104.248.146.99

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
104.248.146.91	attack	ssh intrusion attempt	2020-05-10 03:07:54
104.248.146.238	attackbots	detected by Fail2Ban	2020-05-03 13:48:47
104.248.146.214	attackspam	$f2bV_matches	2020-03-25 02:10:27
104.248.146.1	attackbots	104.248.146.1 - - [28/Feb/2020:08:52:18 +0000] "POST /wp-login.php HTTP/1.1" 200 6409 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.248.146.1 - - [28/Feb/2020:08:52:19 +0000] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-02-28 20:45:54
104.248.146.1	attackbots	Automatic report - XMLRPC Attack	2020-02-25 03:41:02
104.248.146.1	attackbotsspam	php WP PHPmyadamin ABUSE blocked for 12h	2020-02-02 07:54:35
104.248.146.1	attack	104.248.146.1 - - \[24/Jan/2020:01:17:36 +0100\] "POST /wp-login.php HTTP/1.0" 200 7672 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" 104.248.146.1 - - \[24/Jan/2020:01:17:38 +0100\] "POST /wp-login.php HTTP/1.0" 200 7502 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" 104.248.146.1 - - \[24/Jan/2020:01:17:40 +0100\] "POST /wp-login.php HTTP/1.0" 200 7496 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0"	2020-01-24 09:00:12
104.248.146.1	attack	Jan 3 10:11:30 wordpress wordpress(blog.ruhnke.cloud)[20171]: Blocked authentication attempt for admin from ::ffff:104.248.146.1	2020-01-03 20:07:18
104.248.146.1	attack	104.248.146.1 - - \[23/Nov/2019:23:44:12 +0100\] "POST /wp-login.php HTTP/1.0" 200 4474 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" 104.248.146.1 - - \[23/Nov/2019:23:44:16 +0100\] "POST /wp-login.php HTTP/1.0" 200 4287 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" 104.248.146.1 - - \[23/Nov/2019:23:44:18 +0100\] "POST /xmlrpc.php HTTP/1.0" 200 736 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0"	2019-11-24 08:17:35
104.248.146.1	attackspam	104.248.146.1 - - \[20/Nov/2019:16:33:06 +0100\] "POST /wp-login.php HTTP/1.0" 200 5731 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" 104.248.146.1 - - \[20/Nov/2019:16:33:09 +0100\] "POST /wp-login.php HTTP/1.0" 200 5598 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" 104.248.146.1 - - \[20/Nov/2019:16:33:13 +0100\] "POST /wp-login.php HTTP/1.0" 200 5594 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0"	2019-11-21 03:04:06
104.248.146.1	attackspambots	php WP PHPmyadamin ABUSE blocked for 12h	2019-11-15 19:25:04
104.248.146.1	attackspambots	Automatic report - Banned IP Access	2019-11-14 20:36:30
104.248.146.1	attackspam	WordPress login Brute force / Web App Attack on client site.	2019-10-31 22:19:36
104.248.146.1	attackspam	fail2ban honeypot	2019-10-09 07:29:41
104.248.146.4	attack	Sep 22 17:23:18 SilenceServices sshd[22881]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.146.4 Sep 22 17:23:20 SilenceServices sshd[22881]: Failed password for invalid user postgres from 104.248.146.4 port 40656 ssh2 Sep 22 17:28:37 SilenceServices sshd[24394]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.146.4	2019-09-23 04:36:01

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.248.146.99
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 46253
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.248.146.99.			IN	A

;; AUTHORITY SECTION:
.			491	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020700 1800 900 604800 86400

;; Query time: 60 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 07 17:52:58 CST 2022
;; MSG SIZE  rcvd: 107

