104.248.22.51 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
104.248.224.124	attackspambots	104.248.224.124 - - [27/Sep/2020:20:10:36 +0200] "GET /wp-login.php HTTP/1.1" 200 8796 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.248.224.124 - - [27/Sep/2020:20:10:38 +0200] "POST /wp-login.php HTTP/1.1" 200 9047 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.248.224.124 - - [27/Sep/2020:20:10:39 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-09-28 02:23:54
104.248.224.124	attack	104.248.224.124 - - [27/Sep/2020:09:00:57 +0200] "POST /wp-login.php HTTP/1.0" 200 4794 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-09-27 18:30:04
104.248.226.186	attackspambots	Lines containing failures of 104.248.226.186 (max 1000) Sep 24 13:21:39 UTC__SANYALnet-Labs__cac12 sshd[26117]: Connection from 104.248.226.186 port 37632 on 64.137.176.96 port 22 Sep 24 13:21:39 UTC__SANYALnet-Labs__cac12 sshd[26117]: Did not receive identification string from 104.248.226.186 port 37632 Sep 24 13:21:40 UTC__SANYALnet-Labs__cac12 sshd[26118]: Connection from 104.248.226.186 port 39460 on 64.137.176.96 port 22 Sep 24 13:21:40 UTC__SANYALnet-Labs__cac12 sshd[26120]: Connection from 104.248.226.186 port 39726 on 64.137.176.96 port 22 Sep 24 13:21:40 UTC__SANYALnet-Labs__cac12 sshd[26122]: Connection from 104.248.226.186 port 40058 on 64.137.176.96 port 22 Sep 24 13:21:40 UTC__SANYALnet-Labs__cac12 sshd[26124]: Connection from 104.248.226.186 port 40360 on 64.137.176.96 port 22 Sep 24 13:21:41 UTC__SANYALnet-Labs__cac12 sshd[26120]: User r.r from 104.248.226.186 not allowed because not listed in AllowUsers Sep 24 13:21:41 UTC__SANYALnet-Labs__cac12 sshd[2611........ ------------------------------	2020-09-26 05:48:57
104.248.226.186	attackspambots	Sep 24 20:18:44 php1 sshd\[30583\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.226.186 user=root Sep 24 20:18:45 php1 sshd\[30585\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.226.186 user=root Sep 24 20:18:45 php1 sshd\[30587\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.226.186 user=root Sep 24 20:18:45 php1 sshd\[30583\]: Failed password for root from 104.248.226.186 port 53036 ssh2 Sep 24 20:18:46 php1 sshd\[30589\]: Invalid user admin from 104.248.226.186	2020-09-25 14:27:08
104.248.22.143	attackspambots	104.248.22.143 - - [24/Sep/2020:20:54:32 +0100] "POST /wp-login.php HTTP/1.1" 200 2588 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.248.22.143 - - [24/Sep/2020:20:54:43 +0100] "POST /wp-login.php HTTP/1.1" 200 2520 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.248.22.143 - - [24/Sep/2020:20:54:49 +0100] "POST /wp-login.php HTTP/1.1" 200 2520 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-09-25 04:26:52
104.248.22.27	attackspambots	firewall-block, port(s): 8736/tcp	2020-09-20 23:57:21
104.248.22.27	attackspambots	TCP (SYN) 104.248.22.27:58654 -> port 8736, len 44	2020-09-20 15:50:36
104.248.22.27	attackspambots	Port scan: Attack repeated for 24 hours	2020-09-20 07:41:05
104.248.225.22	attackspam	Automatic report generated by Wazuh	2020-09-19 03:06:58
104.248.225.22	attack	SS1,DEF GET /wp-login.php	2020-09-18 19:09:24
104.248.22.27	attack	2020-09-15T17:11:45.435687abusebot-4.cloudsearch.cf sshd[24046]: Invalid user ginger from 104.248.22.27 port 36136 2020-09-15T17:11:45.444363abusebot-4.cloudsearch.cf sshd[24046]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.22.27 2020-09-15T17:11:45.435687abusebot-4.cloudsearch.cf sshd[24046]: Invalid user ginger from 104.248.22.27 port 36136 2020-09-15T17:11:47.086672abusebot-4.cloudsearch.cf sshd[24046]: Failed password for invalid user ginger from 104.248.22.27 port 36136 ssh2 2020-09-15T17:15:28.494750abusebot-4.cloudsearch.cf sshd[24062]: Invalid user shekhar from 104.248.22.27 port 40316 2020-09-15T17:15:28.501783abusebot-4.cloudsearch.cf sshd[24062]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.22.27 2020-09-15T17:15:28.494750abusebot-4.cloudsearch.cf sshd[24062]: Invalid user shekhar from 104.248.22.27 port 40316 2020-09-15T17:15:30.756462abusebot-4.cloudsearch.cf sshd[24062]: ...	2020-09-16 02:43:44
104.248.225.22	attackspambots	104.248.225.22 - - [15/Sep/2020:17:50:50 +0100] "POST /wp-login.php HTTP/1.1" 200 1704 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.248.225.22 - - [15/Sep/2020:17:50:55 +0100] "POST /wp-login.php HTTP/1.1" 200 1685 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.248.225.22 - - [15/Sep/2020:17:51:01 +0100] "POST /xmlrpc.php HTTP/1.1" 200 247 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-09-16 01:56:23
104.248.224.124	attackspambots	"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:	2020-09-16 00:13:27
104.248.22.27	attackspambots	TCP port : 23212	2020-09-15 18:41:56
104.248.225.22	attackbots	104.248.225.22 - - [15/Sep/2020:08:31:40 +0100] "POST /wp-login.php HTTP/1.1" 200 2435 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.248.225.22 - - [15/Sep/2020:08:31:41 +0100] "POST /wp-login.php HTTP/1.1" 200 2415 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.248.225.22 - - [15/Sep/2020:08:31:44 +0100] "POST /wp-login.php HTTP/1.1" 200 2400 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-09-15 17:49:52

