Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Singapore

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspam
2019-11-17T06:28:27Z - RDP login failed multiple times. (104.248.149.80)
2019-11-17 15:58:50
attackspam
RDP Brute-Force (Grieskirchen RZ1)
2019-11-09 15:41:02
attackspam
2019-10-24T23:00:31Z - RDP login failed multiple times. (104.248.149.80)
2019-10-25 07:22:20
attack
2019-09-25T09:16:09Z - RDP login failed multiple times. (104.248.149.80)
2019-09-25 19:01:21
Comments on same subnet:
IP Type Details Datetime
104.248.149.43 attack
104.248.149.43 - - [30/Sep/2020:00:20:22 +0100] "POST /wp-login.php HTTP/1.1" 200 2224 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
104.248.149.43 - - [30/Sep/2020:00:20:23 +0100] "POST /xmlrpc.php HTTP/1.1" 200 247 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
104.248.149.43 - - [30/Sep/2020:00:33:45 +0100] "POST /wp/wp-login.php HTTP/1.1" 200 2480 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-09-30 09:40:37
104.248.149.43 attack
can 104.248.149.43 [29/Sep/2020:03:54:45 "-" "POST /wp-login.php 200 2021
104.248.149.43 [29/Sep/2020:20:52:24 "-" "GET /wp-login.php 200 4676
104.248.149.43 [29/Sep/2020:20:52:25 "-" "POST /wp-login.php 200 4676
2020-09-30 02:31:05
104.248.149.43 attackbotsspam
CMS (WordPress or Joomla) login attempt.
2020-09-29 18:33:58
104.248.149.130 attack
Invalid user student from 104.248.149.130 port 58998
2020-09-25 19:47:35
104.248.149.130 attack
$f2bV_matches
2020-09-19 01:01:39
104.248.149.130 attackbots
SSH Brute-Forcing (server2)
2020-09-18 17:03:26
104.248.149.130 attackspambots
SSH bruteforce
2020-09-18 07:18:38
104.248.149.130 attackbotsspam
SSH Login Bruteforce
2020-09-12 19:43:39
104.248.149.130 attackbotsspam
Sep  1 14:25:13 mail sshd\[21877\]: Invalid user hqy from 104.248.149.130
...
2020-09-02 03:52:53
104.248.149.130 attackbots
Aug 21 09:20:58 pkdns2 sshd\[1477\]: Invalid user wup from 104.248.149.130Aug 21 09:21:00 pkdns2 sshd\[1477\]: Failed password for invalid user wup from 104.248.149.130 port 38152 ssh2Aug 21 09:25:09 pkdns2 sshd\[1683\]: Invalid user history from 104.248.149.130Aug 21 09:25:10 pkdns2 sshd\[1683\]: Failed password for invalid user history from 104.248.149.130 port 46970 ssh2Aug 21 09:29:33 pkdns2 sshd\[1836\]: Invalid user vladimir from 104.248.149.130Aug 21 09:29:35 pkdns2 sshd\[1836\]: Failed password for invalid user vladimir from 104.248.149.130 port 55920 ssh2
...
2020-08-21 14:53:47
104.248.149.206 attackbotsspam
Aug 18 10:52:24 *hidden* sshd[10329]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.149.206 Aug 18 10:52:27 *hidden* sshd[10329]: Failed password for invalid user mc3 from 104.248.149.206 port 43999 ssh2 Aug 18 11:04:39 *hidden* sshd[12496]: Invalid user nodejs from 104.248.149.206 port 64195
2020-08-19 21:36:24
104.248.149.130 attackbotsspam
Aug 15 14:35:55 abendstille sshd\[3088\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.149.130  user=root
Aug 15 14:35:56 abendstille sshd\[3088\]: Failed password for root from 104.248.149.130 port 35778 ssh2
Aug 15 14:38:32 abendstille sshd\[5588\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.149.130  user=root
Aug 15 14:38:34 abendstille sshd\[5588\]: Failed password for root from 104.248.149.130 port 46666 ssh2
Aug 15 14:41:16 abendstille sshd\[8294\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.149.130  user=root
...
2020-08-15 20:46:41
104.248.149.130 attackspam
Aug 14 09:11:31 ws24vmsma01 sshd[75930]: Failed password for root from 104.248.149.130 port 57374 ssh2
...
2020-08-14 23:44:00
104.248.149.130 attackspambots
*Port Scan* detected from 104.248.149.130 (SG/Singapore/-/Singapore (Pioneer)/-). 4 hits in the last 85 seconds
2020-08-13 13:42:08
104.248.149.130 attackbotsspam
$f2bV_matches
2020-08-09 16:37:32
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.248.149.80
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41550
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.248.149.80.			IN	A

