134.73.129.248

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: EliDC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	SSH Brute-Force reported by Fail2Ban	2019-07-17 10:14:54

Comments on same subnet:

IP	Type	Details	Datetime
134.73.129.2	attackbotsspam	Aug 16 00:26:46 MK-Soft-VM7 sshd\[5700\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.73.129.2 user=root Aug 16 00:26:48 MK-Soft-VM7 sshd\[5700\]: Failed password for root from 134.73.129.2 port 45102 ssh2 Aug 16 00:31:16 MK-Soft-VM7 sshd\[5746\]: Invalid user client from 134.73.129.2 port 43024 ...	2019-08-16 09:43:59
134.73.129.2	attack	Aug 13 12:47:30 plex sshd[2174]: Invalid user mc from 134.73.129.2 port 58614	2019-08-13 19:11:20
134.73.129.111	attackbotsspam	Brute force SMTP login attempted. ...	2019-08-10 05:00:58
134.73.129.125	attackspambots	Brute force SMTP login attempted. ...	2019-08-10 05:00:23
134.73.129.127	attackbots	Brute force SMTP login attempted. ...	2019-08-10 05:00:06
134.73.129.130	attackbots	Brute force SMTP login attempted. ...	2019-08-10 04:59:48
134.73.129.134	attackbotsspam	Brute force SMTP login attempted. ...	2019-08-10 04:58:31
134.73.129.143	attack	Brute force SMTP login attempted. ...	2019-08-10 04:56:39
134.73.129.154	attack	Brute force SMTP login attempted. ...	2019-08-10 04:56:15
134.73.129.156	attackbots	Brute force SMTP login attempted. ...	2019-08-10 04:55:12
134.73.129.161	attackspam	Brute force SMTP login attempted. ...	2019-08-10 04:54:40
134.73.129.162	attack	Brute force SMTP login attempted. ...	2019-08-10 04:54:03
134.73.129.170	attackbotsspam	Brute force SMTP login attempted. ...	2019-08-10 04:53:15
134.73.129.173	attackbotsspam	Brute force SMTP login attempted. ...	2019-08-10 04:52:24
134.73.129.190	attack	Brute force SMTP login attempted. ...	2019-08-10 04:51:23

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 134.73.129.248
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30053
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;134.73.129.248.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019071601 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Wed Jul 17 10:14:49 CST 2019
;; MSG SIZE  rcvd: 118

Host info

Host 248.129.73.134.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 248.129.73.134.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
23.254.167.70	attackbotsspam	lfd: (smtpauth) Failed SMTP AUTH login from 23.254.167.70 (hwsrv-315391.hostwindsdns.com): 5 in the last 3600 secs - Sun Sep 9 03:15:53 2018	2020-09-26 04:24:52
27.223.78.164	attackspam	Brute force blocker - service: proftpd1, proftpd2 - aantal: 74 - Fri Sep 7 07:35:18 2018	2020-09-26 04:33:19
190.144.182.86	attack	Sep 25 14:49:31 ns382633 sshd\[4786\]: Invalid user guest from 190.144.182.86 port 39419 Sep 25 14:49:31 ns382633 sshd\[4786\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.144.182.86 Sep 25 14:49:34 ns382633 sshd\[4786\]: Failed password for invalid user guest from 190.144.182.86 port 39419 ssh2 Sep 25 15:04:03 ns382633 sshd\[7755\]: Invalid user sg from 190.144.182.86 port 40908 Sep 25 15:04:03 ns382633 sshd\[7755\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.144.182.86	2020-09-26 04:33:43
112.85.42.195	attack	Sep 24 17:00:08 vps768472 sshd\[28498\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.195 user=root Sep 24 17:00:10 vps768472 sshd\[28498\]: Failed password for root from 112.85.42.195 port 48816 ssh2 Sep 24 17:00:13 vps768472 sshd\[28498\]: Failed password for root from 112.85.42.195 port 48816 ssh2 ...	2020-09-26 04:04:59
220.135.64.185	attackbots	TCP (SYN) 220.135.64.185:36995 -> port 23, len 44	2020-09-26 03:58:48
168.228.114.17	attackbots	8080/tcp [2020-09-24]1pkt	2020-09-26 04:30:44
84.17.48.111	attack	Name: Mike Jerome Email: no-replyphasy@google.com Phone: 85467896916 Weblink: https://www.google.com Message: Hi there If you want to get ahead of your competition, have a higher Domain Authority score. Its just simple as that. With our service you get Domain Authority above 50 points in just 30 days. This service is guaranteed For more information, check our service here https://www.monkeydigital.co/Get-Guaranteed-Domain-Authority-50/ N E W : DA60 is now available here https://www.monkeydigital.co/product/moz-da60-seo-plan/ thank you Mike Jerome Monkey Digital support@monkeydigital.co	2020-09-26 04:23:57
170.84.50.54	attack	445/tcp [2020-09-24]1pkt	2020-09-26 04:01:31
148.101.169.226	attackbots	lfd: (smtpauth) Failed SMTP AUTH login from 148.101.169.226 (DO/Dominican Republic/226.169.101.148.l.static.claro.net.do): 5 in the last 3600 secs - Sun Sep 9 01:18:11 2018	2020-09-26 04:20:33
61.96.244.193	attack	" "	2020-09-26 04:16:09
146.56.199.140	attackspam	Sep 25 14:19:08 ip-172-31-42-142 sshd\[4046\]: Failed password for nobody from 146.56.199.140 port 54006 ssh2\ Sep 25 14:23:06 ip-172-31-42-142 sshd\[4100\]: Invalid user admin from 146.56.199.140\ Sep 25 14:23:08 ip-172-31-42-142 sshd\[4100\]: Failed password for invalid user admin from 146.56.199.140 port 39772 ssh2\ Sep 25 14:27:24 ip-172-31-42-142 sshd\[4155\]: Invalid user admin from 146.56.199.140\ Sep 25 14:27:26 ip-172-31-42-142 sshd\[4155\]: Failed password for invalid user admin from 146.56.199.140 port 53802 ssh2\	2020-09-26 04:07:02
221.130.29.58	attackspam	Invalid user laurent from 221.130.29.58 port 15298	2020-09-26 04:28:34
176.113.115.122	attack	RDP brute forcing (r)	2020-09-26 04:31:49
106.56.86.18	attackspam	Brute force blocker - service: proftpd1, proftpd2 - aantal: 134 - Tue Sep 11 03:00:18 2018	2020-09-26 03:59:06
13.77.179.19	attackbotsspam	Sep 25 10:47:41 hidden sshd[20678]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.77.179.19 Sep 25 10:47:43 hidden sshd[20678]: Failed password for invalid user itras from 13.77.179.19 port 24190 ssh2 Sep 25 22:06:34 hidden sshd[36291]: Invalid user simex from 13.77.179.19 port 26282	2020-09-26 04:09:30

Recently Reported IPs

168.114.141.45	115.52.224.38	81.50.190.134	118.168.194.216
185.2.5.29	181.169.126.20	85.104.121.206	251.206.167.248
134.73.129.69	179.99.54.251	83.27.252.236	197.1.85.183
117.60.61.236	3.92.126.240	219.255.154.230	70.42.148.38
158.69.241.196	167.250.140.239	41.35.53.114	178.46.211.84