Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Singapore

Region: unknown

Country: Singapore

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
104.248.159.69 attackspam
Invalid user zhaokai from 104.248.159.69 port 56434
2020-09-02 02:18:10
104.248.159.69 attack
Aug 21 13:36:40 rush sshd[27264]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.159.69
Aug 21 13:36:41 rush sshd[27264]: Failed password for invalid user admin from 104.248.159.69 port 48912 ssh2
Aug 21 13:41:30 rush sshd[27397]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.159.69
...
2020-08-22 00:53:53
104.248.159.69 attackbotsspam
Aug 20 02:31:51 ovpn sshd\[5371\]: Invalid user postgres from 104.248.159.69
Aug 20 02:31:51 ovpn sshd\[5371\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.159.69
Aug 20 02:31:53 ovpn sshd\[5371\]: Failed password for invalid user postgres from 104.248.159.69 port 54716 ssh2
Aug 20 02:43:45 ovpn sshd\[8223\]: Invalid user oozie from 104.248.159.69
Aug 20 02:43:45 ovpn sshd\[8223\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.159.69
2020-08-20 08:45:00
104.248.159.69 attack
Aug 19 16:32:10 vpn01 sshd[29169]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.159.69
Aug 19 16:32:12 vpn01 sshd[29169]: Failed password for invalid user yj from 104.248.159.69 port 45380 ssh2
...
2020-08-19 23:04:26
104.248.159.69 attackbots
Aug 15 03:29:28 vps46666688 sshd[22485]: Failed password for root from 104.248.159.69 port 48748 ssh2
...
2020-08-15 15:28:12
104.248.159.69 attackspambots
Aug  7 07:55:02 ip-172-31-61-156 sshd[6562]: Failed password for root from 104.248.159.69 port 43746 ssh2
Aug  7 07:59:23 ip-172-31-61-156 sshd[6730]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.159.69  user=root
Aug  7 07:59:24 ip-172-31-61-156 sshd[6730]: Failed password for root from 104.248.159.69 port 54524 ssh2
Aug  7 07:59:23 ip-172-31-61-156 sshd[6730]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.159.69  user=root
Aug  7 07:59:24 ip-172-31-61-156 sshd[6730]: Failed password for root from 104.248.159.69 port 54524 ssh2
...
2020-08-07 16:11:21
104.248.159.69 attackbotsspam
Aug  2 22:59:02 abendstille sshd\[14582\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.159.69  user=root
Aug  2 22:59:04 abendstille sshd\[14582\]: Failed password for root from 104.248.159.69 port 33558 ssh2
Aug  2 23:03:29 abendstille sshd\[19226\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.159.69  user=root
Aug  2 23:03:31 abendstille sshd\[19226\]: Failed password for root from 104.248.159.69 port 45374 ssh2
Aug  2 23:07:45 abendstille sshd\[23455\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.159.69  user=root
...
2020-08-03 05:27:25
104.248.159.69 attackspam
$f2bV_matches
2020-07-25 16:44:48
104.248.159.69 attackbotsspam
Connection to SSH Honeypot - Detected by HoneypotDB
2020-07-15 22:15:31
104.248.159.69 attackspambots
SSH Bruteforce attack
2020-07-12 01:24:56
104.248.159.69 attackspambots
bruteforce detected
2020-07-11 06:29:39
104.248.159.69 attackbotsspam
$f2bV_matches
2020-07-11 00:29:24
104.248.159.69 attackbotsspam
Jul  4 15:13:37 sso sshd[17105]: Failed password for root from 104.248.159.69 port 48334 ssh2
...
2020-07-04 21:49:20
104.248.159.69 attack
Invalid user ros from 104.248.159.69 port 53300
2020-06-24 19:23:24
104.248.159.69 attackbots
Jun 17 07:55:25 lukav-desktop sshd\[22185\]: Invalid user piotr from 104.248.159.69
Jun 17 07:55:25 lukav-desktop sshd\[22185\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.159.69
Jun 17 07:55:27 lukav-desktop sshd\[22185\]: Failed password for invalid user piotr from 104.248.159.69 port 60158 ssh2
Jun 17 07:56:07 lukav-desktop sshd\[22207\]: Invalid user pad from 104.248.159.69
Jun 17 07:56:07 lukav-desktop sshd\[22207\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.159.69
2020-06-17 13:53:58
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.248.159.54
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 18832
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.248.159.54.			IN	A

