Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: Frantech Solutions

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackbots
SSH Brute Force
2020-05-08 17:20:56
attackbotsspam
$f2bV_matches
2020-05-05 01:13:06
attackspambots
Apr 27 03:41:38 XXX sshd[62326]: Invalid user testu from 209.141.48.68 port 38728
2020-04-27 12:03:27
attackspambots
Automatic report BANNED IP
2020-04-25 19:04:41
attack
Apr 21 21:48:16 sip sshd[18801]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.141.48.68
Apr 21 21:48:18 sip sshd[18801]: Failed password for invalid user hadoop1 from 209.141.48.68 port 53704 ssh2
Apr 21 21:51:20 sip sshd[19902]: Failed password for root from 209.141.48.68 port 42698 ssh2
2020-04-22 05:23:25
attack
$f2bV_matches
2020-02-27 03:43:27
attackspambots
Unauthorized connection attempt detected from IP address 209.141.48.68 to port 2220 [J]
2020-02-04 20:48:20
attackspam
Unauthorized connection attempt detected from IP address 209.141.48.68 to port 2220 [J]
2020-02-02 05:51:24
attackspambots
Unauthorized connection attempt detected from IP address 209.141.48.68 to port 2220 [J]
2020-02-01 16:06:05
attack
Unauthorized connection attempt detected from IP address 209.141.48.68 to port 2220 [J]
2020-01-15 03:18:41
attackbots
$f2bV_matches
2019-11-30 19:59:34
attack
Nov 28 01:58:06 ldap01vmsma01 sshd[43316]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.141.48.68
Nov 28 01:58:08 ldap01vmsma01 sshd[43316]: Failed password for invalid user cpanelphpmyadmin from 209.141.48.68 port 52253 ssh2
...
2019-11-28 13:26:43
attackbots
Nov 27 08:29:43 MK-Soft-Root2 sshd[5673]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.141.48.68 
Nov 27 08:29:46 MK-Soft-Root2 sshd[5673]: Failed password for invalid user mukund from 209.141.48.68 port 40850 ssh2
...
2019-11-27 19:15:19
attack
Lines containing failures of 209.141.48.68
Oct 29 21:20:35 shared11 sshd[19317]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.141.48.68  user=r.r
Oct 29 21:20:37 shared11 sshd[19317]: Failed password for r.r from 209.141.48.68 port 35848 ssh2
Oct 29 21:20:38 shared11 sshd[19317]: Received disconnect from 209.141.48.68 port 35848:11: Bye Bye [preauth]
Oct 29 21:20:38 shared11 sshd[19317]: Disconnected from authenticating user r.r 209.141.48.68 port 35848 [preauth]
Oct 29 21:34:07 shared11 sshd[22954]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.141.48.68  user=r.r
Oct 29 21:34:10 shared11 sshd[22954]: Failed password for r.r from 209.141.48.68 port 41658 ssh2
Oct 29 21:34:10 shared11 sshd[22954]: Received disconnect from 209.141.48.68 port 41658:11: Bye Bye [preauth]
Oct 29 21:34:10 shared11 sshd[22954]: Disconnected from authenticating user r.r 209.141.48.68 port 41658 [preauth........
------------------------------
2019-10-30 19:03:53
attack
Lines containing failures of 209.141.48.68
Oct 29 21:20:35 shared11 sshd[19317]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.141.48.68  user=r.r
Oct 29 21:20:37 shared11 sshd[19317]: Failed password for r.r from 209.141.48.68 port 35848 ssh2
Oct 29 21:20:38 shared11 sshd[19317]: Received disconnect from 209.141.48.68 port 35848:11: Bye Bye [preauth]
Oct 29 21:20:38 shared11 sshd[19317]: Disconnected from authenticating user r.r 209.141.48.68 port 35848 [preauth]
Oct 29 21:34:07 shared11 sshd[22954]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.141.48.68  user=r.r
Oct 29 21:34:10 shared11 sshd[22954]: Failed password for r.r from 209.141.48.68 port 41658 ssh2
Oct 29 21:34:10 shared11 sshd[22954]: Received disconnect from 209.141.48.68 port 41658:11: Bye Bye [preauth]
Oct 29 21:34:10 shared11 sshd[22954]: Disconnected from authenticating user r.r 209.141.48.68 port 41658 [preauth........
------------------------------
2019-10-30 05:57:11
Comments on same subnet:
IP Type Details Datetime
209.141.48.230 attackspambots
 TCP (SYN) 209.141.48.230:39845 -> port 23, len 44
2020-09-08 01:32:52
209.141.48.230 attack
 TCP (SYN) 209.141.48.230:58762 -> port 23, len 40
2020-09-07 16:57:24
209.141.48.144 attack
Automatic report - XMLRPC Attack
2020-03-17 04:14:54
209.141.48.150 attack
$f2bV_matches
2020-03-05 16:12:30
209.141.48.86 attackbots
MultiHost/MultiPort Probe, Scan, Hack -
2020-02-13 21:55:56
209.141.48.177 attack
Scanning random ports - tries to find possible vulnerable services
2019-11-15 06:20:23
209.141.48.100 attack
Attempted to connect 2 times to port 389 UDP
2019-07-09 21:52:39
209.141.48.126 attackbotsspam
TCP src-port=32994   dst-port=25    dnsbl-sorbs abuseat-org spamcop         (903)
2019-06-27 01:37:47
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 209.141.48.68
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 15273
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;209.141.48.68.			IN	A

