104.248.134.212

Basic Info

City: Frankfurt am Main

Region: Hesse

Country: Germany

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Jul 13 21:49:30 pve1 sshd[8743]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.134.212 Jul 13 21:49:32 pve1 sshd[8743]: Failed password for invalid user kwu from 104.248.134.212 port 32860 ssh2 ...	2020-07-14 04:03:18
attack	Port scan denied	2020-07-13 16:16:46
attackbotsspam	Jul 11 16:34:15 ajax sshd[544]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.134.212 Jul 11 16:34:17 ajax sshd[544]: Failed password for invalid user qmaill from 104.248.134.212 port 55204 ssh2	2020-07-11 23:45:56
attackspam	27634/tcp 29525/tcp 5279/tcp... [2020-06-22/07-10]44pkt,16pt.(tcp)	2020-07-10 23:25:58
attackbotsspam	TCP (SYN) 104.248.134.212:51856 -> port 6470, len 44	2020-07-05 18:22:14
attackbotsspam	Jul 3 21:43:56 debian-2gb-nbg1-2 kernel: \[16064058.493318\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=104.248.134.212 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=27077 PROTO=TCP SPT=57390 DPT=30272 WINDOW=1024 RES=0x00 SYN URGP=0	2020-07-04 03:44:24
attackbots	Invalid user lqq from 104.248.134.212 port 34070	2020-06-26 15:21:59
attackspambots	ssh brute force	2020-06-22 14:11:18
attack	Jun 19 14:11:46 vps687878 sshd\[9962\]: Failed password for invalid user deploy from 104.248.134.212 port 52238 ssh2 Jun 19 14:14:38 vps687878 sshd\[10185\]: Invalid user njs from 104.248.134.212 port 49676 Jun 19 14:14:38 vps687878 sshd\[10185\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.134.212 Jun 19 14:14:40 vps687878 sshd\[10185\]: Failed password for invalid user njs from 104.248.134.212 port 49676 ssh2 Jun 19 14:17:28 vps687878 sshd\[10511\]: Invalid user virtual from 104.248.134.212 port 47110 Jun 19 14:17:28 vps687878 sshd\[10511\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.134.212 ...	2020-06-19 20:25:13
attack	Jun 16 23:49:41 minden010 sshd[9676]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.134.212 Jun 16 23:49:44 minden010 sshd[9676]: Failed password for invalid user www from 104.248.134.212 port 34662 ssh2 Jun 16 23:52:33 minden010 sshd[11734]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.134.212 ...	2020-06-17 06:17:44
attackspam	$f2bV_matches	2020-06-14 22:00:53
attackbotsspam	Jun 13 21:11:14 mockhub sshd[19136]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.134.212 Jun 13 21:11:17 mockhub sshd[19136]: Failed password for invalid user narcissa from 104.248.134.212 port 47054 ssh2 ...	2020-06-14 13:26:15
attackspambots	Jun 9 17:51:58 vps639187 sshd\[27199\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.134.212 user=root Jun 9 17:52:00 vps639187 sshd\[27199\]: Failed password for root from 104.248.134.212 port 51268 ssh2 Jun 9 17:55:19 vps639187 sshd\[27262\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.134.212 user=root ...	2020-06-10 02:27:49
attackspam	5x Failed Password	2020-06-09 08:21:13

Comments on same subnet:

