104.149.128.116

Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
104.149.128.114	attack	Jul 26 01:42:41 vps200512 sshd\[31448\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.149.128.114 user=root Jul 26 01:42:43 vps200512 sshd\[31448\]: Failed password for root from 104.149.128.114 port 52092 ssh2 Jul 26 01:47:07 vps200512 sshd\[31565\]: Invalid user dancer from 104.149.128.114 Jul 26 01:47:07 vps200512 sshd\[31565\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.149.128.114 Jul 26 01:47:09 vps200512 sshd\[31565\]: Failed password for invalid user dancer from 104.149.128.114 port 52092 ssh2	2019-07-26 13:55:32

Type

Details

Datetime

104.149.128.114

attack

Jul 26 01:42:41 vps200512 sshd\[31448\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.149.128.114  user=root
Jul 26 01:42:43 vps200512 sshd\[31448\]: Failed password for root from 104.149.128.114 port 52092 ssh2
Jul 26 01:47:07 vps200512 sshd\[31565\]: Invalid user dancer from 104.149.128.114
Jul 26 01:47:07 vps200512 sshd\[31565\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.149.128.114
Jul 26 01:47:09 vps200512 sshd\[31565\]: Failed password for invalid user dancer from 104.149.128.114 port 52092 ssh2

2019-07-26 13:55:32

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.149.128.116
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1239
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.149.128.116.		IN	A

;; AUTHORITY SECTION:
.			189	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022500 1800 900 604800 86400

;; Query time: 59 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 25 19:31:18 CST 2022
;; MSG SIZE  rcvd: 108

Host info

116.128.149.104.in-addr.arpa domain name pointer unassigned.psychz.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
116.128.149.104.in-addr.arpa	name = unassigned.psychz.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
142.93.56.57	attack	2020-06-09T00:07:11.477028afi-git.jinr.ru sshd[24492]: Failed password for admin from 142.93.56.57 port 46968 ssh2 2020-06-09T00:10:33.852448afi-git.jinr.ru sshd[25344]: Invalid user akarstein from 142.93.56.57 port 44510 2020-06-09T00:10:33.855533afi-git.jinr.ru sshd[25344]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.56.57 2020-06-09T00:10:33.852448afi-git.jinr.ru sshd[25344]: Invalid user akarstein from 142.93.56.57 port 44510 2020-06-09T00:10:36.178002afi-git.jinr.ru sshd[25344]: Failed password for invalid user akarstein from 142.93.56.57 port 44510 ssh2 ...	2020-06-09 05:40:17
69.162.79.242	attack	69.162.79.242 - - [08/Jun/2020:21:25:43 +0100] "POST /wp-login.php HTTP/1.1" 200 1875 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 69.162.79.242 - - [08/Jun/2020:21:25:44 +0100] "POST /wp-login.php HTTP/1.1" 200 1860 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 69.162.79.242 - - [08/Jun/2020:21:25:45 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-06-09 05:22:13
123.59.194.252	attack	IP 123.59.194.252 attacked honeypot on port: 139 at 6/8/2020 9:25:37 PM	2020-06-09 05:15:14
85.209.0.214	attackbots	[MK-Root1] Blocked by UFW	2020-06-09 05:10:00
103.23.100.87	attackbotsspam	2020-06-08T20:51:30.701565shield sshd\[26565\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.23.100.87 user=root 2020-06-08T20:51:33.109531shield sshd\[26565\]: Failed password for root from 103.23.100.87 port 38716 ssh2 2020-06-08T20:55:15.117747shield sshd\[27935\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.23.100.87 user=root 2020-06-08T20:55:16.752871shield sshd\[27935\]: Failed password for root from 103.23.100.87 port 34292 ssh2 2020-06-08T20:58:56.664882shield sshd\[29592\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.23.100.87 user=root	2020-06-09 05:03:31
201.231.115.87	attack	Jun 8 22:21:54 vpn01 sshd[15403]: Failed password for root from 201.231.115.87 port 39777 ssh2 Jun 8 22:25:55 vpn01 sshd[15422]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.231.115.87 ...	2020-06-09 05:08:51
116.110.10.167	attackspam	Jun 8 15:52:37 UTC__SANYALnet-Labs__lste sshd[22496]: Connection from 116.110.10.167 port 55756 on 192.168.1.10 port 22 Jun 8 15:52:39 UTC__SANYALnet-Labs__lste sshd[22496]: User r.r from 116.110.10.167 not allowed because not listed in AllowUsers Jun 8 15:52:39 UTC__SANYALnet-Labs__lste sshd[22496]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.110.10.167 user=r.r Jun 8 15:52:42 UTC__SANYALnet-Labs__lste sshd[22496]: Failed password for invalid user r.r from 116.110.10.167 port 55756 ssh2 Jun 8 15:52:42 UTC__SANYALnet-Labs__lste sshd[22496]: Connection closed by 116.110.10.167 port 55756 [preauth] Jun 8 15:53:00 UTC__SANYALnet-Labs__lste sshd[22553]: Connection from 116.110.10.167 port 57298 on 192.168.1.10 port 22 Jun 8 15:53:02 UTC__SANYALnet-Labs__lste sshd[22555]: Connection from 116.110.10.167 port 57624 on 192.168.1.10 port 22 Jun 8 15:53:04 UTC__SANYALnet-Labs__lste sshd[22555]: User r.r from 116.110.10.167 ........ -------------------------------	2020-06-09 05:04:34
118.170.50.39	attackspambots	Port Scan detected! ...	2020-06-09 05:25:14
46.29.155.20	attack	" "	2020-06-09 05:13:22
46.38.145.249	attack	Jun 8 21:15:15 mail postfix/smtpd[130723]: warning: unknown[46.38.145.249]: SASL LOGIN authentication failed: generic failure Jun 8 21:15:35 mail postfix/smtpd[129468]: warning: unknown[46.38.145.249]: SASL LOGIN authentication failed: generic failure Jun 8 21:16:47 mail postfix/smtpd[128748]: warning: unknown[46.38.145.249]: SASL LOGIN authentication failed: generic failure ...	2020-06-09 05:20:42
144.172.73.34	attackspambots	ssh brute force	2020-06-09 05:30:58
212.166.68.146	attack	DATE:2020-06-08 23:10:19, IP:212.166.68.146, PORT:ssh SSH brute force auth (docker-dc)	2020-06-09 05:31:19
106.38.116.162	attackbotsspam	IP 106.38.116.162 attacked honeypot on port: 139 at 6/8/2020 9:25:25 PM	2020-06-09 05:33:37
89.248.168.218	attackspam	Jun 08 16:18:45 pop3-login: Info: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=89.248.168.218, lip=162.212.158.192, session=\ Jun 08 16:24:26 pop3-login: Info: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=89.248.168.218, lip=162.212.158.192, session=\ Jun 08 17:02:00 pop3-login: Info: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=89.248.168.218, lip=162.212.158.192, session=\ ...	2020-06-09 05:05:46
51.38.37.254	attackbotsspam	$f2bV_matches	2020-06-09 05:38:54

Recently Reported IPs

104.148.97.225	104.149.129.254	104.149.129.44	104.149.129.42
104.149.131.118	104.149.131.210	104.149.128.118	101.109.176.98
104.149.129.46	104.149.133.198	104.149.134.114	104.149.133.195
104.149.138.74	104.149.139.206	101.109.177.101	104.149.140.173
104.149.140.164	104.149.140.169	104.149.140.174	101.109.177.110