104.248.144.44

Basic Info

City: Singapore

Region: unknown

Country: Singapore

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
104.248.144.94	attackbots	sshd jail - ssh hack attempt	2020-07-11 00:48:47
104.248.144.94	attackbotsspam	$f2bV_matches	2020-07-10 16:55:02
104.248.144.208	attack	104.248.144.208 - - [30/Jun/2020:13:44:09 +0100] "POST /wp-login.php HTTP/1.1" 200 1996 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.248.144.208 - - [30/Jun/2020:13:44:13 +0100] "POST /wp-login.php HTTP/1.1" 200 1924 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.248.144.208 - - [30/Jun/2020:13:44:15 +0100] "POST /xmlrpc.php HTTP/1.1" 200 247 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-07-01 00:47:22
104.248.144.208	attackspambots	104.248.144.208 - - [29/Jun/2020:04:58:23 +0100] "POST /wp/wp-login.php HTTP/1.1" 200 1865 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.248.144.208 - - [29/Jun/2020:04:58:26 +0100] "POST /wp/wp-login.php HTTP/1.1" 200 1857 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.248.144.208 - - [29/Jun/2020:04:58:27 +0100] "POST /wp/xmlrpc.php HTTP/1.1" 200 247 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-06-29 12:14:39
104.248.144.208	attackspam	Attempt to log in with non-existing username: admin	2020-06-04 14:33:13
104.248.144.208	attackbots	104.248.144.208 - - [01/Jun/2020:14:27:58 +0200] "GET /wp-login.php HTTP/1.1" 200 6364 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.248.144.208 - - [01/Jun/2020:14:28:00 +0200] "POST /wp-login.php HTTP/1.1" 200 6615 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.248.144.208 - - [01/Jun/2020:14:28:07 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-06-01 23:04:31
104.248.144.208	attackspambots	104.248.144.208 - - [28/May/2020:14:03:14 +0200] "GET /wp-login.php HTTP/1.1" 200 5865 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.248.144.208 - - [28/May/2020:14:03:17 +0200] "POST /wp-login.php HTTP/1.1" 200 6116 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.248.144.208 - - [28/May/2020:14:03:18 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-05-28 20:54:25
104.248.144.208	attack	abasicmove.de 104.248.144.208 [10/May/2020:15:30:29 +0200] "POST /wp-login.php HTTP/1.1" 200 6098 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" abasicmove.de 104.248.144.208 [10/May/2020:15:30:30 +0200] "POST /wp-login.php HTTP/1.1" 200 5957 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-05-16 19:13:49
104.248.144.208	attackspambots	"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:	2020-05-15 08:20:54
104.248.144.208	attackbots	"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:	2020-05-11 04:01:42
104.248.144.208	attackbotsspam	CMS (WordPress or Joomla) login attempt.	2020-03-26 03:27:09
104.248.144.147	attack	Mar 16 15:35:18 sshd\[11502\]: User root from 104.248.144.147 not allowed because not listed in AllowUsersMar 16 15:35:20 sshd\[11502\]: Failed password for invalid user root from 104.248.144.147 port 39346 ssh2 ...	2020-03-17 07:07:58
104.248.144.208	attackspam	CMS (WordPress or Joomla) login attempt.	2020-03-14 09:32:48
104.248.144.208	attackspam	xmlrpc attack	2020-02-19 21:43:52
104.248.144.208	attack	Automatic report - XMLRPC Attack	2020-02-03 14:06:18

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.248.144.44
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63011
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.248.144.44.			IN	A

;; AUTHORITY SECTION:
.			437	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2021090100 1800 900 604800 86400

;; Query time: 74 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Sep 01 18:24:02 CST 2021
;; MSG SIZE  rcvd: 107

