104.248.34.190

Basic Info

City: Frankfurt am Main

Region: Hesse

Country: Germany

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
104.248.34.219	attack	2020/06/30 14:47:45 [error] 20617#20617: 3577399 open() "/usr/share/nginx/html/wp-login.php" failed (2: No such file or directory), client: 104.248.34.219, server: _, request: "GET /wp-login.php HTTP/1.1", host: "1-2-dsl.net" 2020/06/30 14:47:45 [error] 20617#20617: 3577400 open() "/usr/share/nginx/html/wp-login.php" failed (2: No such file or directory), client: 104.248.34.219, server: _, request: "GET /wp-login.php HTTP/1.1", host: "1-2-dsl.org"	2020-07-01 21:38:38
104.248.34.219	attackbots	104.248.34.219 - - [14/Jun/2020:14:43:38 +0200] "POST /xmlrpc.php HTTP/1.1" 403 11040 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.248.34.219 - - [14/Jun/2020:14:47:37 +0200] "POST /xmlrpc.php HTTP/1.1" 403 9565 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-06-14 23:57:53
104.248.34.219	attackbotsspam	104.248.34.219 - - [14/May/2020:18:49:25 +0200] "GET /wp-login.php HTTP/1.1" 200 1900 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.248.34.219 - - [14/May/2020:18:49:25 +0200] "POST /wp-login.php HTTP/1.1" 200 2031 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.248.34.219 - - [14/May/2020:18:49:25 +0200] "GET /wp-login.php HTTP/1.1" 200 1900 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.248.34.219 - - [14/May/2020:18:49:25 +0200] "POST /wp-login.php HTTP/1.1" 200 2008 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.248.34.219 - - [14/May/2020:18:49:25 +0200] "GET /wp-login.php HTTP/1.1" 200 1900 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.248.34.219 - - [14/May/2020:18:49:25 +0200] "POST /wp-login.php HTTP/1.1" 200 2009 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/201001 ...	2020-05-15 04:04:32
104.248.34.192	attackbotsspam	Feb 9 08:59:09 MK-Soft-VM8 sshd[28974]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.34.192 Feb 9 08:59:11 MK-Soft-VM8 sshd[28974]: Failed password for invalid user phi from 104.248.34.192 port 45958 ssh2 ...	2020-02-09 16:23:24
104.248.34.192	attackbotsspam	Feb 9 00:22:32 game-panel sshd[7635]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.34.192 Feb 9 00:22:33 game-panel sshd[7635]: Failed password for invalid user zql from 104.248.34.192 port 38890 ssh2 Feb 9 00:25:22 game-panel sshd[7754]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.34.192	2020-02-09 08:33:10
104.248.34.192	attackspambots	Unauthorized connection attempt detected from IP address 104.248.34.192 to port 2220 [J]	2020-02-06 02:07:07
104.248.34.192	attackspam	Jan 27 08:35:41 ns381471 sshd[19625]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.34.192 Jan 27 08:35:44 ns381471 sshd[19625]: Failed password for invalid user es from 104.248.34.192 port 57222 ssh2	2020-01-27 17:10:59
104.248.34.192	attackspam	Unauthorized connection attempt detected from IP address 104.248.34.192 to port 2220 [J]	2020-01-22 00:53:16
104.248.34.192	attack	Brute SSH	2020-01-14 20:41:14
104.248.34.192	attackspambots	SSH-BruteForce	2020-01-07 08:47:43
104.248.34.192	attack	Dec 25 15:34:32 localhost sshd[34987]: Failed password for invalid user lexst from 104.248.34.192 port 40436 ssh2 Dec 25 15:52:01 localhost sshd[35954]: Failed password for invalid user petryna from 104.248.34.192 port 53592 ssh2 Dec 25 15:54:27 localhost sshd[36194]: Failed password for invalid user bagnato from 104.248.34.192 port 47490 ssh2	2019-12-26 01:05:58
104.248.34.192	attack	[ssh] SSH attack	2019-12-19 02:15:32
104.248.34.192	attack	Dec 17 11:46:50 php1 sshd\[24898\]: Invalid user roberts from 104.248.34.192 Dec 17 11:46:50 php1 sshd\[24898\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.34.192 Dec 17 11:46:52 php1 sshd\[24898\]: Failed password for invalid user roberts from 104.248.34.192 port 32942 ssh2 Dec 17 11:52:58 php1 sshd\[25510\]: Invalid user admin from 104.248.34.192 Dec 17 11:52:58 php1 sshd\[25510\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.34.192	2019-12-18 06:17:22
104.248.34.192	attackbots	Dec 13 05:50:10 localhost sshd\[1358\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.34.192 user=root Dec 13 05:50:12 localhost sshd\[1358\]: Failed password for root from 104.248.34.192 port 48630 ssh2 Dec 13 05:56:09 localhost sshd\[1995\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.34.192 user=root	2019-12-13 13:15:04
104.248.34.43	attackspambots	Port scan attempt detected by AWS-CCS, CTS, India	2019-07-15 18:04:26

