Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
104.248.145.254 attackbots
[N1.H1.VM1] Port Scanner Detected Blocked by UFW
2020-09-29 04:25:26
104.248.145.254 attack
[N3.H3.VM3] Port Scanner Detected Blocked by UFW
2020-09-28 20:40:54
104.248.145.254 attackspam
firewall-block, port(s): 4205/tcp
2020-09-28 12:47:46
104.248.145.254 attack
 TCP (SYN) 104.248.145.254:59928 -> port 15830, len 44
2020-09-04 03:43:34
104.248.145.254 attackspam
TCP ports : 11182 / 15830
2020-09-03 19:19:07
104.248.145.254 attack
 TCP (SYN) 104.248.145.254:51047 -> port 31845, len 44
2020-08-13 04:54:36
104.248.145.254 attackbots
" "
2020-08-07 07:34:25
104.248.145.254 attack
Aug  6 16:45:53 debian-2gb-nbg1-2 kernel: \[18983609.468139\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=104.248.145.254 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x40 TTL=242 ID=16833 PROTO=TCP SPT=43412 DPT=32345 WINDOW=1024 RES=0x00 SYN URGP=0
2020-08-07 03:27:55
104.248.145.254 attackbots
scans once in preceeding hours on the ports (in chronological order) 8748 resulting in total of 6 scans from 104.248.0.0/16 block.
2020-08-05 20:37:31
104.248.145.254 attackbotsspam
 TCP (SYN) 104.248.145.254:48778 -> port 2378, len 44
2020-08-02 23:36:48
104.248.145.254 attack
Port scan denied
2020-07-28 02:07:35
104.248.145.254 attackbots
firewall-block, port(s): 8532/tcp
2020-07-18 19:01:14
104.248.145.254 attackspam
firewall-block, port(s): 29634/tcp
2020-07-07 00:13:46
104.248.145.163 attackspam
Invalid user acj from 104.248.145.163 port 60982
2020-02-12 02:45:08
104.248.145.163 attackbots
Jan 31 00:05:40 php1 sshd\[4148\]: Invalid user sumita from 104.248.145.163
Jan 31 00:05:40 php1 sshd\[4148\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.145.163
Jan 31 00:05:42 php1 sshd\[4148\]: Failed password for invalid user sumita from 104.248.145.163 port 49590 ssh2
Jan 31 00:09:03 php1 sshd\[4514\]: Invalid user ilavalagi from 104.248.145.163
Jan 31 00:09:03 php1 sshd\[4514\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.145.163
2020-01-31 18:14:00
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.248.145.157
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 16316
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.248.145.157.		IN	A

;; AUTHORITY SECTION:
.			599	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030800 1800 900 604800 86400

