Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Los Angeles

Region: California

Country: United States

Internet Service Provider: n3 Networks

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspam
Autoban   104.148.119.2 AUTH/CONNECT
2019-11-18 17:29:32
attackspam
Bruteforce on SSH Honeypot
2019-11-07 15:15:48
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.148.119.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43612
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.148.119.2.			IN	A

;; AUTHORITY SECTION:
.			592	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019110700 1800 900 604800 86400

;; Query time: 104 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Nov 07 15:15:43 CST 2019
;; MSG SIZE  rcvd: 117
Host info
Host 2.119.148.104.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 2.119.148.104.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
185.80.92.123 attack
WordPress login Brute force / Web App Attack on client site.
2019-09-25 22:48:10
145.239.86.21 attackbots
Sep 25 15:18:15 mail sshd\[795\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.239.86.21
Sep 25 15:18:17 mail sshd\[795\]: Failed password for invalid user stacie from 145.239.86.21 port 59954 ssh2
Sep 25 15:22:48 mail sshd\[1517\]: Invalid user smtpguard from 145.239.86.21 port 44850
Sep 25 15:22:48 mail sshd\[1517\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.239.86.21
Sep 25 15:22:49 mail sshd\[1517\]: Failed password for invalid user smtpguard from 145.239.86.21 port 44850 ssh2
2019-09-25 22:18:08
218.92.0.200 attackspam
Sep 25 14:51:28 venus sshd\[12633\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.200  user=root
Sep 25 14:51:30 venus sshd\[12633\]: Failed password for root from 218.92.0.200 port 10642 ssh2
Sep 25 14:51:33 venus sshd\[12633\]: Failed password for root from 218.92.0.200 port 10642 ssh2
...
2019-09-25 22:54:14
113.172.98.59 attackspambots
Chat Spam
2019-09-25 23:01:14
139.59.41.154 attackspam
$f2bV_matches_ltvn
2019-09-25 22:41:06
183.131.82.99 attackspam
25.09.2019 14:59:14 SSH access blocked by firewall
2019-09-25 23:00:18
2.178.33.139 attack
IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/2.178.33.139/ 
 IR - 1H : (255)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : IR 
 NAME ASN : ASN12880 
 
 IP : 2.178.33.139 
 
 CIDR : 2.178.0.0/16 
 
 PREFIX COUNT : 276 
 
 UNIQUE IP COUNT : 1035264 
 
 
 WYKRYTE ATAKI Z ASN12880 :  
  1H - 2 
  3H - 2 
  6H - 7 
 12H - 20 
 24H - 49 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery
2019-09-25 22:39:10
36.112.137.55 attackspambots
Sep 25 15:52:53 mail sshd\[5799\]: Invalid user smbuser from 36.112.137.55 port 53859
Sep 25 15:52:53 mail sshd\[5799\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.112.137.55
Sep 25 15:52:55 mail sshd\[5799\]: Failed password for invalid user smbuser from 36.112.137.55 port 53859 ssh2
Sep 25 15:59:17 mail sshd\[6792\]: Invalid user frappe from 36.112.137.55 port 45446
Sep 25 15:59:17 mail sshd\[6792\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.112.137.55
2019-09-25 22:20:36
89.43.156.91 attackbotsspam
Sep 25 14:41:35 ns3110291 sshd\[24823\]: Invalid user pi from 89.43.156.91
Sep 25 14:41:35 ns3110291 sshd\[24825\]: Invalid user pi from 89.43.156.91
Sep 25 14:41:35 ns3110291 sshd\[24825\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.43.156.91 
Sep 25 14:41:35 ns3110291 sshd\[24823\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.43.156.91 
Sep 25 14:41:37 ns3110291 sshd\[24825\]: Failed password for invalid user pi from 89.43.156.91 port 50978 ssh2
...
2019-09-25 22:14:56
54.39.99.184 attackbotsspam
Sep 25 16:04:15 mail sshd\[7916\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.99.184
Sep 25 16:04:17 mail sshd\[7916\]: Failed password for invalid user ubnt from 54.39.99.184 port 17584 ssh2
Sep 25 16:07:52 mail sshd\[8368\]: Invalid user rk from 54.39.99.184 port 57328
Sep 25 16:07:52 mail sshd\[8368\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.99.184
Sep 25 16:07:54 mail sshd\[8368\]: Failed password for invalid user rk from 54.39.99.184 port 57328 ssh2
2019-09-25 22:20:51
198.228.145.150 attack
Sep 25 15:59:17 lnxweb62 sshd[23528]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.228.145.150
2019-09-25 22:34:23
103.4.62.62 attackspambots
445/tcp 445/tcp 445/tcp...
[2019-07-27/09-25]20pkt,1pt.(tcp)
2019-09-25 23:04:01
186.208.2.3 attack
Unauthorised access (Sep 25) SRC=186.208.2.3 LEN=40 TTL=108 ID=256 TCP DPT=139 WINDOW=16384 SYN 
Unauthorised access (Sep 24) SRC=186.208.2.3 LEN=40 TTL=108 ID=256 TCP DPT=139 WINDOW=16384 SYN 
Unauthorised access (Sep 23) SRC=186.208.2.3 LEN=40 TTL=108 ID=256 TCP DPT=139 WINDOW=16384 SYN 
Unauthorised access (Sep 23) SRC=186.208.2.3 LEN=40 TTL=108 ID=256 TCP DPT=139 WINDOW=16384 SYN 
Unauthorised access (Sep 22) SRC=186.208.2.3 LEN=40 TTL=108 ID=256 TCP DPT=139 WINDOW=16384 SYN
2019-09-25 22:22:08
2607:5300:61:bd9::107 attack
Attack, like DDOS, Brute-Force, Port Scan, Hack, etc.
2019-09-25 22:42:23
180.169.17.242 attackbots
Sep 25 08:07:47 aat-srv002 sshd[10728]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.169.17.242
Sep 25 08:07:48 aat-srv002 sshd[10728]: Failed password for invalid user webmaster from 180.169.17.242 port 49934 ssh2
Sep 25 08:11:14 aat-srv002 sshd[10805]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.169.17.242
Sep 25 08:11:16 aat-srv002 sshd[10805]: Failed password for invalid user aleica from 180.169.17.242 port 53452 ssh2
...
2019-09-25 22:49:09

Recently Reported IPs

103.112.169.37 102.68.109.129 68.183.42.105 45.117.82.191
31.187.96.68 27.64.60.114 151.101.112.33 14.185.42.250
141.98.80.100 52.71.65.129 51.89.185.101 183.147.22.154
176.51.240.30 80.84.57.116 192.241.240.89 77.54.187.137
85.76.1.245 91.189.92.19 36.7.240.149 134.73.51.220