104.248.29.113

Basic Info

City: Frankfurt am Main

Region: Hesse

Country: Germany

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
104.248.29.200	attackspambots	104.248.29.200 - - [08/Sep/2020:18:18:09 +0200] "POST /xmlrpc.php HTTP/1.1" 403 13046 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.248.29.200 - - [08/Sep/2020:18:23:08 +0200] "POST /xmlrpc.php HTTP/1.1" 403 13512 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-09-09 01:18:44
104.248.29.200	attack	104.248.29.200 - - [16/Aug/2020:05:52:12 +0200] "GET /wp-login.php HTTP/1.1" 200 8775 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.248.29.200 - - [16/Aug/2020:05:52:13 +0200] "POST /wp-login.php HTTP/1.1" 200 9026 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.248.29.200 - - [16/Aug/2020:05:52:13 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-08-16 16:19:32
104.248.29.200	attackbots	xmlrpc attack	2020-08-14 19:54:46
104.248.29.200	attack	104.248.29.200 - - [08/Aug/2020:04:50:35 +0100] "POST /wp-login.php HTTP/1.1" 200 2225 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.248.29.200 - - [08/Aug/2020:04:50:41 +0100] "POST /wp-login.php HTTP/1.1" 200 2223 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.248.29.200 - - [08/Aug/2020:04:50:41 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-08-08 19:42:25
104.248.29.200	attack	104.248.29.200 - - [07/Aug/2020:13:06:07 +0100] "POST /wp-login.php HTTP/1.1" 200 2017 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.248.29.200 - - [07/Aug/2020:13:06:12 +0100] "POST /wp-login.php HTTP/1.1" 200 1994 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.248.29.200 - - [07/Aug/2020:13:06:12 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-08-07 22:43:10
104.248.29.200	attack	wp-login.php	2020-08-03 01:07:43
104.248.29.200	attackspam	ft-1848-fussball.de 104.248.29.200 [31/Jul/2020:06:11:17 +0200] "POST /wp-login.php HTTP/1.1" 200 6279 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ft-1848-fussball.de 104.248.29.200 [31/Jul/2020:06:11:17 +0200] "POST /wp-login.php HTTP/1.1" 200 6244 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-07-31 18:35:33
104.248.29.200	attackbotsspam	104.248.29.200 - - [12/Jul/2020:00:32:07 +0100] "POST /wp-login.php HTTP/1.1" 200 1792 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.248.29.200 - - [12/Jul/2020:00:32:14 +0100] "POST /wp-login.php HTTP/1.1" 200 1768 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.248.29.200 - - [12/Jul/2020:00:32:19 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-07-12 07:58:00
104.248.29.200	attackbots	Attempt to hack Wordpress Login, XMLRPC or other login	2020-06-12 02:01:11
104.248.29.233	attack	May 26 17:53:07 postfix postfix/smtpd\[23224\]: lost connection after UNKNOWN from unknown\[104.248.29.233\] May 26 17:53:07 postfix postfix/smtpd\[23222\]: lost connection after UNKNOWN from unknown\[104.248.29.233\] ...	2020-05-27 03:25:59
104.248.29.200	attack	Automatic report - XMLRPC Attack	2020-05-26 07:29:32
104.248.29.213	attackspam	Automatic report - XMLRPC Attack	2020-05-10 19:40:21
104.248.29.213	attackspambots	104.248.29.213 - - [04/May/2020:16:12:38 +0200] "GET /wp-login.php HTTP/1.1" 200 5702 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.248.29.213 - - [04/May/2020:16:12:40 +0200] "POST /wp-login.php HTTP/1.1" 200 5953 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.248.29.213 - - [04/May/2020:16:12:45 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-05-05 01:35:45
104.248.29.213	attack	104.248.29.213 - - [27/Apr/2020:05:55:29 +0200] "GET /wp-login.php HTTP/1.1" 200 5863 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.248.29.213 - - [27/Apr/2020:05:55:35 +0200] "POST /wp-login.php HTTP/1.1" 200 6168 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.248.29.213 - - [27/Apr/2020:05:55:36 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-04-27 15:27:21
104.248.29.213	attackbotsspam	Automatic report - XMLRPC Attack	2020-04-26 13:14:00

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.248.29.113
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7243
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.248.29.113.			IN	A

;; AUTHORITY SECTION:
.			349	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022032602 1800 900 604800 86400

;; Query time: 84 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Mar 27 09:01:17 CST 2022
;; MSG SIZE  rcvd: 107

