104.248.52.134

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
104.248.52.139	attackspam	" "	2020-10-06 07:58:35
104.248.52.139	attackspambots	TCP (SYN) 104.248.52.139:52595 -> port 22, len 40	2020-10-06 00:19:49
104.248.52.139	attackbots	TCP (SYN) 104.248.52.139:54796 -> port 22, len 44	2020-10-05 16:19:36
104.248.52.211	attackbotsspam	Invalid user minecraft from 104.248.52.211 port 33728	2020-06-13 19:24:20
104.248.52.211	attack	May 27 14:07:33 legacy sshd[25754]: Failed password for root from 104.248.52.211 port 33414 ssh2 May 27 14:11:04 legacy sshd[25840]: Failed password for root from 104.248.52.211 port 38410 ssh2 ...	2020-05-27 20:41:18
104.248.52.211	attackbots	May 27 08:31:50 buvik sshd[8705]: Invalid user jason4 from 104.248.52.211 May 27 08:31:50 buvik sshd[8705]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.52.211 May 27 08:31:51 buvik sshd[8705]: Failed password for invalid user jason4 from 104.248.52.211 port 56514 ssh2 ...	2020-05-27 14:45:56
104.248.52.211	attack	May 26 18:54:51 abendstille sshd\[12050\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.52.211 user=root May 26 18:54:53 abendstille sshd\[12050\]: Failed password for root from 104.248.52.211 port 55118 ssh2 May 26 18:58:13 abendstille sshd\[15713\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.52.211 user=root May 26 18:58:15 abendstille sshd\[15713\]: Failed password for root from 104.248.52.211 port 32906 ssh2 May 26 19:01:44 abendstille sshd\[19203\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.52.211 user=root ...	2020-05-27 01:05:29
104.248.52.211	attackspambots	Unauthorized access or intrusion attempt detected from Thor banned IP	2020-05-20 18:24:56
104.248.52.211	attackspam	20 attempts against mh-ssh on cloud	2020-05-13 17:07:56
104.248.52.211	attackspam	May 13 02:02:32 Ubuntu-1404-trusty-64-minimal sshd\[31943\]: Invalid user deploy from 104.248.52.211 May 13 02:02:32 Ubuntu-1404-trusty-64-minimal sshd\[31943\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.52.211 May 13 02:02:34 Ubuntu-1404-trusty-64-minimal sshd\[31943\]: Failed password for invalid user deploy from 104.248.52.211 port 47700 ssh2 May 13 02:16:08 Ubuntu-1404-trusty-64-minimal sshd\[5848\]: Invalid user lpd from 104.248.52.211 May 13 02:16:08 Ubuntu-1404-trusty-64-minimal sshd\[5848\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.52.211	2020-05-13 09:33:03
104.248.52.211	attackspambots	Apr 27 20:08:19 vlre-nyc-1 sshd\[12686\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.52.211 user=root Apr 27 20:08:21 vlre-nyc-1 sshd\[12686\]: Failed password for root from 104.248.52.211 port 59724 ssh2 Apr 27 20:12:13 vlre-nyc-1 sshd\[12763\]: Invalid user ubuntu from 104.248.52.211 Apr 27 20:12:13 vlre-nyc-1 sshd\[12763\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.52.211 Apr 27 20:12:16 vlre-nyc-1 sshd\[12763\]: Failed password for invalid user ubuntu from 104.248.52.211 port 44260 ssh2 ...	2020-04-28 05:01:16
104.248.52.211	attack	Apr 22 05:52:29 santamaria sshd\[5049\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.52.211 user=root Apr 22 05:52:31 santamaria sshd\[5049\]: Failed password for root from 104.248.52.211 port 43778 ssh2 Apr 22 05:57:13 santamaria sshd\[5114\]: Invalid user oracle from 104.248.52.211 Apr 22 05:57:13 santamaria sshd\[5114\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.52.211 ...	2020-04-22 12:33:47
104.248.52.211	attackbots	Found by fail2ban	2020-04-18 22:35:20
104.248.52.211	attackspam	2020-04-03T00:55:55.873788vps773228.ovh.net sshd[24167]: Failed password for root from 104.248.52.211 port 37312 ssh2 2020-04-03T00:58:42.121676vps773228.ovh.net sshd[25189]: Invalid user mv from 104.248.52.211 port 34116 2020-04-03T00:58:42.141286vps773228.ovh.net sshd[25189]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.52.211 2020-04-03T00:58:42.121676vps773228.ovh.net sshd[25189]: Invalid user mv from 104.248.52.211 port 34116 2020-04-03T00:58:44.540131vps773228.ovh.net sshd[25189]: Failed password for invalid user mv from 104.248.52.211 port 34116 ssh2 ...	2020-04-03 07:16:23
104.248.52.211	attackbots	SSH brute-force attempt	2020-04-01 16:54:07

