AbuseIPDB » 104.238.215.166

104.238.215.166 was found in our database!

This IP was reported 5,046 times. Confidence of Abuse is 0%: ?

ISP	Kamatera Inc.
Usage Type	Data Center/Web Hosting/Transit
Domain Name	kamatera.com
Country	United States of America
City	New York City, New York

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 104.238.215.166

Whois 104.238.215.166

IP Abuse Reports for 104.238.215.166:

This IP address has been reported a total of 5,046 times from 877 distinct sources. 104.238.215.166 was first reported on November 20th 2022, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Anonymous	2023-05-28 11:21:32 (1 year ago)	$f2bV_matches	Brute-Force SSH
mauromaggioni.duckdns.org	2023-05-28 02:36:21 (1 year ago)	2023-05-27T22:30:37.682019prismaanalytics.duckdns.org sshd[29042]: Disconnected from 104.238.215.166 ... show more2023-05-27T22:30:37.682019prismaanalytics.duckdns.org sshd[29042]: Disconnected from 104.238.215.166 port 64512 [preauth] 2023-05-27T22:36:18.571900prismaanalytics.duckdns.org sshd[15696]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.238.215.166 user=root 2023-05-27T22:36:20.809538prismaanalytics.duckdns.org sshd[15696]: Failed password for root from 104.238.215.166 port 64718 ssh2 2023-05-27T22:36:20.967933prismaanalytics.duckdns.org sshd[15696]: Disconnected from 104.238.215.166 port 64718 [preauth] ... show less	Brute-Force SSH
William Himmelstoss	2023-05-28 01:27:11 (1 year ago)	2023-05-27T21:16:36.767149ip-172-26-12-130.ec2.internal sshd[5410]: Invalid user wangqing from 104.2 ... show more2023-05-27T21:16:36.767149ip-172-26-12-130.ec2.internal sshd[5410]: Invalid user wangqing from 104.238.215.166 port 7786 2023-05-27T21:21:59.422433ip-172-26-12-130.ec2.internal sshd[5546]: Invalid user oracle from 104.238.215.166 port 8008 2023-05-27T21:23:45.060486ip-172-26-12-130.ec2.internal sshd[5598]: Invalid user ldm from 104.238.215.166 port 8112 2023-05-27T21:25:29.292357ip-172-26-12-130.ec2.internal sshd[5631]: Invalid user admin from 104.238.215.166 port 8210 2023-05-27T21:27:11.172706ip-172-26-12-130.ec2.internal sshd[5686]: Invalid user sftp from 104.238.215.166 port 8316 ... show less	Brute-Force SSH
IrisFlower	2023-05-27 22:31:19 (1 year ago)	Unauthorized connection attempt detected from IP address 104.238.215.166 to port 2323 [J]	Port Scan Hacking
tyrells	2023-05-27 20:38:01 (1 year ago)	May 27 20:36:31 alpha sshd[2535912]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eui ... show moreMay 27 20:36:31 alpha sshd[2535912]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.238.215.166 user=root May 27 20:36:32 alpha sshd[2535912]: Failed password for root from 104.238.215.166 port 29164 ssh2 May 27 20:37:59 alpha sshd[2536606]: Invalid user yangyu from 104.238.215.166 port 29262 May 27 20:37:59 alpha sshd[2536606]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.238.215.166 May 27 20:38:01 alpha sshd[2536606]: Failed password for invalid user yangyu from 104.238.215.166 port 29262 ssh2 ... show less	Brute-Force SSH
TGCFabian	2023-05-27 20:36:57 (1 year ago)	May 27 20:35:24 VPS sshd[2037999]: User root from 104.238.215.166 not allowed because not listed in ... show moreMay 27 20:35:24 VPS sshd[2037999]: User root from 104.238.215.166 not allowed because not listed in AllowUsers May 27 20:35:24 VPS sshd[2037999]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.238.215.166 user=root May 27 20:35:24 VPS sshd[2037999]: User root from 104.238.215.166 not allowed because not listed in AllowUsers May 27 20:35:26 VPS sshd[2037999]: Failed password for invalid user root from 104.238.215.166 port 47942 ssh2 May 27 20:36:56 VPS sshd[2038099]: User root from 104.238.215.166 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
tyrells	2023-05-27 20:10:50 (1 year ago)	May 27 20:07:38 alpha sshd[2521513]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eui ... show moreMay 27 20:07:38 alpha sshd[2521513]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.238.215.166 May 27 20:07:40 alpha sshd[2521513]: Failed password for invalid user guest from 104.238.215.166 port 27388 ssh2 May 27 20:09:15 alpha sshd[2522336]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.238.215.166 user=root May 27 20:09:17 alpha sshd[2522336]: Failed password for root from 104.238.215.166 port 27490 ssh2 May 27 20:10:50 alpha sshd[2523108]: Invalid user chris from 104.238.215.166 port 27580 ... show less	Brute-Force SSH
