Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Oegstgeest

Region: South Holland

Country: Netherlands

Internet Service Provider: LeaseWeb Netherlands B.V.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspam
Aug 23 17:01:56 ip106 sshd[7618]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.48.70.74 
Aug 23 17:01:58 ip106 sshd[7618]: Failed password for invalid user ftpuser from 37.48.70.74 port 53334 ssh2
...
2020-08-24 02:28:30
attackspam
Aug 16 14:14:55 ns382633 sshd\[16930\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.48.70.74  user=root
Aug 16 14:14:56 ns382633 sshd\[16930\]: Failed password for root from 37.48.70.74 port 54464 ssh2
Aug 16 14:23:36 ns382633 sshd\[19045\]: Invalid user student from 37.48.70.74 port 35632
Aug 16 14:23:36 ns382633 sshd\[19045\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.48.70.74
Aug 16 14:23:38 ns382633 sshd\[19045\]: Failed password for invalid user student from 37.48.70.74 port 35632 ssh2
2020-08-16 23:38:33
attack
Aug  8 05:49:53 Ubuntu-1404-trusty-64-minimal sshd\[27642\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.48.70.74  user=root
Aug  8 05:49:55 Ubuntu-1404-trusty-64-minimal sshd\[27642\]: Failed password for root from 37.48.70.74 port 40994 ssh2
Aug  8 05:55:30 Ubuntu-1404-trusty-64-minimal sshd\[30359\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.48.70.74  user=root
Aug  8 05:55:32 Ubuntu-1404-trusty-64-minimal sshd\[30359\]: Failed password for root from 37.48.70.74 port 44944 ssh2
Aug  8 05:59:06 Ubuntu-1404-trusty-64-minimal sshd\[31323\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.48.70.74  user=root
2020-08-08 12:25:16
attack
leo_www
2020-08-07 04:47:35
attackspambots
2020-07-28 06:19:41,077 fail2ban.actions        [18606]: NOTICE  [sshd] Ban 37.48.70.74
2020-07-28 06:35:16,038 fail2ban.actions        [18606]: NOTICE  [sshd] Ban 37.48.70.74
2020-07-28 06:51:47,920 fail2ban.actions        [18606]: NOTICE  [sshd] Ban 37.48.70.74
2020-07-28 07:08:23,281 fail2ban.actions        [18606]: NOTICE  [sshd] Ban 37.48.70.74
2020-07-28 07:25:08,160 fail2ban.actions        [18606]: NOTICE  [sshd] Ban 37.48.70.74
...
2020-08-01 19:31:54
attackspambots
Jul 30 18:11:09 server1 sshd\[24845\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.48.70.74  user=root
Jul 30 18:11:11 server1 sshd\[24845\]: Failed password for root from 37.48.70.74 port 48260 ssh2
Jul 30 18:15:01 server1 sshd\[25667\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.48.70.74  user=root
Jul 30 18:15:03 server1 sshd\[25667\]: Failed password for root from 37.48.70.74 port 33128 ssh2
Jul 30 18:18:56 server1 sshd\[26550\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.48.70.74  user=root
...
2020-07-31 08:25:02
attack
Invalid user tan from 37.48.70.74 port 38414
2020-07-21 07:43:21
attackbotsspam
Jul  8 01:53:50 eventyay sshd[26110]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.48.70.74
Jul  8 01:53:52 eventyay sshd[26110]: Failed password for invalid user shimizu from 37.48.70.74 port 43204 ssh2
Jul  8 01:55:07 eventyay sshd[26176]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.48.70.74
...
2020-07-08 08:03:43
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 37.48.70.74
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64280
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;37.48.70.74.			IN	A

;; AUTHORITY SECTION:
.			560	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020070202 1800 900 604800 86400