;; AUTHORITY SECTION:
.			198	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019092500 1800 900 604800 86400

;; Query time: 186 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Sep 25 19:01:17 CST 2019
;; MSG SIZE  rcvd: 118
Host info
Host 80.149.248.104.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 80.149.248.104.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
115.89.170.65 attackbots
Honeypot attack, port: 445, PTR: PTR record not found
2020-05-05 23:52:41
198.16.37.234 attackspam
Unauthorized connection attempt from IP address 198.16.37.234 on Port 445(SMB)
2020-05-05 23:42:58
37.233.60.68 attackbotsspam
Honeypot attack, port: 81, PTR: 37-233-60-68.starnet.md.
2020-05-06 00:03:18
60.48.113.205 attackbotsspam
May  5 16:18:46 legacy sshd[24483]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.48.113.205
May  5 16:18:48 legacy sshd[24483]: Failed password for invalid user charlie from 60.48.113.205 port 60925 ssh2
May  5 16:21:49 legacy sshd[24706]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.48.113.205
...
2020-05-05 23:55:15
132.247.192.249 attack
Unauthorized connection attempt from IP address 132.247.192.249 on Port 445(SMB)
2020-05-05 23:53:17
103.99.17.77 attack
Honeypot attack, port: 445, PTR: PTR record not found
2020-05-05 23:34:45
59.97.5.170 attack
1588670166 - 05/05/2020 11:16:06 Host: 59.97.5.170/59.97.5.170 Port: 445 TCP Blocked
2020-05-05 23:29:31
141.98.80.32 attack
May  5 16:27:46 blackbee postfix/smtpd\[27688\]: warning: unknown\[141.98.80.32\]: SASL LOGIN authentication failed: authentication failure
May  5 16:27:50 blackbee postfix/smtpd\[27650\]: warning: unknown\[141.98.80.32\]: SASL LOGIN authentication failed: authentication failure
May  5 16:28:40 blackbee postfix/smtpd\[27650\]: warning: unknown\[141.98.80.32\]: SASL LOGIN authentication failed: authentication failure
May  5 16:28:40 blackbee postfix/smtpd\[27688\]: warning: unknown\[141.98.80.32\]: SASL LOGIN authentication failed: authentication failure
May  5 16:28:43 blackbee postfix/smtpd\[27650\]: warning: unknown\[141.98.80.32\]: SASL LOGIN authentication failed: authentication failure
May  5 16:28:43 blackbee postfix/smtpd\[27688\]: warning: unknown\[141.98.80.32\]: SASL LOGIN authentication failed: authentication failure
...
2020-05-05 23:44:11
222.186.31.166 attackbotsspam
May  5 17:46:47 eventyay sshd[21621]: Failed password for root from 222.186.31.166 port 13935 ssh2
May  5 17:46:49 eventyay sshd[21621]: Failed password for root from 222.186.31.166 port 13935 ssh2
May  5 17:46:51 eventyay sshd[21621]: Failed password for root from 222.186.31.166 port 13935 ssh2
...
2020-05-05 23:51:20
109.131.96.154 attack
Unauthorized connection attempt detected from IP address 109.131.96.154 to port 2323
2020-05-05 23:41:27
49.189.145.8 attackspam
Automatic report - Port Scan Attack
2020-05-05 23:57:51
118.24.200.40 attackbots
May  5 10:31:59 ws24vmsma01 sshd[27046]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.200.40
May  5 10:32:02 ws24vmsma01 sshd[27046]: Failed password for invalid user teamspeak3 from 118.24.200.40 port 51906 ssh2
...
2020-05-05 23:38:50
42.112.81.69 attackspam
Unauthorized connection attempt from IP address 42.112.81.69 on Port 445(SMB)
2020-05-05 23:59:10
157.50.248.65 attackbots
Unauthorized connection attempt from IP address 157.50.248.65 on Port 445(SMB)
2020-05-05 23:55:35
103.99.17.31 attackspam
Honeypot attack, port: 445, PTR: PTR record not found
2020-05-05 23:25:06

Recently Reported IPs

113.108.126.5 131.63.129.35 112.218.26.191 255.238.148.92
105.171.188.210 176.31.103.59 147.228.162.18 131.126.155.195
220.79.59.97 1.113.77.58 246.199.190.138 94.233.171.193
119.21.52.2 59.61.179.17 52.83.205.218 51.89.239.211
156.176.184.56 215.168.251.110 45.218.142.73 223.75.228.204