Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Singapore

Region: Central Singapore Community Development Council

Country: Singapore

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: DigitalOcean, LLC

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspambots
fire
2019-11-17 02:17:30
Comments on same subnet:
IP Type Details Datetime
104.248.145.254 attackbots
[N1.H1.VM1] Port Scanner Detected Blocked by UFW
2020-09-29 04:25:26
104.248.145.254 attack
[N3.H3.VM3] Port Scanner Detected Blocked by UFW
2020-09-28 20:40:54
104.248.145.254 attackspam
firewall-block, port(s): 4205/tcp
2020-09-28 12:47:46
104.248.145.254 attack
 TCP (SYN) 104.248.145.254:59928 -> port 15830, len 44
2020-09-04 03:43:34
104.248.145.254 attackspam
TCP ports : 11182 / 15830
2020-09-03 19:19:07
104.248.145.254 attack
 TCP (SYN) 104.248.145.254:51047 -> port 31845, len 44
2020-08-13 04:54:36
104.248.145.254 attackbots
" "
2020-08-07 07:34:25
104.248.145.254 attack
Aug  6 16:45:53 debian-2gb-nbg1-2 kernel: \[18983609.468139\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=104.248.145.254 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x40 TTL=242 ID=16833 PROTO=TCP SPT=43412 DPT=32345 WINDOW=1024 RES=0x00 SYN URGP=0
2020-08-07 03:27:55
104.248.145.254 attackbots
scans once in preceeding hours on the ports (in chronological order) 8748 resulting in total of 6 scans from 104.248.0.0/16 block.
2020-08-05 20:37:31
104.248.145.254 attackbotsspam
 TCP (SYN) 104.248.145.254:48778 -> port 2378, len 44
2020-08-02 23:36:48
104.248.145.254 attack
Port scan denied
2020-07-28 02:07:35
104.248.145.254 attackbots
firewall-block, port(s): 8532/tcp
2020-07-18 19:01:14
104.248.145.254 attackspam
firewall-block, port(s): 29634/tcp
2020-07-07 00:13:46
104.248.145.163 attackspam
Invalid user acj from 104.248.145.163 port 60982
2020-02-12 02:45:08
104.248.145.163 attackbots
Jan 31 00:05:40 php1 sshd\[4148\]: Invalid user sumita from 104.248.145.163
Jan 31 00:05:40 php1 sshd\[4148\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.145.163
Jan 31 00:05:42 php1 sshd\[4148\]: Failed password for invalid user sumita from 104.248.145.163 port 49590 ssh2
Jan 31 00:09:03 php1 sshd\[4514\]: Invalid user ilavalagi from 104.248.145.163
Jan 31 00:09:03 php1 sshd\[4514\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.145.163
2020-01-31 18:14:00
Whois info:
b
Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.248.145.18
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53311
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.248.145.18.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019041000 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Wed Apr 10 15:23:23 +08 2019
;; MSG SIZE  rcvd: 118

Host info
Host 18.145.248.104.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 18.145.248.104.in-addr.arpa: NXDOMAIN

Related IP info:
Related comments:
IP Type Details Datetime
37.187.225.141 attack
37.187.225.141 - - [07/Apr/2020:05:00:23 +0200] "GET /phpmyadmin HTTP/1.1" 404 454
...
2020-05-15 08:16:25
110.80.17.26 attackspam
SSH Invalid Login
2020-05-15 07:55:32
104.248.144.208 attackspambots
"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:
2020-05-15 08:20:54
191.31.26.154 attackbots
Invalid user shield from 191.31.26.154 port 42966
2020-05-15 08:26:14
168.62.180.44 attackbots
WordPress XMLRPC scan :: 168.62.180.44 0.420 - [14/May/2020:20:52:53  0000] www.[censored_1] "POST //xmlrpc.php HTTP/1.1" 503 18233 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "HTTP/1.1"
2020-05-15 08:06:16
49.234.207.226 attack
Invalid user postgres from 49.234.207.226 port 50970
2020-05-15 08:25:43
110.166.82.138 attackspambots
Invalid user vps from 110.166.82.138 port 45984
2020-05-15 07:57:15
88.22.118.244 attackbotsspam
SSH brute force
2020-05-15 08:08:27
218.94.125.246 attack
May 14 20:27:06 mail sshd\[12886\]: Invalid user uupc from 218.94.125.246
May 14 20:27:06 mail sshd\[12886\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.94.125.246
...
2020-05-15 08:30:10
185.158.232.198 attackspam
May 14 14:51:02 ns1 postfix/smtpd[16661]: connect from unknown[185.158.232.198]
May 14 14:51:02 ns1 postfix/smtpd[17471]: connect from unknown[185.158.232.198]
May 14 14:51:03 ns1 postfix/smtpd[16661]: NOQUEUE: reject: RCPT from unknown[185.158.232.198]: 450 4.7.25 Client host rejected: cannot find your hostname, [185.158.232.198]; from=<> to= proto=ESMTP helo=
May 14 14:51:03 ns1 postfix/smtpd[17471]: NOQUEUE: reject: RCPT from unknown[185.158.232.198]: 450 4.7.25 Client host rejected: cannot find your hostname, [185.158.232.198]; from= to= proto=ESMTP helo=
May 14 14:51:03 ns1 postfix/smtpd[16661]: disconnect from unknown[185.158.232.198] ehlo=2 starttls=1 mail=1 rcpt=0/1 data=0/1 rset=1 quit=1 commands=6/8
May 14 14:51:03 ns1 postfix/smtpd[17471]: disconnect from unknown[185.158.232.198] ehlo=2 starttls=1 mail=1 rcpt=0/1 data=0/1 rset=1 quit=1 commands=6/8
2020-05-15 08:12:20
36.73.69.236 attackbots
36.73.69.236 - - [19/Nov/2019:09:44:49 +0100] "GET /shop/phpmyadmin/ HTTP/1.1" 404 13121
...
2020-05-15 08:19:13
209.17.96.250 attack
May 14 22:52:20 debian-2gb-nbg1-2 kernel: \[11748392.681542\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=209.17.96.250 DST=195.201.40.59 LEN=44 TOS=0x08 PREC=0x00 TTL=241 ID=54321 PROTO=TCP SPT=58824 DPT=4443 WINDOW=65535 RES=0x00 SYN URGP=0
2020-05-15 08:29:03
206.189.118.7 attackspambots
May 15 00:55:52 santamaria sshd\[19836\]: Invalid user testi from 206.189.118.7
May 15 00:55:52 santamaria sshd\[19836\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.118.7
May 15 00:55:54 santamaria sshd\[19836\]: Failed password for invalid user testi from 206.189.118.7 port 38956 ssh2
...
2020-05-15 07:52:04
91.218.85.69 attack
May 15 04:14:37 gw1 sshd[13090]: Failed password for root from 91.218.85.69 port 12582 ssh2
...
2020-05-15 07:57:46
41.207.184.182 attackspambots
Invalid user test from 41.207.184.182 port 47618
2020-05-15 08:16:53

Recently Reported IPs

49.37.10.68 116.12.51.219 185.234.218.237 151.80.162.216
116.111.113.137 45.32.117.1 212.96.51.201 31.167.20.193
116.107.59.34 110.77.140.26 213.79.119.42 103.108.145.72
103.88.33.61 221.229.174.143 125.166.210.56 122.152.210.200
162.243.143.0 223.196.87.14 77.120.247.247 185.2.5.10