54.36.148.71 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: France

Internet Service Provider: OVH SAS

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Automatic report - Banned IP Access	2019-09-09 03:28:54
attack	Automatic report - Banned IP Access	2019-08-15 16:46:50

Comments on same subnet:

IP	Type	Details	Datetime
54.36.148.143	attack	Automatic report - Banned IP Access	2020-09-08 22:20:04
54.36.148.143	attack	Automatic report - Banned IP Access	2020-09-08 14:10:00
54.36.148.143	attack	Automatic report - Banned IP Access	2020-09-08 06:40:41
54.36.148.79	attackbots	/dev	2020-09-04 20:58:31
54.36.148.79	attackspambots	/dev	2020-09-04 12:38:05
54.36.148.79	attackbots	/dev	2020-09-04 05:07:50
54.36.148.241	attackbotsspam	Web bot scraping website [bot:ahrefs]	2020-08-09 21:58:23
54.36.148.236	attack	Bad Web Bot (AhrefsBot).	2020-08-09 02:05:40
54.36.148.250	attackspambots	caw-Joomla User : try to access forms...	2020-08-01 18:04:55
54.36.148.196	attack	Automatic report - Banned IP Access	2020-07-24 23:21:37
54.36.148.22	attack	Automatic report - Banned IP Access	2020-07-24 18:46:22
54.36.148.244	attack	Bad Web Bot (AhrefsBot).	2020-07-19 12:50:28
54.36.148.132	attack	2020-06-27T12:17:07.000Z [f2b-nginxBotsNoClick] Bot not following robots.txt rules. User-Agent: "Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)"	2020-06-28 01:40:43
54.36.148.134	attack	Automatic report - Banned IP Access	2020-06-25 19:22:25
54.36.148.95	attackspam	Automatic report - Banned IP Access	2020-06-25 00:32:45

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 54.36.148.71
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 630
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;54.36.148.71.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019081401 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Aug 15 16:46:39 CST 2019
;; MSG SIZE  rcvd: 116

Host info

71.148.36.54.in-addr.arpa domain name pointer ip-54-36-148-71.a.ahrefs.com.

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
71.148.36.54.in-addr.arpa	name = ip-54-36-148-71.a.ahrefs.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
120.4.218.193	attackbotsspam	Honeypot attack, port: 81, PTR: PTR record not found	2020-02-10 08:28:00
58.69.61.192	attackspam	Honeypot attack, port: 81, PTR: 58.69.61.192.pldt.net.	2020-02-10 08:22:32
79.66.49.45	attackspam	Honeypot attack, port: 81, PTR: 79-66-49-45.dynamic.dsl.as9105.com.	2020-02-10 07:50:52
217.15.61.178	attackspambots	Honeypot attack, port: 445, PTR: PTR record not found	2020-02-10 07:54:14
185.143.223.161	attack	Feb 10 00:26:01 grey postfix/smtpd\[18317\]: NOQUEUE: reject: RCPT from unknown\[185.143.223.161\]: 554 5.7.1 Service unavailable\; Client host \[185.143.223.161\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[185.143.223.161\]\; from=\ to=\ proto=ESMTP helo=\<\[185.143.223.97\]\>Feb 10 00:26:01 grey postfix/smtpd\[18317\]: NOQUEUE: reject: RCPT from unknown\[185.143.223.161\]: 554 5.7.1 Service unavailable\; Client host \[185.143.223.161\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[185.143.223.161\]\; from=\ to=\ proto=ESMTP helo=\<\[185.143.223.97\]\>Feb 10 00:26:01 grey postfix/smtpd\[18317\]: NOQUEUE: reject: RCPT from unknown\[185.143.223.161\]: 554 5.7.1 Service unavailable\; Client host \[185.143.223.161\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[185.143.223.161\]\; from=\ to=\< ...	2020-02-10 07:50:04
198.50.197.223	attack	Feb 9 13:51:54 hpm sshd\[1279\]: Invalid user fhf from 198.50.197.223 Feb 9 13:51:55 hpm sshd\[1279\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip223.ip-198-50-197.net Feb 9 13:51:57 hpm sshd\[1279\]: Failed password for invalid user fhf from 198.50.197.223 port 37312 ssh2 Feb 9 13:54:37 hpm sshd\[1598\]: Invalid user acf from 198.50.197.223 Feb 9 13:54:37 hpm sshd\[1598\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip223.ip-198-50-197.net	2020-02-10 08:20:15
129.211.67.139	attack	SSH / Telnet Brute Force Attempts on Honeypot	2020-02-10 08:20:40
87.222.71.215	attack	TCP port 1346: Scan and connection	2020-02-10 07:50:32
106.12.26.148	attackbotsspam	Automatic report - SSH Brute-Force Attack	2020-02-10 07:49:23
202.124.129.68	attack	$f2bV_matches	2020-02-10 08:00:39
110.78.23.131	attackspam	Feb 10 01:01:43 cp sshd[11772]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.78.23.131 Feb 10 01:01:45 cp sshd[11772]: Failed password for invalid user bzt from 110.78.23.131 port 51635 ssh2 Feb 10 01:08:23 cp sshd[15584]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.78.23.131	2020-02-10 08:22:55
121.69.135.162	attackspambots	Feb 9 19:07:37 ws24vmsma01 sshd[184443]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.69.135.162 Feb 9 19:07:39 ws24vmsma01 sshd[184443]: Failed password for invalid user ghx from 121.69.135.162 port 49371 ssh2 ...	2020-02-10 07:48:20
118.24.14.172	attackbotsspam	Feb 10 00:38:08 sd-53420 sshd\[6658\]: Invalid user neo from 118.24.14.172 Feb 10 00:38:08 sd-53420 sshd\[6658\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.14.172 Feb 10 00:38:09 sd-53420 sshd\[6658\]: Failed password for invalid user neo from 118.24.14.172 port 59278 ssh2 Feb 10 00:39:16 sd-53420 sshd\[6871\]: Invalid user khl from 118.24.14.172 Feb 10 00:39:16 sd-53420 sshd\[6871\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.14.172 ...	2020-02-10 08:04:48
171.242.122.128	attackspam	Fail2Ban Ban Triggered	2020-02-10 08:11:36
182.72.207.148	attack	Feb 9 17:39:33 plusreed sshd[15477]: Invalid user yid from 182.72.207.148 ...	2020-02-10 07:52:49

Recently Reported IPs

14.215.165.131	94.141.60.243	187.198.96.128	111.8.240.218
200.175.86.68	95.133.169.39	217.84.234.76	115.97.6.140
106.13.78.56	225.143.197.127	39.68.63.117	54.36.148.220
193.80.166.174	181.215.151.77	181.30.27.11	165.227.163.87
191.101.104.177	216.53.237.101	106.75.153.43	190.27.168.74