Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: Global Frag Networks

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackbotsspam
Jan  7 20:47:46 mxgate1 postfix/postscreen[8982]: CONNECT from [104.148.64.185]:51528 to [176.31.12.44]:25
Jan  7 20:47:46 mxgate1 postfix/dnsblog[9025]: addr 104.148.64.185 listed by domain zen.spamhaus.org as 127.0.0.3
Jan  7 20:47:47 mxgate1 postfix/dnsblog[9026]: addr 104.148.64.185 listed by domain b.barracudacentral.org as 127.0.0.2
Jan  7 20:47:52 mxgate1 postfix/postscreen[8982]: DNSBL rank 3 for [104.148.64.185]:51528
Jan x@x
Jan  7 20:47:53 mxgate1 postfix/postscreen[8982]: DISCONNECT [104.148.64.185]:51528


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=104.148.64.185
2020-01-08 17:53:27
Comments on same subnet:
IP Type Details Datetime
104.148.64.136 attackspam
Nov 25 07:13:40 mxgate1 postfix/postscreen[31676]: CONNECT from [104.148.64.136]:60602 to [176.31.12.44]:25
Nov 25 07:13:40 mxgate1 postfix/dnsblog[31678]: addr 104.148.64.136 listed by domain zen.spamhaus.org as 127.0.0.3
Nov 25 07:13:40 mxgate1 postfix/dnsblog[31680]: addr 104.148.64.136 listed by domain b.barracudacentral.org as 127.0.0.2
Nov 25 07:13:46 mxgate1 postfix/postscreen[31676]: DNSBL rank 3 for [104.148.64.136]:60602
Nov x@x
Nov 25 07:13:47 mxgate1 postfix/postscreen[31676]: DISCONNECT [104.148.64.136]:60602


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=104.148.64.136
2019-11-25 19:58:48
104.148.64.174 attackspam
10.10.2019 13:58:30 - Login Fail on hMailserver 
Detected by ELinOX-hMail-A2F
2019-10-10 21:30:17
104.148.64.135 attackspam
Jul 30 04:21:07 mxgate1 postfix/postscreen[8687]: CONNECT from [104.148.64.135]:60088 to [176.31.12.44]:25
Jul 30 04:21:07 mxgate1 postfix/dnsblog[8958]: addr 104.148.64.135 listed by domain zen.spamhaus.org as 127.0.0.3
Jul 30 04:21:13 mxgate1 postfix/postscreen[8687]: DNSBL rank 2 for [104.148.64.135]:60088
Jul x@x
Jul 30 04:21:14 mxgate1 postfix/postscreen[8687]: DISCONNECT [104.148.64.135]:60088


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=104.148.64.135
2019-07-30 13:41:40
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.148.64.185
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5240
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.148.64.185.			IN	A

;; AUTHORITY SECTION:
.			126	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020010800 1800 900 604800 86400

;; Query time: 101 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 08 17:53:24 CST 2020
;; MSG SIZE  rcvd: 118
Host info
Host 185.64.148.104.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 185.64.148.104.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
195.54.160.21 attackspambots
firewall-block, port(s): 2375/tcp, 4506/tcp
2020-07-23 07:33:10
171.224.82.223 attackbots
Failed RDP login
2020-07-23 07:57:52
179.222.96.70 attackspambots
2020-07-22T23:28:44.181424shield sshd\[13629\]: Invalid user e from 179.222.96.70 port 41396
2020-07-22T23:28:44.192721shield sshd\[13629\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.222.96.70
2020-07-22T23:28:46.525467shield sshd\[13629\]: Failed password for invalid user e from 179.222.96.70 port 41396 ssh2
2020-07-22T23:33:14.330059shield sshd\[14424\]: Invalid user andrzej from 179.222.96.70 port 46303
2020-07-22T23:33:14.341910shield sshd\[14424\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.222.96.70
2020-07-23 07:43:40
188.22.2.98 attackbots
Failed RDP login
2020-07-23 07:49:08
37.144.61.72 attackspambots
Failed RDP login
2020-07-23 07:43:10
106.12.89.206 attack
Jul 23 00:51:18 piServer sshd[23946]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.89.206 
Jul 23 00:51:19 piServer sshd[23946]: Failed password for invalid user zhangbo from 106.12.89.206 port 38326 ssh2
Jul 23 00:55:06 piServer sshd[24321]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.89.206 
...
2020-07-23 07:58:26
115.146.126.209 attackspam
Jul 23 01:28:45 fhem-rasp sshd[18904]: Invalid user denise from 115.146.126.209 port 39244
...
2020-07-23 07:51:05
107.170.178.103 attackspam
*Port Scan* detected from 107.170.178.103 (US/United States/New York/New York/tapafriend.com). 4 hits in the last 106 seconds
2020-07-23 08:00:58
192.99.34.42 attackspambots
Sniffing for wp-login
2020-07-23 07:53:00
98.194.110.50 attackbots
Port Scan detected!
...
2020-07-23 08:02:45
222.186.175.182 attackbots
Jul 23 01:49:11 nextcloud sshd\[4382\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.182  user=root
Jul 23 01:49:13 nextcloud sshd\[4382\]: Failed password for root from 222.186.175.182 port 29602 ssh2
Jul 23 01:49:35 nextcloud sshd\[4798\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.182  user=root
2020-07-23 07:54:43
80.211.185.217 attackbots
Distributed brute force attack
2020-07-23 08:05:37
191.193.225.202 attack
*Port Scan* detected from 191.193.225.202 (BR/Brazil/São Paulo/Itu/191-193-225-202.user.vivozap.com.br). 4 hits in the last 166 seconds
2020-07-23 07:39:15
103.214.129.204 attack
Jul 23 02:01:11 * sshd[12322]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.214.129.204
Jul 23 02:01:13 * sshd[12322]: Failed password for invalid user toor from 103.214.129.204 port 39758 ssh2
2020-07-23 08:02:15
206.189.3.176 attackspam
Jul 23 00:56:10 rocket sshd[12087]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.3.176
Jul 23 00:56:13 rocket sshd[12087]: Failed password for invalid user ts3server1 from 206.189.3.176 port 48680 ssh2
Jul 23 01:00:15 rocket sshd[12709]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.3.176
...
2020-07-23 08:04:54

Recently Reported IPs

58.186.16.77 76.14.196.97 1.173.42.162 122.176.119.103
128.68.227.200 187.33.239.231 202.166.219.241 106.12.33.67
238.150.95.31 126.201.98.251 141.177.87.156 103.20.152.50
228.87.200.156 222.88.159.102 94.131.202.254 41.186.19.157
49.248.36.154 27.158.48.211 14.242.146.166 203.94.229.202