104.202.49.66 - IPInfo

Basic Info

City: Los Angeles

Region: California

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: Enzu Inc

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
104.202.49.82	attackspam	1433/tcp 445/tcp... [2019-08-23/10-22]22pkt,2pt.(tcp)	2019-10-23 05:33:09
104.202.49.186	attackspam	445/tcp 445/tcp 445/tcp... [2019-07-29/09-08]10pkt,1pt.(tcp)	2019-09-09 08:21:46
104.202.49.218	attackspambots	Unauthorized connection attempt from IP address 104.202.49.218 on Port 445(SMB)	2019-07-14 15:58:51

Whois info:

Dig info:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.202.49.66
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55028
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.202.49.66.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019042900 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Mon Apr 29 23:53:28 +08 2019
;; MSG SIZE  rcvd: 117

Host info

66.49.202.104.in-addr.arpa domain name pointer server.247regaloplus.com.

Nslookup info:

Server:		67.207.67.3
Address:	67.207.67.3#53

Non-authoritative answer:
66.49.202.104.in-addr.arpa	name = server.247regaloplus.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
186.216.69.173	attack	(smtpauth) Failed SMTP AUTH login from 186.216.69.173 (BR/Brazil/186-216-69-173.uni-wr.mastercabo.com.br): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-07-07 08:24:28 plain authenticator failed for ([186.216.69.173]) [186.216.69.173]: 535 Incorrect authentication data (set_id=info)	2020-07-07 14:15:21
46.38.148.22	attackspam	Jul 7 08:25:35 relay postfix/smtpd\[8012\]: warning: unknown\[46.38.148.22\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 7 08:25:56 relay postfix/smtpd\[2392\]: warning: unknown\[46.38.148.22\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 7 08:26:16 relay postfix/smtpd\[2556\]: warning: unknown\[46.38.148.22\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 7 08:26:37 relay postfix/smtpd\[8012\]: warning: unknown\[46.38.148.22\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 7 08:26:58 relay postfix/smtpd\[2556\]: warning: unknown\[46.38.148.22\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-07-07 14:35:59
157.230.190.90	attack	Jul 7 07:13:02 lnxweb62 sshd[20154]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.190.90	2020-07-07 14:10:06
178.33.229.120	attack	SSH Brute-Force reported by Fail2Ban	2020-07-07 14:21:51
95.255.14.141	attackspam	Jul 7 05:24:51 ip-172-31-62-245 sshd\[14437\]: Failed password for root from 95.255.14.141 port 44010 ssh2\ Jul 7 05:27:35 ip-172-31-62-245 sshd\[14486\]: Invalid user cache from 95.255.14.141\ Jul 7 05:27:37 ip-172-31-62-245 sshd\[14486\]: Failed password for invalid user cache from 95.255.14.141 port 40672 ssh2\ Jul 7 05:30:26 ip-172-31-62-245 sshd\[14529\]: Invalid user poliana from 95.255.14.141\ Jul 7 05:30:28 ip-172-31-62-245 sshd\[14529\]: Failed password for invalid user poliana from 95.255.14.141 port 37130 ssh2\	2020-07-07 14:26:58
178.173.154.238	attackspambots	(smtpauth) Failed SMTP AUTH login from 178.173.154.238 (IR/Iran/hamyar-178-173-154-238.shirazhamyar.ir): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-07-07 08:23:58 plain authenticator failed for ([178.173.154.238]) [178.173.154.238]: 535 Incorrect authentication data (set_id=info@parsianasansor.com)	2020-07-07 14:41:48
117.50.23.52	attackbotsspam	" "	2020-07-07 14:26:13
62.171.152.36	attackspam	Port scan on 1 port(s): 7547	2020-07-07 14:28:16
185.22.142.197	attackspambots	Jul 7 08:08:17 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=185.22.142.197, lip=176.9.177.164, session=\<7qyHxtOpi4u5Fo7F\> Jul 7 08:08:19 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=185.22.142.197, lip=176.9.177.164, session=\<6RupxtOpVam5Fo7F\> Jul 7 08:08:42 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=185.22.142.197, lip=176.9.177.164, session=\<6z0ByNOpNLW5Fo7F\> Jul 7 08:13:54 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=185.22.142.197, lip=176.9.177.164, session=\ Jul 7 08:13:56 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 ...	2020-07-07 14:41:08
185.53.88.236	attackbots	trying to access non-authorized port	2020-07-07 14:35:25
84.21.188.193	attackspam	Registration form abuse	2020-07-07 14:16:41
189.110.238.196	attack	Jul 7 08:28:22 sshd\[17597\]: User root from 189.110.238.196 not allowed because not listed in AllowUsersJul 7 08:28:24 sshd\[17597\]: Failed password for invalid user root from 189.110.238.196 port 42848 ssh2 ...	2020-07-07 14:40:24
212.237.40.195	attackspam	(smtpauth) Failed SMTP AUTH login from 212.237.40.195 (IT/Italy/host195-40-237-212.serverdedicati.aruba.it): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-07-07 10:32:55 login authenticator failed for (USER) [212.237.40.195]: 535 Incorrect authentication data (set_id=mail@irantesol.ir)	2020-07-07 14:05:41
220.134.22.203	attack	220.134.22.203 - - [07/Jul/2020:03:54:06 +0000] "GET / HTTP/1.1" 400 166 "-" "-"	2020-07-07 14:40:54
14.246.74.74	attackspambots	20/7/7@01:34:39: FAIL: Alarm-Network address from=14.246.74.74 ...	2020-07-07 14:36:31

Recently Reported IPs

70.182.34.230	110.12.152.79	110.12.155.232	108.56.248.189
169.239.158.44	68.118.235.213	37.130.224.21	110.12.144.186
81.171.107.120	207.255.233.206	110.12.144.171	110.12.147.168
183.145.144.12	110.12.150.23	150.106.203.93	36.91.208.10
110.12.150.32	104.200.153.88	137.190.170.249	110.12.149.232