Host info

113.29.248.104.in-addr.arpa domain name pointer srv.coscienzeinrete.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
113.29.248.104.in-addr.arpa	name = srv.coscienzeinrete.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
58.199.164.240	attackspambots	Reported by AbuseIPDB proxy server.	2019-07-27 07:20:38
112.85.42.185	attack	Jul 27 01:28:27 legacy sshd[30302]: Failed password for root from 112.85.42.185 port 37817 ssh2 Jul 27 01:30:49 legacy sshd[30343]: Failed password for root from 112.85.42.185 port 10193 ssh2 ...	2019-07-27 07:39:42
107.172.150.218	attackspam	Jul 27 01:32:04 SilenceServices sshd[23370]: Failed password for root from 107.172.150.218 port 54369 ssh2 Jul 27 01:36:19 SilenceServices sshd[28188]: Failed password for root from 107.172.150.218 port 51377 ssh2	2019-07-27 07:49:14
106.12.177.125	attackbotsspam	DATE:2019-07-26 23:54:11, IP:106.12.177.125, PORT:ssh SSH brute force auth (ermes)	2019-07-27 07:42:25
211.148.135.196	attackbotsspam	SSH Brute-Force attacks	2019-07-27 07:38:52
187.189.93.10	attackbots	Invalid user pi from 187.189.93.10 port 6101	2019-07-27 08:05:16
202.91.82.54	attackspambots	Invalid user pt from 202.91.82.54 port 47336	2019-07-27 07:36:26
167.99.68.23	attackspambots	167.99.68.23 - - [26/Jul/2019:21:46:45 +0200] "POST [munged]wp-login.php HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 0.000	2019-07-27 08:01:17
177.2.149.228	attack	Looking for resource vulnerabilities	2019-07-27 07:48:05
205.201.128.38	attack	X-Apparently-To: joycemarie1212@yahoo.com; Fri, 26 Jul 2019 19:39:39 +0000 Return-Path: Received: from (127.0.0.1) by mail38.us4.mcsv.net id h7dbfm2ddl4q for ; envelope-from ) Subject: =?utf-8?Q?$89=20Pest=20Control=20Service=20=2D=205=20Star=20Rating=20=2D=20Call=20us=20Today=21?= From: =?utf-8?Q?NTX=20Best=20Pest=20=2D=20North=20Texas=27s=20Premier=20Pest=20Control?= Reply-To: To: Date: Fri, 26 Jul 2019 19:39:15 +0000 Message-ID: <02e44d22344516f917e653a6d.82348b71bc.20190726193903.62e8e876e5.4824da74@mail38.us4.mcsv.net> X-Mailer: MailChimp Mailer - CID62e8e876e582348b71bc X-Campaign: mailchimp02e44d22344516f917e653a6d.62e8e876e5 X-campaignid: mailchimp02e44d22344516f917e653a6d.62e8e876e5 X-Report-Abuse: Please report abuse for this campaign	2019-07-27 07:21:12
122.195.200.14	attackspam	Jul 27 01:14:54 dev0-dcde-rnet sshd[5399]: Failed password for root from 122.195.200.14 port 30242 ssh2 Jul 27 01:15:04 dev0-dcde-rnet sshd[5401]: Failed password for root from 122.195.200.14 port 60376 ssh2	2019-07-27 07:24:58
94.122.199.254	attack	Unauthorised access (Jul 26) SRC=94.122.199.254 LEN=44 TTL=51 ID=62200 TCP DPT=23 WINDOW=16726 SYN	2019-07-27 07:50:12
94.23.156.82	attack	Jul 26 23:31:15 *** sshd[2856]: User root from 94.23.156.82 not allowed because not listed in AllowUsers	2019-07-27 07:43:01
198.211.122.197	attackspam	Jul 27 00:14:45 lnxmail61 sshd[27830]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.211.122.197	2019-07-27 07:58:21
31.18.148.208	attackspambots	Jul 26 20:53:17 nextcloud sshd\[18376\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.18.148.208 user=root Jul 26 20:53:19 nextcloud sshd\[18376\]: Failed password for root from 31.18.148.208 port 49106 ssh2 Jul 26 21:47:17 nextcloud sshd\[17917\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.18.148.208 user=root ...	2019-07-27 07:44:39

Recently Reported IPs

104.248.254.199	104.248.3.103	104.248.3.118	104.248.35.37
104.248.36.72	104.248.45.81	104.248.51.188	104.248.53.142
104.248.57.33	104.248.63.225	104.248.7.58	104.248.73.253
104.248.76.100	104.248.76.102	104.248.77.37	104.248.82.10
104.248.89.102	104.248.93.57	104.248.94.246	104.248.97.138