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.248.34.190
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 9082
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.248.34.190.			IN	A

;; AUTHORITY SECTION:
.			576	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022052401 1800 900 604800 86400

;; Query time: 73 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed May 25 04:01:55 CST 2022
;; MSG SIZE  rcvd: 107

Host info

Host 190.34.248.104.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 190.34.248.104.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
49.88.112.80	attackbots	Oct 8 10:45:39 gw1 sshd[15020]: Failed password for root from 49.88.112.80 port 22163 ssh2 ...	2019-10-08 13:52:33
41.38.42.52	attack	DATE:2019-10-08 05:57:13, IP:41.38.42.52, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc)	2019-10-08 14:03:22
85.255.7.41	attackbotsspam	2019-10-08T05:53:27.424845lon01.zurich-datacenter.net sshd\[14413\]: Invalid user Experiment@123 from 85.255.7.41 port 49960 2019-10-08T05:53:27.431094lon01.zurich-datacenter.net sshd\[14413\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.255.7.41 2019-10-08T05:53:29.364234lon01.zurich-datacenter.net sshd\[14413\]: Failed password for invalid user Experiment@123 from 85.255.7.41 port 49960 ssh2 2019-10-08T05:57:58.680018lon01.zurich-datacenter.net sshd\[14503\]: Invalid user DEBIAN@2019 from 85.255.7.41 port 35720 2019-10-08T05:57:58.686893lon01.zurich-datacenter.net sshd\[14503\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.255.7.41 ...	2019-10-08 13:23:23
218.234.206.107	attackspam	Oct 8 01:45:29 xtremcommunity sshd\[302792\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.234.206.107 user=root Oct 8 01:45:31 xtremcommunity sshd\[302792\]: Failed password for root from 218.234.206.107 port 40218 ssh2 Oct 8 01:50:12 xtremcommunity sshd\[302932\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.234.206.107 user=root Oct 8 01:50:13 xtremcommunity sshd\[302932\]: Failed password for root from 218.234.206.107 port 51960 ssh2 Oct 8 01:54:53 xtremcommunity sshd\[303019\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.234.206.107 user=root ...	2019-10-08 14:05:44
128.199.80.77	attack	WordPress login Brute force / Web App Attack on client site.	2019-10-08 13:25:39
51.75.23.62	attackbotsspam	2019-10-08T01:28:08.2950471495-001 sshd\[42731\]: Failed password for root from 51.75.23.62 port 33538 ssh2 2019-10-08T01:32:02.6051101495-001 sshd\[43028\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.ip-51-75-23.eu user=root 2019-10-08T01:32:04.5677181495-001 sshd\[43028\]: Failed password for root from 51.75.23.62 port 45132 ssh2 2019-10-08T01:44:11.7067811495-001 sshd\[44159\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.ip-51-75-23.eu user=root 2019-10-08T01:44:14.1842921495-001 sshd\[44159\]: Failed password for root from 51.75.23.62 port 51686 ssh2 2019-10-08T01:48:21.9766331495-001 sshd\[44533\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.ip-51-75-23.eu user=root ...	2019-10-08 14:12:18
