104.248.146.195

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
104.248.146.91	attack	ssh intrusion attempt	2020-05-10 03:07:54
104.248.146.238	attackbots	detected by Fail2Ban	2020-05-03 13:48:47
104.248.146.214	attackspam	$f2bV_matches	2020-03-25 02:10:27
104.248.146.1	attackbots	104.248.146.1 - - [28/Feb/2020:08:52:18 +0000] "POST /wp-login.php HTTP/1.1" 200 6409 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.248.146.1 - - [28/Feb/2020:08:52:19 +0000] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-02-28 20:45:54
104.248.146.1	attackbots	Automatic report - XMLRPC Attack	2020-02-25 03:41:02
104.248.146.1	attackbotsspam	php WP PHPmyadamin ABUSE blocked for 12h	2020-02-02 07:54:35
104.248.146.1	attack	104.248.146.1 - - \[24/Jan/2020:01:17:36 +0100\] "POST /wp-login.php HTTP/1.0" 200 7672 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" 104.248.146.1 - - \[24/Jan/2020:01:17:38 +0100\] "POST /wp-login.php HTTP/1.0" 200 7502 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" 104.248.146.1 - - \[24/Jan/2020:01:17:40 +0100\] "POST /wp-login.php HTTP/1.0" 200 7496 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0"	2020-01-24 09:00:12
104.248.146.1	attack	Jan 3 10:11:30 wordpress wordpress(blog.ruhnke.cloud)[20171]: Blocked authentication attempt for admin from ::ffff:104.248.146.1	2020-01-03 20:07:18
104.248.146.1	attack	104.248.146.1 - - \[23/Nov/2019:23:44:12 +0100\] "POST /wp-login.php HTTP/1.0" 200 4474 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" 104.248.146.1 - - \[23/Nov/2019:23:44:16 +0100\] "POST /wp-login.php HTTP/1.0" 200 4287 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" 104.248.146.1 - - \[23/Nov/2019:23:44:18 +0100\] "POST /xmlrpc.php HTTP/1.0" 200 736 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0"	2019-11-24 08:17:35
104.248.146.1	attackspam	104.248.146.1 - - \[20/Nov/2019:16:33:06 +0100\] "POST /wp-login.php HTTP/1.0" 200 5731 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" 104.248.146.1 - - \[20/Nov/2019:16:33:09 +0100\] "POST /wp-login.php HTTP/1.0" 200 5598 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" 104.248.146.1 - - \[20/Nov/2019:16:33:13 +0100\] "POST /wp-login.php HTTP/1.0" 200 5594 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0"	2019-11-21 03:04:06
104.248.146.1	attackspambots	php WP PHPmyadamin ABUSE blocked for 12h	2019-11-15 19:25:04
104.248.146.1	attackspambots	Automatic report - Banned IP Access	2019-11-14 20:36:30
104.248.146.1	attackspam	WordPress login Brute force / Web App Attack on client site.	2019-10-31 22:19:36
104.248.146.1	attackspam	fail2ban honeypot	2019-10-09 07:29:41
104.248.146.4	attack	Sep 22 17:23:18 SilenceServices sshd[22881]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.146.4 Sep 22 17:23:20 SilenceServices sshd[22881]: Failed password for invalid user postgres from 104.248.146.4 port 40656 ssh2 Sep 22 17:28:37 SilenceServices sshd[24394]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.146.4	2019-09-23 04:36:01

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.248.146.195
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32549
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.248.146.195.		IN	A

;; AUTHORITY SECTION:
.			563	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022700 1800 900 604800 86400

;; Query time: 58 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 15:47:56 CST 2022
;; MSG SIZE  rcvd: 108

