Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Singapore

Region: unknown

Country: Singapore

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
104.248.148.34 attack
Nov 25 19:16:03 h2177944 sshd\[29503\]: Invalid user jasmin from 104.248.148.34 port 36974
Nov 25 19:16:03 h2177944 sshd\[29503\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.148.34
Nov 25 19:16:05 h2177944 sshd\[29503\]: Failed password for invalid user jasmin from 104.248.148.34 port 36974 ssh2
Nov 25 19:23:18 h2177944 sshd\[29702\]: Invalid user dyrlie from 104.248.148.34 port 46472
Nov 25 19:23:18 h2177944 sshd\[29702\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.148.34
...
2019-11-26 04:28:58
104.248.148.98 attackbots
2019-09-22T07:35:38.446967enmeeting.mahidol.ac.th sshd\[11482\]: Invalid user ftpuser from 104.248.148.98 port 49728
2019-09-22T07:35:38.462169enmeeting.mahidol.ac.th sshd\[11482\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.148.98
2019-09-22T07:35:40.546752enmeeting.mahidol.ac.th sshd\[11482\]: Failed password for invalid user ftpuser from 104.248.148.98 port 49728 ssh2
...
2019-09-22 09:47:15
104.248.148.34 attackspam
Sep  8 18:39:32 vpxxxxxxx22308 sshd[14182]: Invalid user rtest from 104.248.148.34
Sep  8 18:39:32 vpxxxxxxx22308 sshd[14182]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.148.34
Sep  8 18:39:34 vpxxxxxxx22308 sshd[14182]: Failed password for invalid user rtest from 104.248.148.34 port 54336 ssh2
Sep  8 18:49:04 vpxxxxxxx22308 sshd[15625]: Invalid user ts3server from 104.248.148.34
Sep  8 18:49:04 vpxxxxxxx22308 sshd[15625]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.148.34

........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=104.248.148.34
2019-09-16 17:22:56
104.248.148.34 attack
2019-09-10T08:55:33.402275abusebot-8.cloudsearch.cf sshd\[23044\]: Invalid user developer from 104.248.148.34 port 37844
2019-09-10 17:18:16
104.248.148.34 attack
2019-09-04T17:02:38.486164abusebot-8.cloudsearch.cf sshd\[20946\]: Invalid user pawel from 104.248.148.34 port 42314
2019-09-05 01:41:10
104.248.148.98 attackbots
$f2bV_matches
2019-09-02 14:11:39
104.248.148.98 attackbotsspam
Aug 27 11:16:46 pkdns2 sshd\[57154\]: Invalid user mono from 104.248.148.98Aug 27 11:16:47 pkdns2 sshd\[57154\]: Failed password for invalid user mono from 104.248.148.98 port 51520 ssh2Aug 27 11:21:39 pkdns2 sshd\[57387\]: Invalid user vtcbikes from 104.248.148.98Aug 27 11:21:41 pkdns2 sshd\[57387\]: Failed password for invalid user vtcbikes from 104.248.148.98 port 40366 ssh2Aug 27 11:26:30 pkdns2 sshd\[57616\]: Invalid user archuser from 104.248.148.98Aug 27 11:26:32 pkdns2 sshd\[57616\]: Failed password for invalid user archuser from 104.248.148.98 port 57660 ssh2
...
2019-08-27 16:36:34
104.248.148.98 attack
Aug 26 22:46:06 SilenceServices sshd[13571]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.148.98
Aug 26 22:46:08 SilenceServices sshd[13571]: Failed password for invalid user gpu from 104.248.148.98 port 56196 ssh2
Aug 26 22:50:37 SilenceServices sshd[15320]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.148.98
2019-08-27 05:04:36
104.248.148.98 attack
Invalid user jana from 104.248.148.98 port 49152
2019-08-25 00:20:33
104.248.148.98 attackspam
$f2bV_matches
2019-08-13 05:59:54
104.248.148.98 attackbotsspam
Aug 10 22:25:15 unicornsoft sshd\[14958\]: Invalid user ultra from 104.248.148.98
Aug 10 22:25:15 unicornsoft sshd\[14958\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.148.98
Aug 10 22:25:16 unicornsoft sshd\[14958\]: Failed password for invalid user ultra from 104.248.148.98 port 38864 ssh2
2019-08-11 12:11:57
104.248.148.98 attack
Aug  6 12:00:40 MK-Soft-VM4 sshd\[21025\]: Invalid user ts2 from 104.248.148.98 port 47282
Aug  6 12:00:40 MK-Soft-VM4 sshd\[21025\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.148.98
Aug  6 12:00:41 MK-Soft-VM4 sshd\[21025\]: Failed password for invalid user ts2 from 104.248.148.98 port 47282 ssh2
...
2019-08-07 03:08:17
104.248.148.52 attackbots
Apr 13 17:05:07 ubuntu sshd[20205]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.148.52
Apr 13 17:05:09 ubuntu sshd[20205]: Failed password for invalid user bsd from 104.248.148.52 port 33326 ssh2
Apr 13 17:07:50 ubuntu sshd[20266]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.148.52
Apr 13 17:07:52 ubuntu sshd[20266]: Failed password for invalid user weixin from 104.248.148.52 port 34762 ssh2
2019-07-31 21:11:59
104.248.148.98 attackspambots
Apr 20 08:20:34 ubuntu sshd[9755]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.148.98
Apr 20 08:20:35 ubuntu sshd[9755]: Failed password for invalid user delete from 104.248.148.98 port 38690 ssh2
Apr 20 08:23:14 ubuntu sshd[9836]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.148.98
Apr 20 08:23:17 ubuntu sshd[9836]: Failed password for invalid user correo from 104.248.148.98 port 36342 ssh2
2019-07-31 21:07:40
104.248.148.98 attackspambots
SSH invalid-user multiple login try
2019-07-11 11:37:11
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.248.148.213
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27404
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.248.148.213.		IN	A

