104.248.242.101

Basic Info

City: Frankfurt am Main

Region: Hesse

Country: Germany

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
104.248.242.175	attack	Attempt to hack Wordpress Login, XMLRPC or other login	2020-04-26 17:53:31
104.248.242.175	attack	104.248.242.175 - - [19/Apr/2020:05:52:01 +0200] "POST /wp-login.php HTTP/1.1" 200 3405 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.248.242.175 - - [19/Apr/2020:05:52:03 +0200] "POST /wp-login.php HTTP/1.1" 200 3383 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-04-19 16:20:55
104.248.242.175	attackbotsspam	104.248.242.175 - - [07/Apr/2020:08:16:07 +0200] "GET /wp-login.php HTTP/1.1" 200 5702 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.248.242.175 - - [07/Apr/2020:08:16:09 +0200] "POST /wp-login.php HTTP/1.1" 200 6601 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.248.242.175 - - [07/Apr/2020:08:16:10 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-04-07 14:38:18
104.248.242.175	attack	Apr 2 18:23:48 wordpress wordpress(www.ruhnke.cloud)[96381]: Blocked authentication attempt for admin from ::ffff:104.248.242.175	2020-04-03 02:10:41
104.248.242.125	attack	2019-09-23T05:53:55.757147lon01.zurich-datacenter.net sshd\[9439\]: Invalid user arma2dm from 104.248.242.125 port 59644 2019-09-23T05:53:55.763996lon01.zurich-datacenter.net sshd\[9439\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.242.125 2019-09-23T05:53:57.312523lon01.zurich-datacenter.net sshd\[9439\]: Failed password for invalid user arma2dm from 104.248.242.125 port 59644 ssh2 2019-09-23T05:58:21.658836lon01.zurich-datacenter.net sshd\[9567\]: Invalid user debian from 104.248.242.125 port 44732 2019-09-23T05:58:21.663684lon01.zurich-datacenter.net sshd\[9567\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.242.125 ...	2019-09-23 12:27:55
104.248.242.125	attackspam	Invalid user wk from 104.248.242.125 port 45748	2019-09-20 17:11:02
104.248.242.125	attackbotsspam	$f2bV_matches	2019-09-16 08:44:12
104.248.242.125	attackspam	Sep 15 09:55:34 bouncer sshd\[3771\]: Invalid user yv from 104.248.242.125 port 51650 Sep 15 09:55:34 bouncer sshd\[3771\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.242.125 Sep 15 09:55:36 bouncer sshd\[3771\]: Failed password for invalid user yv from 104.248.242.125 port 51650 ssh2 ...	2019-09-15 20:21:46
104.248.242.125	attack	2019-09-10T05:42:24.064037abusebot-4.cloudsearch.cf sshd\[9329\]: Invalid user guest from 104.248.242.125 port 46608	2019-09-10 14:03:05
104.248.242.125	attackbotsspam	Sep 8 22:04:21 markkoudstaal sshd[2572]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.242.125 Sep 8 22:04:23 markkoudstaal sshd[2572]: Failed password for invalid user test from 104.248.242.125 port 38028 ssh2 Sep 8 22:08:43 markkoudstaal sshd[2950]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.242.125	2019-09-09 04:10:18
104.248.242.125	attackspambots	Aug 3 17:20:56 marvibiene sshd[27227]: Invalid user admin from 104.248.242.125 port 44804 Aug 3 17:20:56 marvibiene sshd[27227]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.242.125 Aug 3 17:20:56 marvibiene sshd[27227]: Invalid user admin from 104.248.242.125 port 44804 Aug 3 17:20:58 marvibiene sshd[27227]: Failed password for invalid user admin from 104.248.242.125 port 44804 ssh2 ...	2019-08-04 08:47:39
104.248.242.125	attackspam	Apr 21 04:18:53 ubuntu sshd[12827]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.242.125 Apr 21 04:18:55 ubuntu sshd[12827]: Failed password for invalid user ai from 104.248.242.125 port 43198 ssh2 Apr 21 04:21:18 ubuntu sshd[13181]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.242.125 Apr 21 04:21:19 ubuntu sshd[13181]: Failed password for invalid user pavel from 104.248.242.125 port 39790 ssh2	2019-07-31 18:08:24
104.248.242.125	attack	Jul 21 07:13:22 localhost sshd\[28348\]: Invalid user op from 104.248.242.125 port 43188 Jul 21 07:13:22 localhost sshd\[28348\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.242.125 ...	2019-07-21 14:30:34
104.248.242.11	attack	joshuajohannes.de 104.248.242.11 \[04/Jul/2019:16:52:54 +0200\] "POST /wp-login.php HTTP/1.1" 200 5606 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" joshuajohannes.de 104.248.242.11 \[04/Jul/2019:16:52:54 +0200\] "POST /wp-login.php HTTP/1.1" 200 5572 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0"	2019-07-05 03:27:35
104.248.242.125	attackbots	Invalid user fleurs from 104.248.242.125 port 46798	2019-06-28 21:23:39

