104.248.52.74 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
104.248.52.139	attackspam	" "	2020-10-06 07:58:35
104.248.52.139	attackspambots	TCP (SYN) 104.248.52.139:52595 -> port 22, len 40	2020-10-06 00:19:49
104.248.52.139	attackbots	TCP (SYN) 104.248.52.139:54796 -> port 22, len 44	2020-10-05 16:19:36
104.248.52.211	attackbotsspam	Invalid user minecraft from 104.248.52.211 port 33728	2020-06-13 19:24:20
104.248.52.211	attack	May 27 14:07:33 legacy sshd[25754]: Failed password for root from 104.248.52.211 port 33414 ssh2 May 27 14:11:04 legacy sshd[25840]: Failed password for root from 104.248.52.211 port 38410 ssh2 ...	2020-05-27 20:41:18
104.248.52.211	attackbots	May 27 08:31:50 buvik sshd[8705]: Invalid user jason4 from 104.248.52.211 May 27 08:31:50 buvik sshd[8705]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.52.211 May 27 08:31:51 buvik sshd[8705]: Failed password for invalid user jason4 from 104.248.52.211 port 56514 ssh2 ...	2020-05-27 14:45:56
104.248.52.211	attack	May 26 18:54:51 abendstille sshd\[12050\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.52.211 user=root May 26 18:54:53 abendstille sshd\[12050\]: Failed password for root from 104.248.52.211 port 55118 ssh2 May 26 18:58:13 abendstille sshd\[15713\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.52.211 user=root May 26 18:58:15 abendstille sshd\[15713\]: Failed password for root from 104.248.52.211 port 32906 ssh2 May 26 19:01:44 abendstille sshd\[19203\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.52.211 user=root ...	2020-05-27 01:05:29
104.248.52.211	attackspambots	Unauthorized access or intrusion attempt detected from Thor banned IP	2020-05-20 18:24:56
104.248.52.211	attackspam	20 attempts against mh-ssh on cloud	2020-05-13 17:07:56
104.248.52.211	attackspam	May 13 02:02:32 Ubuntu-1404-trusty-64-minimal sshd\[31943\]: Invalid user deploy from 104.248.52.211 May 13 02:02:32 Ubuntu-1404-trusty-64-minimal sshd\[31943\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.52.211 May 13 02:02:34 Ubuntu-1404-trusty-64-minimal sshd\[31943\]: Failed password for invalid user deploy from 104.248.52.211 port 47700 ssh2 May 13 02:16:08 Ubuntu-1404-trusty-64-minimal sshd\[5848\]: Invalid user lpd from 104.248.52.211 May 13 02:16:08 Ubuntu-1404-trusty-64-minimal sshd\[5848\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.52.211	2020-05-13 09:33:03
104.248.52.211	attackspambots	Apr 27 20:08:19 vlre-nyc-1 sshd\[12686\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.52.211 user=root Apr 27 20:08:21 vlre-nyc-1 sshd\[12686\]: Failed password for root from 104.248.52.211 port 59724 ssh2 Apr 27 20:12:13 vlre-nyc-1 sshd\[12763\]: Invalid user ubuntu from 104.248.52.211 Apr 27 20:12:13 vlre-nyc-1 sshd\[12763\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.52.211 Apr 27 20:12:16 vlre-nyc-1 sshd\[12763\]: Failed password for invalid user ubuntu from 104.248.52.211 port 44260 ssh2 ...	2020-04-28 05:01:16
104.248.52.211	attack	Apr 22 05:52:29 santamaria sshd\[5049\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.52.211 user=root Apr 22 05:52:31 santamaria sshd\[5049\]: Failed password for root from 104.248.52.211 port 43778 ssh2 Apr 22 05:57:13 santamaria sshd\[5114\]: Invalid user oracle from 104.248.52.211 Apr 22 05:57:13 santamaria sshd\[5114\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.52.211 ...	2020-04-22 12:33:47
104.248.52.211	attackbots	Found by fail2ban	2020-04-18 22:35:20
104.248.52.211	attackspam	2020-04-03T00:55:55.873788vps773228.ovh.net sshd[24167]: Failed password for root from 104.248.52.211 port 37312 ssh2 2020-04-03T00:58:42.121676vps773228.ovh.net sshd[25189]: Invalid user mv from 104.248.52.211 port 34116 2020-04-03T00:58:42.141286vps773228.ovh.net sshd[25189]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.52.211 2020-04-03T00:58:42.121676vps773228.ovh.net sshd[25189]: Invalid user mv from 104.248.52.211 port 34116 2020-04-03T00:58:44.540131vps773228.ovh.net sshd[25189]: Failed password for invalid user mv from 104.248.52.211 port 34116 ssh2 ...	2020-04-03 07:16:23
104.248.52.211	attackbots	SSH brute-force attempt	2020-04-01 16:54:07

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.248.52.74
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25057
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.248.52.74.			IN	A

;; AUTHORITY SECTION:
.			411	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022401 1800 900 604800 86400

;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 25 12:24:48 CST 2022
;; MSG SIZE  rcvd: 106

