104.248.149.117

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
104.248.149.43	attack	104.248.149.43 - - [30/Sep/2020:00:20:22 +0100] "POST /wp-login.php HTTP/1.1" 200 2224 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.248.149.43 - - [30/Sep/2020:00:20:23 +0100] "POST /xmlrpc.php HTTP/1.1" 200 247 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.248.149.43 - - [30/Sep/2020:00:33:45 +0100] "POST /wp/wp-login.php HTTP/1.1" 200 2480 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-09-30 09:40:37
104.248.149.43	attack	can 104.248.149.43 [29/Sep/2020:03:54:45 "-" "POST /wp-login.php 200 2021 104.248.149.43 [29/Sep/2020:20:52:24 "-" "GET /wp-login.php 200 4676 104.248.149.43 [29/Sep/2020:20:52:25 "-" "POST /wp-login.php 200 4676	2020-09-30 02:31:05
104.248.149.43	attackbotsspam	CMS (WordPress or Joomla) login attempt.	2020-09-29 18:33:58
104.248.149.130	attack	Invalid user student from 104.248.149.130 port 58998	2020-09-25 19:47:35
104.248.149.130	attack	$f2bV_matches	2020-09-19 01:01:39
104.248.149.130	attackbots	SSH Brute-Forcing (server2)	2020-09-18 17:03:26
104.248.149.130	attackspambots	SSH bruteforce	2020-09-18 07:18:38
104.248.149.130	attackbotsspam	SSH Login Bruteforce	2020-09-12 19:43:39
104.248.149.130	attackbotsspam	Sep 1 14:25:13 mail sshd\[21877\]: Invalid user hqy from 104.248.149.130 ...	2020-09-02 03:52:53
104.248.149.130	attackbots	Aug 21 09:20:58 pkdns2 sshd\[1477\]: Invalid user wup from 104.248.149.130Aug 21 09:21:00 pkdns2 sshd\[1477\]: Failed password for invalid user wup from 104.248.149.130 port 38152 ssh2Aug 21 09:25:09 pkdns2 sshd\[1683\]: Invalid user history from 104.248.149.130Aug 21 09:25:10 pkdns2 sshd\[1683\]: Failed password for invalid user history from 104.248.149.130 port 46970 ssh2Aug 21 09:29:33 pkdns2 sshd\[1836\]: Invalid user vladimir from 104.248.149.130Aug 21 09:29:35 pkdns2 sshd\[1836\]: Failed password for invalid user vladimir from 104.248.149.130 port 55920 ssh2 ...	2020-08-21 14:53:47
104.248.149.206	attackbotsspam	Aug 18 10:52:24 hidden sshd[10329]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.149.206 Aug 18 10:52:27 hidden sshd[10329]: Failed password for invalid user mc3 from 104.248.149.206 port 43999 ssh2 Aug 18 11:04:39 hidden sshd[12496]: Invalid user nodejs from 104.248.149.206 port 64195	2020-08-19 21:36:24
104.248.149.130	attackbotsspam	Aug 15 14:35:55 abendstille sshd\[3088\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.149.130 user=root Aug 15 14:35:56 abendstille sshd\[3088\]: Failed password for root from 104.248.149.130 port 35778 ssh2 Aug 15 14:38:32 abendstille sshd\[5588\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.149.130 user=root Aug 15 14:38:34 abendstille sshd\[5588\]: Failed password for root from 104.248.149.130 port 46666 ssh2 Aug 15 14:41:16 abendstille sshd\[8294\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.149.130 user=root ...	2020-08-15 20:46:41
104.248.149.130	attackspam	Aug 14 09:11:31 ws24vmsma01 sshd[75930]: Failed password for root from 104.248.149.130 port 57374 ssh2 ...	2020-08-14 23:44:00
104.248.149.130	attackspambots	Port Scan detected from 104.248.149.130 (SG/Singapore/-/Singapore (Pioneer)/-). 4 hits in the last 85 seconds	2020-08-13 13:42:08
104.248.149.130	attackbotsspam	$f2bV_matches	2020-08-09 16:37:32

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.248.149.117
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27036
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.248.149.117.		IN	A

;; AUTHORITY SECTION:
.			589	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022500 1800 900 604800 86400

;; Query time: 27 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 25 20:23:53 CST 2022
;; MSG SIZE  rcvd: 108

