Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Los Angeles

Region: California

Country: United States

Internet Service Provider: HLNode

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
104.148.41.23 attackbotsspam
Automatic report - CMS Brute-Force Attack
2020-04-27 21:14:37
104.148.41.11 attack
Automatic report - CMS Brute-Force Attack
2020-04-27 21:13:56
104.148.41.102 attackbots
jannisjulius.de 104.148.41.102 [25/Apr/2020:08:39:54 +0200] "POST /wp-login.php HTTP/1.1" 200 11917 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:69.0) Gecko/20100101 Firefox/69.0"
jannisjulius.de 104.148.41.102 [25/Apr/2020:08:39:55 +0200] "POST /wp-login.php HTTP/1.1" 200 12304 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:69.0) Gecko/20100101 Firefox/69.0"
2020-04-25 19:56:34
104.148.41.63 attackbotsspam
Return-Path: 
Delivered-To: hide@mx1.tees.ne.jp
Received: (qmail 31403 invoked
 by uid 0);
 15 Apr 2020 12:57:53 +0900
Received: from unknown (HELO rcvgw11.tees.ne.jp) (202.216.138.25)
 by mdl.tees.ne.jp
 with SMTP;
 15 Apr 2020 12:57:53 +0900
Received: from smtp.work (unknown [104.148.41.63])
 by rcvgw11.tees.ne.jp (Postfix)
 with ESMTP id 7DBD520C36 for ;
 Wed, 15 Apr 2020 12:57:53 +0900 (JST)
Subject: [Norton AntiSpam]コロナウイルス撲滅セール
From: info@q04.402smtp.work
To: hide@mx1.tees.ne.jp
Message-ID: 20200415125643
Content-Type: text/plain; charset="SHIFT_JIS"
Content-Transfer-Encoding: 7bit
MIME-Version: 1.0
X-Brightmail-Tracker: AAAABjVkWnA1ZDecGo+sLDRHjzs0R6FLNEkVcA==
2020-04-16 03:18:46
104.148.41.11 attackbots
[Wed Jan 08 21:12:46.700267 2020] [access_compat:error] [pid 12566] [client 104.148.41.11:44720] AH01797: client denied by server configuration: /var/www/html/josh/wp-login.php
...
2020-03-04 01:01:00
104.148.41.168 attack
[Thu Jan 09 01:57:44.771502 2020] [access_compat:error] [pid 24095] [client 104.148.41.168:40576] AH01797: client denied by server configuration: /var/www/html/luke/wp-login.php
...
2020-03-04 00:50:53
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.148.41.26
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52886
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.148.41.26.			IN	A

;; AUTHORITY SECTION:
.			566	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019110602 1800 900 604800 86400

;; Query time: 109 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Nov 07 05:36:57 CST 2019
;; MSG SIZE  rcvd: 117
Host info
Host 26.41.148.104.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 26.41.148.104.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
146.148.31.199 attack
Dec 31 17:18:42 demo sshd[19607]: Invalid user migaud from 146.148.31.199 port 34064
...
2020-01-01 00:46:25
185.94.111.1 attack
185.94.111.1 was recorded 6 times by 5 hosts attempting to connect to the following ports: 389,11211. Incident counter (4h, 24h, all-time): 6, 52, 6666
2020-01-01 00:40:49
61.8.249.177 attackbots
3389BruteforceFW23
2020-01-01 01:03:59
128.199.219.181 attack
Dec 31 17:45:49 server sshd\[21488\]: Invalid user pponline from 128.199.219.181
Dec 31 17:45:49 server sshd\[21488\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.219.181 
Dec 31 17:45:51 server sshd\[21488\]: Failed password for invalid user pponline from 128.199.219.181 port 55184 ssh2
Dec 31 17:51:35 server sshd\[22712\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.219.181  user=root
Dec 31 17:51:37 server sshd\[22712\]: Failed password for root from 128.199.219.181 port 51257 ssh2
...
2020-01-01 00:43:01
112.230.94.158 attackbots
23/tcp
[2019-12-31]1pkt
2020-01-01 00:56:31
142.93.15.179 attackbots
Dec 31 16:25:16 [host] sshd[9286]: Invalid user 66666 from 142.93.15.179
Dec 31 16:25:16 [host] sshd[9286]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.15.179
Dec 31 16:25:18 [host] sshd[9286]: Failed password for invalid user 66666 from 142.93.15.179 port 53916 ssh2
2020-01-01 00:27:30
119.29.242.48 attack
Input Traffic from this IP, but critial abuseconfidencescore
2020-01-01 01:02:05
103.55.91.51 attackbots
Dec 31 15:35:10 server sshd[29140]: Failed password for invalid user tenot from 103.55.91.51 port 47978 ssh2
Dec 31 15:47:25 server sshd[29767]: Failed password for invalid user aks from 103.55.91.51 port 36318 ssh2
Dec 31 15:52:16 server sshd[29907]: Failed password for invalid user rayment from 103.55.91.51 port 35650 ssh2
2020-01-01 00:23:14
112.85.42.237 attack
Dec 31 16:29:21 localhost sshd\[130249\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.237  user=root
Dec 31 16:29:23 localhost sshd\[130249\]: Failed password for root from 112.85.42.237 port 23959 ssh2
Dec 31 16:29:25 localhost sshd\[130249\]: Failed password for root from 112.85.42.237 port 23959 ssh2
Dec 31 16:29:27 localhost sshd\[130249\]: Failed password for root from 112.85.42.237 port 23959 ssh2
Dec 31 16:32:50 localhost sshd\[130344\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.237  user=root
...
2020-01-01 00:39:12
116.196.108.9 attackbotsspam
Dec 31 09:51:28 web1 postfix/smtpd[26895]: warning: unknown[116.196.108.9]: SASL LOGIN authentication failed: authentication failure
...
2020-01-01 00:45:20
218.70.174.23 attack
Dec 31 15:18:27 zeus sshd[14536]: Failed password for root from 218.70.174.23 port 51707 ssh2
Dec 31 15:22:09 zeus sshd[14650]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.70.174.23 
Dec 31 15:22:10 zeus sshd[14650]: Failed password for invalid user julie from 218.70.174.23 port 59355 ssh2
2020-01-01 00:43:34
201.168.130.218 attackspam
RDP Brute-Force (Grieskirchen RZ1)
2020-01-01 00:50:43
222.186.173.142 attackbots
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.142  user=root
Failed password for root from 222.186.173.142 port 36326 ssh2
Failed password for root from 222.186.173.142 port 36326 ssh2
Failed password for root from 222.186.173.142 port 36326 ssh2
Failed password for root from 222.186.173.142 port 36326 ssh2
2020-01-01 00:25:22
129.226.118.45 attack
SSH/22 MH Probe, BF, Hack -
2020-01-01 00:22:52
176.31.170.245 attack
$f2bV_matches
2020-01-01 00:34:17

Recently Reported IPs

125.214.56.150 213.193.30.13 72.69.72.10 213.16.81.182
190.201.182.127 183.83.67.15 182.202.231.218 125.115.87.113
192.158.224.0 167.172.37.150 222.217.21.64 210.210.130.139
118.68.101.135 183.83.91.160 67.21.32.80 46.107.230.156
210.195.224.155 200.245.153.150 93.34.159.7 210.195.179.84