Host info

99.146.248.104.in-addr.arpa domain name pointer taigamenohu.tempurl.host.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
99.146.248.104.in-addr.arpa	name = taigamenohu.tempurl.host.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
201.236.143.195	attackspambots	2019-10-30 06:50:33 dovecot_login authenticator failed for (vRGmjmX) [201.236.143.195]:4332 I=[192.147.25.65]:587: 535 Incorrect authentication data (set_id=naill@lerctr.org) 2019-10-30 06:50:50 dovecot_login authenticator failed for (Pess9x) [201.236.143.195]:4595 I=[192.147.25.65]:587: 535 Incorrect authentication data (set_id=naill@lerctr.org) 2019-10-30 06:51:10 dovecot_login authenticator failed for (kHKCDWGY) [201.236.143.195]:3212 I=[192.147.25.65]:587: 535 Incorrect authentication data (set_id=naill@lerctr.org) ...	2019-10-30 23:59:58
46.201.32.95	attackbots	Fail2Ban Ban Triggered	2019-10-30 23:24:54
59.56.74.165	attackbots	2019-10-28 22:29:08 server sshd[16792]: Failed password for invalid user root from 59.56.74.165 port 44689 ssh2	2019-10-31 00:15:38
50.4.93.74	attackbots	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/50.4.93.74/ US - 1H : (236) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : US NAME ASN : ASN12083 IP : 50.4.93.74 CIDR : 50.4.92.0/22 PREFIX COUNT : 944 UNIQUE IP COUNT : 1142272 ATTACKS DETECTED ASN12083 : 1H - 1 3H - 1 6H - 1 12H - 1 24H - 1 DateTime : 2019-10-30 12:51:07 INFO : Port SSH 22 Scan Detected and Blocked by ADMIN - data recovery	2019-10-31 00:01:58
149.202.55.18	attack	Oct 30 12:51:30 vpn01 sshd[7983]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.202.55.18 Oct 30 12:51:31 vpn01 sshd[7983]: Failed password for invalid user Pass@word123$ from 149.202.55.18 port 48898 ssh2 ...	2019-10-30 23:40:02
34.93.229.63	attackbots	Oct 30 10:34:30 ws24vmsma01 sshd[121061]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.93.229.63 Oct 30 10:34:33 ws24vmsma01 sshd[121061]: Failed password for invalid user user from 34.93.229.63 port 43120 ssh2 ...	2019-10-31 00:10:00
89.238.154.243	attackbots	WordPress attack on /wp-login	2019-10-30 23:38:14
36.84.63.251	attackspam	Automatic report - Port Scan Attack	2019-10-30 23:31:35
5.13.210.66	attackbotsspam	Automatic report - Banned IP Access	2019-10-31 00:04:15
201.139.88.22	attackbots	Oct 30 16:30:40 localhost sshd\[29886\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.139.88.22 user=root Oct 30 16:30:42 localhost sshd\[29886\]: Failed password for root from 201.139.88.22 port 59710 ssh2 Oct 30 16:35:28 localhost sshd\[30167\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.139.88.22 user=root Oct 30 16:35:29 localhost sshd\[30167\]: Failed password for root from 201.139.88.22 port 41392 ssh2 Oct 30 16:40:13 localhost sshd\[30499\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.139.88.22 user=root ...	2019-10-30 23:50:29
35.238.90.153	attackbots	SSH bruteforce	2019-10-31 00:03:19
61.190.213.226	attack	1433/tcp [2019-10-30]1pkt	2019-10-31 00:05:11
117.185.62.146	attackspambots	Oct 30 16:19:36 ns41 sshd[23483]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.185.62.146 Oct 30 16:19:38 ns41 sshd[23483]: Failed password for invalid user woodnn from 117.185.62.146 port 47996 ssh2 Oct 30 16:25:19 ns41 sshd[23752]: Failed password for root from 117.185.62.146 port 35238 ssh2	2019-10-30 23:44:55
81.171.85.138	attack	\[2019-10-30 11:41:44\] NOTICE\[2601\] chan_sip.c: Registration from '\' failed for '81.171.85.138:62371' - Wrong password \[2019-10-30 11:41:44\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-30T11:41:44.426-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1244",SessionID="0x7fdf2cc7a718",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/81.171.85.138/62371",Challenge="31aee359",ReceivedChallenge="31aee359",ReceivedHash="02ded38e08d6bf4e3acfcd972282e3d5" \[2019-10-30 11:42:36\] NOTICE\[2601\] chan_sip.c: Registration from '\' failed for '81.171.85.138:55956' - Wrong password \[2019-10-30 11:42:36\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-30T11:42:36.375-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1187",SessionID="0x7fdf2cc7a718",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/81.171.85	2019-10-30 23:49:45
101.51.217.62	attackbotsspam	445/tcp [2019-10-30]1pkt	2019-10-30 23:55:29

Recently Reported IPs

156.219.8.115	125.165.7.242	170.246.204.193	176.115.253.55
103.158.124.30	37.232.77.77	104.237.146.240	208.103.224.152
188.59.70.254	14.21.7.240	115.60.208.108	36.148.104.221
181.204.4.74	80.254.126.240	111.33.235.170	176.121.207.197
207.144.193.72	165.154.43.84	42.230.156.192	113.100.193.168