Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
104.248.134.212 attack
Jul 13 21:49:30 pve1 sshd[8743]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.134.212 
Jul 13 21:49:32 pve1 sshd[8743]: Failed password for invalid user kwu from 104.248.134.212 port 32860 ssh2
...
2020-07-14 04:03:18
104.248.134.212 attack
Port scan denied
2020-07-13 16:16:46
104.248.134.212 attackbotsspam
Jul 11 16:34:15 ajax sshd[544]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.134.212 
Jul 11 16:34:17 ajax sshd[544]: Failed password for invalid user qmaill from 104.248.134.212 port 55204 ssh2
2020-07-11 23:45:56
104.248.134.212 attackspam
27634/tcp 29525/tcp 5279/tcp...
[2020-06-22/07-10]44pkt,16pt.(tcp)
2020-07-10 23:25:58
104.248.134.212 attackbotsspam
 TCP (SYN) 104.248.134.212:51856 -> port 6470, len 44
2020-07-05 18:22:14
104.248.134.212 attackbotsspam
Jul  3 21:43:56 debian-2gb-nbg1-2 kernel: \[16064058.493318\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=104.248.134.212 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=27077 PROTO=TCP SPT=57390 DPT=30272 WINDOW=1024 RES=0x00 SYN URGP=0
2020-07-04 03:44:24
104.248.134.212 attackbots
Invalid user lqq from 104.248.134.212 port 34070
2020-06-26 15:21:59
104.248.134.212 attackspambots
ssh brute force
2020-06-22 14:11:18
104.248.134.212 attack
Jun 19 14:11:46 vps687878 sshd\[9962\]: Failed password for invalid user deploy from 104.248.134.212 port 52238 ssh2
Jun 19 14:14:38 vps687878 sshd\[10185\]: Invalid user njs from 104.248.134.212 port 49676
Jun 19 14:14:38 vps687878 sshd\[10185\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.134.212
Jun 19 14:14:40 vps687878 sshd\[10185\]: Failed password for invalid user njs from 104.248.134.212 port 49676 ssh2
Jun 19 14:17:28 vps687878 sshd\[10511\]: Invalid user virtual from 104.248.134.212 port 47110
Jun 19 14:17:28 vps687878 sshd\[10511\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.134.212
...
2020-06-19 20:25:13
104.248.134.212 attack
Jun 16 23:49:41 minden010 sshd[9676]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.134.212
Jun 16 23:49:44 minden010 sshd[9676]: Failed password for invalid user www from 104.248.134.212 port 34662 ssh2
Jun 16 23:52:33 minden010 sshd[11734]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.134.212
...
2020-06-17 06:17:44
104.248.134.212 attackspam
$f2bV_matches
2020-06-14 22:00:53
104.248.134.212 attackbotsspam
Jun 13 21:11:14 mockhub sshd[19136]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.134.212
Jun 13 21:11:17 mockhub sshd[19136]: Failed password for invalid user narcissa from 104.248.134.212 port 47054 ssh2
...
2020-06-14 13:26:15
104.248.134.212 attackspambots
Jun  9 17:51:58 vps639187 sshd\[27199\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.134.212  user=root
Jun  9 17:52:00 vps639187 sshd\[27199\]: Failed password for root from 104.248.134.212 port 51268 ssh2
Jun  9 17:55:19 vps639187 sshd\[27262\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.134.212  user=root
...
2020-06-10 02:27:49
104.248.134.212 attackspam
5x Failed Password
2020-06-09 08:21:13
104.248.134.183 attackspam
MultiHost/MultiPort Probe, Scan, Hack -
2020-01-29 21:40:54
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.248.134.252
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56875
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.248.134.252.		IN	A

;; AUTHORITY SECTION:
.			370	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022500 1800 900 604800 86400

;; Query time: 60 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 25 20:23:28 CST 2022
;; MSG SIZE  rcvd: 108
Host info
Host 252.134.248.104.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 252.134.248.104.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
5.88.155.130 attackspam
Jul 15 07:16:09 srv-4 sshd\[7479\]: Invalid user jesus from 5.88.155.130
Jul 15 07:16:09 srv-4 sshd\[7479\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.88.155.130
Jul 15 07:16:11 srv-4 sshd\[7479\]: Failed password for invalid user jesus from 5.88.155.130 port 33510 ssh2
...
2019-07-15 12:39:53
117.197.244.208 attackspam
Automatic report - Port Scan Attack
2019-07-15 12:44:56
27.18.171.12 attackspambots
2019-07-15T00:41:17.264927abusebot-2.cloudsearch.cf sshd\[25771\]: Invalid user tf2server from 27.18.171.12 port 3264
2019-07-15T00:41:17.269045abusebot-2.cloudsearch.cf sshd\[25771\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.18.171.12
2019-07-15 12:55:32
1.162.147.221 attack
Automatic report - Port Scan Attack
2019-07-15 12:49:08
89.64.34.62 attack
Jul 14 22:43:41 mxgate1 postfix/postscreen[5349]: CONNECT from [89.64.34.62]:25660 to [176.31.12.44]:25
Jul 14 22:43:41 mxgate1 postfix/dnsblog[5365]: addr 89.64.34.62 listed by domain cbl.abuseat.org as 127.0.0.2
Jul 14 22:43:41 mxgate1 postfix/dnsblog[5367]: addr 89.64.34.62 listed by domain zen.spamhaus.org as 127.0.0.4
Jul 14 22:43:41 mxgate1 postfix/dnsblog[5367]: addr 89.64.34.62 listed by domain zen.spamhaus.org as 127.0.0.11
Jul 14 22:43:41 mxgate1 postfix/dnsblog[5366]: addr 89.64.34.62 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2
Jul 14 22:43:41 mxgate1 postfix/dnsblog[5368]: addr 89.64.34.62 listed by domain b.barracudacentral.org as 127.0.0.2
Jul 14 22:43:47 mxgate1 postfix/postscreen[5349]: DNSBL rank 5 for [89.64.34.62]:25660
Jul x@x
Jul 14 22:43:49 mxgate1 postfix/postscreen[5349]: HANGUP after 2.2 from [89.64.34.62]:25660 in tests after SMTP handshake
Jul 14 22:43:49 mxgate1 postfix/postscreen[5349]: DISCONNECT [89.64.34.62]:25660