TGCFabian	2023-05-27 20:09:44 (1 year ago)	May 27 20:08:07 VPS sshd[2034966]: Invalid user guest from 104.238.215.166 port 46438 May 27 2 ... show moreMay 27 20:08:07 VPS sshd[2034966]: Invalid user guest from 104.238.215.166 port 46438 May 27 20:08:07 VPS sshd[2034966]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.238.215.166 May 27 20:08:07 VPS sshd[2034966]: Invalid user guest from 104.238.215.166 port 46438 May 27 20:08:09 VPS sshd[2034966]: Failed password for invalid user guest from 104.238.215.166 port 46438 ssh2 May 27 20:09:43 VPS sshd[2035281]: User root from 104.238.215.166 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
Dario B.	2023-05-27 20:06:51 (1 year ago)	DATE:2023-05-27 22:06:51, IP:104.238.215.166, PORT:ssh SSH brute force auth on honeypot server (epe- ... show moreDATE:2023-05-27 22:06:51, IP:104.238.215.166, PORT:ssh SSH brute force auth on honeypot server (epe-honey1-hq) show less	Brute-Force SSH
KIsmay	2023-05-27 19:06:29 (1 year ago)	May 27 19:03:05 kast sshd[92828]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ... show moreMay 27 19:03:05 kast sshd[92828]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.238.215.166 May 27 19:03:07 kast sshd[92828]: Failed password for invalid user czerda from 104.238.215.166 port 59918 ssh2 May 27 19:04:51 kast sshd[92848]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.238.215.166 user=root May 27 19:04:53 kast sshd[92848]: Failed password for root from 104.238.215.166 port 60024 ssh2 May 27 19:06:28 kast sshd[92913]: Invalid user lihuixia from 104.238.215.166 port 60138 ... show less	Brute-Force SSH
bittiguru.fi	2023-05-27 18:23:59 (1 year ago)	May 27 21:18:15 pkdns2 sshd\[11911\]: Invalid user rick from 104.238.215.166May 27 21:18:17 pkdns2 s ... show moreMay 27 21:18:15 pkdns2 sshd\[11911\]: Invalid user rick from 104.238.215.166May 27 21:18:17 pkdns2 sshd\[11911\]: Failed password for invalid user rick from 104.238.215.166 port 2542 ssh2May 27 21:20:12 pkdns2 sshd\[12031\]: Invalid user minecraft from 104.238.215.166May 27 21:20:14 pkdns2 sshd\[12031\]: Failed password for invalid user minecraft from 104.238.215.166 port 2626 ssh2May 27 21:22:09 pkdns2 sshd\[12117\]: Failed password for root from 104.238.215.166 port 2712 ssh2May 27 21:23:56 pkdns2 sshd\[12165\]: Invalid user ubuntu from 104.238.215.166 ... show less	Brute-Force SSH
bittiguru.fi	2023-05-27 18:03:06 (1 year ago)	May 27 20:57:27 pkdns2 sshd\[11009\]: Invalid user ela from 104.238.215.166May 27 20:57:29 pkdns2 ss ... show moreMay 27 20:57:27 pkdns2 sshd\[11009\]: Invalid user ela from 104.238.215.166May 27 20:57:29 pkdns2 sshd\[11009\]: Failed password for invalid user ela from 104.238.215.166 port 1582 ssh2May 27 20:59:21 pkdns2 sshd\[11083\]: Failed password for root from 104.238.215.166 port 1678 ssh2May 27 21:01:10 pkdns2 sshd\[11187\]: Failed password for root from 104.238.215.166 port 1764 ssh2May 27 21:03:02 pkdns2 sshd\[11231\]: Invalid user direccion from 104.238.215.166May 27 21:03:04 pkdns2 sshd\[11231\]: Failed password for invalid user direccion from 104.238.215.166 port 1848 ssh2 ... show less	Brute-Force SSH
bittiguru.fi	2023-05-27 17:42:03 (1 year ago)	May 27 20:35:47 pkdns2 sshd\[9983\]: Invalid user layla from 104.238.215.166May 27 20:35:49 pkdns2 s ... show moreMay 27 20:35:47 pkdns2 sshd\[9983\]: Invalid user layla from 104.238.215.166May 27 20:35:49 pkdns2 sshd\[9983\]: Failed password for invalid user layla from 104.238.215.166 port 65072 ssh2May 27 20:40:16 pkdns2 sshd\[10221\]: Invalid user lokesh from 104.238.215.166May 27 20:40:18 pkdns2 sshd\[10221\]: Failed password for invalid user lokesh from 104.238.215.166 port 65236 ssh2May 27 20:41:59 pkdns2 sshd\[10256\]: Invalid user entrasur from 104.238.215.166May 27 20:42:02 pkdns2 sshd\[10256\]: Failed password for invalid user entrasur from 104.238.215.166 port 65320 ssh2 ... show less	Brute-Force SSH
galaxiemc.fr	2023-05-27 17:38:49 (1 year ago)	May 27 17:38:47 PacifiqueMC sshd[93498]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show moreMay 27 17:38:47 PacifiqueMC sshd[93498]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.238.215.166 May 27 17:38:48 PacifiqueMC sshd[93498]: Failed password for invalid user layla from 104.238.215.166 port 21088 ssh2 show less	Hacking Brute-Force SSH
hugosset	2023-05-27 15:48:15 (1 year ago)	May 27 22:48:14 vps-sg1 sshd[384142]: Invalid user amm from 104.238.215.166 port 50086 May 27 ... show moreMay 27 22:48:14 vps-sg1 sshd[384142]: Invalid user amm from 104.238.215.166 port 50086 May 27 22:48:15 vps-sg1 sshd[384142]: Disconnected from invalid user amm 104.238.215.166 port 50086 [preauth] May 27 22:48:15 vps-sg1 sshd[384142]: Disconnected from invalid user amm 104.238.215.166 port 50086 [preauth] ... show less	Brute-Force SSH