Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
104.168.148.42 attackspambots
Lines containing failures of 104.168.148.42
Apr 19 08:13:27 UTC__SANYALnet-Labs__cac12 sshd[19340]: Connection from 104.168.148.42 port 48714 on 45.62.253.138 port 22
Apr 19 08:13:28 UTC__SANYALnet-Labs__cac12 sshd[19340]: Invalid user ch from 104.168.148.42 port 48714
Apr 19 08:13:30 UTC__SANYALnet-Labs__cac12 sshd[19340]: Failed password for invalid user ch from 104.168.148.42 port 48714 ssh2
Apr 19 08:13:30 UTC__SANYALnet-Labs__cac12 sshd[19340]: Received disconnect from 104.168.148.42 port 48714:11: Bye Bye [preauth]
Apr 19 08:13:30 UTC__SANYALnet-Labs__cac12 sshd[19340]: Disconnected from 104.168.148.42 port 48714 [preauth]
Apr 19 08:24:40 UTC__SANYALnet-Labs__cac12 sshd[19617]: Connection from 104.168.148.42 port 49250 on 45.62.253.138 port 22
Apr 19 08:24:44 UTC__SANYALnet-Labs__cac12 sshd[19617]: Failed password for invalid user r.r from 104.168.148.42 port 49250 ssh2
Apr 19 08:24:44 UTC__SANYALnet-Labs__cac12 sshd[19617]: Received disconnect from 104.168.148.42 ........
------------------------------
2020-04-19 20:48:20
104.168.148.189 attackbots
Fail2Ban Ban Triggered
2020-03-05 15:39:20
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.168.148.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 16555
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.168.148.2.			IN	A

;; AUTHORITY SECTION:
.			339	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022031901 1800 900 604800 86400