Host info

Host 74.52.248.104.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 74.52.248.104.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
27.22.31.165	attackspam	Jun 15 08:12:49 esmtp postfix/smtpd[28187]: lost connection after AUTH from unknown[27.22.31.165] Jun 15 08:12:50 esmtp postfix/smtpd[28163]: lost connection after AUTH from unknown[27.22.31.165] Jun 15 08:12:52 esmtp postfix/smtpd[28187]: lost connection after AUTH from unknown[27.22.31.165] Jun 15 08:12:53 esmtp postfix/smtpd[28163]: lost connection after AUTH from unknown[27.22.31.165] Jun 15 08:12:55 esmtp postfix/smtpd[28163]: lost connection after AUTH from unknown[27.22.31.165] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=27.22.31.165	2020-06-15 21:19:19
45.90.58.33	attack	Malicious Traffic/Form Submission	2020-06-15 21:33:53
154.204.53.32	attackspam	Jun 15 13:50:00 gestao sshd[16889]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.204.53.32 Jun 15 13:50:02 gestao sshd[16889]: Failed password for invalid user test123 from 154.204.53.32 port 60528 ssh2 Jun 15 13:53:19 gestao sshd[16934]: Failed password for root from 154.204.53.32 port 48054 ssh2 ...	2020-06-15 21:06:56
198.98.59.29	attackspam	Jun 15 13:21:07 l03 sshd[23685]: Invalid user ubnt from 198.98.59.29 port 55413 ...	2020-06-15 21:36:15
222.186.31.166	attackspam	$f2bV_matches	2020-06-15 21:41:34
180.76.104.167	attackspam	Jun 15 14:21:23 hell sshd[8339]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.104.167 Jun 15 14:21:25 hell sshd[8339]: Failed password for invalid user vox from 180.76.104.167 port 36476 ssh2 ...	2020-06-15 21:10:15
129.28.178.138	attackspambots	Jun 15 14:32:46 inter-technics sshd[31001]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.28.178.138 user=root Jun 15 14:32:48 inter-technics sshd[31001]: Failed password for root from 129.28.178.138 port 33834 ssh2 Jun 15 14:36:36 inter-technics sshd[31272]: Invalid user admin from 129.28.178.138 port 13499 Jun 15 14:36:36 inter-technics sshd[31272]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.28.178.138 Jun 15 14:36:36 inter-technics sshd[31272]: Invalid user admin from 129.28.178.138 port 13499 Jun 15 14:36:37 inter-technics sshd[31272]: Failed password for invalid user admin from 129.28.178.138 port 13499 ssh2 ...	2020-06-15 21:27:49
218.92.0.173	attack	Jun 15 14:52:10 mail sshd\[10248\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.173 user=root Jun 15 14:52:12 mail sshd\[10248\]: Failed password for root from 218.92.0.173 port 10157 ssh2 Jun 15 14:52:15 mail sshd\[10248\]: Failed password for root from 218.92.0.173 port 10157 ssh2 ...	2020-06-15 21:02:11
141.98.81.42	attackbots	nft/Honeypot/22/73e86	2020-06-15 21:15:35
221.233.91.190	attackspam	Jun 15 08:12:09 esmtp postfix/smtpd[28163]: lost connection after AUTH from unknown[221.233.91.190] Jun 15 08:12:12 esmtp postfix/smtpd[28187]: lost connection after AUTH from unknown[221.233.91.190] Jun 15 08:12:14 esmtp postfix/smtpd[28163]: lost connection after AUTH from unknown[221.233.91.190] Jun 15 08:12:21 esmtp postfix/smtpd[28187]: lost connection after AUTH from unknown[221.233.91.190] Jun 15 08:12:28 esmtp postfix/smtpd[28163]: lost connection after AUTH from unknown[221.233.91.190] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=221.233.91.190	2020-06-15 21:04:11
150.109.99.243	attackbotsspam	Jun 15 14:21:12 jane sshd[28668]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.109.99.243 Jun 15 14:21:14 jane sshd[28668]: Failed password for invalid user natural from 150.109.99.243 port 55586 ssh2 ...	2020-06-15 21:27:23
129.211.65.70	attack	Jun 15 15:11:20 cosmoit sshd[21903]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.65.70	2020-06-15 21:19:48
141.98.81.207	attackbots	Jun 15 13:22:58 scw-focused-cartwright sshd[2314]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.81.207 Jun 15 13:23:00 scw-focused-cartwright sshd[2314]: Failed password for invalid user admin from 141.98.81.207 port 27597 ssh2	2020-06-15 21:26:21
194.26.29.31	attack	Jun 15 15:16:10 debian-2gb-nbg1-2 kernel: \[14485677.976918\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=194.26.29.31 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=34936 PROTO=TCP SPT=47648 DPT=200 WINDOW=1024 RES=0x00 SYN URGP=0	2020-06-15 21:32:56
27.22.127.95	attack	Jun 15 08:12:30 esmtp postfix/smtpd[28187]: lost connection after AUTH from unknown[27.22.127.95] Jun 15 08:12:38 esmtp postfix/smtpd[28163]: lost connection after AUTH from unknown[27.22.127.95] Jun 15 08:12:39 esmtp postfix/smtpd[28187]: lost connection after AUTH from unknown[27.22.127.95] Jun 15 08:12:42 esmtp postfix/smtpd[28163]: lost connection after AUTH from unknown[27.22.127.95] Jun 15 08:12:53 esmtp postfix/smtpd[28162]: lost connection after EHLO from unknown[27.22.127.95] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=27.22.127.95	2020-06-15 21:08:02

Recently Reported IPs

104.248.49.90	104.248.5.197	104.248.49.125	104.248.60.151
104.248.55.215	104.248.45.155	104.248.55.188	104.248.59.198
104.248.6.227	104.248.63.180	104.248.7.17	104.248.71.100
104.248.65.14	104.248.76.110	104.248.80.94	104.248.86.124
104.248.87.27	104.248.71.135	104.248.77.54	104.248.87.39