212.1.104.208 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Ukraine

Internet Service Provider: Joint Ukrainan-German Enterprise Infocom LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Unauthorized connection attempt from IP address 212.1.104.208 on Port 445(SMB)	2020-04-02 00:17:02
attackspam	Unauthorized connection attempt from IP address 212.1.104.208 on Port 445(SMB)	2020-01-17 00:12:55

Comments on same subnet:

IP	Type	Details	Datetime
212.1.104.66	attackbots	Unauthorized connection attempt from IP address 212.1.104.66 on Port 445(SMB)	2019-10-03 00:45:36

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 212.1.104.208
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60951
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;212.1.104.208.			IN	A

;; AUTHORITY SECTION:
.			438	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020011600 1800 900 604800 86400

;; Query time: 123 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 17 00:12:51 CST 2020
;; MSG SIZE  rcvd: 117

Host info

Host 208.104.1.212.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 208.104.1.212.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
66.216.19.15	attackspam	Listed on zen-spamhaus also abuseat.org / proto=6 . srcport=3932 . dstport=23 Telnet . (963)	2020-10-04 00:22:10
111.229.244.205	attackspambots	2020-10-03T17:17:47.768039centos sshd[22425]: Invalid user dw from 111.229.244.205 port 53464 2020-10-03T17:17:49.884047centos sshd[22425]: Failed password for invalid user dw from 111.229.244.205 port 53464 ssh2 2020-10-03T17:26:22.169831centos sshd[22960]: Invalid user ti from 111.229.244.205 port 39776 ...	2020-10-04 00:29:09
162.243.99.164	attackspam	Oct 3 11:41:26 ns382633 sshd\[28014\]: Invalid user postgres from 162.243.99.164 port 32913 Oct 3 11:41:26 ns382633 sshd\[28014\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.243.99.164 Oct 3 11:41:28 ns382633 sshd\[28014\]: Failed password for invalid user postgres from 162.243.99.164 port 32913 ssh2 Oct 3 11:56:10 ns382633 sshd\[29649\]: Invalid user postgres from 162.243.99.164 port 41516 Oct 3 11:56:10 ns382633 sshd\[29649\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.243.99.164	2020-10-04 00:29:56
139.155.38.57	attackspam	Invalid user prakash from 139.155.38.57 port 55730	2020-10-04 00:23:06
81.70.49.111	attackspambots	Invalid user lisa from 81.70.49.111 port 51048	2020-10-04 00:15:44
61.155.233.227	attack	Oct 3 12:22:01 gitlab sshd[2806866]: Invalid user user from 61.155.233.227 port 10923 Oct 3 12:22:01 gitlab sshd[2806866]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.155.233.227 Oct 3 12:22:01 gitlab sshd[2806866]: Invalid user user from 61.155.233.227 port 10923 Oct 3 12:22:03 gitlab sshd[2806866]: Failed password for invalid user user from 61.155.233.227 port 10923 ssh2 Oct 3 12:26:39 gitlab sshd[2807520]: Invalid user test from 61.155.233.227 port 45257 ...	2020-10-04 00:02:35
191.33.128.19	attackspambots	23/tcp [2020-10-02]1pkt	2020-10-04 00:47:00
202.137.10.182	attack	5x Failed Password	2020-10-04 00:21:31
106.54.236.220	attackspambots	Invalid user new from 106.54.236.220 port 54294	2020-10-04 00:14:18
109.190.14.67	attackspambots	Automatic report - Banned IP Access	2020-10-04 00:13:08
120.11.78.78	attack	TCP (SYN) 120.11.78.78:48997 -> port 23, len 44	2020-10-04 00:25:54
180.167.240.210	attackspam	Invalid user postgres from 180.167.240.210 port 47516	2020-10-04 00:12:06
154.8.216.77	attackbotsspam	Invalid user a from 154.8.216.77 port 44370	2020-10-04 00:28:13
177.37.127.221	attackbots	445/tcp [2020-10-02]1pkt	2020-10-04 00:39:27
79.132.201.178	attack	23/tcp [2020-10-02]1pkt	2020-10-04 00:36:48

Recently Reported IPs

35.225.24.93	113.160.148.233	113.181.2.103	45.87.221.110
181.111.56.165	112.199.123.13	1.165.111.179	183.14.248.115
182.61.190.142	122.237.157.243	61.191.56.231	37.129.69.153
49.37.132.235	32.63.90.164	113.20.123.120	181.189.152.166
227.106.49.192	45.165.0.165	107.115.176.2	95.181.41.130