IP	Type	Details	Datetime
104.248.134.183	attackspam	MultiHost/MultiPort Probe, Scan, Hack -	2020-01-29 21:40:54
104.248.134.217	attack	IDS	2019-12-11 03:31:16
104.248.134.17	attackspambots	Sep 16 09:02:54 lcprod sshd\[26563\]: Invalid user Victor1 from 104.248.134.17 Sep 16 09:02:54 lcprod sshd\[26563\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.134.17 Sep 16 09:02:56 lcprod sshd\[26563\]: Failed password for invalid user Victor1 from 104.248.134.17 port 54218 ssh2 Sep 16 09:06:47 lcprod sshd\[26909\]: Invalid user COadmin123 from 104.248.134.17 Sep 16 09:06:47 lcprod sshd\[26909\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.134.17	2019-09-17 09:20:10
104.248.134.17	attackspam	Sep 8 05:30:07 mail sshd\[5815\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.134.17 Sep 8 05:30:09 mail sshd\[5815\]: Failed password for invalid user test4 from 104.248.134.17 port 35884 ssh2 Sep 8 05:34:09 mail sshd\[6226\]: Invalid user arma3server from 104.248.134.17 port 50444 Sep 8 05:34:09 mail sshd\[6226\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.134.17 Sep 8 05:34:11 mail sshd\[6226\]: Failed password for invalid user arma3server from 104.248.134.17 port 50444 ssh2	2019-09-08 11:47:55
104.248.134.200	attack	Sep 7 13:56:17 vps691689 sshd[7158]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.134.200 Sep 7 13:56:19 vps691689 sshd[7158]: Failed password for invalid user testftp from 104.248.134.200 port 46080 ssh2 ...	2019-09-07 20:54:50
104.248.134.200	attackspam	Sep 7 06:17:02 vps691689 sshd[30809]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.134.200 Sep 7 06:17:05 vps691689 sshd[30809]: Failed password for invalid user test from 104.248.134.200 port 46124 ssh2 Sep 7 06:21:28 vps691689 sshd[30855]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.134.200 ...	2019-09-07 12:27:09
104.248.134.3	attack	Sep 3 20:15:58 vm1 sshd[18048]: Did not receive identification string from 104.248.134.3 port 58754 Sep 3 20:16:50 vm1 sshd[18049]: Invalid user tk from 104.248.134.3 port 45342 Sep 3 20:16:50 vm1 sshd[18049]: Received disconnect from 104.248.134.3 port 45342:11: Normal Shutdown, Thank you for playing [preauth] Sep 3 20:16:50 vm1 sshd[18049]: Disconnected from 104.248.134.3 port 45342 [preauth] Sep 3 20:17:42 vm1 sshd[18054]: Invalid user tanulo from 104.248.134.3 port 57006 Sep 3 20:17:42 vm1 sshd[18054]: Received disconnect from 104.248.134.3 port 57006:11: Normal Shutdown, Thank you for playing [preauth] Sep 3 20:17:42 vm1 sshd[18054]: Disconnected from 104.248.134.3 port 57006 [preauth] Sep 3 20:18:37 vm1 sshd[18056]: Invalid user konyvtar from 104.248.134.3 port 40432 Sep 3 20:18:37 vm1 sshd[18056]: Received disconnect from 104.248.134.3 port 40432:11: Normal Shutdown, Thank you for playing [preauth] Sep 3 20:18:37 vm1 sshd[18056]: Disconnected from 104.2........ -------------------------------	2019-09-04 03:54:34
104.248.134.200	attackspam	SSH Bruteforce attack	2019-09-02 20:09:23
104.248.134.200	attack	SSH bruteforce (Triggered fail2ban)	2019-09-01 13:21:08
104.248.134.17	attack	Aug 30 09:25:29 lcdev sshd\[21102\]: Invalid user dbuser from 104.248.134.17 Aug 30 09:25:29 lcdev sshd\[21102\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.134.17 Aug 30 09:25:31 lcdev sshd\[21102\]: Failed password for invalid user dbuser from 104.248.134.17 port 38192 ssh2 Aug 30 09:29:32 lcdev sshd\[21437\]: Invalid user redmond from 104.248.134.17 Aug 30 09:29:32 lcdev sshd\[21437\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.134.17	2019-08-31 04:41:37
104.248.134.17	attackbots	Aug 30 04:23:08 lcdev sshd\[24337\]: Invalid user clouderauser from 104.248.134.17 Aug 30 04:23:08 lcdev sshd\[24337\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.134.17 Aug 30 04:23:10 lcdev sshd\[24337\]: Failed password for invalid user clouderauser from 104.248.134.17 port 46006 ssh2 Aug 30 04:27:15 lcdev sshd\[24686\]: Invalid user cq from 104.248.134.17 Aug 30 04:27:15 lcdev sshd\[24686\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.134.17	2019-08-30 22:40:25
104.248.134.200	attack	Aug 26 09:50:46 xtremcommunity sshd\[32397\]: Invalid user 1q2w3e4r from 104.248.134.200 port 48258 Aug 26 09:50:46 xtremcommunity sshd\[32397\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.134.200 Aug 26 09:50:49 xtremcommunity sshd\[32397\]: Failed password for invalid user 1q2w3e4r from 104.248.134.200 port 48258 ssh2 Aug 26 09:54:48 xtremcommunity sshd\[32597\]: Invalid user 123456 from 104.248.134.200 port 37544 Aug 26 09:54:48 xtremcommunity sshd\[32597\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.134.200 ...	2019-08-26 21:56:35
104.248.134.200	attack	Aug 17 18:42:10 kapalua sshd\[29772\]: Invalid user dmu from 104.248.134.200 Aug 17 18:42:10 kapalua sshd\[29772\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.134.200 Aug 17 18:42:13 kapalua sshd\[29772\]: Failed password for invalid user dmu from 104.248.134.200 port 43492 ssh2 Aug 17 18:46:10 kapalua sshd\[30111\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.134.200 user=root Aug 17 18:46:12 kapalua sshd\[30111\]: Failed password for root from 104.248.134.200 port 33886 ssh2	2019-08-18 12:46:16
104.248.134.17	attackspambots	Aug 3 21:07:09 debian sshd\[19874\]: Invalid user linux from 104.248.134.17 port 40400 Aug 3 21:07:09 debian sshd\[19874\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.134.17 ...	2019-08-04 05:34:41
104.248.134.200	attackbotsspam	invalid user	2019-08-03 16:01:49

