104.148.2.164 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
104.148.204.133	attack	Aug 19 18:47:27 garuda sshd[250573]: Invalid user admin from 104.148.204.133 Aug 19 18:47:29 garuda sshd[250573]: Failed password for invalid user admin from 104.148.204.133 port 33024 ssh2 Aug 19 18:47:30 garuda sshd[250573]: Received disconnect from 104.148.204.133: 11: Bye Bye [preauth] Aug 19 18:47:30 garuda sshd[250577]: Invalid user admin from 104.148.204.133 Aug 19 18:47:33 garuda sshd[250577]: Failed password for invalid user admin from 104.148.204.133 port 33147 ssh2 Aug 19 18:47:33 garuda sshd[250577]: Received disconnect from 104.148.204.133: 11: Bye Bye [preauth] Aug 19 18:47:34 garuda sshd[250593]: Invalid user admin from 104.148.204.133 Aug 19 18:47:36 garuda sshd[250593]: Failed password for invalid user admin from 104.148.204.133 port 33268 ssh2 Aug 19 18:47:36 garuda sshd[250593]: Received disconnect from 104.148.204.133: 11: Bye Bye [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=104.148.204.133	2020-08-21 20:30:35
104.148.21.248	attack	Nov 19 13:47:22 mxgate1 postfix/postscreen[7608]: CONNECT from [104.148.21.248]:33592 to [176.31.12.44]:25 Nov 19 13:47:22 mxgate1 postfix/dnsblog[7610]: addr 104.148.21.248 listed by domain zen.spamhaus.org as 127.0.0.3 Nov 19 13:47:22 mxgate1 postfix/dnsblog[7609]: addr 104.148.21.248 listed by domain b.barracudacentral.org as 127.0.0.2 Nov 19 13:47:28 mxgate1 postfix/postscreen[7608]: DNSBL rank 3 for [104.148.21.248]:33592 Nov x@x Nov 19 13:47:29 mxgate1 postfix/postscreen[7608]: DISCONNECT [104.148.21.248]:33592 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=104.148.21.248	2019-11-19 22:51:50

Type

Details

Datetime

104.148.204.133

attack

Aug 19 18:47:27 garuda sshd[250573]: Invalid user admin from 104.148.204.133
Aug 19 18:47:29 garuda sshd[250573]: Failed password for invalid user admin from 104.148.204.133 port 33024 ssh2
Aug 19 18:47:30 garuda sshd[250573]: Received disconnect from 104.148.204.133: 11: Bye Bye [preauth]
Aug 19 18:47:30 garuda sshd[250577]: Invalid user admin from 104.148.204.133
Aug 19 18:47:33 garuda sshd[250577]: Failed password for invalid user admin from 104.148.204.133 port 33147 ssh2
Aug 19 18:47:33 garuda sshd[250577]: Received disconnect from 104.148.204.133: 11: Bye Bye [preauth]
Aug 19 18:47:34 garuda sshd[250593]: Invalid user admin from 104.148.204.133
Aug 19 18:47:36 garuda sshd[250593]: Failed password for invalid user admin from 104.148.204.133 port 33268 ssh2
Aug 19 18:47:36 garuda sshd[250593]: Received disconnect from 104.148.204.133: 11: Bye Bye [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=104.148.204.133

2020-08-21 20:30:35

104.148.21.248

attack

Nov 19 13:47:22 mxgate1 postfix/postscreen[7608]: CONNECT from [104.148.21.248]:33592 to [176.31.12.44]:25
Nov 19 13:47:22 mxgate1 postfix/dnsblog[7610]: addr 104.148.21.248 listed by domain zen.spamhaus.org as 127.0.0.3
Nov 19 13:47:22 mxgate1 postfix/dnsblog[7609]: addr 104.148.21.248 listed by domain b.barracudacentral.org as 127.0.0.2
Nov 19 13:47:28 mxgate1 postfix/postscreen[7608]: DNSBL rank 3 for [104.148.21.248]:33592
Nov x@x
Nov 19 13:47:29 mxgate1 postfix/postscreen[7608]: DISCONNECT [104.148.21.248]:33592


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=104.148.21.248

2019-11-19 22:51:50

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.148.2.164
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49125
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.148.2.164.			IN	A

;; AUTHORITY SECTION:
.			392	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030300 1800 900 604800 86400

;; Query time: 74 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 04 01:00:50 CST 2022
;; MSG SIZE  rcvd: 106