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.248.52.134
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 24365
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.248.52.134.			IN	A

;; AUTHORITY SECTION:
.			28	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022052100 1800 900 604800 86400

;; Query time: 62 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat May 21 18:54:59 CST 2022
;; MSG SIZE  rcvd: 107

Host info

134.52.248.104.in-addr.arpa domain name pointer blackpalmdevelopment.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
134.52.248.104.in-addr.arpa	name = blackpalmdevelopment.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
137.74.85.17	attack	xmlrpc attack	2020-02-27 21:21:23
58.140.66.68	attack	Honeypot attack, port: 81, PTR: PTR record not found	2020-02-27 21:12:47
36.77.84.58	attackspambots	Honeypot attack, port: 445, PTR: PTR record not found	2020-02-27 21:36:16
82.251.138.44	attack	Feb 27 14:13:05 mout sshd[22054]: Invalid user security from 82.251.138.44 port 46782	2020-02-27 21:19:04
14.161.23.101	attack	Autoban 14.161.23.101 AUTH/CONNECT	2020-02-27 21:32:35
179.129.194.141	attackbots	Feb 27 06:39:47 server378 sshd[17087]: Invalid user admin from 179.129.194.141 port 61266 Feb 27 06:39:47 server378 sshd[17087]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.129.194.141 Feb 27 06:39:48 server378 sshd[17087]: Failed password for invalid user admin from 179.129.194.141 port 61266 ssh2 Feb 27 06:39:49 server378 sshd[17087]: Connection closed by 179.129.194.141 port 61266 [preauth] Feb 27 06:39:53 server378 sshd[17093]: Invalid user admin from 179.129.194.141 port 61267 Feb 27 06:39:53 server378 sshd[17093]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.129.194.141 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=179.129.194.141	2020-02-27 21:51:03
223.111.144.150	attackbots	Feb 27 13:26:24 MK-Soft-VM7 sshd[2823]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.111.144.150 Feb 27 13:26:25 MK-Soft-VM7 sshd[2823]: Failed password for invalid user office from 223.111.144.150 port 51040 ssh2 ...	2020-02-27 21:52:23
154.16.202.232	attackspambots	Feb 27 06:53:34 sso sshd[9254]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.16.202.232 Feb 27 06:53:36 sso sshd[9254]: Failed password for invalid user andrew from 154.16.202.232 port 32768 ssh2 ...	2020-02-27 21:44:13
123.114.200.226	attackbotsspam	Feb 27 06:29:45 vps34202 sshd[2123]: User postfix from 123.114.200.226 not allowed because not listed in AllowUsers Feb 27 06:29:45 vps34202 sshd[2123]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.114.200.226 user=postfix Feb 27 06:29:47 vps34202 sshd[2123]: Failed password for invalid user postfix from 123.114.200.226 port 5331 ssh2 Feb 27 06:29:48 vps34202 sshd[2123]: Received disconnect from 123.114.200.226: 11: Bye Bye [preauth] Feb 27 06:31:33 vps34202 sshd[2148]: Invalid user ghostname from 123.114.200.226 Feb 27 06:31:33 vps34202 sshd[2148]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.114.200.226 Feb 27 06:31:35 vps34202 sshd[2148]: Failed password for invalid user ghostname from 123.114.200.226 port 8494 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=123.114.200.226	2020-02-27 21:30:40
222.186.42.155	attackspambots	Feb 27 14:52:19 MK-Soft-VM4 sshd[4666]: Failed password for root from 222.186.42.155 port 13947 ssh2 Feb 27 14:52:22 MK-Soft-VM4 sshd[4666]: Failed password for root from 222.186.42.155 port 13947 ssh2 ...	2020-02-27 21:53:27
1.47.201.97	attackspam	1582782083 - 02/27/2020 06:41:23 Host: 1.47.201.97/1.47.201.97 Port: 445 TCP Blocked	2020-02-27 21:23:39
188.225.126.61	attackspambots	1582782062 - 02/27/2020 06:41:02 Host: 188.225.126.61/188.225.126.61 Port: 445 TCP Blocked	2020-02-27 21:41:48
218.103.128.177	attack	Honeypot attack, port: 5555, PTR: n218103128177.netvigator.com.	2020-02-27 21:29:26
45.77.88.37	attackspam	Multiple SSH login attempts.	2020-02-27 21:38:51
124.158.183.178	attackspambots	Email rejected due to spam filtering	2020-02-27 21:14:36

Recently Reported IPs

104.248.51.62	104.253.137.190	104.253.137.191	104.253.137.192
104.253.137.193	104.253.137.194	104.253.137.195	104.253.137.196
104.253.137.197	104.253.137.198	104.253.137.199	104.253.149.178
104.253.149.179	104.253.170.44	104.253.171.146	104.253.171.147
104.253.171.148	104.253.171.149	104.253.171.150	104.253.171.151