104.248.149.215

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
104.248.149.43	attack	104.248.149.43 - - [30/Sep/2020:00:20:22 +0100] "POST /wp-login.php HTTP/1.1" 200 2224 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.248.149.43 - - [30/Sep/2020:00:20:23 +0100] "POST /xmlrpc.php HTTP/1.1" 200 247 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.248.149.43 - - [30/Sep/2020:00:33:45 +0100] "POST /wp/wp-login.php HTTP/1.1" 200 2480 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-09-30 09:40:37
104.248.149.43	attack	can 104.248.149.43 [29/Sep/2020:03:54:45 "-" "POST /wp-login.php 200 2021 104.248.149.43 [29/Sep/2020:20:52:24 "-" "GET /wp-login.php 200 4676 104.248.149.43 [29/Sep/2020:20:52:25 "-" "POST /wp-login.php 200 4676	2020-09-30 02:31:05
104.248.149.43	attackbotsspam	CMS (WordPress or Joomla) login attempt.	2020-09-29 18:33:58
104.248.149.130	attack	Invalid user student from 104.248.149.130 port 58998	2020-09-25 19:47:35
104.248.149.130	attack	$f2bV_matches	2020-09-19 01:01:39
104.248.149.130	attackbots	SSH Brute-Forcing (server2)	2020-09-18 17:03:26
104.248.149.130	attackspambots	SSH bruteforce	2020-09-18 07:18:38
104.248.149.130	attackbotsspam	SSH Login Bruteforce	2020-09-12 19:43:39
104.248.149.130	attackbotsspam	Sep 1 14:25:13 mail sshd\[21877\]: Invalid user hqy from 104.248.149.130 ...	2020-09-02 03:52:53
104.248.149.130	attackbots	Aug 21 09:20:58 pkdns2 sshd\[1477\]: Invalid user wup from 104.248.149.130Aug 21 09:21:00 pkdns2 sshd\[1477\]: Failed password for invalid user wup from 104.248.149.130 port 38152 ssh2Aug 21 09:25:09 pkdns2 sshd\[1683\]: Invalid user history from 104.248.149.130Aug 21 09:25:10 pkdns2 sshd\[1683\]: Failed password for invalid user history from 104.248.149.130 port 46970 ssh2Aug 21 09:29:33 pkdns2 sshd\[1836\]: Invalid user vladimir from 104.248.149.130Aug 21 09:29:35 pkdns2 sshd\[1836\]: Failed password for invalid user vladimir from 104.248.149.130 port 55920 ssh2 ...	2020-08-21 14:53:47
104.248.149.206	attackbotsspam	Aug 18 10:52:24 hidden sshd[10329]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.149.206 Aug 18 10:52:27 hidden sshd[10329]: Failed password for invalid user mc3 from 104.248.149.206 port 43999 ssh2 Aug 18 11:04:39 hidden sshd[12496]: Invalid user nodejs from 104.248.149.206 port 64195	2020-08-19 21:36:24
104.248.149.130	attackbotsspam	Aug 15 14:35:55 abendstille sshd\[3088\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.149.130 user=root Aug 15 14:35:56 abendstille sshd\[3088\]: Failed password for root from 104.248.149.130 port 35778 ssh2 Aug 15 14:38:32 abendstille sshd\[5588\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.149.130 user=root Aug 15 14:38:34 abendstille sshd\[5588\]: Failed password for root from 104.248.149.130 port 46666 ssh2 Aug 15 14:41:16 abendstille sshd\[8294\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.149.130 user=root ...	2020-08-15 20:46:41
104.248.149.130	attackspam	Aug 14 09:11:31 ws24vmsma01 sshd[75930]: Failed password for root from 104.248.149.130 port 57374 ssh2 ...	2020-08-14 23:44:00
104.248.149.130	attackspambots	Port Scan detected from 104.248.149.130 (SG/Singapore/-/Singapore (Pioneer)/-). 4 hits in the last 85 seconds	2020-08-13 13:42:08
104.248.149.130	attackbotsspam	$f2bV_matches	2020-08-09 16:37:32

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.248.149.215
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43745
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.248.149.215.		IN	A

;; AUTHORITY SECTION:
.			482	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021701 1800 900 604800 86400

;; Query time: 83 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 03:51:36 CST 2022
;; MSG SIZE  rcvd: 108