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.248.134.212
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14456
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.248.134.212.		IN	A

;; AUTHORITY SECTION:
.			241	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020060803 1800 900 604800 86400

;; Query time: 101 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jun 09 08:21:08 CST 2020
;; MSG SIZE  rcvd: 119

Host info

Host 212.134.248.104.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 212.134.248.104.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
209.85.167.70	attackbots	badbit reports as unsafe From: cannabisgummies Sent: Monday, August 10, 2020 6:44 AM To: snd000fgmyprfjfiuxmhtcoururyquhdszje@smtp327.extrablateme.site Subject: ●CBDGummies●at●a●Discounted●Price●	2020-08-10 21:30:24
218.92.0.248	attack	2020-08-10T15:21:56.447612vps773228.ovh.net sshd[26511]: Failed password for root from 218.92.0.248 port 62541 ssh2 2020-08-10T15:21:59.437949vps773228.ovh.net sshd[26511]: Failed password for root from 218.92.0.248 port 62541 ssh2 2020-08-10T15:22:02.825763vps773228.ovh.net sshd[26511]: Failed password for root from 218.92.0.248 port 62541 ssh2 2020-08-10T15:22:06.323217vps773228.ovh.net sshd[26511]: Failed password for root from 218.92.0.248 port 62541 ssh2 2020-08-10T15:22:10.219619vps773228.ovh.net sshd[26511]: Failed password for root from 218.92.0.248 port 62541 ssh2 ...	2020-08-10 21:27:39
122.117.156.247	attack	port scan and connect, tcp 23 (telnet)	2020-08-10 21:05:09
49.232.191.178	attack	Aug 10 05:09:49 vm0 sshd[27288]: Failed password for root from 49.232.191.178 port 39106 ssh2 Aug 10 14:35:52 vm0 sshd[13897]: Failed password for root from 49.232.191.178 port 58448 ssh2 ...	2020-08-10 21:04:04
144.22.98.225	attackbotsspam	Aug 10 14:09:01 vm0 sshd[9552]: Failed password for root from 144.22.98.225 port 49817 ssh2 ...	2020-08-10 21:00:14
118.24.51.199	attackspam	Aug 10 00:33:28 host sshd[1940]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.51.199 user=r.r Aug 10 00:33:29 host sshd[1940]: Failed password for r.r from 118.24.51.199 port 41138 ssh2 Aug 10 00:33:31 host sshd[1940]: Received disconnect from 118.24.51.199: 11: Bye Bye [preauth] Aug 10 00:56:53 host sshd[14965]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.51.199 user=r.r Aug 10 00:56:56 host sshd[14965]: Failed password for r.r from 118.24.51.199 port 45734 ssh2 Aug 10 00:56:56 host sshd[14965]: Received disconnect from 118.24.51.199: 11: Bye Bye [preauth] Aug 10 00:59:45 host sshd[23481]: Connection closed by 118.24.51.199 [preauth] Aug 10 01:02:30 host sshd[2186]: Connection closed by 118.24.51.199 [preauth] Aug 10 01:04:40 host sshd[12481]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.51.199 user=r.r Aug 10 01:04:4........ -------------------------------	2020-08-10 21:09:41