45.82.153.37	attackbotsspam	Oct 8 06:07:03 mail postfix/smtpd\[29476\]: warning: unknown\[45.82.153.37\]: SASL PLAIN authentication failed: \ Oct 8 06:07:13 mail postfix/smtpd\[29623\]: warning: unknown\[45.82.153.37\]: SASL PLAIN authentication failed: \ Oct 8 06:44:37 mail postfix/smtpd\[32400\]: warning: unknown\[45.82.153.37\]: SASL PLAIN authentication failed: \ Oct 8 07:22:49 mail postfix/smtpd\[1503\]: warning: unknown\[45.82.153.37\]: SASL PLAIN authentication failed: \	2019-10-08 14:02:38
112.166.68.193	attackspambots	Sep 26 11:22:49 dallas01 sshd[11410]: Failed password for root from 112.166.68.193 port 54716 ssh2 Sep 26 11:27:13 dallas01 sshd[12164]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.166.68.193 Sep 26 11:27:15 dallas01 sshd[12164]: Failed password for invalid user troy from 112.166.68.193 port 44910 ssh2	2019-10-08 13:47:29
217.182.68.146	attackbots	Oct 8 07:12:32 SilenceServices sshd[25511]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.182.68.146 Oct 8 07:12:34 SilenceServices sshd[25511]: Failed password for invalid user Heslo_1@3 from 217.182.68.146 port 48179 ssh2 Oct 8 07:16:22 SilenceServices sshd[26523]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.182.68.146	2019-10-08 13:24:30
54.37.136.213	attack	Oct 8 12:04:07 webhost01 sshd[28540]: Failed password for root from 54.37.136.213 port 56914 ssh2 ...	2019-10-08 13:21:51
213.32.16.127	attackbotsspam	Oct 8 07:43:44 SilenceServices sshd[1272]: Failed password for root from 213.32.16.127 port 49274 ssh2 Oct 8 07:48:04 SilenceServices sshd[2488]: Failed password for root from 213.32.16.127 port 32774 ssh2	2019-10-08 14:05:58
112.170.78.118	attackbots	Oct 8 07:11:16 eventyay sshd[26182]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.170.78.118 Oct 8 07:11:19 eventyay sshd[26182]: Failed password for invalid user 123456789qwertyuio from 112.170.78.118 port 54394 ssh2 Oct 8 07:15:47 eventyay sshd[26250]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.170.78.118 ...	2019-10-08 13:29:30
77.247.110.203	attack	\[2019-10-08 01:08:26\] NOTICE\[1887\] chan_sip.c: Registration from '\' failed for '77.247.110.203:64897' - Wrong password \[2019-10-08 01:08:26\] SECURITY\[1898\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-08T01:08:26.909-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="7479",SessionID="0x7fc3ac962478",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.203/64897",Challenge="2eaec028",ReceivedChallenge="2eaec028",ReceivedHash="18066d7a2c0a784d221d58b1805eaa63" \[2019-10-08 01:08:26\] NOTICE\[1887\] chan_sip.c: Registration from '\' failed for '77.247.110.203:64899' - Wrong password \[2019-10-08 01:08:26\] SECURITY\[1898\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-08T01:08:26.912-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="7479",SessionID="0x7fc3ac5226d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.203/64899",	2019-10-08 13:29:03
182.155.105.88	attackspam	port scan and connect, tcp 23 (telnet)	2019-10-08 14:15:35
80.22.196.98	attack	Oct 8 12:43:48 webhost01 sshd[29076]: Failed password for root from 80.22.196.98 port 54840 ssh2 ...	2019-10-08 14:07:51

Recently Reported IPs

104.248.31.66	104.248.44.49	104.248.47.110	104.248.49.166
104.248.52.180	104.248.52.235	104.248.54.102	104.248.54.109
104.248.58.81	104.248.60.75	104.248.62.79	104.248.67.99
104.248.69.54	104.248.74.54	104.248.76.130	104.248.8.215
104.248.82.134	104.248.84.152	104.248.86.117	104.248.87.173