; Client host [195.158.11.30] blocked using sbl-xbl.spamhaus.org; https://www.spamhaus.org/query/ip/195.158.11.30; from= to= proto=ESMTP helo=<[195.158.11.30]> Nov 13 00:23:10 mailman postfix/smtpd[31801]: NOQUEUE: reject: RCPT from unknown[195.158.11.30]: 554 5.7.1 Service unavailable; Client host [195.158.11.30] blocked using sbl-xbl.spamhaus.org; https://www.spamhaus.org/query/ip/195.158.11.30; from= to= proto=ESMTP helo=<[195.158.11.30]>	2019-11-13 19:13:53
218.92.0.186	attackbots	2019-11-13T06:22:54.529064abusebot-4.cloudsearch.cf sshd\[29141\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.186 user=root	2019-11-13 19:25:37
178.165.129.108	attackbots	TCP Port Scanning	2019-11-13 19:14:31
222.127.97.91	attack	SSH Bruteforce	2019-11-13 19:41:12
185.36.81.242	attackspam	2019-11-13 dovecot_login authenticator failed for \(User\) \[185.36.81.242\]: 535 Incorrect authentication data \(set_id=testtest\) 2019-11-13 dovecot_login authenticator failed for \(User\) \[185.36.81.242\]: 535 Incorrect authentication data \(set_id=mail\) 2019-11-13 dovecot_login authenticator failed for \(User\) \[185.36.81.242\]: 535 Incorrect authentication data \(set_id=netware\)	2019-11-13 19:16:30
133.130.123.238	attackspambots	Nov 13 09:41:02 l02a sshd[4280]: Invalid user citasa from 133.130.123.238 Nov 13 09:41:04 l02a sshd[4280]: Failed password for invalid user citasa from 133.130.123.238 port 47266 ssh2 Nov 13 09:41:02 l02a sshd[4280]: Invalid user citasa from 133.130.123.238 Nov 13 09:41:04 l02a sshd[4280]: Failed password for invalid user citasa from 133.130.123.238 port 47266 ssh2	2019-11-13 19:41:38
222.186.169.194	attackspambots	Nov 13 06:34:26 TORMINT sshd\[3894\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.169.194 user=root Nov 13 06:34:28 TORMINT sshd\[3894\]: Failed password for root from 222.186.169.194 port 20622 ssh2 Nov 13 06:34:44 TORMINT sshd\[3905\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.169.194 user=root ...	2019-11-13 19:51:45
189.41.210.138	attack	Automatic report - SSH Brute-Force Attack	2019-11-13 19:21:39
68.183.65.165	attack	Nov 13 01:06:25 tdfoods sshd\[17950\]: Invalid user ts3musikbot from 68.183.65.165 Nov 13 01:06:25 tdfoods sshd\[17950\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.65.165 Nov 13 01:06:28 tdfoods sshd\[17950\]: Failed password for invalid user ts3musikbot from 68.183.65.165 port 35658 ssh2 Nov 13 01:10:04 tdfoods sshd\[18361\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.65.165 user=root Nov 13 01:10:06 tdfoods sshd\[18361\]: Failed password for root from 68.183.65.165 port 44380 ssh2	2019-11-13 19:12:35

Recently Reported IPs

173.243.173.214	4.179.8.53	183.173.87.19	111.40.89.185
89.67.80.138	198.94.164.17	58.52.197.4	150.239.248.149
44.14.136.2	140.96.33.244	140.105.138.129	73.244.107.170
53.153.183.115	212.100.31.156	183.26.146.94	185.208.194.242
141.152.88.145	215.27.118.154	76.12.150.128	170.11.76.94