Host info

Host 44.144.248.104.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 44.144.248.104.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
180.250.115.121	attack	Oct 2 22:35:09 * sshd[31693]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.250.115.121 Oct 2 22:35:11 * sshd[31693]: Failed password for invalid user a from 180.250.115.121 port 59259 ssh2	2020-10-04 03:02:39
161.97.113.95	attack	4 ssh attempts over 24 hour period.	2020-10-04 02:39:00
180.76.157.174	attack	Oct 3 18:13:18 serwer sshd\[14198\]: Invalid user steam from 180.76.157.174 port 51908 Oct 3 18:13:18 serwer sshd\[14198\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.157.174 Oct 3 18:13:20 serwer sshd\[14198\]: Failed password for invalid user steam from 180.76.157.174 port 51908 ssh2 ...	2020-10-04 03:15:37
180.251.107.103	attack	1601670907 - 10/02/2020 22:35:07 Host: 180.251.107.103/180.251.107.103 Port: 445 TCP Blocked	2020-10-04 03:04:44
46.209.4.194	attackspambots	Invalid user oracle from 46.209.4.194 port 53736	2020-10-04 02:45:29
213.222.187.138	attack	Oct 3 20:41:46 abendstille sshd\[17308\]: Invalid user joyce from 213.222.187.138 Oct 3 20:41:46 abendstille sshd\[17308\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.222.187.138 Oct 3 20:41:48 abendstille sshd\[17308\]: Failed password for invalid user joyce from 213.222.187.138 port 40758 ssh2 Oct 3 20:45:21 abendstille sshd\[20922\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.222.187.138 user=root Oct 3 20:45:23 abendstille sshd\[20922\]: Failed password for root from 213.222.187.138 port 44888 ssh2 ...	2020-10-04 03:10:35
92.222.75.80	attackspam	fail2ban: brute force SSH detected	2020-10-04 03:16:12
128.199.247.226	attackbots	Oct 3 15:02:22 icinga sshd[33954]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.247.226 Oct 3 15:02:24 icinga sshd[33954]: Failed password for invalid user git from 128.199.247.226 port 37864 ssh2 Oct 3 15:05:48 icinga sshd[39989]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.247.226 ...	2020-10-04 03:05:34
193.239.147.179	attack	2 times SMTP brute-force	2020-10-04 02:55:23
90.154.91.97	attackbotsspam	Icarus honeypot on github	2020-10-04 03:15:22
58.61.145.26	attackbotsspam	Attempted Brute Force (dovecot)	2020-10-04 03:08:24
40.64.107.53	attack	RU spamvertising/fraud - From: Ultra Wifi Pro - UBE 208.82.118.236 (EHLO newstart.club) Ndchost - Spam link mail.kraften.site = 185.56.88.154 Buzinessware FZCO – phishing redirect: a) spendlesslist.com = 104.144.63.165 ServerMania - Spam link #2 mail.kraften.site - phishing redirect: a) spendlesslist.com = 104.144.63.165 ServerMania b) safemailremove.com = 40.64.107.53 Microsoft Corporation - Spam link newstart.club = host not found Images - 151.101.120.193 Fastly - https://imgur.com/wmqfoW2.png = Ultra Wifi Pro ad - https://imgur.com/F6adfzn.png = Ultra Wifi Pro 73 Greentree Dr. #57 Dover DE 19904 – entity not found at listed address; BBB: Ultra HD Antennas & Ultra WiFi Pro – " this business is no longer in business "	2020-10-04 02:44:42
125.164.176.119	attackspam	Connection to SSH Honeypot - Detected by HoneypotDB	2020-10-04 02:45:47
5.188.86.219	attack	SSH Bruteforce Attempt on Honeypot	2020-10-04 03:08:11
78.161.82.194	attackbots	SSH bruteforce	2020-10-04 03:14:24

Recently Reported IPs

103.151.237.70	103.151.237.75	128.199.227.217	45.33.76.115
49.12.99.173	51.158.111.201	178.238.8.212	192.167.21.205
192.167.21.134	146.75.174.28	40.69.67.100	12.51.199.59
177.164.31.87	41.17.239.210	74.50.23.216	40.92.17.48
172.104.49.205	46.38.232.96	34.76.33.232	34.76.33.200