104.248.149.192

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
104.248.149.43	attack	104.248.149.43 - - [30/Sep/2020:00:20:22 +0100] "POST /wp-login.php HTTP/1.1" 200 2224 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.248.149.43 - - [30/Sep/2020:00:20:23 +0100] "POST /xmlrpc.php HTTP/1.1" 200 247 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.248.149.43 - - [30/Sep/2020:00:33:45 +0100] "POST /wp/wp-login.php HTTP/1.1" 200 2480 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-09-30 09:40:37
104.248.149.43	attack	can 104.248.149.43 [29/Sep/2020:03:54:45 "-" "POST /wp-login.php 200 2021 104.248.149.43 [29/Sep/2020:20:52:24 "-" "GET /wp-login.php 200 4676 104.248.149.43 [29/Sep/2020:20:52:25 "-" "POST /wp-login.php 200 4676	2020-09-30 02:31:05
104.248.149.43	attackbotsspam	CMS (WordPress or Joomla) login attempt.	2020-09-29 18:33:58
104.248.149.130	attack	Invalid user student from 104.248.149.130 port 58998	2020-09-25 19:47:35
104.248.149.130	attack	$f2bV_matches	2020-09-19 01:01:39
104.248.149.130	attackbots	SSH Brute-Forcing (server2)	2020-09-18 17:03:26
104.248.149.130	attackspambots	SSH bruteforce	2020-09-18 07:18:38
104.248.149.130	attackbotsspam	SSH Login Bruteforce	2020-09-12 19:43:39
104.248.149.130	attackbotsspam	Sep 1 14:25:13 mail sshd\[21877\]: Invalid user hqy from 104.248.149.130 ...	2020-09-02 03:52:53
104.248.149.130	attackbots	Aug 21 09:20:58 pkdns2 sshd\[1477\]: Invalid user wup from 104.248.149.130Aug 21 09:21:00 pkdns2 sshd\[1477\]: Failed password for invalid user wup from 104.248.149.130 port 38152 ssh2Aug 21 09:25:09 pkdns2 sshd\[1683\]: Invalid user history from 104.248.149.130Aug 21 09:25:10 pkdns2 sshd\[1683\]: Failed password for invalid user history from 104.248.149.130 port 46970 ssh2Aug 21 09:29:33 pkdns2 sshd\[1836\]: Invalid user vladimir from 104.248.149.130Aug 21 09:29:35 pkdns2 sshd\[1836\]: Failed password for invalid user vladimir from 104.248.149.130 port 55920 ssh2 ...	2020-08-21 14:53:47
104.248.149.206	attackbotsspam	Aug 18 10:52:24 hidden sshd[10329]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.149.206 Aug 18 10:52:27 hidden sshd[10329]: Failed password for invalid user mc3 from 104.248.149.206 port 43999 ssh2 Aug 18 11:04:39 hidden sshd[12496]: Invalid user nodejs from 104.248.149.206 port 64195	2020-08-19 21:36:24
104.248.149.130	attackbotsspam	Aug 15 14:35:55 abendstille sshd\[3088\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.149.130 user=root Aug 15 14:35:56 abendstille sshd\[3088\]: Failed password for root from 104.248.149.130 port 35778 ssh2 Aug 15 14:38:32 abendstille sshd\[5588\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.149.130 user=root Aug 15 14:38:34 abendstille sshd\[5588\]: Failed password for root from 104.248.149.130 port 46666 ssh2 Aug 15 14:41:16 abendstille sshd\[8294\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.149.130 user=root ...	2020-08-15 20:46:41
104.248.149.130	attackspam	Aug 14 09:11:31 ws24vmsma01 sshd[75930]: Failed password for root from 104.248.149.130 port 57374 ssh2 ...	2020-08-14 23:44:00
104.248.149.130	attackspambots	Port Scan detected from 104.248.149.130 (SG/Singapore/-/Singapore (Pioneer)/-). 4 hits in the last 85 seconds	2020-08-13 13:42:08
104.248.149.130	attackbotsspam	$f2bV_matches	2020-08-09 16:37:32

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.248.149.192
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7561
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.248.149.192.		IN	A

;; AUTHORITY SECTION:
.			156	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022091500 1800 900 604800 86400

;; Query time: 70 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Sep 15 17:40:25 CST 2022
;; MSG SIZE  rcvd: 108