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.248.22.51
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 8383
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.248.22.51.			IN	A

;; AUTHORITY SECTION:
.			347	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022100700 1800 900 604800 86400

;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Oct 08 00:57:53 CST 2022
;; MSG SIZE  rcvd: 106

Host info

Host 51.22.248.104.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 51.22.248.104.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
45.141.84.18	attack	要求的頁面：/.git/config	2019-10-16 16:00:34
41.89.160.13	attackspam	Oct 16 10:06:53 areeb-Workstation sshd[28262]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.89.160.13 Oct 16 10:06:55 areeb-Workstation sshd[28262]: Failed password for invalid user yangzx456 from 41.89.160.13 port 60322 ssh2 ...	2019-10-16 15:55:18
46.101.73.64	attack	Oct 16 06:21:05 marvibiene sshd[27571]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.73.64 user=root Oct 16 06:21:07 marvibiene sshd[27571]: Failed password for root from 46.101.73.64 port 59590 ssh2 Oct 16 06:24:52 marvibiene sshd[27602]: Invalid user maduri from 46.101.73.64 port 46694 ...	2019-10-16 16:22:35
206.189.35.254	attackspambots	Oct 15 21:01:21 auw2 sshd\[8209\]: Invalid user charlie from 206.189.35.254 Oct 15 21:01:21 auw2 sshd\[8209\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.35.254 Oct 15 21:01:23 auw2 sshd\[8209\]: Failed password for invalid user charlie from 206.189.35.254 port 54698 ssh2 Oct 15 21:06:05 auw2 sshd\[8602\]: Invalid user 123456 from 206.189.35.254 Oct 15 21:06:05 auw2 sshd\[8602\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.35.254	2019-10-16 15:59:31
115.79.60.104	attack	Oct 15 17:39:35 sachi sshd\[30313\]: Invalid user temp from 115.79.60.104 Oct 15 17:39:35 sachi sshd\[30313\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.79.60.104 Oct 15 17:39:37 sachi sshd\[30313\]: Failed password for invalid user temp from 115.79.60.104 port 43346 ssh2 Oct 15 17:44:16 sachi sshd\[30688\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.79.60.104 user=root Oct 15 17:44:18 sachi sshd\[30688\]: Failed password for root from 115.79.60.104 port 54712 ssh2	2019-10-16 16:21:33
181.65.51.111	attack	Oct 16 05:11:41 mxgate1 postfix/postscreen[16446]: CONNECT from [181.65.51.111]:49224 to [176.31.12.44]:25 Oct 16 05:11:41 mxgate1 postfix/dnsblog[16449]: addr 181.65.51.111 listed by domain cbl.abuseat.org as 127.0.0.2 Oct 16 05:11:41 mxgate1 postfix/dnsblog[16451]: addr 181.65.51.111 listed by domain zen.spamhaus.org as 127.0.0.4 Oct 16 05:11:41 mxgate1 postfix/dnsblog[16451]: addr 181.65.51.111 listed by domain zen.spamhaus.org as 127.0.0.3 Oct 16 05:11:41 mxgate1 postfix/dnsblog[16451]: addr 181.65.51.111 listed by domain zen.spamhaus.org as 127.0.0.11 Oct 16 05:11:41 mxgate1 postfix/dnsblog[16599]: addr 181.65.51.111 listed by domain bl.spamcop.net as 127.0.0.2 Oct 16 05:11:42 mxgate1 postfix/dnsblog[16447]: addr 181.65.51.111 listed by domain b.barracudacentral.org as 127.0.0.2 Oct 16 05:11:47 mxgate1 postfix/postscreen[16446]: DNSBL rank 5 for [181.65.51.111]:49224 Oct x@x Oct 16 05:11:49 mxgate1 postfix/postscreen[16446]: HANGUP after 2.8 from [181.65.51.111]:49........ -------------------------------	2019-10-16 15:50:01
164.163.25.106	attackbots	Portscan or hack attempt detected by psad/fwsnort	2019-10-16 15:48:46
77.247.110.17	attackbotsspam	\[2019-10-16 03:42:08\] NOTICE\[1887\] chan_sip.c: Registration from '"499" \' failed for '77.247.110.17:6237' - Wrong password \[2019-10-16 03:42:08\] SECURITY\[1898\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-16T03:42:08.734-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="499",SessionID="0x7fc3ac00c388",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.17/6237",Challenge="311319e0",ReceivedChallenge="311319e0",ReceivedHash="6a76fc5d2c59452b61422db02fafc8ff" \[2019-10-16 03:42:08\] NOTICE\[1887\] chan_sip.c: Registration from '"499" \' failed for '77.247.110.17:6237' - Wrong password \[2019-10-16 03:42:08\] SECURITY\[1898\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-16T03:42:08.855-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="499",SessionID="0x7fc3ac7f93a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.2	2019-10-16 15:58:39
