104.154.50.149

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: Google LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspambots	2019-09-26T19:41:12.0302381495-001 sshd\[48820\]: Failed password for invalid user openfiler from 104.154.50.149 port 58660 ssh2 2019-09-26T19:53:18.6749951495-001 sshd\[49773\]: Invalid user sysop from 104.154.50.149 port 41024 2019-09-26T19:53:18.6819451495-001 sshd\[49773\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.50.154.104.bc.googleusercontent.com 2019-09-26T19:53:20.8309881495-001 sshd\[49773\]: Failed password for invalid user sysop from 104.154.50.149 port 41024 ssh2 2019-09-26T19:57:20.7172291495-001 sshd\[50136\]: Invalid user sites from 104.154.50.149 port 53962 2019-09-26T19:57:20.7244781495-001 sshd\[50136\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.50.154.104.bc.googleusercontent.com ...	2019-09-27 08:08:47
attackbotsspam	Sep 20 19:09:29 friendsofhawaii sshd\[20689\]: Invalid user testing from 104.154.50.149 Sep 20 19:09:29 friendsofhawaii sshd\[20689\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.50.154.104.bc.googleusercontent.com Sep 20 19:09:31 friendsofhawaii sshd\[20689\]: Failed password for invalid user testing from 104.154.50.149 port 48984 ssh2 Sep 20 19:13:52 friendsofhawaii sshd\[21064\]: Invalid user noemi from 104.154.50.149 Sep 20 19:13:52 friendsofhawaii sshd\[21064\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.50.154.104.bc.googleusercontent.com	2019-09-21 17:19:56

Type

Details

Datetime

attackspambots

2019-09-26T19:41:12.0302381495-001 sshd\[48820\]: Failed password for invalid user openfiler from 104.154.50.149 port 58660 ssh2
2019-09-26T19:53:18.6749951495-001 sshd\[49773\]: Invalid user sysop from 104.154.50.149 port 41024
2019-09-26T19:53:18.6819451495-001 sshd\[49773\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.50.154.104.bc.googleusercontent.com
2019-09-26T19:53:20.8309881495-001 sshd\[49773\]: Failed password for invalid user sysop from 104.154.50.149 port 41024 ssh2
2019-09-26T19:57:20.7172291495-001 sshd\[50136\]: Invalid user sites from 104.154.50.149 port 53962
2019-09-26T19:57:20.7244781495-001 sshd\[50136\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.50.154.104.bc.googleusercontent.com
...

2019-09-27 08:08:47

attackbotsspam

Sep 20 19:09:29 friendsofhawaii sshd\[20689\]: Invalid user testing from 104.154.50.149
Sep 20 19:09:29 friendsofhawaii sshd\[20689\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.50.154.104.bc.googleusercontent.com
Sep 20 19:09:31 friendsofhawaii sshd\[20689\]: Failed password for invalid user testing from 104.154.50.149 port 48984 ssh2
Sep 20 19:13:52 friendsofhawaii sshd\[21064\]: Invalid user noemi from 104.154.50.149
Sep 20 19:13:52 friendsofhawaii sshd\[21064\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.50.154.104.bc.googleusercontent.com

2019-09-21 17:19:56

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:


; <<>> DiG 9.10.6 <<>> 104.154.50.149
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30714
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.154.50.149.			IN	A

;; AUTHORITY SECTION:
.			3254	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019092100 1800 900 604800 86400

;; Query time: 214 msec
;; SERVER: 10.123.0.1#53(10.123.0.1)
;; WHEN: Sat Sep 21 17:20:48 CST 2019
;; MSG SIZE  rcvd: 118