;; Query time: 99 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jul 03 08:28:22 CST 2020
;; MSG SIZE  rcvd: 115
Host info
Host 74.70.48.37.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 74.70.48.37.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
180.167.225.118 attackspam
Apr 19 14:42:29 mout sshd[8345]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.167.225.118  user=root
Apr 19 14:42:32 mout sshd[8345]: Failed password for root from 180.167.225.118 port 38036 ssh2
2020-04-19 22:37:01
183.83.85.102 attackspam
1587297785 - 04/19/2020 14:03:05 Host: 183.83.85.102/183.83.85.102 Port: 445 TCP Blocked
2020-04-19 22:49:04
212.64.78.151 attack
Apr 19 14:02:21 ArkNodeAT sshd\[17758\]: Invalid user wq from 212.64.78.151
Apr 19 14:02:21 ArkNodeAT sshd\[17758\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.78.151
Apr 19 14:02:23 ArkNodeAT sshd\[17758\]: Failed password for invalid user wq from 212.64.78.151 port 58090 ssh2
2020-04-19 23:19:03
77.40.2.144 attackbots
$f2bV_matches
2020-04-19 23:05:15
142.93.52.3 attackspambots
Apr 19 13:57:40 ns382633 sshd\[27245\]: Invalid user ftpuser from 142.93.52.3 port 43492
Apr 19 13:57:40 ns382633 sshd\[27245\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.52.3
Apr 19 13:57:42 ns382633 sshd\[27245\]: Failed password for invalid user ftpuser from 142.93.52.3 port 43492 ssh2
Apr 19 14:02:31 ns382633 sshd\[28137\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.52.3  user=root
Apr 19 14:02:33 ns382633 sshd\[28137\]: Failed password for root from 142.93.52.3 port 46618 ssh2
2020-04-19 23:17:41
52.156.64.90 attack
Lines containing failures of 52.156.64.90
Apr 19 07:41:15 newdogma sshd[14504]: Invalid user zh from 52.156.64.90 port 60620
Apr 19 07:41:15 newdogma sshd[14504]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.156.64.90 
Apr 19 07:41:18 newdogma sshd[14504]: Failed password for invalid user zh from 52.156.64.90 port 60620 ssh2
Apr 19 07:41:20 newdogma sshd[14504]: Received disconnect from 52.156.64.90 port 60620:11: Bye Bye [preauth]
Apr 19 07:41:20 newdogma sshd[14504]: Disconnected from invalid user zh 52.156.64.90 port 60620 [preauth]
Apr 19 07:49:27 newdogma sshd[14597]: Invalid user mg from 52.156.64.90 port 54890
Apr 19 07:49:27 newdogma sshd[14597]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.156.64.90 
Apr 19 07:49:28 newdogma sshd[14597]: Failed password for invalid user mg from 52.156.64.90 port 54890 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=52.15
2020-04-19 22:47:02
157.97.80.205 attackspambots
2020-04-19T14:08:54.778775sd-86998 sshd[43104]: Invalid user cc from 157.97.80.205 port 56981
2020-04-19T14:08:54.784108sd-86998 sshd[43104]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.97.80.205
2020-04-19T14:08:54.778775sd-86998 sshd[43104]: Invalid user cc from 157.97.80.205 port 56981
2020-04-19T14:08:56.465904sd-86998 sshd[43104]: Failed password for invalid user cc from 157.97.80.205 port 56981 ssh2
2020-04-19T14:16:50.619364sd-86998 sshd[43663]: Invalid user ansible from 157.97.80.205 port 38829
...
2020-04-19 22:57:00
176.31.251.177 attackbots
Apr 19 14:38:37 IngegnereFirenze sshd[26993]: Failed password for invalid user km from 176.31.251.177 port 43320 ssh2
...
2020-04-19 23:13:08
81.131.75.134 attackbots
Apr 19 08:45:08 hostnameproxy sshd[22980]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.131.75.134  user=r.r
Apr 19 08:45:10 hostnameproxy sshd[22980]: Failed password for r.r from 81.131.75.134 port 33671 ssh2
Apr 19 08:47:50 hostnameproxy sshd[23077]: Invalid user ubnt from 81.131.75.134 port 33766
Apr 19 08:47:50 hostnameproxy sshd[23077]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.131.75.134
Apr 19 08:47:53 hostnameproxy sshd[23077]: Failed password for invalid user ubnt from 81.131.75.134 port 33766 ssh2
Apr 19 08:50:33 hostnameproxy sshd[23167]: Invalid user osmc from 81.131.75.134 port 33858
Apr 19 08:50:33 hostnameproxy sshd[23167]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.131.75.134
Apr 19 08:50:35 hostnameproxy sshd[23167]: Failed password for invalid user osmc from 81.131.75.134 port 33858 ssh2
Apr 19 08:53:16 hostname........
------------------------------
2020-04-19 23:09:27
203.252.139.180 attackbots
Apr 19 14:21:53  sshd\[24752\]: Invalid user jw from 203.252.139.180Apr 19 14:21:55  sshd\[24752\]: Failed password for invalid user jw from 203.252.139.180 port 60998 ssh2
...
2020-04-19 23:02:41
129.211.70.33 attackbots
Apr 19 14:03:09 vpn01 sshd[28945]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.70.33
Apr 19 14:03:12 vpn01 sshd[28945]: Failed password for invalid user up from 129.211.70.33 port 43829 ssh2
...
2020-04-19 22:43:38
118.27.13.39 attackspambots
SSH Brute-Force attacks
2020-04-19 22:50:12
159.203.36.154 attackbotsspam
"fail2ban match"
2020-04-19 23:16:42
114.67.110.221 attackbotsspam
Apr 19 15:00:36 Enigma sshd[29554]: Failed password for invalid user gitlab from 114.67.110.221 port 55862 ssh2
Apr 19 15:02:57 Enigma sshd[29729]: Invalid user gitlab from 114.67.110.221 port 56410
Apr 19 15:02:57 Enigma sshd[29729]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.110.221
Apr 19 15:02:57 Enigma sshd[29729]: Invalid user gitlab from 114.67.110.221 port 56410
Apr 19 15:03:00 Enigma sshd[29729]: Failed password for invalid user gitlab from 114.67.110.221 port 56410 ssh2
2020-04-19 22:53:02
113.218.221.76 attack
Apr 19 21:48:52 our-server-hostname postfix/smtpd[24415]: connect from unknown[113.218.221.76]
Apr x@x
Apr x@x
Apr x@x
Apr x@x
Apr x@x
Apr x@x
Apr x@x
Apr x@x
Apr x@x
Apr x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=113.218.221.76
2020-04-19 22:55:00

Recently Reported IPs

70.45.218.166 189.72.158.55 61.199.0.36 189.208.91.109
36.79.255.36 184.68.253.202 121.26.228.205 221.54.249.193
133.31.204.223 95.149.133.115 119.141.96.71 46.86.205.19
12.45.199.147 121.54.28.90 73.210.219.171 13.229.155.127
222.93.137.44 12.246.140.96 183.143.152.246 159.180.157.66