104.45.48.29 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
104.45.48.83	attackspam	Tried sshing with brute force.	2020-07-16 22:42:35
104.45.48.83	attack	Multiple SSH login attempts.	2020-07-15 17:46:34
104.45.48.83	attackbots	2020-07-14T15:53:20.246022amanda2.illicoweb.com sshd\[31062\]: Invalid user amanda2 from 104.45.48.83 port 20663 2020-07-14T15:53:20.248506amanda2.illicoweb.com sshd\[31062\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.45.48.83 2020-07-14T15:53:20.259509amanda2.illicoweb.com sshd\[31060\]: Invalid user amanda2.illicoweb.com from 104.45.48.83 port 20665 2020-07-14T15:53:20.262061amanda2.illicoweb.com sshd\[31060\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.45.48.83 2020-07-14T15:53:20.290440amanda2.illicoweb.com sshd\[31061\]: Invalid user illicoweb from 104.45.48.83 port 20664 2020-07-14T15:53:20.292754amanda2.illicoweb.com sshd\[31061\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.45.48.83 ...	2020-07-15 01:24:10

Type

Details

Datetime

104.45.48.83

attackspam

Tried sshing with brute force.

2020-07-16 22:42:35

104.45.48.83

attack

Multiple SSH login attempts.

2020-07-15 17:46:34

104.45.48.83

attackbots

2020-07-14T15:53:20.246022amanda2.illicoweb.com sshd\[31062\]: Invalid user amanda2 from 104.45.48.83 port 20663
2020-07-14T15:53:20.248506amanda2.illicoweb.com sshd\[31062\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.45.48.83
2020-07-14T15:53:20.259509amanda2.illicoweb.com sshd\[31060\]: Invalid user amanda2.illicoweb.com from 104.45.48.83 port 20665
2020-07-14T15:53:20.262061amanda2.illicoweb.com sshd\[31060\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.45.48.83
2020-07-14T15:53:20.290440amanda2.illicoweb.com sshd\[31061\]: Invalid user illicoweb from 104.45.48.83 port 20664
2020-07-14T15:53:20.292754amanda2.illicoweb.com sshd\[31061\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.45.48.83
...

2020-07-15 01:24:10

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.45.48.29
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25150
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.45.48.29.			IN	A

;; AUTHORITY SECTION:
.			421	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022032502 1800 900 604800 86400

;; Query time: 57 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Mar 26 07:34:51 CST 2022
;; MSG SIZE  rcvd: 105

Host info

Host 29.48.45.104.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 29.48.45.104.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
185.50.197.91	attackspambots	Automatic report - XMLRPC Attack	2019-10-13 05:00:17
218.92.0.200	attack	Oct 12 23:21:10 vpn01 sshd[7201]: Failed password for root from 218.92.0.200 port 51784 ssh2 ...	2019-10-13 05:32:40
128.199.52.45	attackspambots	Oct 12 20:40:22 vps647732 sshd[5087]: Failed password for root from 128.199.52.45 port 56838 ssh2 ...	2019-10-13 05:17:21
104.131.15.189	attack	Invalid user 321 from 104.131.15.189 port 53668	2019-10-13 05:28:53
136.232.17.174	attackspambots	Oct 12 17:08:20 MK-Soft-VM4 sshd[11392]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=136.232.17.174 Oct 12 17:08:22 MK-Soft-VM4 sshd[11392]: Failed password for invalid user hexin from 136.232.17.174 port 6753 ssh2 ...	2019-10-13 05:28:12
69.80.26.6	attack	Automatic report - Port Scan Attack	2019-10-13 05:18:31
118.24.95.153	attackspam	"Fail2Ban detected SSH brute force attempt"	2019-10-13 05:33:51
58.22.194.44	attack	Oct 12 REMOVED dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 6 secs\): user=\, method=PLAIN, rip=58.22.194.44, lip=REMOVED, TLS, session=\ Oct 12 REMOVED dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 12 secs\): user=\, method=PLAIN, rip=58.22.194.44, lip=REMOVED, TLS: Disconnected, session=\<2yFmB7eUBeo6FsIs\> Oct 12 REMOVED dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 9 secs\): user=\, method=PLAIN, rip=58.22.194.44, lip=REMOVED, TLS: Disconnected, session=\	2019-10-13 05:25:40
106.75.141.91	attackbotsspam	Automatic report - Banned IP Access	2019-10-13 05:31:44
36.68.17.173	attack	SMB Server BruteForce Attack	2019-10-13 05:18:58
77.247.110.234	attackspam	\[2019-10-12 15:48:29\] SECURITY\[1898\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-10-12T15:48:29.046-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="01122801148943147005",SessionID="0x7fc3aca1d0c8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.234/63205",ACLName="no_extension_match" \[2019-10-12 15:48:57\] SECURITY\[1898\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-10-12T15:48:57.456-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="33901148134454005",SessionID="0x7fc3ad578188",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.234/52929",ACLName="no_extension_match" \[2019-10-12 15:49:33\] SECURITY\[1898\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-10-12T15:49:33.917-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="63040901148122518001",SessionID="0x7fc3aca1d0c8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.234/58425",	2019-10-13 05:31:13
162.247.73.192	attackspambots	Oct 12 23:06:18 vpn01 sshd[6656]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.247.73.192 Oct 12 23:06:19 vpn01 sshd[6656]: Failed password for invalid user cloclo from 162.247.73.192 port 50440 ssh2 ...	2019-10-13 05:08:46
96.125.172.61	attack	Sql/code injection probe	2019-10-13 05:13:29
172.81.204.249	attackspam	Oct 12 22:37:53 * sshd[23363]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.81.204.249 Oct 12 22:37:55 * sshd[23363]: Failed password for invalid user Heslo@abc from 172.81.204.249 port 47284 ssh2	2019-10-13 05:38:10
183.87.132.67	attackspam	port scan and connect, tcp 1433 (ms-sql-s)	2019-10-13 05:25:27

Recently Reported IPs

104.45.174.50	104.46.36.179	104.47.146.98	104.47.167.189
104.64.186.216	104.64.208.39	200.225.176.154	104.64.222.127
104.65.58.31	104.67.12.52	104.69.217.181	104.70.72.29
104.74.65.33	104.76.198.160	104.77.162.12	104.77.162.54
104.77.193.20	104.79.84.76	104.83.6.29	104.86.98.245