112.85.42.89	attackbotsspam	Aug 10 18:15:36 dhoomketu sshd[2277716]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.89 user=root Aug 10 18:15:38 dhoomketu sshd[2277716]: Failed password for root from 112.85.42.89 port 11585 ssh2 Aug 10 18:15:36 dhoomketu sshd[2277716]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.89 user=root Aug 10 18:15:38 dhoomketu sshd[2277716]: Failed password for root from 112.85.42.89 port 11585 ssh2 Aug 10 18:15:40 dhoomketu sshd[2277716]: Failed password for root from 112.85.42.89 port 11585 ssh2 ...	2020-08-10 20:51:36
105.226.80.233	attackbots	1597061334 - 08/10/2020 14:08:54 Host: 105.226.80.233/105.226.80.233 Port: 445 TCP Blocked	2020-08-10 20:57:27
65.75.93.36	attackbotsspam	Repeated brute force against a port	2020-08-10 21:14:03
211.38.132.36	attackbots	Aug 10 11:59:37 localhost sshd[107473]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.38.132.36 user=root Aug 10 11:59:38 localhost sshd[107473]: Failed password for root from 211.38.132.36 port 59696 ssh2 Aug 10 12:04:06 localhost sshd[107990]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.38.132.36 user=root Aug 10 12:04:08 localhost sshd[107990]: Failed password for root from 211.38.132.36 port 42594 ssh2 Aug 10 12:08:46 localhost sshd[108488]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.38.132.36 user=root Aug 10 12:08:48 localhost sshd[108488]: Failed password for root from 211.38.132.36 port 53726 ssh2 ...	2020-08-10 21:04:34
92.124.217.94	attackspam	Dovecot Invalid User Login Attempt.	2020-08-10 21:12:09
102.53.4.42	attackbots	Aug 10 17:37:58 gw1 sshd[31639]: Failed password for root from 102.53.4.42 port 42904 ssh2 ...	2020-08-10 20:52:20
189.237.65.123	attackspam	Aug 10 01:48:35 host sshd[31872]: reveeclipse mapping checking getaddrinfo for dsl-189-237-65-123-dyn.prod-infinhostnameum.com.mx [189.237.65.123] failed - POSSIBLE BREAK-IN ATTEMPT! Aug 10 01:48:35 host sshd[31872]: Invalid user gserver from 189.237.65.123 Aug 10 01:48:35 host sshd[31872]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.237.65.123 Aug 10 01:48:37 host sshd[31872]: Failed password for invalid user gserver from 189.237.65.123 port 50096 ssh2 Aug 10 01:48:37 host sshd[31872]: Received disconnect from 189.237.65.123: 11: Bye Bye [preauth] Aug 10 01:58:24 host sshd[31597]: reveeclipse mapping checking getaddrinfo for dsl-189-237-65-123-dyn.prod-infinhostnameum.com.mx [189.237.65.123] failed - POSSIBLE BREAK-IN ATTEMPT! Aug 10 01:58:24 host sshd[31597]: Invalid user 123uytre from 189.237.65.123 Aug 10 01:58:24 host sshd[31597]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost........ -------------------------------	2020-08-10 21:07:00
157.245.255.176	attackbotsspam	"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:	2020-08-10 21:17:44
62.28.222.221	attackbotsspam	Aug 10 13:53:00 vm0 sshd[7309]: Failed password for root from 62.28.222.221 port 36742 ssh2 ...	2020-08-10 21:29:01

Recently Reported IPs

70.25.0.237	186.106.77.87	70.165.111.201	131.216.20.22
185.220.56.101	78.146.47.104	212.115.210.161	177.74.213.67
52.47.19.26	192.106.135.113	112.157.38.5	190.210.154.220
89.208.228.48	122.117.95.84	84.88.75.143	52.35.209.63
172.125.37.72	77.127.96.113	83.28.181.231	183.240.124.5