Host info

192.149.248.104.in-addr.arpa domain name pointer asu.gz-s-4vcpu-8gb-amd-sgp1-01.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
192.149.248.104.in-addr.arpa	name = asu.gz-s-4vcpu-8gb-amd-sgp1-01.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
178.128.221.146	attackspam	Sep 26 11:43:56 www sshd[31718]: Invalid user kee from 178.128.221.146 Sep 26 11:43:56 www sshd[31718]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.221.146 Sep 26 11:43:58 www sshd[31718]: Failed password for invalid user kee from 178.128.221.146 port 41774 ssh2 Sep 26 11:43:58 www sshd[31718]: Received disconnect from 178.128.221.146: 11: Bye Bye [preauth] Sep 26 11:51:32 www sshd[31801]: Invalid user altair from 178.128.221.146 Sep 26 11:51:32 www sshd[31801]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.221.146 Sep 26 11:51:34 www sshd[31801]: Failed password for invalid user altair from 178.128.221.146 port 53250 ssh2 Sep 26 11:51:34 www sshd[31801]: Received disconnect from 178.128.221.146: 11: Bye Bye [preauth] Sep 26 11:55:53 www sshd[31870]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.221.146 user=r.r Sep 2........ -------------------------------	2019-09-29 01:55:51
51.38.224.46	attackspambots	Sep 28 04:04:59 aiointranet sshd\[21780\]: Invalid user shclient from 51.38.224.46 Sep 28 04:04:59 aiointranet sshd\[21780\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.224.46 Sep 28 04:05:01 aiointranet sshd\[21780\]: Failed password for invalid user shclient from 51.38.224.46 port 46208 ssh2 Sep 28 04:09:37 aiointranet sshd\[22268\]: Invalid user admin from 51.38.224.46 Sep 28 04:09:37 aiointranet sshd\[22268\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.224.46	2019-09-29 02:04:46
45.135.36.213	attackbots	B: Magento admin pass test (wrong country)	2019-09-29 01:41:09
92.61.36.137	attackspambots	xmlrpc attack	2019-09-29 02:02:15
199.116.78.161	attackbots	WordPress XMLRPC scan :: 199.116.78.161 0.136 BYPASS [28/Sep/2019:22:29:57 1000] [censored_1] "POST /xmlrpc.php HTTP/1.1" 200 413 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2019-09-29 02:11:31
124.30.44.214	attackspambots	Sep 28 19:55:52 v22019058497090703 sshd[13429]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.30.44.214 Sep 28 19:55:54 v22019058497090703 sshd[13429]: Failed password for invalid user fly from 124.30.44.214 port 43478 ssh2 Sep 28 20:00:44 v22019058497090703 sshd[13781]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.30.44.214 ...	2019-09-29 02:03:19
156.216.133.81	proxynormal	156.216.133.81	2019-09-29 01:53:42
182.71.209.203	attack	xmlrpc attack	2019-09-29 02:15:07
162.244.12.93	attack	SpamReport	2019-09-29 01:58:50
107.170.246.89	attack	Sep 28 08:06:22 kapalua sshd\[30876\]: Invalid user user0 from 107.170.246.89 Sep 28 08:06:22 kapalua sshd\[30876\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.170.246.89 Sep 28 08:06:24 kapalua sshd\[30876\]: Failed password for invalid user user0 from 107.170.246.89 port 45996 ssh2 Sep 28 08:10:25 kapalua sshd\[31392\]: Invalid user user3 from 107.170.246.89 Sep 28 08:10:25 kapalua sshd\[31392\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.170.246.89	2019-09-29 02:11:10
134.209.35.246	attack	Sep 26 11:45:48 xb3 sshd[4128]: Failed password for invalid user fachwirt from 134.209.35.246 port 37370 ssh2 Sep 26 11:45:48 xb3 sshd[4128]: Received disconnect from 134.209.35.246: 11: Bye Bye [preauth] Sep 26 11:52:51 xb3 sshd[11444]: Failed password for invalid user durand from 134.209.35.246 port 39890 ssh2 Sep 26 11:52:51 xb3 sshd[11444]: Received disconnect from 134.209.35.246: 11: Bye Bye [preauth] Sep 26 11:57:02 xb3 sshd[9647]: Failed password for invalid user horizon from 134.209.35.246 port 54168 ssh2 Sep 26 11:57:02 xb3 sshd[9647]: Received disconnect from 134.209.35.246: 11: Bye Bye [preauth] Sep 26 12:01:04 xb3 sshd[8548]: Failed password for invalid user teste from 134.209.35.246 port 40110 ssh2 Sep 26 12:01:04 xb3 sshd[8548]: Received disconnect from 134.209.35.246: 11: Bye Bye [preauth] Sep 26 12:05:06 xb3 sshd[21887]: Failed password for invalid user sonar from 134.209.35.246 port 54498 ssh2 Sep 26 12:05:06 xb3 sshd[21887]: Received disconnect from 13........ -------------------------------	2019-09-29 01:48:23
60.169.222.61	attack	2019-09-28T13:29:28.636732beta postfix/smtpd[6449]: NOQUEUE: reject: RCPT from unknown[60.169.222.61]: 450 4.7.1 Client host rejected: cannot find your reverse hostname, [60.169.222.61]; from= to= proto=ESMTP helo= 2019-09-28T13:29:35.336280beta postfix/smtpd[6449]: NOQUEUE: reject: RCPT from unknown[60.169.222.61]: 450 4.7.1 Client host rejected: cannot find your reverse hostname, [60.169.222.61]; from= to= proto=ESMTP helo= 2019-09-28T13:30:09.784862beta postfix/smtpd[6449]: NOQUEUE: reject: RCPT from unknown[60.169.222.61]: 450 4.7.1 Client host rejected: cannot find your reverse hostname, [60.169.222.61]; from= to= proto=ESMTP helo= ...	2019-09-29 01:54:59
219.143.186.82	attackspambots	2019-09-28T17:33:46.151768abusebot-4.cloudsearch.cf sshd\[25447\]: Invalid user hadoop from 219.143.186.82 port 50928	2019-09-29 01:50:05
201.248.67.246	attackbotsspam	Unauthorized connection attempt from IP address 201.248.67.246 on Port 445(SMB)	2019-09-29 01:51:50
101.89.216.223	attackbots	Time: Sat Sep 28 09:05:33 2019 -0300 IP: 101.89.216.223 (CN/China/-) Failures: 5 (smtpauth) Interval: 3600 seconds Blocked: Permanent Block	2019-09-29 01:42:11

Recently Reported IPs

94.255.192.49	157.245.102.78	104.248.148.152	202.144.192.116
178.128.98.77	113.59.185.178	157.245.201.216	164.92.198.60
104.248.156.250	64.227.178.221	121.158.188.21	218.102.240.156
138.121.174.184	173.255.213.230	115.77.157.221	103.88.54.194
103.99.111.118	122.180.247.48	77.178.221.70	112.234.76.165