This IP address has been reported a total of
51
times from
44 distinct
sources.
104.248.130.209 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
Blocked by UFW on ns02 [8080/tcp] Source port: 61011 TTL: 247 Packet length: 44 TOS: 0x00 This repo ...
show moreBlocked by UFW on ns02 [8080/tcp] Source port: 61011 TTL: 247 Packet length: 44 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Blocked by UFW (TCP on 80)
Source port: 61004
TTL: 238
Packet length: 44
TOS: 0x08
This report (for ...
show moreBlocked by UFW (TCP on 80)
Source port: 61004
TTL: 238
Packet length: 44
TOS: 0x08
This report (for 104.248.130.209) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
[FriApr1016:58:12.5253922026][security2:error][pid4096564:tid4096587][client104.248.130.209:0]ModSec ...
show more[FriApr1016:58:12.5253922026][security2:error][pid4096564:tid4096587][client104.248.130.209:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(filemanager\|wp-file-manager\|elfinder\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"420\"][id\"980500\"][msg\"WordPressfilemanagerexploitattempt\"][hostname\"edelhaut.ch\"][uri\"/wp-admin/plugins.php\"][unique_id\"adkQBMFyClxwpLjfW1ktOgAAAJU\"]
show less
PBK Mar 15 08:53:17 websrv01 sshd[4085162]: Failed password for root from 104.248.130.209 port 34936 ...
show morePBK Mar 15 08:53:17 websrv01 sshd[4085162]: Failed password for root from 104.248.130.209 port 34936 ssh2
Mar 15 08:54:12 websrv01 sshd[4085194]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.130.209 user=root
Mar 15 08:54:14 websrv01 sshd[4085194]: Failed password for root from 104.248.130.209 port 50154 ssh2
Mar 15 08:55:09 websrv01 sshd[4085351]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.130.209 user=root
Mar 15 08:55:11 websrv01 sshd[4085351]: Failed password for root from 104.248.130.209 port 53736 ssh2
show less
2026-03-15T16:53:12.579016 mustar-kr-mayo sshd[3040624]: Failed password for root from 104.248.130.2 ...
show more2026-03-15T16:53:12.579016 mustar-kr-mayo sshd[3040624]: Failed password for root from 104.248.130.209 port 45380 ssh2
2026-03-15T16:54:08.034872 mustar-kr-mayo sshd[3040627]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.130.209 user=root
2026-03-15T16:54:10.518874 mustar-kr-mayo sshd[3040627]: Failed password for root from 104.248.130.209 port 60428 ssh2
2026-03-15T16:55:04.538126 mustar-kr-mayo sshd[3040633]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.130.209 user=root
2026-03-15T16:55:06.042887 mustar-kr-mayo sshd[3040633]: Failed password for root from 104.248.130.209 port 54108 ssh2
...
show less
Hacking
Brute-Force
SSH
Anonymous
Mar 15 07:51:32 f2b auth.info sshd[764357]: Failed password for root from 104.248.130.209 port 39316 ...
show moreMar 15 07:51:32 f2b auth.info sshd[764357]: Failed password for root from 104.248.130.209 port 39316 ssh2
Mar 15 07:52:32 f2b auth.info sshd[764360]: Failed password for root from 104.248.130.209 port 44322 ssh2
Mar 15 07:53:30 f2b auth.info sshd[764363]: Failed password for root from 104.248.130.209 port 52180 ssh2
...
show less
Brute-Force
SSH
Anonymous
Cowrie Honeypot: Brute Force attempt with root/123456
Brute-Force
SSH
Showing 1 to
15
of 51 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