104.219.12.28 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Canada

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
104.219.12.8	attack	104.219.12.8 - - [18/Nov/2018:21:51:13 +0000] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "wp-android"	2019-10-28 23:15:55

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.219.12.28
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3039
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.219.12.28.			IN	A

;; AUTHORITY SECTION:
.			362	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022041001 1800 900 604800 86400

;; Query time: 69 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Apr 11 07:43:43 CST 2022
;; MSG SIZE  rcvd: 106

Host info

28.12.219.104.in-addr.arpa domain name pointer geekhost.ca.
28.12.219.104.in-addr.arpa domain name pointer colo-104-219-12-28.geekhost.ca.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
28.12.219.104.in-addr.arpa	name = geekhost.ca.
28.12.219.104.in-addr.arpa	name = colo-104-219-12-28.geekhost.ca.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
200.220.202.13	attack	Attack on my server by IP 200.220.202.13	2020-04-02 14:26:50
177.66.104.238	attack	20/4/1@23:58:52: FAIL: Alarm-Network address from=177.66.104.238 ...	2020-04-02 14:15:38
45.76.121.64	attackspambots	[portscan] Port scan	2020-04-02 14:43:09
80.229.8.61	attackbots	2020-04-02 05:58:26,983 fail2ban.actions: WARNING [ssh] Ban 80.229.8.61	2020-04-02 14:32:17
80.82.65.90	attack	Apr 2 08:06:50 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=80.82.65.90, lip=185.118.198.210, session= Apr 2 08:06:58 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=80.82.65.90, lip=185.118.198.210, session= Apr 2 08:07:24 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=80.82.65.90, lip=185.118.198.210, session= Apr 2 08:08:28 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=80.82.65.90, lip=185.118.198.210, session= Apr 2 08:11:00 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=,	2020-04-02 14:42:30
167.114.103.140	attackspambots	Apr 2 06:32:02 mail sshd[28535]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.114.103.140 user=root Apr 2 06:32:04 mail sshd[28535]: Failed password for root from 167.114.103.140 port 50768 ssh2 Apr 2 06:44:42 mail sshd[15711]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.114.103.140 user=root Apr 2 06:44:45 mail sshd[15711]: Failed password for root from 167.114.103.140 port 38375 ssh2 Apr 2 06:48:01 mail sshd[20823]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.114.103.140 user=root Apr 2 06:48:03 mail sshd[20823]: Failed password for root from 167.114.103.140 port 56369 ssh2 ...	2020-04-02 14:44:51
46.105.92.10	attackspambots	Shield has blocked a page visit to your site. Log details for this visitor are below: - IP Address: 46.105.92.10 - Firewall Trigger: WordPress Terms. - Page parameter failed firewall check. - The offending parameter was "sc" with a value of "wp_insert_user". You can look up the offending IP Address here: http://ip-lookup.net/?ip=46.105.92.10 Note: Email delays are caused by website hosting and email providers. Time Sent: Sat, 28 Mar 2020 18:35:42 +0000	2020-04-02 14:26:37
89.187.178.217	attackspambots	Fail2Ban Ban Triggered	2020-04-02 14:58:14
185.118.50.218	attackbots	SSH Brute-Force reported by Fail2Ban	2020-04-02 14:21:15
118.141.162.15	attack	Unauthorized connection attempt detected from IP address 118.141.162.15 to port 1433	2020-04-02 14:47:50
27.34.47.203	attackspam	$f2bV_matches	2020-04-02 14:31:30
140.143.198.182	attack	Apr 2 06:36:35 ewelt sshd[30845]: Invalid user bw from 140.143.198.182 port 37304 Apr 2 06:36:37 ewelt sshd[30845]: Failed password for invalid user bw from 140.143.198.182 port 37304 ssh2 Apr 2 06:40:21 ewelt sshd[31129]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.198.182 user=root Apr 2 06:40:24 ewelt sshd[31129]: Failed password for root from 140.143.198.182 port 50832 ssh2 ...	2020-04-02 14:58:54
222.186.175.215	attack	Apr 2 08:08:47 ns381471 sshd[11982]: Failed password for root from 222.186.175.215 port 38376 ssh2 Apr 2 08:09:03 ns381471 sshd[11982]: Failed password for root from 222.186.175.215 port 38376 ssh2 Apr 2 08:09:03 ns381471 sshd[11982]: error: maximum authentication attempts exceeded for root from 222.186.175.215 port 38376 ssh2 [preauth]	2020-04-02 14:11:55
133.130.117.41	attackbotsspam	Invalid user admin from 133.130.117.41 port 53770	2020-04-02 14:15:58
181.55.127.245	attackbots	Apr 2 06:21:01 haigwepa sshd[22140]: Failed password for root from 181.55.127.245 port 41636 ssh2 ...	2020-04-02 14:51:01

Recently Reported IPs

104.219.12.176	104.219.13.179	104.219.209.28	104.219.248.182
104.219.52.157	104.219.53.119	104.22.0.10	104.22.1.10
104.22.10.228	104.22.10.66	104.22.11.66	104.22.12.229
104.22.12.248	104.22.13.229	104.22.13.248	104.22.2.72
104.22.24.173	104.22.24.193	104.22.24.214	104.22.25.173