104.254.245.121

Basic Info

City: Wayne

Region: Pennsylvania

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: 1&1 Internet SE

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
104.254.245.169	attackbots	2020-04-22T14:07:27.448896amanda2.illicoweb.com sshd\[10225\]: Invalid user nl from 104.254.245.169 port 53472 2020-04-22T14:07:27.454220amanda2.illicoweb.com sshd\[10225\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.254.245.169 2020-04-22T14:07:29.837058amanda2.illicoweb.com sshd\[10225\]: Failed password for invalid user nl from 104.254.245.169 port 53472 ssh2 2020-04-22T14:12:22.899007amanda2.illicoweb.com sshd\[10665\]: Invalid user aw from 104.254.245.169 port 48068 2020-04-22T14:12:22.903969amanda2.illicoweb.com sshd\[10665\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.254.245.169 ...	2020-04-22 21:26:26
104.254.245.169	attackspambots	Apr 5 17:13:07 DAAP sshd[9711]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.254.245.169 user=root Apr 5 17:13:09 DAAP sshd[9711]: Failed password for root from 104.254.245.169 port 37042 ssh2 Apr 5 17:16:49 DAAP sshd[9756]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.254.245.169 user=root Apr 5 17:16:51 DAAP sshd[9756]: Failed password for root from 104.254.245.169 port 47846 ssh2 Apr 5 17:20:30 DAAP sshd[9841]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.254.245.169 user=root Apr 5 17:20:31 DAAP sshd[9841]: Failed password for root from 104.254.245.169 port 58606 ssh2 ...	2020-04-06 00:40:09

Type

Details

Datetime

104.254.245.169

attackbots

2020-04-22T14:07:27.448896amanda2.illicoweb.com sshd\[10225\]: Invalid user nl from 104.254.245.169 port 53472
2020-04-22T14:07:27.454220amanda2.illicoweb.com sshd\[10225\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.254.245.169
2020-04-22T14:07:29.837058amanda2.illicoweb.com sshd\[10225\]: Failed password for invalid user nl from 104.254.245.169 port 53472 ssh2
2020-04-22T14:12:22.899007amanda2.illicoweb.com sshd\[10665\]: Invalid user aw from 104.254.245.169 port 48068
2020-04-22T14:12:22.903969amanda2.illicoweb.com sshd\[10665\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.254.245.169
...

2020-04-22 21:26:26

104.254.245.169

attackspambots

Apr  5 17:13:07 DAAP sshd[9711]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.254.245.169  user=root
Apr  5 17:13:09 DAAP sshd[9711]: Failed password for root from 104.254.245.169 port 37042 ssh2
Apr  5 17:16:49 DAAP sshd[9756]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.254.245.169  user=root
Apr  5 17:16:51 DAAP sshd[9756]: Failed password for root from 104.254.245.169 port 47846 ssh2
Apr  5 17:20:30 DAAP sshd[9841]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.254.245.169  user=root
Apr  5 17:20:31 DAAP sshd[9841]: Failed password for root from 104.254.245.169 port 58606 ssh2
...

2020-04-06 00:40:09

Whois info:

Dig info:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.254.245.121
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43343
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.254.245.121.		IN	A

;; AUTHORITY SECTION:
.			3198	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019050900 1800 900 604800 86400

;; Query time: 0 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Thu May 09 18:57:12 +08 2019
;; MSG SIZE  rcvd: 119