Host info

149.50.154.104.in-addr.arpa domain name pointer 149.50.154.104.bc.googleusercontent.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
149.50.154.104.in-addr.arpa	name = 149.50.154.104.bc.googleusercontent.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
202.91.248.42	attack	Found on Binary Defense / proto=6 . srcport=62888 . dstport=1433 . (3551)	2020-10-05 14:02:04
181.211.102.6	attack	445/tcp [2020-10-04]1pkt	2020-10-05 14:05:45
45.4.107.96	attack	Oct 5 03:04:08 ourumov-web sshd\[828\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.4.107.96 user=root Oct 5 03:04:09 ourumov-web sshd\[828\]: Failed password for root from 45.4.107.96 port 51362 ssh2 Oct 5 03:10:23 ourumov-web sshd\[1601\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.4.107.96 user=root ...	2020-10-05 13:45:49
139.59.40.240	attackbots	2020-10-05T05:20:09.281796randservbullet-proofcloud-66.localdomain sshd[29534]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.40.240 user=root 2020-10-05T05:20:11.144033randservbullet-proofcloud-66.localdomain sshd[29534]: Failed password for root from 139.59.40.240 port 49718 ssh2 2020-10-05T05:24:42.393105randservbullet-proofcloud-66.localdomain sshd[29566]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.40.240 user=root 2020-10-05T05:24:44.064917randservbullet-proofcloud-66.localdomain sshd[29566]: Failed password for root from 139.59.40.240 port 46138 ssh2 ...	2020-10-05 14:14:28
185.132.53.124	attackbotsspam	TCP (SYN) 185.132.53.124:58330 -> port 22, len 48	2020-10-05 13:44:32
110.164.93.99	attackbots	Oct 5 01:51:55 mail sshd\[25876\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.164.93.99 user=root ...	2020-10-05 13:59:09
182.117.99.23	attackbots	23/tcp [2020-10-04]1pkt	2020-10-05 14:00:45
83.110.206.84	attackbotsspam	1601877873 - 10/05/2020 08:04:33 Host: 83.110.206.84/83.110.206.84 Port: 22 TCP Blocked ...	2020-10-05 14:12:54
96.127.179.156	attack	Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "root" at 2020-10-05T04:04:50Z	2020-10-05 13:43:19
95.252.8.106	attack	firewall-block, port(s): 445/tcp	2020-10-05 14:00:22
114.113.126.181	attackbotsspam	2020-10-04T17:42:41.7253331495-001 sshd[4787]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.113.126.181 user=root 2020-10-04T17:42:43.4554221495-001 sshd[4787]: Failed password for root from 114.113.126.181 port 47162 ssh2 2020-10-04T17:47:10.8223261495-001 sshd[5030]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.113.126.181 user=root 2020-10-04T17:47:13.4808771495-001 sshd[5030]: Failed password for root from 114.113.126.181 port 51254 ssh2 2020-10-04T17:51:02.0091441495-001 sshd[5183]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.113.126.181 user=root 2020-10-04T17:51:03.7141531495-001 sshd[5183]: Failed password for root from 114.113.126.181 port 55342 ssh2 ...	2020-10-05 13:47:37
94.182.222.66	attack	1433/tcp [2020-10-04]1pkt	2020-10-05 13:42:46
140.249.19.110	attack	Oct 4 22:44:39 firewall sshd[25115]: Failed password for root from 140.249.19.110 port 48260 ssh2 Oct 4 22:49:06 firewall sshd[25189]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.249.19.110 user=root Oct 4 22:49:08 firewall sshd[25189]: Failed password for root from 140.249.19.110 port 49704 ssh2 ...	2020-10-05 14:13:42
144.217.75.30	attack	Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2020-10-05T04:40:56Z and 2020-10-05T05:30:47Z	2020-10-05 13:37:31
213.193.42.1	attackspambots	s2.hscode.pl - SSH Attack	2020-10-05 14:04:47

Recently Reported IPs

90.201.236.160	210.178.25.71	37.162.166.119	44.44.181.79
173.93.148.1	163.186.35.14	118.112.108.47	123.25.121.230
185.208.164.149	165.22.62.126	46.151.130.22	48.69.83.182
42.0.195.193	210.246.63.223	96.11.23.54	48.8.222.17
133.127.214.189	193.23.4.8	95.161.184.114	88.247.237.12