AbuseIPDB » 104.238.215.166

104.238.215.166 was found in our database!

This IP was reported 5,040 times. Confidence of Abuse is 100%: ?

100%

ISP	Kamatera Inc.
Usage Type	Data Center/Web Hosting/Transit
Domain Name	kamatera.com
Country	United States of America
City	New York City, New York

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 104.238.215.166

Whois 104.238.215.166

IP Abuse Reports for 104.238.215.166:

This IP address has been reported a total of 5,040 times from 888 distinct sources. 104.238.215.166 was first reported on November 20th 2022, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	Date	Comment	Categories
ipcop.net	3 hours ago	Apr 26 04:32:01 router02.boersch-gmbh.de sshd[2515911]: Disconnected from authenticating user root 1 ... show moreApr 26 04:32:01 router02.boersch-gmbh.de sshd[2515911]: Disconnected from authenticating user root 104.238.215.166 port 1718 [preauth] Apr 26 04:36:55 router02.boersch-gmbh.de sshd[2516444]: Invalid user ubuntu from 104.238.215.166 port 1938 Apr 26 04:36:56 router02.boersch-gmbh.de sshd[2516444]: Disconnected from invalid user ubuntu 104.238.215.166 port 1938 [preauth] Apr 26 04:39:00 router02.boersch-gmbh.de sshd[2516649]: Invalid user user01 from 104.238.215.166 port 2048 Apr 26 04:39:00 router02.boersch-gmbh.de sshd[2516649]: Disconnected from invalid user user01 104.238.215.166 port 2048 [preauth] show less	Brute-Force
ipcop.net	3 hours ago	Apr 26 04:32:01 router02.boersch-gmbh.de sshd[2515911]: Disconnected from authenticating user root 1 ... show moreApr 26 04:32:01 router02.boersch-gmbh.de sshd[2515911]: Disconnected from authenticating user root 104.238.215.166 port 1718 [preauth] Apr 26 04:36:55 router02.boersch-gmbh.de sshd[2516444]: Invalid user ubuntu from 104.238.215.166 port 1938 Apr 26 04:36:56 router02.boersch-gmbh.de sshd[2516444]: Disconnected from invalid user ubuntu 104.238.215.166 port 1938 [preauth] Apr 26 04:39:00 router02.boersch-gmbh.de sshd[2516649]: Invalid user user01 from 104.238.215.166 port 2048 Apr 26 04:39:00 router02.boersch-gmbh.de sshd[2516649]: Disconnected from invalid user user01 104.238.215.166 port 2048 [preauth] show less	Brute-Force
ipcop.net	9 hours ago	Malicious activity detected from 104.238.215.166.	Brute-Force
Brian	18 hours ago	'Fail2Ban'	Brute-Force SSH
ipcop.net	30 May 2023	Apr 24 19:30:38 gw-de20-01.guestgw.net sshd[191820]: Disconnected from authenticating user root 104. ... show moreApr 24 19:30:38 gw-de20-01.guestgw.net sshd[191820]: Disconnected from authenticating user root 104.238.215.166 port 23030 [preauth] Apr 24 19:36:35 gw-de20-01.guestgw.net sshd[192550]: Invalid user xjkjxy from 104.238.215.166 port 23252 Apr 24 19:36:35 gw-de20-01.guestgw.net sshd[192550]: Disconnected from invalid user xjkjxy 104.238.215.166 port 23252 [preauth] Apr 24 19:38:29 gw-de20-01.guestgw.net sshd[192796]: Invalid user username from 104.238.215.166 port 23364 Apr 24 19:38:30 gw-de20-01.guestgw.net sshd[192796]: Disconnected from invalid user username 104.238.215.166 port 23364 [preauth] show less	Brute-Force
ipcop.net	30 May 2023	Apr 24 19:30:38 gw-de20-01.guestgw.net sshd[191820]: Disconnected from authenticating user root 104. ... show moreApr 24 19:30:38 gw-de20-01.guestgw.net sshd[191820]: Disconnected from authenticating user root 104.238.215.166 port 23030 [preauth] Apr 24 19:36:35 gw-de20-01.guestgw.net sshd[192550]: Invalid user xjkjxy from 104.238.215.166 port 23252 Apr 24 19:36:35 gw-de20-01.guestgw.net sshd[192550]: Disconnected from invalid user xjkjxy 104.238.215.166 port 23252 [preauth] Apr 24 19:38:29 gw-de20-01.guestgw.net sshd[192796]: Invalid user username from 104.238.215.166 port 23364 Apr 24 19:38:30 gw-de20-01.guestgw.net sshd[192796]: Disconnected from invalid user username 104.238.215.166 port 23364 [preauth] show less	Brute-Force
ipcop.net	30 May 2023	Apr 24 19:30:38 gw-de20-01.guestgw.net sshd[191820]: Disconnected from authenticating user root 104. ... show moreApr 24 19:30:38 gw-de20-01.guestgw.net sshd[191820]: Disconnected from authenticating user root 104.238.215.166 port 23030 [preauth] Apr 24 19:36:35 gw-de20-01.guestgw.net sshd[192550]: Invalid user xjkjxy from 104.238.215.166 port 23252 Apr 24 19:36:35 gw-de20-01.guestgw.net sshd[192550]: Disconnected from invalid user xjkjxy 104.238.215.166 port 23252 [preauth] Apr 24 19:38:29 gw-de20-01.guestgw.net sshd[192796]: Invalid user username from 104.238.215.166 port 23364 Apr 24 19:38:30 gw-de20-01.guestgw.net sshd[192796]: Disconnected from invalid user username 104.238.215.166 port 23364 [preauth] show less	Brute-Force