;; AUTHORITY SECTION:
.			483	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019102901 1800 900 604800 86400

;; Query time: 132 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Oct 30 05:57:08 CST 2019
;; MSG SIZE  rcvd: 117
Host info
Host 68.48.141.209.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 68.48.141.209.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
89.190.71.22 attackspambots
Unauthorized connection attempt detected from IP address 89.190.71.22 to port 8080 [J]
2020-03-01 01:04:41
185.49.105.200 attackspam
Unauthorized connection attempt detected from IP address 185.49.105.200 to port 8080 [J]
2020-03-01 00:46:57
109.117.207.87 attackbotsspam
Unauthorized connection attempt detected from IP address 109.117.207.87 to port 23 [J]
2020-03-01 00:58:20
114.236.75.80 attackspambots
Unauthorized connection attempt detected from IP address 114.236.75.80 to port 2222 [J]
2020-03-01 01:34:01
89.254.214.199 attackspambots
Unauthorized connection attempt detected from IP address 89.254.214.199 to port 23 [J]
2020-03-01 01:04:05
199.231.115.146 attackbotsspam
Unauthorized connection attempt detected from IP address 199.231.115.146 to port 80 [J]
2020-03-01 01:18:52
124.156.245.159 attackspam
Unauthorized connection attempt detected from IP address 124.156.245.159 to port 8089 [J]
2020-03-01 01:29:03
186.227.44.215 attackbotsspam
Unauthorized connection attempt detected from IP address 186.227.44.215 to port 8080 [J]
2020-03-01 01:22:41
78.84.208.226 attackbotsspam
Unauthorized connection attempt detected from IP address 78.84.208.226 to port 8080 [J]
2020-03-01 01:05:55
211.45.221.126 attackbots
Unauthorized connection attempt detected from IP address 211.45.221.126 to port 23 [J]
2020-03-01 01:16:59
88.247.102.229 attack
Unauthorized connection attempt detected from IP address 88.247.102.229 to port 80 [J]
2020-03-01 01:05:15
151.30.155.229 attack
Honeypot attack, port: 5555, PTR: ppp-229-155.30-151.wind.it.
2020-03-01 01:28:37
222.186.173.142 attackbotsspam
Feb 29 18:14:47 vpn01 sshd[12113]: Failed password for root from 222.186.173.142 port 38058 ssh2
Feb 29 18:14:59 vpn01 sshd[12113]: error: maximum authentication attempts exceeded for root from 222.186.173.142 port 38058 ssh2 [preauth]
...
2020-03-01 01:15:54
116.104.32.122 attack
Unauthorized connection attempt detected from IP address 116.104.32.122 to port 23 [J]
2020-03-01 01:32:49
61.58.174.228 attackspam
Unauthorized connection attempt detected from IP address 61.58.174.228 to port 23 [J]
2020-03-01 01:07:53

Recently Reported IPs

121.208.203.67 176.65.172.99 142.57.113.139 186.152.189.205
161.170.186.7 110.164.147.185 112.84.26.168 87.63.107.103
116.218.183.218 196.160.28.216 12.117.252.196 134.82.57.6
174.202.17.43 133.20.40.151 7.155.168.32 34.152.109.189
130.47.153.252 88.152.97.33 224.117.179.34 243.137.136.72