;; Query time: 20 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Mar 20 11:52:52 CST 2022
;; MSG SIZE  rcvd: 106
Host info
2.148.168.104.in-addr.arpa domain name pointer client-104-168-148-2.hostwindsdns.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
2.148.168.104.in-addr.arpa	name = client-104-168-148-2.hostwindsdns.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
145.255.22.124 attack
19/9/15@09:22:11: FAIL: Alarm-Intrusion address from=145.255.22.124
...
2019-09-15 23:33:39
52.163.221.85 attackspambots
Sep 15 05:14:26 wbs sshd\[18811\]: Invalid user manager1 from 52.163.221.85
Sep 15 05:14:26 wbs sshd\[18811\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.163.221.85
Sep 15 05:14:28 wbs sshd\[18811\]: Failed password for invalid user manager1 from 52.163.221.85 port 47792 ssh2
Sep 15 05:19:11 wbs sshd\[19208\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.163.221.85  user=root
Sep 15 05:19:13 wbs sshd\[19208\]: Failed password for root from 52.163.221.85 port 35326 ssh2
2019-09-15 23:21:18
201.238.239.151 attack
Sep 15 16:25:56 v22019058497090703 sshd[6327]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.238.239.151
Sep 15 16:25:57 v22019058497090703 sshd[6327]: Failed password for invalid user hacker1234 from 201.238.239.151 port 60775 ssh2
Sep 15 16:31:49 v22019058497090703 sshd[6961]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.238.239.151
...
2019-09-15 23:25:03
106.122.170.246 attack
Sep 15 15:22:53 vps01 sshd[18877]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.122.170.246
Sep 15 15:22:56 vps01 sshd[18877]: Failed password for invalid user mother from 106.122.170.246 port 29327 ssh2
2019-09-15 22:29:06
94.191.56.254 attackbots
[SunSep1515:20:55.7288522019][:error][pid14827:tid47849208424192][client94.191.56.254:5150][client94.191.56.254]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"\(\?:\\\\\\\\\(chr\?\\\\\\\\\(\?[0-9]{1\,3}\?\\\\\\\\\)\|\?=\?f\(\?:open\|write\)\?\\\\\\\\\(\|\\\\\\\\b\(\?:passthru\|serialize\|php_uname\|phpinfo\|shell_exec\|preg_\\\\\\\\w \|mysql_query\|exec\|eval\|base64_decode\|decode_base64\|rot13\|base64_url_decode\|gz\(\?:inflate\|decode\|uncompress\)\|strrev\|zlib_\\\\\\\\w \)\\\\\\\\b\?\(\?..."atARGS:admin.[file"/usr/local/apache.ea3/conf/modsec_rules/10_asl_rules.conf"][line"767"][id"340095"][rev"53"][msg"Atomicorp.comWAFRules:AttackBlocked-PHPfunctioninArgument-thismaybeanattack."][data"die\(@md5\,ARGS:admin"][severity"CRITICAL"][hostname"81.17.25.233"][uri"/App.php"][unique_id"XX46tyzpeEYvhX5DhAvYgQAAAIQ"][SunSep1515:21:14.7453102019][:error][pid14827:tid47849208424192][client94.191.56.254:5150][client94.191.56.254]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmat
2019-09-15 23:12:50
59.25.197.134 attackbotsspam
Sep 15 15:22:27 ns3367391 sshd\[1875\]: Invalid user user1 from 59.25.197.134 port 48018
Sep 15 15:22:27 ns3367391 sshd\[1875\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.25.197.134
...
2019-09-15 23:09:06
42.247.30.164 attackspam
Sep 15 17:42:04 www sshd\[78802\]: Invalid user boomi from 42.247.30.164
Sep 15 17:42:04 www sshd\[78802\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.247.30.164
Sep 15 17:42:05 www sshd\[78802\]: Failed password for invalid user boomi from 42.247.30.164 port 32768 ssh2
...
2019-09-15 22:51:58
117.4.13.145 attackspambots
Autoban   117.4.13.145 AUTH/CONNECT
2019-09-15 23:01:01
69.172.87.212 attackbots
Sep 15 15:55:55 root sshd[3818]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.172.87.212 
Sep 15 15:55:57 root sshd[3818]: Failed password for invalid user teamspeak from 69.172.87.212 port 49179 ssh2
Sep 15 15:59:50 root sshd[3863]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.172.87.212 
...
2019-09-15 23:24:07
103.227.176.27 attackbotsspam
xmlrpc attack
2019-09-15 23:20:43
240e:f7:4f01:c::3 attackspam
Sep 15 13:21:40   DDOS Attack: SRC=240e:00f7:4f01:000c:0000:0000:0000:0003 DST=[Masked] LEN=89 TC=0 HOPLIMIT=241 FLOWLBL=0 PROTO=UDP SPT=60934 DPT=5006 LEN=49
2019-09-15 22:31:59
92.255.178.230 attack
Sep 15 10:15:10 ny01 sshd[23730]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.255.178.230
Sep 15 10:15:12 ny01 sshd[23730]: Failed password for invalid user appuser from 92.255.178.230 port 39348 ssh2
Sep 15 10:19:57 ny01 sshd[24508]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.255.178.230
2019-09-15 22:35:24
218.92.0.191 attackbotsspam
Sep 15 17:16:38 legacy sshd[16949]: Failed password for root from 218.92.0.191 port 40740 ssh2
Sep 15 17:17:30 legacy sshd[16965]: Failed password for root from 218.92.0.191 port 18556 ssh2
...
2019-09-15 23:32:10
51.75.26.106 attackbotsspam
Jan 31 00:49:03 microserver sshd[53889]: Invalid user newuser from 51.75.26.106 port 46856
Jan 31 00:49:03 microserver sshd[53889]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.26.106
Jan 31 00:49:06 microserver sshd[53889]: Failed password for invalid user newuser from 51.75.26.106 port 46856 ssh2
Jan 31 00:52:12 microserver sshd[54369]: Invalid user alex from 51.75.26.106 port 43852
Jan 31 00:52:12 microserver sshd[54369]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.26.106
Feb  4 09:19:01 microserver sshd[24225]: Invalid user ben from 51.75.26.106 port 54556
Feb  4 09:19:01 microserver sshd[24225]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.26.106
Feb  4 09:19:03 microserver sshd[24225]: Failed password for invalid user ben from 51.75.26.106 port 54556 ssh2
Feb  4 09:22:14 microserver sshd[24682]: Invalid user suporte from 51.75.26.106 port 51384
Feb  4 09:22:
2019-09-15 22:25:46
103.56.79.2 attackbotsspam
Sep 15 03:18:12 kapalua sshd\[4334\]: Invalid user lucene from 103.56.79.2
Sep 15 03:18:12 kapalua sshd\[4334\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.56.79.2
Sep 15 03:18:15 kapalua sshd\[4334\]: Failed password for invalid user lucene from 103.56.79.2 port 33819 ssh2
Sep 15 03:22:48 kapalua sshd\[4749\]: Invalid user oz from 103.56.79.2
Sep 15 03:22:48 kapalua sshd\[4749\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.56.79.2
2019-09-15 22:42:40

Recently Reported IPs

104.168.137.114 104.168.176.247 104.168.213.196 104.168.236.105
104.168.251.68 104.168.9.176 104.17.1.23 104.17.100.65
104.17.115.5 104.17.116.5 104.17.12.82 104.17.132.26
104.17.134.41 104.17.135.41 104.17.137.154 104.17.137.73
104.17.138.154 104.17.139.154 104.17.140.154 104.17.141.154