104.4.1.45 - IPInfo

Basic Info

City: Vicksburg

Region: Mississippi

Country: United States

Internet Service Provider: AT&T

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
104.4.171.163	attack	SSH login attempts.	2020-05-28 16:51:59
104.4.183.145	attackspam	[portscan] tcp/23 [TELNET] *(RWIN=14600)(11190859)	2019-11-19 17:41:41

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.4.1.45
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6857
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.4.1.45.			IN	A

;; AUTHORITY SECTION:
.			327	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020051701 1800 900 604800 86400

;; Query time: 96 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon May 18 07:27:50 CST 2020
;; MSG SIZE  rcvd: 114

Host info

45.1.4.104.in-addr.arpa domain name pointer 104-4-1-45.lightspeed.jcsnms.sbcglobal.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
45.1.4.104.in-addr.arpa	name = 104-4-1-45.lightspeed.jcsnms.sbcglobal.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
198.108.66.193	attackspam	May 30 23:57:23 Host-KEWR-E postfix/smtps/smtpd[17090]: lost connection after EHLO from unknown[198.108.66.193] ...	2020-05-31 12:14:10
199.249.230.77	attackbotsspam	xmlrpc attack	2020-05-31 12:32:03
222.186.173.154	attack	May 31 06:27:50 mail sshd\[32593\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.154 user=root May 31 06:27:51 mail sshd\[32593\]: Failed password for root from 222.186.173.154 port 11152 ssh2 May 31 06:27:54 mail sshd\[32593\]: Failed password for root from 222.186.173.154 port 11152 ssh2 ...	2020-05-31 12:31:10
158.69.203.160	attackbotsspam	May 31 05:47:00 [host] sshd[25752]: pam_unix(sshd: May 31 05:47:02 [host] sshd[25752]: Failed passwor May 31 05:56:57 [host] sshd[26156]: pam_unix(sshd:	2020-05-31 12:33:02
219.78.199.162	attackbotsspam	Port probing on unauthorized port 5555	2020-05-31 12:07:12
103.124.92.184	attackbotsspam	Invalid user admin from 103.124.92.184 port 60484	2020-05-31 08:37:20
175.6.32.134	attackspam	May 31 04:10:30 onepixel sshd[2473983]: Failed password for invalid user testuser from 175.6.32.134 port 47078 ssh2 May 31 04:12:17 onepixel sshd[2474200]: Invalid user wzhao from 175.6.32.134 port 40408 May 31 04:12:17 onepixel sshd[2474200]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.6.32.134 May 31 04:12:17 onepixel sshd[2474200]: Invalid user wzhao from 175.6.32.134 port 40408 May 31 04:12:19 onepixel sshd[2474200]: Failed password for invalid user wzhao from 175.6.32.134 port 40408 ssh2	2020-05-31 12:20:14
37.59.57.87	attack	37.59.57.87 - - [31/May/2020:00:10:28 +0200] "GET /wp-login.php HTTP/1.1" 200 6364 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 37.59.57.87 - - [31/May/2020:00:10:29 +0200] "POST /wp-login.php HTTP/1.1" 200 6615 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 37.59.57.87 - - [31/May/2020:00:10:30 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-05-31 08:35:27
111.229.13.242	attackbotsspam	fail2ban	2020-05-31 12:11:28
95.82.33.91	attackspam	IP 95.82.33.91 attacked honeypot on port: 8080 at 5/31/2020 4:57:09 AM	2020-05-31 12:21:10
222.186.52.78	attackbotsspam	2020-05-31T03:56:48.789816abusebot-6.cloudsearch.cf sshd[17121]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.52.78 user=root 2020-05-31T03:56:50.773156abusebot-6.cloudsearch.cf sshd[17121]: Failed password for root from 222.186.52.78 port 32029 ssh2 2020-05-31T03:56:52.779254abusebot-6.cloudsearch.cf sshd[17121]: Failed password for root from 222.186.52.78 port 32029 ssh2 2020-05-31T03:56:48.789816abusebot-6.cloudsearch.cf sshd[17121]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.52.78 user=root 2020-05-31T03:56:50.773156abusebot-6.cloudsearch.cf sshd[17121]: Failed password for root from 222.186.52.78 port 32029 ssh2 2020-05-31T03:56:52.779254abusebot-6.cloudsearch.cf sshd[17121]: Failed password for root from 222.186.52.78 port 32029 ssh2 2020-05-31T03:56:48.789816abusebot-6.cloudsearch.cf sshd[17121]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruse ...	2020-05-31 12:00:20
186.226.217.128	attack	Telnet Honeypot -> Telnet Bruteforce / Login	2020-05-31 12:19:55
207.154.229.50	attack	May 31 05:57:32 tuxlinux sshd[29170]: Invalid user rpc from 207.154.229.50 port 54450 May 31 05:57:32 tuxlinux sshd[29170]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.229.50 May 31 05:57:32 tuxlinux sshd[29170]: Invalid user rpc from 207.154.229.50 port 54450 May 31 05:57:32 tuxlinux sshd[29170]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.229.50 May 31 05:57:32 tuxlinux sshd[29170]: Invalid user rpc from 207.154.229.50 port 54450 May 31 05:57:32 tuxlinux sshd[29170]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.229.50 May 31 05:57:34 tuxlinux sshd[29170]: Failed password for invalid user rpc from 207.154.229.50 port 54450 ssh2 ...	2020-05-31 12:07:42
45.143.220.18	attack	[2020-05-30 23:57:34] NOTICE[1157] chan_sip.c: Registration from '"801" ' failed for '45.143.220.18:5610' - Wrong password [2020-05-30 23:57:34] SECURITY[1173] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-05-30T23:57:34.509-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="801",SessionID="0x7f5f1039ca78",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.220.18/5610",Challenge="3da4af34",ReceivedChallenge="3da4af34",ReceivedHash="cf57c4a2371d2baff48a189bf67d0017" [2020-05-30 23:57:34] NOTICE[1157] chan_sip.c: Registration from '"801" ' failed for '45.143.220.18:5610' - Wrong password [2020-05-30 23:57:34] SECURITY[1173] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-05-30T23:57:34.629-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="801",SessionID="0x7f5f1092cfb8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.2 ...	2020-05-31 12:05:26
106.12.181.144	attack	$f2bV_matches	2020-05-31 12:25:13

Recently Reported IPs

95.114.37.152	83.232.44.213	92.191.22.181	44.222.249.121
179.70.7.186	113.246.153.92	83.245.228.151	39.82.125.189
5.15.190.133	189.162.239.173	110.13.197.107	209.42.45.58
12.67.41.251	31.194.27.233	173.170.181.221	47.63.156.188
109.110.82.34	37.225.118.3	54.210.148.217	88.186.133.105