104.248.66.215

Basic Info

City: Santa Clara

Region: California

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
104.248.66.115	attackspambots	Sep 30 19:10:26 ip-172-31-42-142 sshd\[18859\]: Invalid user hdfs from 104.248.66.115\ Sep 30 19:10:27 ip-172-31-42-142 sshd\[18859\]: Failed password for invalid user hdfs from 104.248.66.115 port 50870 ssh2\ Sep 30 19:13:28 ip-172-31-42-142 sshd\[18872\]: Failed password for root from 104.248.66.115 port 50370 ssh2\ Sep 30 19:16:28 ip-172-31-42-142 sshd\[18885\]: Invalid user server from 104.248.66.115\ Sep 30 19:16:30 ip-172-31-42-142 sshd\[18885\]: Failed password for invalid user server from 104.248.66.115 port 49866 ssh2\	2020-10-01 03:20:26
104.248.66.115	attackbots	Banned for a week because repeated abuses, for example SSH, but not only	2020-09-30 19:35:49
104.248.66.115	attackbots	20 attempts against mh-ssh on pcx	2020-09-24 21:33:30
104.248.66.115	attackbots	$f2bV_matches	2020-09-24 13:27:32
104.248.66.115	attackbotsspam	Invalid user xxx from 104.248.66.115 port 34702	2020-09-24 04:56:41
104.248.66.115	attackspam	...	2020-09-10 22:31:42
104.248.66.115	attackspam	Failed password for invalid user lij from 104.248.66.115 port 44070 ssh2	2020-09-10 14:09:58
104.248.66.115	attack	Fail2Ban Ban Triggered (2)	2020-09-10 04:51:30
104.248.66.115	attackbots	Invalid user ernesto from 104.248.66.115 port 39762	2020-09-01 13:00:29
104.248.66.115	attackspambots	Invalid user sky from 104.248.66.115 port 60958	2020-08-28 12:59:41
104.248.66.115	attackbots	detected by Fail2Ban	2020-08-27 03:18:52
104.248.66.115	attackbots	Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-08-01T15:37:34Z and 2020-08-01T15:46:08Z	2020-08-02 02:23:40
104.248.66.115	attackspam	SSH brutforce	2020-07-23 23:13:51
104.248.66.115	attackbotsspam	Jul 23 13:33:33 vps sshd[796325]: Failed password for invalid user nabil from 104.248.66.115 port 49638 ssh2 Jul 23 13:37:26 vps sshd[815718]: Invalid user oracle from 104.248.66.115 port 35716 Jul 23 13:37:26 vps sshd[815718]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.66.115 Jul 23 13:37:28 vps sshd[815718]: Failed password for invalid user oracle from 104.248.66.115 port 35716 ssh2 Jul 23 13:41:32 vps sshd[834905]: Invalid user popeye from 104.248.66.115 port 50032 ...	2020-07-23 19:48:52
104.248.66.115	attackspambots	Failed password for invalid user kennedi from 104.248.66.115 port 43690 ssh2	2020-07-09 16:10:52

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.248.66.215
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26967
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.248.66.215.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025080301 1800 900 604800 86400

;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Aug 04 05:00:05 CST 2025
;; MSG SIZE  rcvd: 107