179.108.107.25	attackbots	Oct 16 09:44:10 nextcloud sshd\[3217\]: Invalid user ftpuser from 179.108.107.25 Oct 16 09:44:10 nextcloud sshd\[3217\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.108.107.25 Oct 16 09:44:12 nextcloud sshd\[3217\]: Failed password for invalid user ftpuser from 179.108.107.25 port 59018 ssh2 ...	2019-10-16 16:23:09
36.103.243.247	attackbotsspam	Oct 16 05:25:59 vpn01 sshd[29377]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.103.243.247 Oct 16 05:26:00 vpn01 sshd[29377]: Failed password for invalid user jira from 36.103.243.247 port 48941 ssh2 ...	2019-10-16 15:57:00
128.199.169.11	attack	Oct 16 08:54:44 www4 sshd\[3786\]: Invalid user dorothea from 128.199.169.11 Oct 16 08:54:44 www4 sshd\[3786\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.169.11 Oct 16 08:54:46 www4 sshd\[3786\]: Failed password for invalid user dorothea from 128.199.169.11 port 45860 ssh2 ...	2019-10-16 16:06:58
103.39.216.153	attack	Oct 16 07:25:14 eventyay sshd[13976]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.39.216.153 Oct 16 07:25:15 eventyay sshd[13976]: Failed password for invalid user mongo123 from 103.39.216.153 port 43044 ssh2 Oct 16 07:30:21 eventyay sshd[14067]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.39.216.153 ...	2019-10-16 16:07:45
121.58.213.195	attackbots	Oct 16 05:17:12 econome sshd[32271]: Failed password for invalid user system from 121.58.213.195 port 30469 ssh2 Oct 16 05:17:15 econome sshd[32271]: Connection closed by 121.58.213.195 [preauth] Oct 16 05:17:17 econome sshd[32276]: Failed password for invalid user system from 121.58.213.195 port 44975 ssh2 Oct 16 05:17:18 econome sshd[32273]: Failed password for invalid user system from 121.58.213.195 port 29385 ssh2 Oct 16 05:17:18 econome sshd[32276]: Connection closed by 121.58.213.195 [preauth] Oct 16 05:17:18 econome sshd[32273]: Connection closed by 121.58.213.195 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=121.58.213.195	2019-10-16 16:01:32
222.186.173.154	attack	Oct 16 09:52:01 minden010 sshd[29371]: Failed password for root from 222.186.173.154 port 55088 ssh2 Oct 16 09:52:05 minden010 sshd[29371]: Failed password for root from 222.186.173.154 port 55088 ssh2 Oct 16 09:52:19 minden010 sshd[29371]: error: maximum authentication attempts exceeded for root from 222.186.173.154 port 55088 ssh2 [preauth] ...	2019-10-16 16:15:19
154.160.4.107	attack	Oct 16 13:34:39 our-server-hostname postfix/smtpd[10902]: connect from unknown[154.160.4.107] Oct x@x Oct 16 13:34:41 our-server-hostname postfix/smtpd[10902]: lost connection after RCPT from unknown[154.160.4.107] Oct 16 13:34:41 our-server-hostname postfix/smtpd[10902]: disconnect from unknown[154.160.4.107] Oct 16 13:34:47 our-server-hostname postfix/smtpd[23393]: connect from unknown[154.160.4.107] Oct x@x Oct 16 13:34:50 our-server-hostname postfix/smtpd[23393]: lost connection after RCPT from unknown[154.160.4.107] Oct 16 13:34:50 our-server-hostname postfix/smtpd[23393]: disconnect from unknown[154.160.4.107] Oct 16 13:35:09 our-server-hostname postfix/smtpd[15333]: connect from unknown[154.160.4.107] Oct x@x Oct 16 13:35:12 our-server-hostname postfix/smtpd[15333]: lost connection after RCPT from unknown[154.160.4.107] Oct 16 13:35:12 our-server-hostname postfix/smtpd[15333]: disconnect from unknown[154.160.4.107] Oct 16 13:36:14 our-server-hostname postfix/smtp........ -------------------------------	2019-10-16 15:47:24

Recently Reported IPs

20.243.121.191	185.3.164.156	23.97.79.17	199.250.223.180
78.142.50.85	18.130.249.252	78.54.81.83	49.248.16.146
119.96.227.106	167.114.108.254	134.122.42.249	193.233.231.186
54.248.63.132	142.93.203.156	179.104.26.152	134.209.150.223
79.17.95.215	45.136.253.83	64.234.27.188	154.221.20.213