;; Query time: 64 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Mar 08 14:11:15 CST 2022
;; MSG SIZE  rcvd: 108
Host info
157.145.248.104.in-addr.arpa domain name pointer topindopay.co.id.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
157.145.248.104.in-addr.arpa	name = topindopay.co.id.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
112.85.42.122 attack
Oct  7 16:24:51 ovpn sshd\[13610\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.122  user=root
Oct  7 16:24:53 ovpn sshd\[13610\]: Failed password for root from 112.85.42.122 port 55892 ssh2
Oct  7 16:24:56 ovpn sshd\[13610\]: Failed password for root from 112.85.42.122 port 55892 ssh2
Oct  7 16:25:00 ovpn sshd\[13610\]: Failed password for root from 112.85.42.122 port 55892 ssh2
Oct  7 16:25:03 ovpn sshd\[13610\]: Failed password for root from 112.85.42.122 port 55892 ssh2
2020-10-07 22:29:34
157.230.251.115 attack
SSH brutforce
2020-10-07 21:40:26
111.231.63.14 attackspam
Oct  7 13:49:47 nas sshd[2847]: Failed password for root from 111.231.63.14 port 49822 ssh2
Oct  7 14:05:15 nas sshd[3429]: Failed password for root from 111.231.63.14 port 33690 ssh2
...
2020-10-07 21:55:48
118.40.139.200 attack
Oct  7 13:06:56 mail sshd[18068]: Failed password for root from 118.40.139.200 port 46430 ssh2
2020-10-07 21:55:13
59.13.125.142 attackspam
$f2bV_matches
2020-10-07 22:46:46
165.22.40.128 attackbotsspam
165.22.40.128 - - [07/Oct/2020:08:59:24 +0100] "POST /wp-login.php HTTP/1.1" 200 2861 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
165.22.40.128 - - [07/Oct/2020:08:59:26 +0100] "POST /wp-login.php HTTP/1.1" 200 2857 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
165.22.40.128 - - [07/Oct/2020:08:59:27 +0100] "POST /wp-login.php HTTP/1.1" 200 2857 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-10-07 21:38:48
68.183.90.64 attackbotsspam
Oct 7 13:50:21 *hidden* sshd[14919]: Failed password for *hidden* from 68.183.90.64 port 47026 ssh2 Oct 7 13:54:18 *hidden* sshd[16736]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.90.64 user=root Oct 7 13:54:20 *hidden* sshd[16736]: Failed password for *hidden* from 68.183.90.64 port 52468 ssh2
2020-10-07 21:46:42
178.128.208.38 attackbotsspam
178.128.208.38 - - [07/Oct/2020:16:07:16 +0200] "POST /xmlrpc.php HTTP/1.1" 403 613 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
178.128.208.38 - - [07/Oct/2020:16:20:30 +0200] "POST /xmlrpc.php HTTP/1.1" 403 613 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-10-07 22:26:44
64.225.12.36 attackspam
TCP port : 3475
2020-10-07 22:25:23
112.78.134.228 attackspam
Dovecot Invalid User Login Attempt.
2020-10-07 22:30:25
186.4.235.4 attack
Oct  7 16:14:55 * sshd[29356]: Failed password for root from 186.4.235.4 port 44346 ssh2
2020-10-07 22:39:10
121.46.244.194 attackspambots
Oct  7 11:06:02 mavik sshd[23733]: Failed password for root from 121.46.244.194 port 43663 ssh2
Oct  7 11:08:57 mavik sshd[23907]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.46.244.194  user=root
Oct  7 11:08:58 mavik sshd[23907]: Failed password for root from 121.46.244.194 port 60301 ssh2
Oct  7 11:11:43 mavik sshd[24191]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.46.244.194  user=root
Oct  7 11:11:45 mavik sshd[24191]: Failed password for root from 121.46.244.194 port 23667 ssh2
...
2020-10-07 22:02:35
83.199.211.116 attack
 TCP (SYN) 83.199.211.116:42027 -> port 22, len 44
2020-10-07 22:40:06
218.92.0.172 attack
Oct  7 16:31:27 abendstille sshd\[12082\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.172  user=root
Oct  7 16:31:29 abendstille sshd\[12156\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.172  user=root
Oct  7 16:31:29 abendstille sshd\[12082\]: Failed password for root from 218.92.0.172 port 49111 ssh2
Oct  7 16:31:30 abendstille sshd\[12156\]: Failed password for root from 218.92.0.172 port 30108 ssh2
Oct  7 16:31:33 abendstille sshd\[12082\]: Failed password for root from 218.92.0.172 port 49111 ssh2
...
2020-10-07 22:34:16
106.55.251.81 attackbotsspam
2020-10-07T13:24:20.006545abusebot-4.cloudsearch.cf sshd[24314]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.55.251.81  user=root
2020-10-07T13:24:21.693454abusebot-4.cloudsearch.cf sshd[24314]: Failed password for root from 106.55.251.81 port 52672 ssh2
2020-10-07T13:26:36.111883abusebot-4.cloudsearch.cf sshd[24344]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.55.251.81  user=root
2020-10-07T13:26:37.939245abusebot-4.cloudsearch.cf sshd[24344]: Failed password for root from 106.55.251.81 port 46316 ssh2
2020-10-07T13:28:43.012647abusebot-4.cloudsearch.cf sshd[24370]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.55.251.81  user=root
2020-10-07T13:28:45.472200abusebot-4.cloudsearch.cf sshd[24370]: Failed password for root from 106.55.251.81 port 38394 ssh2
2020-10-07T13:30:31.663872abusebot-4.cloudsearch.cf sshd[24448]: pam_unix(sshd:auth): authe
...
2020-10-07 22:38:28

Recently Reported IPs

104.248.145.175 104.248.147.224 104.248.153.129 104.248.149.100
104.248.149.154 104.248.153.148 104.21.192.185 104.248.155.123
104.248.15.220 104.248.157.56 104.248.167.26 149.167.23.55
48.218.134.69 104.21.196.114 104.21.199.37 104.25.202.15
104.25.202.96 104.25.203.15 104.25.201.96 104.25.224.98