;; AUTHORITY SECTION:
.			130	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022041201 1800 900 604800 86400

;; Query time: 75 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Apr 13 11:00:42 CST 2022
;; MSG SIZE  rcvd: 108
Host info
Host 213.148.248.104.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 213.148.248.104.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
183.63.87.236 attackspam
Nov 29 09:56:21 legacy sshd[1527]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.63.87.236
Nov 29 09:56:22 legacy sshd[1527]: Failed password for invalid user canute from 183.63.87.236 port 45720 ssh2
Nov 29 10:03:44 legacy sshd[1764]: Failed password for root from 183.63.87.236 port 51118 ssh2
...
2019-11-29 17:53:22
75.190.98.206 attack
port scan and connect, tcp 1433 (ms-sql-s)
2019-11-29 18:01:53
196.52.43.52 attackspam
Connection by 196.52.43.52 on port: 5910 got caught by honeypot at 11/29/2019 8:14:53 AM
2019-11-29 17:41:08
139.155.69.51 attackbotsspam
Nov 29 08:33:15 vps666546 sshd\[23077\]: Invalid user kigwa from 139.155.69.51 port 52476
Nov 29 08:33:15 vps666546 sshd\[23077\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.69.51
Nov 29 08:33:17 vps666546 sshd\[23077\]: Failed password for invalid user kigwa from 139.155.69.51 port 52476 ssh2
Nov 29 08:37:18 vps666546 sshd\[23210\]: Invalid user saturn from 139.155.69.51 port 57558
Nov 29 08:37:18 vps666546 sshd\[23210\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.69.51
...
2019-11-29 17:41:54
222.252.30.95 attackspam
Brute forcing RDP port 3389
2019-11-29 17:28:36
159.89.194.103 attackbotsspam
Nov 29 06:27:58 ldap01vmsma01 sshd[50571]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.194.103
Nov 29 06:28:01 ldap01vmsma01 sshd[50571]: Failed password for invalid user lakhian from 159.89.194.103 port 47110 ssh2
...
2019-11-29 17:49:15
123.28.139.176 attackspambots
Fail2Ban Ban Triggered
2019-11-29 18:02:44
185.232.67.5 attack
Nov 29 10:20:01 dedicated sshd[24062]: Invalid user admin from 185.232.67.5 port 43905
2019-11-29 17:46:32
181.41.216.137 attackbots
Nov 29 10:06:03 relay postfix/smtpd\[11652\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.137\]: 554 5.7.1 \: Relay access denied\; from=\<6v3ze0a17oj2h0@ss-pb.ru\> to=\ proto=ESMTP helo=\<\[181.41.216.131\]\>
Nov 29 10:06:03 relay postfix/smtpd\[11652\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.137\]: 554 5.7.1 \: Relay access denied\; from=\<6v3ze0a17oj2h0@ss-pb.ru\> to=\ proto=ESMTP helo=\<\[181.41.216.131\]\>
Nov 29 10:06:03 relay postfix/smtpd\[11652\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.137\]: 554 5.7.1 \: Relay access denied\; from=\<6v3ze0a17oj2h0@ss-pb.ru\> to=\ proto=ESMTP helo=\<\[181.41.216.131\]\>
Nov 29 10:06:03 relay postfix/smtpd\[11652\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.137\]: 554 5.7.1 \: Relay access denied\; from=\<
...
2019-11-29 17:31:50
139.186.23.244 attackspam
2019-11-29T09:30:53.428943abusebot-5.cloudsearch.cf sshd\[31772\]: Invalid user ovh from 139.186.23.244 port 46908
2019-11-29 17:34:05
5.189.163.253 attackbotsspam
Masscan Port Scanning Tool Detection (56115) PA
2019-11-29 17:32:24
185.143.223.183 attack
Port scan on 5 port(s): 12028 12076 12181 12193 12790
2019-11-29 17:56:13
222.162.7.80 attackbots
Automatic report - Port Scan Attack
2019-11-29 18:02:21
45.136.108.65 attack
11/29/2019-09:59:36.462688 45.136.108.65 Protocol: 6 ET SCAN MS Terminal Server Traffic on Non-standard Port
2019-11-29 17:51:35
52.213.161.3 attackspambots
RDP Bruteforce
2019-11-29 17:37:18

Recently Reported IPs

104.248.143.150 104.248.148.39 104.248.150.100 104.248.155.199
104.248.155.61 104.248.158.103 104.248.16.174 104.248.162.181
104.248.163.79 104.248.172.192 104.248.178.136 104.248.200.144
104.248.203.198 104.248.216.231 104.248.220.173 104.248.229.39
104.248.238.75 104.248.244.77 104.248.245.99 104.248.25.78