Host info

Host 215.149.248.104.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 215.149.248.104.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
139.155.9.86	attackspam	Time: Thu Sep 10 10:01:09 2020 +0200 IP: 139.155.9.86 (CN/China/-) Failures: 5 (sshd) Interval: 3600 seconds Blocked: Permanent Block [LF_SSHD] Log entries: Sep 10 09:46:58 mail-03 sshd[5408]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.9.86 user=root Sep 10 09:47:00 mail-03 sshd[5408]: Failed password for root from 139.155.9.86 port 38500 ssh2 Sep 10 09:55:53 mail-03 sshd[5510]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.9.86 user=root Sep 10 09:55:55 mail-03 sshd[5510]: Failed password for root from 139.155.9.86 port 35750 ssh2 Sep 10 10:01:06 mail-03 sshd[5586]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.9.86 user=root	2020-09-10 17:05:20
138.197.175.236	attackspam	SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found	2020-09-10 17:05:00
107.172.211.96	attackbotsspam	Lines containing failures of 107.172.211.96 Sep 9 18:49:04 v2hgb postfix/smtpd[15740]: connect from unknown[107.172.211.96] Sep x@x Sep 9 18:49:06 v2hgb postfix/smtpd[15740]: disconnect from unknown[107.172.211.96] ehlo=1 mail=1 rcpt=0/1 quhostname=1 commands=3/4 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=107.172.211.96	2020-09-10 16:38:58
178.128.201.175	attackspam	SSH Brute-Force. Ports scanning.	2020-09-10 16:41:32
112.243.153.234	attack	Lines containing failures of 112.243.153.234 Sep 7 17:49:04 kmh-wsh-001-nbg03 sshd[29541]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.243.153.234 user=r.r Sep 7 17:49:05 kmh-wsh-001-nbg03 sshd[29541]: Failed password for r.r from 112.243.153.234 port 40830 ssh2 Sep 7 17:49:06 kmh-wsh-001-nbg03 sshd[29541]: Received disconnect from 112.243.153.234 port 40830:11: Bye Bye [preauth] Sep 7 17:49:06 kmh-wsh-001-nbg03 sshd[29541]: Disconnected from authenticating user r.r 112.243.153.234 port 40830 [preauth] Sep 7 18:10:03 kmh-wsh-001-nbg03 sshd[32457]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.243.153.234 user=r.r Sep 7 18:10:05 kmh-wsh-001-nbg03 sshd[32457]: Failed password for r.r from 112.243.153.234 port 35818 ssh2 Sep 7 18:10:05 kmh-wsh-001-nbg03 sshd[32457]: Received disconnect from 112.243.153.234 port 35818:11: Bye Bye [preauth] Sep 7 18:10:05 kmh-wsh-001-nbg03 ........ ------------------------------	2020-09-10 16:53:47
185.56.153.229	attack	$f2bV_matches	2020-09-10 16:31:47
123.13.203.67	attack	2020-09-10T03:43:41.3362391495-001 sshd[60918]: Invalid user testftp from 123.13.203.67 port 54670 2020-09-10T03:43:43.4358971495-001 sshd[60918]: Failed password for invalid user testftp from 123.13.203.67 port 54670 ssh2 2020-09-10T03:49:44.2726551495-001 sshd[61190]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.13.203.67 user=root 2020-09-10T03:49:45.8666321495-001 sshd[61190]: Failed password for root from 123.13.203.67 port 28558 ssh2 2020-09-10T03:55:47.1710851495-001 sshd[61420]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.13.203.67 user=root 2020-09-10T03:55:48.9307601495-001 sshd[61420]: Failed password for root from 123.13.203.67 port 57973 ssh2 ...	2020-09-10 16:35:17
212.64.17.102	attackbots	$f2bV_matches	2020-09-10 16:36:05
79.184.214.78	attack	Wordpress attack	2020-09-10 16:52:32
222.186.180.17	attackspambots	Sep 10 04:43:58 plusreed sshd[28641]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.17 user=root Sep 10 04:44:00 plusreed sshd[28641]: Failed password for root from 222.186.180.17 port 19698 ssh2 ...	2020-09-10 16:44:11
82.65.23.62	attack	ssh brute force	2020-09-10 17:13:31
36.155.115.72	attackspambots	$f2bV_matches	2020-09-10 16:38:46
202.228.215.57	attackbots	MultiHost/MultiPort Probe, Scan, Hack -	2020-09-10 17:00:19
23.95.220.201	attackbotsspam	TCP (SYN) 23.95.220.201:20023 -> port 22, len 48	2020-09-10 16:42:21
94.102.51.29	attackspam	TCP (SYN) 94.102.51.29:51751 -> port 3390, len 44	2020-09-10 17:08:59

Recently Reported IPs

104.248.150.22	104.248.146.112	104.248.159.41	104.248.158.7
104.248.151.104	104.248.161.98	104.248.161.27	104.248.156.47
104.248.160.129	104.248.168.9	104.248.163.10	104.248.17.177
104.248.17.175	104.248.165.183	104.248.169.51	104.248.17.229
104.248.174.128	104.248.175.76	104.248.179.36	104.248.177.229