Host info

Host 121.245.254.104.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 121.245.254.104.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
158.181.40.225	attackspambots	Jan 10 16:20:23 grey postfix/smtpd\[7048\]: NOQUEUE: reject: RCPT from unknown\[158.181.40.225\]: 554 5.7.1 Service unavailable\; Client host \[158.181.40.225\] blocked using cbl.abuseat.org\; Blocked - see http://www.abuseat.org/lookup.cgi\?ip=158.181.40.225\; from=\ to=\ proto=ESMTP helo=\<\[158.181.40.225\]\> ...	2020-01-11 02:33:50
187.189.65.51	attack	Jan 10 19:09:54 Ubuntu-1404-trusty-64-minimal sshd\[6308\]: Invalid user user from 187.189.65.51 Jan 10 19:09:54 Ubuntu-1404-trusty-64-minimal sshd\[6308\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.189.65.51 Jan 10 19:09:55 Ubuntu-1404-trusty-64-minimal sshd\[6308\]: Failed password for invalid user user from 187.189.65.51 port 33526 ssh2 Jan 10 19:12:57 Ubuntu-1404-trusty-64-minimal sshd\[8251\]: Invalid user marketing from 187.189.65.51 Jan 10 19:12:57 Ubuntu-1404-trusty-64-minimal sshd\[8251\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.189.65.51	2020-01-11 02:31:23
45.117.83.36	attackspambots	Brute-force attempt banned	2020-01-11 02:22:13
51.75.250.10	attack	51.75.250.10 - - [10/Jan/2020:13:54:29 +0100] "POST /wp-login.php HTTP/1.1" 200 3121 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 51.75.250.10 - - [10/Jan/2020:13:54:30 +0100] "POST /wp-login.php HTTP/1.1" 200 3123 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-01-11 02:50:05
27.72.77.25	attackspambots	Unauthorized connection attempt detected from IP address 27.72.77.25 to port 445	2020-01-11 02:29:41
178.57.67.108	attack	B: Magento admin pass test (wrong country)	2020-01-11 02:59:44
91.219.110.173	attackbotsspam	Unauthorized connection attempt from IP address 91.219.110.173 on Port 25(SMTP)	2020-01-11 02:56:14
123.180.44.148	attack	2020-01-10 06:54:04 dovecot_login authenticator failed for (ofrdv) [123.180.44.148]:60523 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=zhanglili@lerctr.org) 2020-01-10 06:54:12 dovecot_login authenticator failed for (qynad) [123.180.44.148]:60523 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=zhanglili@lerctr.org) 2020-01-10 06:54:24 dovecot_login authenticator failed for (cfkwh) [123.180.44.148]:60523 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=zhanglili@lerctr.org) ...	2020-01-11 02:57:12
139.59.169.37	attackbots	Jan 10 13:54:33 zulu412 sshd\[31693\]: Invalid user teampspeak3 from 139.59.169.37 port 36126 Jan 10 13:54:33 zulu412 sshd\[31693\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.169.37 Jan 10 13:54:34 zulu412 sshd\[31693\]: Failed password for invalid user teampspeak3 from 139.59.169.37 port 36126 ssh2 ...	2020-01-11 02:47:48
121.173.126.111	attackspam	unauthorized connection attempt	2020-01-11 02:32:17
117.57.85.100	attackbotsspam	/download/file.php?id=144&sid=c3b5cbdcbbe0e68114b2e3e19a5109ac	2020-01-11 02:42:44
129.211.4.202	attackspam	SASL PLAIN auth failed: ruser=...	2020-01-11 02:51:41
159.203.201.42	attack	Unauthorized connection attempt from IP address 159.203.201.42 on Port 3389(RDP)	2020-01-11 02:34:34
31.15.95.213	attackspam	Unauthorized connection attempt detected from IP address 31.15.95.213 to port 445	2020-01-11 02:45:37
141.98.81.37	attackspam	detected by Fail2Ban	2020-01-11 02:54:29

Recently Reported IPs

146.18.160.94	84.222.245.195	1.6.36.80	176.31.251.192
5.128.240.210	219.143.223.51	77.2.4.97	1.186.243.213
41.57.16.239	179.99.112.245	173.208.160.165	81.30.192.74
46.105.108.167	128.111.100.20	2.235.191.99	134.104.94.232
38.132.99.167	1.54.212.20	160.131.50.216	91.121.230.188