JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.248.29.250

104.248.29.250 was found in our database!

This IP was reported 45 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Hostname(s)	mem0.srv.booklis.com
Domain Name	digitalocean.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.248.29.250

Whois 104.248.29.250

IP Abuse Reports for 104.248.29.250:

This IP address has been reported a total of 45 times from 35 distinct sources. 104.248.29.250 was first reported on April 21st 2022, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 rshict	2024-10-25 08:45:18 (1 year ago)	Hacking, Brute-Force, Web App Attack	Hacking Brute-Force Web App Attack
🇺🇸 gu-alvareza	2024-10-20 07:05:15 (1 year ago)	Nmap.Script.Scanner	Port Scan
🇨🇱 ifiguero	2024-10-20 03:44:44 (1 year ago)	Web Attack (\x00\x00\x00\x00\x00). 7d ban	Web App Attack
🇩🇪 bluematrix	2024-10-19 23:09:03 (1 year ago)	Multiple SSH login attempts (endlessh) in the last 24 hours. Number of occurrences: 28	Brute-Force SSH
🇩🇪 ut-addicted.com	2024-10-18 20:39:12 (1 year ago)	\[Fri Oct 18 22:39:10.471725 2024\] \[:error\] \[pid 13075:tid 140449545508608\] \[client 104.248.29 ... show more \[Fri Oct 18 22:39:10.471725 2024\] \[:error\] \[pid 13075:tid 140449545508608\] \[client 104.248.29.250:5659\] \[client 104.248.29.250\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded \(Total Score: 5\)"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "78.46.187.162"\] \[uri "/sdk"\] \[unique_id "ZxLHbrNF9uCQ5QTW8yighAAAAAA"\] show less	Brute-Force Web App Attack
🇬🇧 Alcedema	2024-10-18 18:42:03 (1 year ago)	SSH login attempts (endlessh): I1018 18:40:33.815718 1 client.go:99] CLOSE host=104.248.29.250 ... show more SSH login attempts (endlessh): I1018 18:40:33.815718 1 client.go:99] CLOSE host=104.248.29.250 port=21105 time=9.000910394 bytes=0 show less	Brute-Force SSH
🇫🇷 0xNath	2024-10-18 17:55:20 (1 year ago)	2024-10-18T19:55:10.377627+02:00 srv1.renaudna.fr dovecot[1326]: imap-login: Disconnected: Connectio ... show more 2024-10-18T19:55:10.377627+02:00 srv1.renaudna.fr dovecot[1326]: imap-login: Disconnected: Connection closed: read(size=1026) failed: Connection reset by peer (disconnected before auth was ready, waited 0 secs): user=<>, rip=104.248.29.250, lip=192.168.1.253, TLS handshaking: read(size=1026) failed: Connection reset by peer, session=<bX0RAcQkH6Fo+B36> 2024-10-18T19:55:17.431301+02:00 srv1.renaudna.fr dovecot[1326]: imap-login: Disconnected: Connection closed: SSL_accept() failed: error:0A00018C:SSL routines::version too low (no auth attempts in 6 secs): user=<>, rip=104.248.29.250, lip=192.168.1.253, TLS handshaking: SSL_accept() failed: error:0A00018C:SSL routines::version too low, session=<XR59AcQkNxBo+B36> 2024-10-18T19:55:17.526376+02:00 srv1.renaudna.fr dovecot[1326]: imap-login: Disconnected: Connection closed: SSL_accept() failed: error:0A0000C1:SSL routines::no shared cipher (no auth attempts in 0 secs): user=<>, rip=104.248.29.250, lip=192.168.1.253, TLS handshaking: SSL_accep ... show less	Brute-Force
🇨🇭 chilibi.ch	2024-10-18 10:53:03 (1 year ago)	2024-10-18 10:53:03 bullz IMAP	Hacking Brute-Force
🇬🇧 Stuart Reid	2024-10-18 09:55:54 (1 year ago)	...	SSH
🇦🇪 abusiveIntelligence	2024-10-18 09:50:00 (1 year ago)	RDP connect attempt: Nmap Scanner	Brute-Force
🇫🇷 Flo Flo	2024-10-18 08:25:04 (1 year ago)	104.248.29.250 - - - [18/Oct/2024:10:25:04 +0200] "_" "GET / HTTP/1.0" 444 0 "-" "-" 0.000 ...	Web App Attack
🇺🇸 technonerd	2024-10-18 06:22:55 (1 year ago)	1729232574 - 10/18/2024 02:22:54 Host: 104.248.29.250/104.248.29.250 Port: 143 TCP Blocked	Port Scan
Anonymous	2024-10-17 10:33:12 (1 year ago)	104.248.29.250 - visio.sliver85.eu - [17/Oct/2024:12:33:12 +0200] "POST /sdk HTTP/1.1" 444 "Mozilla/ ... show more 104.248.29.250 - visio.sliver85.eu - [17/Oct/2024:12:33:12 +0200] "POST /sdk HTTP/1.1" 444 "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" 104.248.29.250 - visio.sliver85.eu - [17/Oct/2024:12:33:12 +0200] "GET /odinhttpcall1729161192 HTTP/1.1" 444 "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" 104.248.29.250 - visio.sliver85.eu - [17/Oct/2024:12:33:12 +0200] "GET /HNAP1 HTTP/1.1" 444 "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" 104.248.29.250 - visio.sliver85.eu - [17/Oct/2024:12:33:12 +0200] "GET /evox/about HTTP/1.1" 444 "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" ... show less	Brute-Force Web App Attack
🇺🇸 gu-alvareza	2024-10-17 07:05:17 (1 year ago)	Nmap.Script.Scanner	Port Scan
🇩🇪 Honeypot-EU-Fru	2024-10-17 01:24:03 (1 year ago)	104.248.29.250 - - [redacted] [17/Oct/2024:03:24:02 +0200] "GET /odinhttpcall1729128242 HTTP/1.1" 40 ... show more 104.248.29.250 - - [redacted] [17/Oct/2024:03:24:02 +0200] "GET /odinhttpcall1729128242 HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" 0.000 - - 104.248.29.250 - ... show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 45 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇰 223.123.124.70

🇷🇴 2.57.122.238

🇫🇷 54.38.109.115

🇺🇸 45.45.237.214

🇩🇪 8.211.8.52

🇺🇸 209.126.107.84

🇺🇾 181.103.69.138

🇮🇳 115.99.63.26

🇳🇱 91.92.40.171

🇵🇰 39.49.231.14

🇺🇸 192.210.192.220

🇲🇽 187.210.77.105

🇧🇷 186.216.58.151

🇲🇽 177.240.109.164

🇩🇪 162.19.250.18

🇲🇰 77.28.142.50

🇩🇪 51.116.2.88

🇮🇷 31.7.66.163

🇹🇭 1.20.243.87

🇳🇱 2a00:1450:4013:c14::120