Host info

164.2.148.104.in-addr.arpa domain name pointer skill-via.aydinozinsaat.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
164.2.148.104.in-addr.arpa	name = skill-via.aydinozinsaat.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
196.52.43.53	attack	firewall-block, port(s): 9092/tcp	2020-05-17 00:49:02
179.216.177.121	attack	2020-05-16T04:50:17.4313811495-001 sshd[9558]: Invalid user ts3server from 179.216.177.121 port 56554 2020-05-16T04:50:19.9355271495-001 sshd[9558]: Failed password for invalid user ts3server from 179.216.177.121 port 56554 ssh2 2020-05-16T04:58:01.9255511495-001 sshd[9813]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.216.177.121 user=root 2020-05-16T04:58:03.7891831495-001 sshd[9813]: Failed password for root from 179.216.177.121 port 34240 ssh2 2020-05-16T05:01:40.9020791495-001 sshd[9945]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.216.177.121 user=root 2020-05-16T05:01:43.4982561495-001 sshd[9945]: Failed password for root from 179.216.177.121 port 51313 ssh2 ...	2020-05-17 00:59:55
61.166.155.45	attackbotsspam	May 16 11:55:42 vmd17057 sshd[1957]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.166.155.45 May 16 11:55:44 vmd17057 sshd[1957]: Failed password for invalid user demo from 61.166.155.45 port 44992 ssh2 ...	2020-05-17 01:14:37
85.75.197.56	attackbots	Scanning	2020-05-17 00:55:53
203.162.123.151	attack	Invalid user vinay from 203.162.123.151 port 54810	2020-05-17 01:07:57
54.37.229.128	attackspambots	May 16 15:24:40 srv01 sshd[25788]: Invalid user yassine from 54.37.229.128 port 48388 May 16 15:24:40 srv01 sshd[25788]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.229.128 May 16 15:24:40 srv01 sshd[25788]: Invalid user yassine from 54.37.229.128 port 48388 May 16 15:24:42 srv01 sshd[25788]: Failed password for invalid user yassine from 54.37.229.128 port 48388 ssh2 May 16 15:32:33 srv01 sshd[26116]: Invalid user rebel from 54.37.229.128 port 47856 ...	2020-05-17 01:40:31
193.186.15.35	attackbotsspam	2020-05-16 13:16:01,194 fail2ban.actions: WARNING [ssh] Ban 193.186.15.35	2020-05-17 01:29:24
77.204.16.130	attackspambots	Apr 25 21:36:49 hermescis postfix/smtpd[31355]: NOQUEUE: reject: RCPT from 130.16.204.77.rev.sfr.net[77.204.16.130]: 550 5.1.1 : Recipient address rejected:* from= to= proto=ESMTP helo=<123.143.205.77.rev.sfr.net>	2020-05-17 01:00:29
133.167.117.22	attackspam	"Unauthorized connection attempt on SSHD detected"	2020-05-17 01:33:01
51.38.238.205	attackbots	SSH Bruteforce attack	2020-05-17 01:36:18
94.102.51.31	attackspam	05/16/2020-06:01:35.405210 94.102.51.31 Protocol: 6 ET SCAN NMAP -sS window 1024	2020-05-17 01:17:43
104.248.117.70	attackbots	SS5,WP GET /wp-login.php	2020-05-17 00:50:07
180.67.59.134	attack	1433/tcp 1433/tcp [2020-05-11]2pkt	2020-05-17 01:10:00
94.102.51.58	attackspam	TCP (SYN) 94.102.51.58:46653 -> port 3782, len 44	2020-05-17 01:16:22
140.143.197.56	attackbots	May 16 11:03:29 Ubuntu-1404-trusty-64-minimal sshd\[30520\]: Invalid user paradigm from 140.143.197.56 May 16 11:03:29 Ubuntu-1404-trusty-64-minimal sshd\[30520\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.197.56 May 16 11:03:31 Ubuntu-1404-trusty-64-minimal sshd\[30520\]: Failed password for invalid user paradigm from 140.143.197.56 port 10443 ssh2 May 16 11:25:27 Ubuntu-1404-trusty-64-minimal sshd\[9043\]: Invalid user deploy from 140.143.197.56 May 16 11:25:27 Ubuntu-1404-trusty-64-minimal sshd\[9043\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.197.56	2020-05-17 01:24:20

Recently Reported IPs

104.148.2.162	104.148.29.242	104.148.29.243	104.148.29.244
104.148.29.245	104.148.29.45	104.148.29.46	104.148.46.248
104.148.52.87	104.148.52.88	104.148.63.89	104.148.67.251
104.148.67.252	104.149.204.46	104.149.206.194	104.149.206.196
104.149.206.199	104.149.206.204	104.149.206.206	104.149.206.209