Host info

Host 195.146.248.104.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 195.146.248.104.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
112.2.216.222	attack	TCP (SYN) 112.2.216.222:44425 -> port 23, len 44	2020-09-06 06:11:37
45.142.120.179	attackbots	(smtpauth) Failed SMTP AUTH login from 45.142.120.179 (RU/Russia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2020-09-05 17:52:02 dovecot_login authenticator failed for (User) [45.142.120.179]:3400: 535 Incorrect authentication data (set_id=bago@xeoserver.com) 2020-09-05 17:52:09 dovecot_login authenticator failed for (User) [45.142.120.179]:30140: 535 Incorrect authentication data (set_id=bago@xeoserver.com) 2020-09-05 17:52:13 dovecot_login authenticator failed for (User) [45.142.120.179]:37568: 535 Incorrect authentication data (set_id=bago@xeoserver.com) 2020-09-05 17:52:19 dovecot_login authenticator failed for (User) [45.142.120.179]:23046: 535 Incorrect authentication data (set_id=bago@xeoserver.com) 2020-09-05 17:52:20 dovecot_login authenticator failed for (User) [45.142.120.179]:39794: 535 Incorrect authentication data (set_id=bago@xeoserver.com)	2020-09-06 06:04:38
140.206.157.242	attackbotsspam	SSH Invalid Login	2020-09-06 05:52:11
222.186.175.151	attackbots	Sep 5 18:07:45 ny01 sshd[27395]: Failed password for root from 222.186.175.151 port 11062 ssh2 Sep 5 18:07:48 ny01 sshd[27395]: Failed password for root from 222.186.175.151 port 11062 ssh2 Sep 5 18:07:51 ny01 sshd[27395]: Failed password for root from 222.186.175.151 port 11062 ssh2 Sep 5 18:07:54 ny01 sshd[27395]: Failed password for root from 222.186.175.151 port 11062 ssh2	2020-09-06 06:08:46
41.44.127.241	attackspambots	1599324666 - 09/05/2020 23:51:06 Host: host-41.44.127.241.tedata.net/41.44.127.241 Port: 23 TCP Blocked ...	2020-09-06 06:08:20
54.37.159.12	attackbots	SSH Invalid Login	2020-09-06 06:12:19
184.105.139.94	attackbotsspam	TCP (SYN) 184.105.139.94:41702 -> port 80, len 44	2020-09-06 06:02:52
222.186.175.167	attack	[MK-VM2] SSH login failed	2020-09-06 06:04:55
213.141.131.22	attack	Sep 5 15:01:41 ws24vmsma01 sshd[79280]: Failed password for root from 213.141.131.22 port 53024 ssh2 ...	2020-09-06 06:28:41
185.220.101.203	attackbots	Unauthorised connection attempt detected at AUO MAIN. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)	2020-09-06 05:54:42
148.72.209.9	attackspambots	148.72.209.9 - - [05/Sep/2020:22:49:42 +0200] "GET /wp-login.php HTTP/1.1" 200 9184 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 148.72.209.9 - - [05/Sep/2020:22:49:44 +0200] "POST /wp-login.php HTTP/1.1" 200 9435 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 148.72.209.9 - - [05/Sep/2020:22:49:45 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-09-06 05:51:37
83.240.242.218	attackbots	Sep 5 20:28:12 myvps sshd[22237]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.240.242.218 Sep 5 20:28:13 myvps sshd[22237]: Failed password for invalid user sso from 83.240.242.218 port 46144 ssh2 Sep 5 20:34:11 myvps sshd[25911]: Failed password for root from 83.240.242.218 port 22394 ssh2 ...	2020-09-06 06:13:51
222.186.175.202	attackspambots	Sep 5 23:55:03 minden010 sshd[17813]: Failed password for root from 222.186.175.202 port 42062 ssh2 Sep 5 23:55:06 minden010 sshd[17813]: Failed password for root from 222.186.175.202 port 42062 ssh2 Sep 5 23:55:09 minden010 sshd[17813]: Failed password for root from 222.186.175.202 port 42062 ssh2 Sep 5 23:55:12 minden010 sshd[17813]: Failed password for root from 222.186.175.202 port 42062 ssh2 ...	2020-09-06 05:57:13
164.90.224.231	attackbotsspam	Sep 5 22:07:42 home sshd[881461]: Failed password for root from 164.90.224.231 port 38500 ssh2 Sep 5 22:11:00 home sshd[881937]: Invalid user smbuser from 164.90.224.231 port 45190 Sep 5 22:11:00 home sshd[881937]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.90.224.231 Sep 5 22:11:00 home sshd[881937]: Invalid user smbuser from 164.90.224.231 port 45190 Sep 5 22:11:02 home sshd[881937]: Failed password for invalid user smbuser from 164.90.224.231 port 45190 ssh2 ...	2020-09-06 05:57:57
69.10.62.109	attackspambots	Unauthorized connection attempt from IP address 69.10.62.109 on Port 3389(RDP)	2020-09-06 06:10:57

Recently Reported IPs

104.248.191.164	104.248.204.170	104.248.201.153	104.248.229.6
104.248.227.100	104.248.235.134	104.248.151.33	104.247.79.154
104.248.243.212	104.248.237.109	104.248.50.134	104.248.47.242
117.141.34.158	104.248.47.244	104.248.31.179	104.248.244.162
104.248.92.142	104.25.12.18	104.249.147.110	104.25.21.100