JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.248.29.250

104.248.29.250 was found in our database!

This IP was reported 45 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Hostname(s)	mem0.srv.booklis.com
Domain Name	digitalocean.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.248.29.250

Whois 104.248.29.250

IP Abuse Reports for 104.248.29.250:

This IP address has been reported a total of 45 times from 35 distinct sources. 104.248.29.250 was first reported on April 21st 2022, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 rshict	2024-10-25 08:45:18 (1 year ago)	Hacking, Brute-Force, Web App Attack	Hacking Brute-Force Web App Attack
🇺🇸 gu-alvareza	2024-10-20 07:05:15 (1 year ago)	Nmap.Script.Scanner	Port Scan
🇨🇱 ifiguero	2024-10-20 03:44:44 (1 year ago)	Web Attack (\x00\x00\x00\x00\x00). 7d ban	Web App Attack
🇩🇪 bluematrix	2024-10-19 23:09:03 (1 year ago)	Multiple SSH login attempts (endlessh) in the last 24 hours. Number of occurrences: 28	Brute-Force SSH
🇩🇪 ut-addicted.com	2024-10-18 20:39:12 (1 year ago)	\[Fri Oct 18 22:39:10.471725 2024\] \[:error\] \[pid 13075:tid 140449545508608\] \[client 104.248.29 ... show more \[Fri Oct 18 22:39:10.471725 2024\] \[:error\] \[pid 13075:tid 140449545508608\] \[client 104.248.29.250:5659\] \[client 104.248.29.250\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded \(Total Score: 5\)"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "78.46.187.162"\] \[uri "/sdk"\] \[unique_id "ZxLHbrNF9uCQ5QTW8yighAAAAAA"\] show less	Brute-Force Web App Attack
🇬🇧 Alcedema	2024-10-18 18:42:03 (1 year ago)	SSH login attempts (endlessh): I1018 18:40:33.815718 1 client.go:99] CLOSE host=104.248.29.250 ... show more SSH login attempts (endlessh): I1018 18:40:33.815718 1 client.go:99] CLOSE host=104.248.29.250 port=21105 time=9.000910394 bytes=0 show less	Brute-Force SSH
🇫🇷 0xNath	2024-10-18 17:55:20 (1 year ago)	2024-10-18T19:55:10.377627+02:00 srv1.renaudna.fr dovecot[1326]: imap-login: Disconnected: Connectio ... show more 2024-10-18T19:55:10.377627+02:00 srv1.renaudna.fr dovecot[1326]: imap-login: Disconnected: Connection closed: read(size=1026) failed: Connection reset by peer (disconnected before auth was ready, waited 0 secs): user=<>, rip=104.248.29.250, lip=192.168.1.253, TLS handshaking: read(size=1026) failed: Connection reset by peer, session=<bX0RAcQkH6Fo+B36> 2024-10-18T19:55:17.431301+02:00 srv1.renaudna.fr dovecot[1326]: imap-login: Disconnected: Connection closed: SSL_accept() failed: error:0A00018C:SSL routines::version too low (no auth attempts in 6 secs): user=<>, rip=104.248.29.250, lip=192.168.1.253, TLS handshaking: SSL_accept() failed: error:0A00018C:SSL routines::version too low, session=<XR59AcQkNxBo+B36> 2024-10-18T19:55:17.526376+02:00 srv1.renaudna.fr dovecot[1326]: imap-login: Disconnected: Connection closed: SSL_accept() failed: error:0A0000C1:SSL routines::no shared cipher (no auth attempts in 0 secs): user=<>, rip=104.248.29.250, lip=192.168.1.253, TLS handshaking: SSL_accep ... show less	Brute-Force
🇨🇭 chilibi.ch	2024-10-18 10:53:03 (1 year ago)	2024-10-18 10:53:03 bullz IMAP	Hacking Brute-Force
🇬🇧 Stuart Reid	2024-10-18 09:55:54 (1 year ago)	...	SSH
🇦🇪 abusiveIntelligence	2024-10-18 09:50:00 (1 year ago)	RDP connect attempt: Nmap Scanner	Brute-Force
🇫🇷 Flo Flo	2024-10-18 08:25:04 (1 year ago)	104.248.29.250 - - - [18/Oct/2024:10:25:04 +0200] "_" "GET / HTTP/1.0" 444 0 "-" "-" 0.000 ...	Web App Attack
🇺🇸 technonerd	2024-10-18 06:22:55 (1 year ago)	1729232574 - 10/18/2024 02:22:54 Host: 104.248.29.250/104.248.29.250 Port: 143 TCP Blocked	Port Scan
Anonymous	2024-10-17 10:33:12 (1 year ago)	104.248.29.250 - visio.sliver85.eu - [17/Oct/2024:12:33:12 +0200] "POST /sdk HTTP/1.1" 444 "Mozilla/ ... show more 104.248.29.250 - visio.sliver85.eu - [17/Oct/2024:12:33:12 +0200] "POST /sdk HTTP/1.1" 444 "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" 104.248.29.250 - visio.sliver85.eu - [17/Oct/2024:12:33:12 +0200] "GET /odinhttpcall1729161192 HTTP/1.1" 444 "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" 104.248.29.250 - visio.sliver85.eu - [17/Oct/2024:12:33:12 +0200] "GET /HNAP1 HTTP/1.1" 444 "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" 104.248.29.250 - visio.sliver85.eu - [17/Oct/2024:12:33:12 +0200] "GET /evox/about HTTP/1.1" 444 "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" ... show less	Brute-Force Web App Attack
🇺🇸 gu-alvareza	2024-10-17 07:05:17 (1 year ago)	Nmap.Script.Scanner	Port Scan
🇩🇪 Honeypot-EU-Fru	2024-10-17 01:24:03 (1 year ago)	104.248.29.250 - - [redacted] [17/Oct/2024:03:24:02 +0200] "GET /odinhttpcall1729128242 HTTP/1.1" 40 ... show more 104.248.29.250 - - [redacted] [17/Oct/2024:03:24:02 +0200] "GET /odinhttpcall1729128242 HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" 0.000 - - 104.248.29.250 - ... show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 45 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇭 113.53.115.45

🇷🇺 95.165.140.133

🇫🇷 91.196.152.211

🇺🇸 64.62.197.36

🇳🇱 45.148.10.152

🇵🇪 38.250.148.39

🇳🇱 160.119.71.136

🇧🇷 147.15.15.226

🇺🇸 136.112.207.133

🇺🇸 129.121.114.225

🇵🇰 111.68.107.91

🇫🇷 91.231.89.205

🇳🇱 89.248.173.188

🇵🇱 83.219.248.100

🇺🇸 47.77.180.95

🇧🇷 45.231.153.59

🇷🇴 2.57.121.112

🇩🇪 2a00:19e0:3005:2ff:b902:bb81:d790:d3f6

🇨🇱 201.241.5.120

🇧🇪 198.235.24.172