Host info

Host 215.66.248.104.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 215.66.248.104.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
106.12.24.234	attackspam	Nov 7 05:50:13 eddieflores sshd\[30542\]: Invalid user rodney from 106.12.24.234 Nov 7 05:50:13 eddieflores sshd\[30542\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.24.234 Nov 7 05:50:16 eddieflores sshd\[30542\]: Failed password for invalid user rodney from 106.12.24.234 port 51342 ssh2 Nov 7 05:55:40 eddieflores sshd\[30970\]: Invalid user zo from 106.12.24.234 Nov 7 05:55:40 eddieflores sshd\[30970\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.24.234	2019-11-08 00:01:38
140.249.22.238	attackbots	Nov 7 15:48:34 vmanager6029 sshd\[9154\]: Invalid user com from 140.249.22.238 port 44880 Nov 7 15:48:34 vmanager6029 sshd\[9154\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.249.22.238 Nov 7 15:48:36 vmanager6029 sshd\[9154\]: Failed password for invalid user com from 140.249.22.238 port 44880 ssh2	2019-11-07 23:22:03
129.204.130.77	attackspambots	Nov 5 23:44:03 host2 sshd[11298]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.130.77 user=r.r Nov 5 23:44:04 host2 sshd[11298]: Failed password for r.r from 129.204.130.77 port 36500 ssh2 Nov 5 23:44:05 host2 sshd[11298]: Received disconnect from 129.204.130.77: 11: Bye Bye [preauth] Nov 5 23:52:46 host2 sshd[9564]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.130.77 user=r.r Nov 5 23:52:48 host2 sshd[9564]: Failed password for r.r from 129.204.130.77 port 37143 ssh2 Nov 5 23:52:48 host2 sshd[9564]: Received disconnect from 129.204.130.77: 11: Bye Bye [preauth] Nov 5 23:57:46 host2 sshd[26531]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.130.77 user=r.r Nov 5 23:57:48 host2 sshd[26531]: Failed password for r.r from 129.204.130.77 port 56430 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=12	2019-11-08 00:00:52
51.68.137.11	attack	Web application attack detected by fail2ban	2019-11-07 23:56:08
187.177.31.165	attackspambots	Automatic report - Port Scan Attack	2019-11-07 23:31:04
165.22.61.82	attackbotsspam	Nov 7 16:01:33 srv01 sshd[558]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.61.82 user=root Nov 7 16:01:36 srv01 sshd[558]: Failed password for root from 165.22.61.82 port 56190 ssh2 Nov 7 16:05:59 srv01 sshd[746]: Invalid user admin from 165.22.61.82 Nov 7 16:05:59 srv01 sshd[746]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.61.82 Nov 7 16:05:59 srv01 sshd[746]: Invalid user admin from 165.22.61.82 Nov 7 16:06:02 srv01 sshd[746]: Failed password for invalid user admin from 165.22.61.82 port 37514 ssh2 ...	2019-11-07 23:18:51
91.121.157.178	attackbotsspam	Portscan or hack attempt detected by psad/fwsnort	2019-11-07 23:47:49
125.88.177.12	attack	SSH Brute-Force reported by Fail2Ban	2019-11-07 23:18:28
185.176.27.14	attack	11/07/2019-10:44:06.210918 185.176.27.14 Protocol: 6 ET DROP Dshield Block Listed Source group 1	2019-11-07 23:52:15
81.171.75.48	attack	\[2019-11-07 10:31:15\] NOTICE\[2601\] chan_sip.c: Registration from '\' failed for '81.171.75.48:58914' - Wrong password \[2019-11-07 10:31:15\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-07T10:31:15.638-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="4319",SessionID="0x7fdf2c7cd048",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/81.171.75.48/58914",Challenge="1e39d27f",ReceivedChallenge="1e39d27f",ReceivedHash="99da5734d5fd416374ce74f6f9a35a88" \[2019-11-07 10:31:52\] NOTICE\[2601\] chan_sip.c: Registration from '\' failed for '81.171.75.48:56893' - Wrong password \[2019-11-07 10:31:52\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-07T10:31:52.600-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="4271",SessionID="0x7fdf2c7cd048",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/81.171.75.48	2019-11-07 23:42:37
106.13.120.46	attack	Nov 7 16:48:03 sauna sshd[46876]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.120.46 Nov 7 16:48:05 sauna sshd[46876]: Failed password for invalid user openerp from 106.13.120.46 port 34588 ssh2 ...	2019-11-07 23:42:10
51.255.42.250	attackbots	Nov 7 05:13:47 eddieflores sshd\[27203\]: Invalid user io from 51.255.42.250 Nov 7 05:13:47 eddieflores sshd\[27203\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=250.ip-51-255-42.eu Nov 7 05:13:49 eddieflores sshd\[27203\]: Failed password for invalid user io from 51.255.42.250 port 55757 ssh2 Nov 7 05:20:47 eddieflores sshd\[27756\]: Invalid user user from 51.255.42.250 Nov 7 05:20:47 eddieflores sshd\[27756\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=250.ip-51-255-42.eu	2019-11-07 23:34:22
188.9.29.149	attack	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/188.9.29.149/ IT - 1H : (111) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : IT NAME ASN : ASN3269 IP : 188.9.29.149 CIDR : 188.9.0.0/16 PREFIX COUNT : 550 UNIQUE IP COUNT : 19507712 ATTACKS DETECTED ASN3269 : 1H - 1 3H - 7 6H - 16 12H - 33 24H - 71 DateTime : 2019-11-07 15:47:54 INFO : Server 403 - Looking for resource vulnerabilities Detected and Blocked by ADMIN - data recovery	2019-11-07 23:51:56
183.2.202.41	attack	MultiHost/MultiPort Probe, Scan, Hack -	2019-11-07 23:48:14
129.28.122.147	attackbotsspam	Nov 7 15:48:21 lnxded63 sshd[16496]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.28.122.147	2019-11-07 23:29:30

Recently Reported IPs

135.52.213.254	185.247.137.29	43.130.72.177	146.190.93.92
20.102.92.72	192.168.35.250	199.45.154.144	185.16.137.21
47.102.184.31	23.180.120.243	179.6.81.181	59.152.39.161
82.26.72.30	43.154.26.162	116.204.85.180	125.72.93.39
41.221.207.30	41.95.241.197	13.227.180.4	102.134.171.35