ipcop.net	30 May 2023	Apr 24 09:12:04 pbx-router-01.de.pbx-host.com sshd[4071162]: Invalid user zhaoting from 104.238.215. ... show moreApr 24 09:12:04 pbx-router-01.de.pbx-host.com sshd[4071162]: Invalid user zhaoting from 104.238.215.166 port 60362 Apr 24 09:12:05 pbx-router-01.de.pbx-host.com sshd[4071162]: Disconnected from invalid user zhaoting 104.238.215.166 port 60362 [preauth] Apr 24 09:17:17 pbx-router-01.de.pbx-host.com sshd[4072794]: Disconnected from authenticating user root 104.238.215.166 port 60516 [preauth] Apr 24 09:18:55 pbx-router-01.de.pbx-host.com sshd[4073292]: Disconnected from authenticating user root 104.238.215.166 port 60592 [preauth] Apr 24 09:20:42 pbx-router-01.de.pbx-host.com sshd[4073913]: Disconnected from authenticating user root 104.238.215.166 port 60668 [preauth] show less	Brute-Force
ipcop.net	30 May 2023	Apr 24 09:12:04 pbx-router-01.de.pbx-host.com sshd[4071162]: Invalid user zhaoting from 104.238.215. ... show moreApr 24 09:12:04 pbx-router-01.de.pbx-host.com sshd[4071162]: Invalid user zhaoting from 104.238.215.166 port 60362 Apr 24 09:12:05 pbx-router-01.de.pbx-host.com sshd[4071162]: Disconnected from invalid user zhaoting 104.238.215.166 port 60362 [preauth] Apr 24 09:17:17 pbx-router-01.de.pbx-host.com sshd[4072794]: Disconnected from authenticating user root 104.238.215.166 port 60516 [preauth] Apr 24 09:18:55 pbx-router-01.de.pbx-host.com sshd[4073292]: Disconnected from authenticating user root 104.238.215.166 port 60592 [preauth] Apr 24 09:20:42 pbx-router-01.de.pbx-host.com sshd[4073913]: Disconnected from authenticating user root 104.238.215.166 port 60668 [preauth] show less	Brute-Force
ipcop.net	29 May 2023	Malicious activity detected from 104.238.215.166.	Brute-Force
ipcop.net	29 May 2023	Malicious activity detected from 104.238.215.166.	Brute-Force
ipcop.net	29 May 2023	Malicious activity detected from 104.238.215.166.	Brute-Force
ipcop.net	29 May 2023	Apr 22 19:19:53 phonebook-lb01.phonebook.srvfarm.net sshd[180250]: Disconnected from authenticating ... show moreApr 22 19:19:53 phonebook-lb01.phonebook.srvfarm.net sshd[180250]: Disconnected from authenticating user root 104.238.215.166 port 44444 [preauth] Apr 22 19:26:13 phonebook-lb01.phonebook.srvfarm.net sshd[180975]: Disconnected from authenticating user root 104.238.215.166 port 44682 [preauth] Apr 22 19:27:54 phonebook-lb01.phonebook.srvfarm.net sshd[181107]: Disconnected from authenticating user root 104.238.215.166 port 44786 [preauth] Apr 22 19:29:35 phonebook-lb01.phonebook.srvfarm.net sshd[181406]: Disconnected from authenticating user root 104.238.215.166 port 44884 [preauth] Apr 22 19:31:13 phonebook-lb01.phonebook.srvfarm.net sshd[181715]: Disconnected from authenticating user root 104.238.215.166 port 44980 [preauth] show less	Brute-Force
ipcop.net	29 May 2023	Apr 22 19:19:53 phonebook-lb01.phonebook.srvfarm.net sshd[180250]: Disconnected from authenticating ... show moreApr 22 19:19:53 phonebook-lb01.phonebook.srvfarm.net sshd[180250]: Disconnected from authenticating user root 104.238.215.166 port 44444 [preauth] Apr 22 19:26:13 phonebook-lb01.phonebook.srvfarm.net sshd[180975]: Disconnected from authenticating user root 104.238.215.166 port 44682 [preauth] Apr 22 19:27:54 phonebook-lb01.phonebook.srvfarm.net sshd[181107]: Disconnected from authenticating user root 104.238.215.166 port 44786 [preauth] Apr 22 19:29:35 phonebook-lb01.phonebook.srvfarm.net sshd[181406]: Disconnected from authenticating user root 104.238.215.166 port 44884 [preauth] Apr 22 19:31:13 phonebook-lb01.phonebook.srvfarm.net sshd[181715]: Disconnected from authenticating user root 104.238.215.166 port 44980 [preauth] show less	Brute-Force
valnoxy	28 May 2023	Invalid user scws from 104.238.215.166 port 59788	Brute-Force SSH

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