48.148.89.81 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 48.148.89.81
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 39725
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;48.148.89.81.			IN	A

;; AUTHORITY SECTION:
.			525	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2023012701 1800 900 604800 86400

;; Query time: 71 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jan 28 06:31:17 CST 2023
;; MSG SIZE  rcvd: 105

Host info

Host 81.89.148.48.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 81.89.148.48.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
35.234.28.121	attackbotsspam	35.234.28.121 - - [20/Jul/2020:06:30:01 +0100] "POST /wp-login.php HTTP/1.1" 200 2081 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 35.234.28.121 - - [20/Jul/2020:06:30:05 +0100] "POST /wp-login.php HTTP/1.1" 200 2081 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 35.234.28.121 - - [20/Jul/2020:06:30:08 +0100] "POST /wp-login.php HTTP/1.1" 200 2083 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-07-20 16:44:31
165.22.253.190	attackbotsspam	TCP (SYN) 165.22.253.190:56146 -> port 14002, len 44	2020-07-20 16:47:03
94.102.49.65	attackbotsspam	Jul 20 08:23:27 pop3-login: Info: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=94.102.49.65, lip=192.168.100.101, session=\\ Jul 20 08:43:56 pop3-login: Info: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=94.102.49.65, lip=192.168.100.101, session=\\ Jul 20 08:48:59 pop3-login: Info: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=94.102.49.65, lip=192.168.100.101, session=\\ Jul 20 09:15:35 pop3-login: Info: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=94.102.49.65, lip=192.168.100.101, session=\\ Jul 20 09:20:40 pop3-login: Info: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=94.102.49.65, lip=192.168.100.101, session=\\ Jul 20 09:26:49 pop3-lo	2020-07-20 16:34:28
218.161.39.30	attack	Automatic report - Banned IP Access	2020-07-20 16:50:16
134.122.120.74	attack	134.122.120.74 - - [20/Jul/2020:05:10:58 +0100] "POST /wp-login.php HTTP/1.1" 200 1950 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 134.122.120.74 - - [20/Jul/2020:05:10:59 +0100] "POST /wp-login.php HTTP/1.1" 200 1885 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 134.122.120.74 - - [20/Jul/2020:05:11:05 +0100] "POST /wp-login.php HTTP/1.1" 200 1885 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-07-20 16:31:38
200.199.227.194	attack	Jul 19 22:59:03 server1 sshd\[13418\]: Invalid user akshay from 200.199.227.194 Jul 19 22:59:03 server1 sshd\[13418\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.199.227.194 Jul 19 22:59:05 server1 sshd\[13418\]: Failed password for invalid user akshay from 200.199.227.194 port 57904 ssh2 Jul 19 23:04:10 server1 sshd\[15046\]: Invalid user web from 200.199.227.194 Jul 19 23:04:10 server1 sshd\[15046\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.199.227.194 ...	2020-07-20 16:58:43
120.31.138.70	attack	Jul 20 08:40:05 localhost sshd[74636]: Invalid user vaibhav from 120.31.138.70 port 57520 Jul 20 08:40:05 localhost sshd[74636]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.31.138.70 Jul 20 08:40:05 localhost sshd[74636]: Invalid user vaibhav from 120.31.138.70 port 57520 Jul 20 08:40:07 localhost sshd[74636]: Failed password for invalid user vaibhav from 120.31.138.70 port 57520 ssh2 Jul 20 08:45:12 localhost sshd[75085]: Invalid user volk from 120.31.138.70 port 34268 ...	2020-07-20 16:56:10
187.32.7.108	attack	Jul 20 14:01:31 NG-HHDC-SVS-001 sshd[27791]: Invalid user vvv from 187.32.7.108 ...	2020-07-20 16:50:38
106.200.75.95	attack	Automatic report - Port Scan Attack	2020-07-20 16:38:01
91.77.166.52	attackspambots	$f2bV_matches	2020-07-20 16:38:33
206.189.35.138	attackbots	206.189.35.138 - - \[20/Jul/2020:07:51:34 +0200\] "POST /wp-login.php HTTP/1.0" 200 2797 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" 206.189.35.138 - - \[20/Jul/2020:07:51:37 +0200\] "POST /wp-login.php HTTP/1.0" 200 2724 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" 206.189.35.138 - - \[20/Jul/2020:07:51:39 +0200\] "POST /wp-login.php HTTP/1.0" 200 2762 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0"	2020-07-20 16:34:58
106.110.31.71	attackbotsspam	Jul 20 08:24:33 * sshd[22162]: Bad protocol version identification '' from 106.110.31.71 Jul 20 08:24:37 * sshd[22163]: Invalid user osboxes from 106.110.31.71 Jul 20 08:24:38 * sshd[22163]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.110.31.71 Jul 20 08:24:39 * sshd[22163]: Failed password for invalid user osboxes from 106.110.31.71 port 49190 ssh2 Jul 20 08:24:40 * sshd[22163]: Connection closed by 106.110.31.71 [preauth] Jul 20 08:24:41 * sshd[22188]: Invalid user support from 106.110.31.71 Jul 20 08:24:41 * sshd[22188]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.110.31.71 Jul 20 08:24:43 * sshd[22188]: Failed password for invalid user support from 106.110.31.71 port 50568 ssh2 Jul 20 08:24:43 * sshd[22188]: Connection closed by 106.110.31.71 [preauth] Jul 20 08:24:49 * sshd[22190]: Invalid user NetLinx from 106.110.31.71 Jul 20 08:24:49 *** sshd[221........ -------------------------------	2020-07-20 16:32:10
5.226.137.138	attack	firewall-block, port(s): 5060/udp	2020-07-20 16:48:50
51.91.110.51	attackbotsspam	2020-07-20T11:00:43+0200 Failed SSH Authentication/Brute Force Attack. (Server 4)	2020-07-20 17:04:35
139.186.73.140	attack	Jul 20 08:47:33 Ubuntu-1404-trusty-64-minimal sshd\[2088\]: Invalid user brady from 139.186.73.140 Jul 20 08:47:33 Ubuntu-1404-trusty-64-minimal sshd\[2088\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.186.73.140 Jul 20 08:47:35 Ubuntu-1404-trusty-64-minimal sshd\[2088\]: Failed password for invalid user brady from 139.186.73.140 port 57298 ssh2 Jul 20 08:58:34 Ubuntu-1404-trusty-64-minimal sshd\[7451\]: Invalid user slurm from 139.186.73.140 Jul 20 08:58:34 Ubuntu-1404-trusty-64-minimal sshd\[7451\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.186.73.140	2020-07-20 16:30:48

Recently Reported IPs

63.80.119.201	146.114.182.2	165.19.64.14	26.162.215.190
248.73.145.206	242.156.177.250	240.74.103.107	243.34.38.22
135.152.163.60	8.8.224.31	105.72.128.182	159.55.187.125
12.200.164.185	143.151.147.240	24.157.26.234	238.53.113.11
235.33.164.65	233.101.127.242	234.69.113.49	231.11.85.224