104.248.172.5 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
104.248.172.238	attackbots	104.248.172.238 has been banned for [WebApp Attack] ...	2020-10-12 03:29:31
104.248.172.155	attackspambots	Jun 11 04:39:20 game-panel sshd[2844]: Failed password for root from 104.248.172.155 port 37832 ssh2 Jun 11 04:42:56 game-panel sshd[3048]: Failed password for root from 104.248.172.155 port 46738 ssh2	2020-06-11 12:47:48
104.248.172.112	attackspam	Honeypot attack, port: 23, PTR: PTR record not found	2019-12-24 18:03:42

Type

Details

Datetime

104.248.172.238

attackbots

104.248.172.238 has been banned for [WebApp Attack]
...

2020-10-12 03:29:31

104.248.172.155

attackspambots

Jun 11 04:39:20 game-panel sshd[2844]: Failed password for root from 104.248.172.155 port 37832 ssh2
Jun 11 04:42:56 game-panel sshd[3048]: Failed password for root from 104.248.172.155 port 46738 ssh2

2020-06-11 12:47:48

104.248.172.112

attackspam

Honeypot attack, port: 23, PTR: PTR record not found

2019-12-24 18:03:42

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.248.172.5
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60440
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.248.172.5.			IN	A

;; AUTHORITY SECTION:
.			256	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022701 1800 900 604800 86400

;; Query time: 64 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 28 14:08:44 CST 2022
;; MSG SIZE  rcvd: 106

Host info

5.172.248.104.in-addr.arpa domain name pointer holding.bailiwickpremium.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
5.172.248.104.in-addr.arpa	name = holding.bailiwickpremium.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
2001:41d0:2:b452::	attack	xmlrpc attack	2019-09-20 06:57:27
69.42.81.68	attackbots	Unauthorized connection attempt from IP address 69.42.81.68 on Port 445(SMB)	2019-09-20 06:54:46
85.117.89.72	attack	Unauthorized connection attempt from IP address 85.117.89.72 on Port 445(SMB)	2019-09-20 06:57:15
209.17.96.2	attackspam	port scan and connect, tcp 8080 (http-proxy)	2019-09-20 07:16:18
5.135.179.178	attackspambots	Sep 20 00:17:34 markkoudstaal sshd[25439]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.135.179.178 Sep 20 00:17:35 markkoudstaal sshd[25439]: Failed password for invalid user sarba from 5.135.179.178 port 33737 ssh2 Sep 20 00:21:30 markkoudstaal sshd[25798]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.135.179.178	2019-09-20 07:30:42
59.63.188.56	attack	$f2bV_matches	2019-09-20 07:03:11
177.62.169.167	attackspam	Sep 20 02:31:51 webhost01 sshd[8920]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.62.169.167 Sep 20 02:31:53 webhost01 sshd[8920]: Failed password for invalid user qhsupport from 177.62.169.167 port 57180 ssh2 ...	2019-09-20 07:05:40
179.108.49.225	attackspambots	Spam trapped	2019-09-20 06:43:14
77.247.110.139	attackbotsspam	\[2019-09-19 18:39:53\] SECURITY\[2283\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-09-19T18:39:53.597-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="027601148525260103",SessionID="0x7fcd8c05a958",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.139/61458",ACLName="no_extension_match" \[2019-09-19 18:40:39\] SECURITY\[2283\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-09-19T18:40:39.565-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="02027701148236518002",SessionID="0x7fcd8c05a958",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.139/55098",ACLName="no_extension_match" \[2019-09-19 18:40:46\] SECURITY\[2283\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-09-19T18:40:46.449-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="01027801148825681005",SessionID="0x7fcd8c4cd408",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.139/58703"	2019-09-20 06:46:44
106.13.176.115	attackspambots	Sep 19 22:28:11 anodpoucpklekan sshd[67944]: Invalid user kafka from 106.13.176.115 port 38532 Sep 19 22:28:13 anodpoucpklekan sshd[67944]: Failed password for invalid user kafka from 106.13.176.115 port 38532 ssh2 ...	2019-09-20 06:42:45
41.38.15.204	attackspam	Unauthorized connection attempt from IP address 41.38.15.204 on Port 445(SMB)	2019-09-20 07:10:19
80.82.78.85	attack	Sep 20 00:41:32 relay dovecot: pop3-login: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=80.82.78.85, lip=176.9.177.164, session=\ Sep 20 00:41:43 relay dovecot: pop3-login: Aborted login $auth failed, 1 attempts in 6 secs$: user=\, method=PLAIN, rip=80.82.78.85, lip=176.9.177.164, session=\ Sep 20 00:41:59 relay dovecot: pop3-login: Aborted login $auth failed, 1 attempts in 10 secs$: user=\, method=PLAIN, rip=80.82.78.85, lip=176.9.177.164, session=\<8EG9qO+SSEZQUk5V\> Sep 20 00:44:04 relay dovecot: pop3-login: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=80.82.78.85, lip=176.9.177.164, session=\ Sep 20 00:46:29 relay dovecot: pop3-login: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN ...	2019-09-20 07:12:35
162.243.98.66	attack	Automatic report - Banned IP Access	2019-09-20 07:06:09
159.89.162.118	attack	Sep 19 19:05:58 ny01 sshd[26561]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.162.118 Sep 19 19:05:59 ny01 sshd[26561]: Failed password for invalid user podcast from 159.89.162.118 port 51382 ssh2 Sep 19 19:10:40 ny01 sshd[27397]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.162.118	2019-09-20 07:27:07
177.139.182.211	attackbots	Unauthorized connection attempt from IP address 177.139.182.211 on Port 445(SMB)	2019-09-20 07:00:56

Recently Reported IPs

104.248.172.218	104.248.174.16	104.248.173.102	104.248.173.166
104.248.173.227	104.248.174.146	104.248.174.133	104.248.174.177
104.248.174.156	104.248.174.223	104.248.174.169	104.248.174.233
104.248.174.127	104.248.175.174	2.35.169.147	104.248.174.253
104.248.174.78	104.248.176.19	2a03:b0c0:3:e0::41c:c001	104.248.192.36