Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
104.148.41.23 attackbotsspam
Automatic report - CMS Brute-Force Attack
2020-04-27 21:14:37
104.148.41.11 attack
Automatic report - CMS Brute-Force Attack
2020-04-27 21:13:56
104.148.41.102 attackbots
jannisjulius.de 104.148.41.102 [25/Apr/2020:08:39:54 +0200] "POST /wp-login.php HTTP/1.1" 200 11917 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:69.0) Gecko/20100101 Firefox/69.0"
jannisjulius.de 104.148.41.102 [25/Apr/2020:08:39:55 +0200] "POST /wp-login.php HTTP/1.1" 200 12304 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:69.0) Gecko/20100101 Firefox/69.0"
2020-04-25 19:56:34
104.148.41.63 attackbotsspam
Return-Path: 
Delivered-To: hide@mx1.tees.ne.jp
Received: (qmail 31403 invoked
 by uid 0);
 15 Apr 2020 12:57:53 +0900
Received: from unknown (HELO rcvgw11.tees.ne.jp) (202.216.138.25)
 by mdl.tees.ne.jp
 with SMTP;
 15 Apr 2020 12:57:53 +0900
Received: from smtp.work (unknown [104.148.41.63])
 by rcvgw11.tees.ne.jp (Postfix)
 with ESMTP id 7DBD520C36 for ;
 Wed, 15 Apr 2020 12:57:53 +0900 (JST)
Subject: [Norton AntiSpam]コロナウイルス撲滅セール
From: info@q04.402smtp.work
To: hide@mx1.tees.ne.jp
Message-ID: 20200415125643
Content-Type: text/plain; charset="SHIFT_JIS"
Content-Transfer-Encoding: 7bit
MIME-Version: 1.0
X-Brightmail-Tracker: AAAABjVkWnA1ZDecGo+sLDRHjzs0R6FLNEkVcA==
2020-04-16 03:18:46
104.148.41.11 attackbots
[Wed Jan 08 21:12:46.700267 2020] [access_compat:error] [pid 12566] [client 104.148.41.11:44720] AH01797: client denied by server configuration: /var/www/html/josh/wp-login.php
...
2020-03-04 01:01:00
104.148.41.168 attack
[Thu Jan 09 01:57:44.771502 2020] [access_compat:error] [pid 24095] [client 104.148.41.168:40576] AH01797: client denied by server configuration: /var/www/html/luke/wp-login.php
...
2020-03-04 00:50:53
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.148.41.109
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 39878
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.148.41.109.			IN	A

;; AUTHORITY SECTION:
.			329	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022500 1800 900 604800 86400

;; Query time: 21 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 26 00:44:34 CST 2022
;; MSG SIZE  rcvd: 107
Host info
b';; connection timed out; no servers could be reached
'
Nslookup info:
server can't find 104.148.41.109.in-addr.arpa: SERVFAIL
Related IP info:
Related comments:
IP Type Details Datetime
203.82.42.90 attackspam
SSH Brute-Force reported by Fail2Ban
2019-07-09 08:28:09
118.25.100.202 attackbots
2019-07-08 05:35:44 server sshd[55000]: Failed password for www from 118.25.100.202 port 60064 ssh2
2019-07-09 08:45:44
139.59.95.244 attackspam
SSH Brute-Force reported by Fail2Ban
2019-07-09 08:37:14
218.92.0.195 attackbotsspam
2019-07-08T23:45:42.792094abusebot-3.cloudsearch.cf sshd\[14587\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.195  user=root
2019-07-09 08:32:22
185.119.82.126 attackspam
pillott.xyz (checking ip) = 51.79.64.101
2019-07-09 08:57:22
218.76.69.60 attackbots
" "
2019-07-09 09:13:04
104.236.214.8 attackbotsspam
$f2bV_matches
2019-07-09 08:48:04
154.118.241.86 attackbots
Caught in portsentry honeypot
2019-07-09 09:10:37
162.243.148.116 attackbots
Jul  8 18:34:32   TCP Attack: SRC=162.243.148.116 DST=[Masked] LEN=163 TOS=0x00 PREC=0x00 TTL=56  DF PROTO=TCP SPT=48598 DPT=80 WINDOW=229 RES=0x00 ACK PSH URGP=0
2019-07-09 09:07:25
190.111.239.48 attackspambots
SSH-BruteForce
2019-07-09 08:39:04
23.129.64.215 attackspambots
SSHScan
2019-07-09 08:30:27
119.29.147.247 attackspambots
Jul  9 00:38:39 eventyay sshd[31504]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.147.247
Jul  9 00:38:41 eventyay sshd[31504]: Failed password for invalid user aba from 119.29.147.247 port 58384 ssh2
Jul  9 00:48:38 eventyay sshd[1473]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.147.247
...
2019-07-09 08:42:56
37.187.0.29 attackbots
2019-07-09T02:03:34.788948  sshd[12859]: Invalid user eclipse from 37.187.0.29 port 46258
2019-07-09T02:03:34.803983  sshd[12859]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.0.29
2019-07-09T02:03:34.788948  sshd[12859]: Invalid user eclipse from 37.187.0.29 port 46258
2019-07-09T02:03:36.949972  sshd[12859]: Failed password for invalid user eclipse from 37.187.0.29 port 46258 ssh2
2019-07-09T02:05:03.646695  sshd[12881]: Invalid user ali from 37.187.0.29 port 33922
...
2019-07-09 08:33:39
85.227.85.44 attackspambots
NAME : SE-CYBER-20041217 CIDR : 85.224.0.0/13 SYN Flood DDoS Attack Sweden - block certain countries :) IP: 85.227.85.44  Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN  - data recovery https://help-dysk.pl
2019-07-09 09:12:00
86.195.244.22 attack
Jul  9 01:40:21 mout sshd[17338]: Invalid user changeme from 86.195.244.22 port 36794
2019-07-09 08:44:53

Recently Reported IPs

104.148.46.107 104.148.41.126 103.206.118.96 104.148.46.116
104.148.46.12 240.41.242.104 104.148.46.126 104.148.46.131
104.148.46.130 104.148.46.123 104.148.46.136 104.148.46.124
104.148.46.139 104.148.46.114 104.148.46.133 104.148.46.141
103.206.118.98 104.148.46.143 104.148.46.145 104.148.46.148