Host info

Host 117.149.248.104.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 117.149.248.104.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
97.74.229.113	attackbotsspam	[N10.H2.VM2] Port Scanner Detected Blocked by UFW	2020-08-28 03:20:14
159.89.48.56	attack	php WP PHPmyadamin ABUSE blocked for 12h	2020-08-28 03:34:35
82.185.60.182	attackbotsspam	pfaffenroth-photographie.de 82.185.60.182 [27/Aug/2020:19:08:54 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4464 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.109 Safari/537.36" pfaffenroth-photographie.de 82.185.60.182 [27/Aug/2020:19:08:56 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4464 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.109 Safari/537.36"	2020-08-28 03:21:52
74.6.135.41	attackspam	email sender appeared as @aol.com	2020-08-28 03:22:14
106.12.187.250	attack	Time: Thu Aug 27 19:11:46 2020 +0200 IP: 106.12.187.250 (CN/China/-) Failures: 5 (sshd) Interval: 3600 seconds Blocked: Permanent Block [LF_SSHD] Log entries: Aug 27 18:53:51 mail-03 sshd[17501]: Invalid user ubuntu from 106.12.187.250 port 40534 Aug 27 18:53:53 mail-03 sshd[17501]: Failed password for invalid user ubuntu from 106.12.187.250 port 40534 ssh2 Aug 27 19:05:12 mail-03 sshd[23214]: Invalid user gpadmin from 106.12.187.250 port 55390 Aug 27 19:05:14 mail-03 sshd[23214]: Failed password for invalid user gpadmin from 106.12.187.250 port 55390 ssh2 Aug 27 19:11:42 mail-03 sshd[23764]: Invalid user admin from 106.12.187.250 port 48476	2020-08-28 03:23:22
23.30.221.181	attackspam	Aug 27 14:51:14 PorscheCustomer sshd[23418]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.30.221.181 Aug 27 14:51:16 PorscheCustomer sshd[23418]: Failed password for invalid user sdu from 23.30.221.181 port 58662 ssh2 Aug 27 14:57:28 PorscheCustomer sshd[23525]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.30.221.181 ...	2020-08-28 03:31:50
185.147.215.12	attackspambots	\[Aug 28 05:10:54\] NOTICE\[31025\] chan_sip.c: Registration from '\' failed for '185.147.215.12:60271' - Wrong password \[Aug 28 05:11:17\] NOTICE\[31025\] chan_sip.c: Registration from '\' failed for '185.147.215.12:56698' - Wrong password \[Aug 28 05:11:39\] NOTICE\[31025\] chan_sip.c: Registration from '\' failed for '185.147.215.12:53212' - Wrong password \[Aug 28 05:12:03\] NOTICE\[31025\] chan_sip.c: Registration from '\' failed for '185.147.215.12:50191' - Wrong password \[Aug 28 05:12:29\] NOTICE\[31025\] chan_sip.c: Registration from '\' failed for '185.147.215.12:64819' - Wrong password \[Aug 28 05:12:53\] NOTICE\[31025\] chan_sip.c: Registration from '\' failed for '185.147.215.12:61414' - Wrong password \[Aug 28 05:13:18\] NOTICE\[31025\] chan_sip.c: Registration from '\ ...	2020-08-28 03:15:57
198.12.248.77	attackspambots	BURG,WP GET /demo/wp-login.php	2020-08-28 02:59:23
113.116.53.171	attackbotsspam	Icarus honeypot on github	2020-08-28 03:00:08
185.191.126.240	attackbotsspam	belitungshipwreck.org 185.191.126.240 [27/Aug/2020:14:57:14 +0200] "POST /xmlrpc.php HTTP/1.0" 301 509 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0 Safari/605.1.15" belitungshipwreck.org 185.191.126.240 [27/Aug/2020:14:57:15 +0200] "POST /xmlrpc.php HTTP/1.0" 200 3611 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0 Safari/605.1.15"	2020-08-28 03:38:22
83.103.59.192	attack	$f2bV_matches	2020-08-28 03:33:31
61.177.172.142	attackbots	Aug 27 19:10:38 localhost sshd[19420]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.142 user=root Aug 27 19:10:40 localhost sshd[19420]: Failed password for root from 61.177.172.142 port 14647 ssh2 Aug 27 19:10:43 localhost sshd[19420]: Failed password for root from 61.177.172.142 port 14647 ssh2 Aug 27 19:10:38 localhost sshd[19420]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.142 user=root Aug 27 19:10:40 localhost sshd[19420]: Failed password for root from 61.177.172.142 port 14647 ssh2 Aug 27 19:10:43 localhost sshd[19420]: Failed password for root from 61.177.172.142 port 14647 ssh2 Aug 27 19:10:38 localhost sshd[19420]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.142 user=root Aug 27 19:10:40 localhost sshd[19420]: Failed password for root from 61.177.172.142 port 14647 ssh2 Aug 27 19:10:43 localhost sshd[19420]: Fa ...	2020-08-28 03:12:27
193.228.91.123	attackbots	Aug 27 21:26:41 pub sshd[21000]: Invalid user user from 193.228.91.123 port 36138 Aug 27 21:27:05 pub sshd[21004]: Invalid user git from 193.228.91.123 port 60084 Aug 27 21:27:28 pub sshd[21007]: Invalid user postgres from 193.228.91.123 port 55776 ...	2020-08-28 03:30:15
218.92.0.248	attackspambots	Aug 27 23:55:45 gw1 sshd[24812]: Failed password for root from 218.92.0.248 port 24166 ssh2 Aug 27 23:55:56 gw1 sshd[24812]: error: maximum authentication attempts exceeded for root from 218.92.0.248 port 24166 ssh2 [preauth] ...	2020-08-28 03:09:33
182.74.86.27	attackbotsspam	Aug 27 20:36:57 root sshd[5972]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.74.86.27 Aug 27 20:36:59 root sshd[5972]: Failed password for invalid user admin from 182.74.86.27 port 38578 ssh2 Aug 27 20:38:53 root sshd[6213]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.74.86.27 ...	2020-08-28 03:00:55

Recently Reported IPs

104.248.148.224	104.248.148.96	104.248.149.11	101.109.59.165
101.109.59.167	101.109.59.177	101.109.59.178	101.109.59.18
101.109.59.181	101.109.59.183	101.109.59.189	101.109.59.190
104.248.160.144	101.109.59.194	104.248.160.158	104.248.16.30
104.248.16.63	104.248.160.104	104.248.160.119	104.248.160.167