........
-----------------------------------------------
2019-07-15 12:34:54
146.115.119.61 attack
Jul 15 05:19:15 icinga sshd[12869]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.115.119.61
Jul 15 05:19:17 icinga sshd[12869]: Failed password for invalid user teacher from 146.115.119.61 port 59118 ssh2
...
2019-07-15 11:56:11
221.214.147.160 attack
Automatic report - Port Scan Attack
2019-07-15 12:50:33
216.116.4.232 attackbots
Lines containing failures of 216.116.4.232
Jul 14 22:43:45 srv02 sshd[23217]: Invalid user admin from 216.116.4.232 port 41018
Jul 14 22:43:45 srv02 sshd[23217]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=216.116.4.232
Jul 14 22:43:47 srv02 sshd[23217]: Failed password for invalid user admin from 216.116.4.232 port 41018 ssh2
Jul 14 22:43:48 srv02 sshd[23217]: Connection closed by invalid user admin 216.116.4.232 port 41018 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=216.116.4.232
2019-07-15 12:26:59
92.119.160.125 attackbotsspam
15.07.2019 03:52:05 Connection to port 3971 blocked by firewall
2019-07-15 12:33:30
37.120.135.221 attackbots
\[2019-07-15 00:16:03\] NOTICE\[20804\] chan_sip.c: Registration from '\' failed for '37.120.135.221:1226' - Wrong password
\[2019-07-15 00:16:03\] SECURITY\[20812\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-15T00:16:03.989-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="5112",SessionID="0x7f06f803c558",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/37.120.135.221/53989",Challenge="150efd95",ReceivedChallenge="150efd95",ReceivedHash="9f36c4cd402ffbf120ba33269d9b174a"
\[2019-07-15 00:17:11\] NOTICE\[20804\] chan_sip.c: Registration from '\' failed for '37.120.135.221:1364' - Wrong password
\[2019-07-15 00:17:11\] SECURITY\[20812\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-15T00:17:11.928-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="14238",SessionID="0x7f06f80e3be8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/37
2019-07-15 12:21:38
219.143.153.229 attack
Jul 14 23:55:12 plusreed sshd[23791]: Invalid user bob from 219.143.153.229
...
2019-07-15 11:56:57
185.222.211.235 attack
SSH/SMTP Brute Force
2019-07-15 12:40:51
65.52.25.208 attackbots
Jul 15 00:01:13 server sshd\[6051\]: Invalid user sistemas2 from 65.52.25.208 port 47472
Jul 15 00:01:13 server sshd\[6051\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.52.25.208
Jul 15 00:01:14 server sshd\[6051\]: Failed password for invalid user sistemas2 from 65.52.25.208 port 47472 ssh2
Jul 15 00:07:38 server sshd\[15035\]: Invalid user timo from 65.52.25.208 port 47852
Jul 15 00:07:38 server sshd\[15035\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.52.25.208
2019-07-15 12:18:20
5.196.110.170 attack
Jul 15 05:17:42 ubuntu-2gb-nbg1-dc3-1 sshd[12655]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.196.110.170
Jul 15 05:17:44 ubuntu-2gb-nbg1-dc3-1 sshd[12655]: Failed password for invalid user cycle from 5.196.110.170 port 53818 ssh2
...
2019-07-15 11:53:02
89.71.26.253 attack
SPF Fail sender not permitted to send mail for @evilazrael.de / Sent mail to address hacked/leaked from Patreon
2019-07-15 12:14:50

Recently Reported IPs

104.248.135.150 104.248.134.231 101.109.59.134 104.248.135.217
104.248.135.218 104.248.135.57 104.248.135.75 104.248.135.76
104.248.136.134 104.248.137.79 104.248.136.110 104.248.138.104
104.248.138.166 101.109.59.141 104.248.138.207 104.248.138.243
104.248.136.19 104.248.138.245 104.248.138.83 104.248.139.153