47.55.48.149 - IPInfo

Basic Info

City: Halifax

Region: Nova Scotia

Country: Canada

Internet Service Provider: Bell

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 47.55.48.149
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5657
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;47.55.48.149.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025021902 1800 900 604800 86400

;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 20 13:40:05 CST 2025
;; MSG SIZE  rcvd: 105

Host info

149.48.55.47.in-addr.arpa domain name pointer crbknf0223w-47-55-48-149.dhcp-dynamic.fibreop.nl.bellaliant.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
149.48.55.47.in-addr.arpa	name = crbknf0223w-47-55-48-149.dhcp-dynamic.fibreop.nl.bellaliant.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
188.217.181.18	attack	2020-08-13T15:05:53.534438hostname sshd[20436]: Failed password for root from 188.217.181.18 port 34548 ssh2 2020-08-13T15:09:54.079152hostname sshd[21611]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=net-188-217-181-18.cust.vodafonedsl.it user=root 2020-08-13T15:09:56.100587hostname sshd[21611]: Failed password for root from 188.217.181.18 port 44200 ssh2 ...	2020-08-13 19:03:00
195.54.161.252	attackspambots	TCP (SYN) 195.54.161.252:40611 -> port 27017, len 44	2020-08-13 19:17:52
150.138.249.222	attack	Attempted connection to port 16491.	2020-08-13 19:40:48
94.130.237.166	attackspam	[Thu Aug 13 11:15:43.495829 2020] [:error] [pid 23868:tid 140559712069376] [client 94.130.237.166:19472] [client 94.130.237.166] ModSecurity: Access denied with code 403 (phase 4). Pattern match "^5\\\\d{2}$" at RESPONSE_STATUS. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/RESPONSE-950-DATA-LEAKAGES.conf"] [line "118"] [id "950100"] [msg "The Application Returned a 500-Level Status Code"] [data "Matched Data: 500 found within RESPONSE_STATUS: 500"] [severity "ERROR"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-disclosure"] [tag "WASCTC/WASC-13"] [tag "OWASP_TOP_10/A6"] [tag "PCI/6.5.6"] [tag "paranoia-level/2"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/prakiraan-meteorologi/3915-prakiraan-cuaca-jawa-timur-besok-hari/555556742-prakiraan-cuaca-besok-hari-untuk-pagi-siang-malam-dini-hari-di-provinsi-jawa-timur-berlaku-mulai-minggu-07-oktober-2018-jam-07-00-wib-hingga-senin-08- ...	2020-08-13 18:58:05
128.14.133.58	attack	Port scan denied	2020-08-13 19:32:45
180.168.212.6	attackbotsspam	Aug 13 05:31:35 havingfunrightnow sshd[28850]: Failed password for root from 180.168.212.6 port 2219 ssh2 Aug 13 05:44:24 havingfunrightnow sshd[29337]: Failed password for root from 180.168.212.6 port 2220 ssh2 ...	2020-08-13 19:20:44
51.79.160.138	attackbots	Aug 11 03:07:50 pl3server sshd[30754]: Invalid user admin from 51.79.160.138 port 45715 Aug 11 03:07:51 pl3server sshd[30754]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.79.160.138 Aug 11 03:07:53 pl3server sshd[30754]: Failed password for invalid user admin from 51.79.160.138 port 45715 ssh2 Aug 11 03:07:54 pl3server sshd[30754]: Connection closed by 51.79.160.138 port 45715 [preauth] Aug 11 03:07:57 pl3server sshd[30800]: Invalid user admin from 51.79.160.138 port 42111 Aug 11 03:07:58 pl3server sshd[30800]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.79.160.138 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=51.79.160.138	2020-08-13 19:20:30
91.121.205.83	attackspam	reported through recidive - multiple failed attempts(SSH)	2020-08-13 19:38:44
112.215.237.249	attackspambots	1597290421 - 08/13/2020 05:47:01 Host: 112.215.237.249/112.215.237.249 Port: 445 TCP Blocked	2020-08-13 19:30:32
85.57.145.133	attack	Aug 13 08:31:54 WHD8 dovecot: pop3-login: Disconnected: Inactivity $auth failed, 1 attempts in 179 secs$: user=\, method=PLAIN, rip=85.57.145.133, lip=10.64.89.208, session=\ Aug 13 08:32:02 WHD8 dovecot: pop3-login: Disconnected: Inactivity $auth failed, 1 attempts in 180 secs$: user=\, method=PLAIN, rip=85.57.145.133, lip=10.64.89.208, session=\ Aug 13 08:46:54 WHD8 dovecot: pop3-login: Disconnected: Inactivity $auth failed, 1 attempts in 180 secs$: user=\, method=PLAIN, rip=85.57.145.133, lip=10.64.89.208, session=\ Aug 13 08:47:02 WHD8 dovecot: pop3-login: Disconnected: Inactivity $auth failed, 1 attempts in 180 secs$: user=\, method=PLAIN, rip=85.57.145.133, lip=10.64.89.208, session=\ Aug 13 09:01:54 WHD8 dovecot: pop3-login: Disconnected: Inactivity $auth failed, 1 attempts in 180 secs$: user=\ ...	2020-08-13 19:29:05
148.70.208.187	attackbots	SSH Brute-Forcing (server2)	2020-08-13 19:28:42
23.129.64.181	attackbotsspam	Automatic report - Banned IP Access	2020-08-13 19:05:38
68.196.44.255	attack	Attempted connection to port 60001.	2020-08-13 19:32:20
142.90.1.45	attack	Lines containing failures of 142.90.1.45 Aug 13 04:53:42 dns01 sshd[16981]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.90.1.45 user=r.r Aug 13 04:53:44 dns01 sshd[16981]: Failed password for r.r from 142.90.1.45 port 50084 ssh2 Aug 13 04:53:44 dns01 sshd[16981]: Received disconnect from 142.90.1.45 port 50084:11: Bye Bye [preauth] Aug 13 04:53:44 dns01 sshd[16981]: Disconnected from authenticating user r.r 142.90.1.45 port 50084 [preauth] Aug 13 05:08:36 dns01 sshd[19972]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.90.1.45 user=r.r Aug 13 05:08:38 dns01 sshd[19972]: Failed password for r.r from 142.90.1.45 port 58744 ssh2 Aug 13 05:08:38 dns01 sshd[19972]: Received disconnect from 142.90.1.45 port 58744:11: Bye Bye [preauth] Aug 13 05:08:38 dns01 sshd[19972]: Disconnected from authenticating user r.r 142.90.1.45 port 58744 [preauth] Aug 13 05:12:41 dns01 sshd[21296]: pam_u........ ------------------------------	2020-08-13 19:14:47
181.40.73.86	attackspambots	Aug 13 08:14:43 lnxded64 sshd[9053]: Failed password for root from 181.40.73.86 port 6279 ssh2 Aug 13 08:17:40 lnxded64 sshd[9760]: Failed password for root from 181.40.73.86 port 23074 ssh2	2020-08-13 19:24:00

Recently Reported IPs

251.17.139.41	229.54.75.251	227.212.64.226	178.55.131.88
24.222.107.126	241.68.56.62	186.62.156.243	113.60.195.253
217.123.146.40	25.73.221.134	62.210.47.123	14.171.168.136
115.232.127.179	252.80.147.171	219.26.99.31	34.37.213.106
42.44.86.103	164.9.178.152	141.30.195.250	254.10.218.167