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.248.242.101
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40868
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.248.242.101.		IN	A

;; AUTHORITY SECTION:
.			375	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022041001 1800 900 604800 86400

;; Query time: 77 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Apr 11 07:58:17 CST 2022
;; MSG SIZE  rcvd: 108

Host info

Host 101.242.248.104.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 101.242.248.104.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
184.105.247.208	attackbots	port scan/probe/communication attempt	2019-06-23 04:20:11
113.240.237.10	attack	Jun 22 13:49:46 mailman dovecot: imap-login: Disconnected (auth failed, 1 attempts): user=, method=PLAIN, rip=113.240.237.10, lip=[munged], TLS	2019-06-23 03:55:43
85.206.165.8	attackspambots	(From micgyhaelgop@gmail.com) That is an amazing gift for win. ottochiropractic.net http://bit.ly/2KA5Maz	2019-06-23 04:04:33
139.59.56.121	attackbotsspam	Jun 22 18:20:44 ubuntu-2gb-nbg1-dc3-1 sshd[7609]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.56.121 Jun 22 18:20:46 ubuntu-2gb-nbg1-dc3-1 sshd[7609]: Failed password for invalid user server from 139.59.56.121 port 45294 ssh2 ...	2019-06-23 03:48:33
2001:41d0:52:a00::e3d	attackbotsspam	WP Authentication failure	2019-06-23 04:05:31
66.249.64.20	attackspam	Automatic report - Web App Attack	2019-06-23 04:06:58
157.230.129.73	attackspambots	Jun 22 16:39:41 nextcloud sshd\[22182\]: Invalid user guest from 157.230.129.73 Jun 22 16:39:41 nextcloud sshd\[22182\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.129.73 Jun 22 16:39:44 nextcloud sshd\[22182\]: Failed password for invalid user guest from 157.230.129.73 port 47114 ssh2 ...	2019-06-23 03:37:54
61.177.172.128	attack	Jun 22 18:34:32 mail sshd[934]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.128 user=root Jun 22 18:34:34 mail sshd[934]: Failed password for root from 61.177.172.128 port 37368 ssh2 Jun 22 18:34:48 mail sshd[934]: error: maximum authentication attempts exceeded for root from 61.177.172.128 port 37368 ssh2 [preauth] Jun 22 18:34:32 mail sshd[934]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.128 user=root Jun 22 18:34:34 mail sshd[934]: Failed password for root from 61.177.172.128 port 37368 ssh2 Jun 22 18:34:48 mail sshd[934]: error: maximum authentication attempts exceeded for root from 61.177.172.128 port 37368 ssh2 [preauth] Jun 22 18:34:32 mail sshd[934]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.128 user=root Jun 22 18:34:34 mail sshd[934]: Failed password for root from 61.177.172.128 port 37368 ssh2 Jun 22 18:34:48 mail sshd[934]: error	2019-06-23 03:53:19
158.69.252.78	attackspam	WP Authentication failure	2019-06-23 03:55:26
191.53.253.22	attackbotsspam	Jun 22 10:36:57 web1 postfix/smtpd[21077]: warning: unknown[191.53.253.22]: SASL PLAIN authentication failed: authentication failure ...	2019-06-23 04:15:32
60.6.223.191	attackbotsspam	IMAP brute force ...	2019-06-23 04:13:07
77.85.168.253	attackspam	SPF Fail sender not permitted to send mail for @btc-net.bg / Sent Mail to target address hacked/leaked from Planet3DNow.de	2019-06-23 03:53:36
60.250.23.105	attackbotsspam	Multiple SSH auth failures recorded by fail2ban	2019-06-23 03:44:52
118.24.96.173	attackspambots	Jun 22 16:39:48 ArkNodeAT sshd\[20871\]: Invalid user www from 118.24.96.173 Jun 22 16:39:48 ArkNodeAT sshd\[20871\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.96.173 Jun 22 16:39:50 ArkNodeAT sshd\[20871\]: Failed password for invalid user www from 118.24.96.173 port 37742 ssh2	2019-06-23 03:36:32
177.44.18.114	attackspambots	[ES hit] Tried to deliver spam.	2019-06-23 03:38:20

Recently Reported IPs

104.248.237.133	104.248.242.81	104.248.248.201	104.248.248.55
104.248.31.71	104.248.37.206	104.248.45.177	104.248.45.29
104.248.46.4	104.248.59.84	104.248.7.149	104.248.7.26
104.248.72.37	104.248.75.164	104.248.8.130	104.248.81.91
104.248.82.50	104.248.84.83	104.248.90.120	104.248.90.211