;; AUTHORITY SECTION:
.			163	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022052602 1800 900 604800 86400

;; Query time: 19 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri May 27 07:50:50 CST 2022
;; MSG SIZE  rcvd: 107
Host info
54.159.248.104.in-addr.arpa domain name pointer 490765.cloudwaysapps.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
54.159.248.104.in-addr.arpa	name = 490765.cloudwaysapps.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
103.76.175.130 attack
Aug 14 17:12:19 serwer sshd\[17147\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.76.175.130  user=root
Aug 14 17:12:20 serwer sshd\[17147\]: Failed password for root from 103.76.175.130 port 57054 ssh2
Aug 14 17:19:10 serwer sshd\[17795\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.76.175.130  user=root
...
2020-08-15 00:00:04
106.51.104.171 attack
Attempts against non-existent wp-login
2020-08-14 23:58:42
211.253.133.48 attackspam
$f2bV_matches
2020-08-15 00:02:52
106.75.165.187 attack
Aug 14 13:04:07 vps46666688 sshd[27637]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.165.187
Aug 14 13:04:09 vps46666688 sshd[27637]: Failed password for invalid user  from 106.75.165.187 port 55150 ssh2
...
2020-08-15 00:39:59
85.209.0.103 attackbotsspam
port scan and connect, tcp 22 (ssh)
2020-08-15 00:28:23
185.176.27.38 attackspam
[H1.VM2] Blocked by UFW
2020-08-15 00:35:36
81.19.104.55 attackspam
[N10.H1.VM1] Port Scanner Detected Blocked by UFW
2020-08-15 00:37:02
113.141.166.197 attackspam
Aug 14 04:33:16 php1 sshd\[14550\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.141.166.197  user=root
Aug 14 04:33:18 php1 sshd\[14550\]: Failed password for root from 113.141.166.197 port 57310 ssh2
Aug 14 04:36:30 php1 sshd\[14811\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.141.166.197  user=root
Aug 14 04:36:32 php1 sshd\[14811\]: Failed password for root from 113.141.166.197 port 56082 ssh2
Aug 14 04:39:18 php1 sshd\[15178\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.141.166.197  user=root
2020-08-15 00:11:58
104.244.75.157 attack
(sshd) Failed SSH login from 104.244.75.157 (US/United States/tor-exit-levy.nucleosynth.space): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Aug 14 18:21:28 amsweb01 sshd[6603]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.244.75.157  user=root
Aug 14 18:21:30 amsweb01 sshd[6603]: Failed password for root from 104.244.75.157 port 36995 ssh2
Aug 14 18:21:32 amsweb01 sshd[6603]: Failed password for root from 104.244.75.157 port 36995 ssh2
Aug 14 18:21:33 amsweb01 sshd[6603]: Failed password for root from 104.244.75.157 port 36995 ssh2
Aug 14 18:21:35 amsweb01 sshd[6603]: Failed password for root from 104.244.75.157 port 36995 ssh2
2020-08-15 00:26:39
150.109.104.153 attackspambots
Aug 14 16:29:26 sso sshd[5364]: Failed password for root from 150.109.104.153 port 64358 ssh2
...
2020-08-15 00:30:13
112.85.42.180 attack
Aug 14 18:17:00 *hidden* sshd[28350]: Failed password for *hidden* from 112.85.42.180 port 65123 ssh2 Aug 14 18:17:05 *hidden* sshd[28350]: Failed password for *hidden* from 112.85.42.180 port 65123 ssh2 Aug 14 18:17:09 *hidden* sshd[28350]: Failed password for *hidden* from 112.85.42.180 port 65123 ssh2
2020-08-15 00:29:22
103.255.6.101 attackbotsspam
Automatic report - Port Scan Attack
2020-08-15 00:15:05
195.54.160.38 attackspambots
[H1.VM1] Blocked by UFW
2020-08-15 00:20:28
132.148.141.147 attackspambots
/wp-login.php
2020-08-15 00:25:01
46.101.97.5 attackspam
2020-08-14 09:06:26.361565-0500  localhost sshd[70875]: Failed password for root from 46.101.97.5 port 49822 ssh2
2020-08-15 00:24:05

Recently Reported IPs

104.248.155.125 104.248.163.249 104.248.164.111 104.248.164.239
104.248.168.153 104.248.200.68 104.248.206.155 104.248.241.22
104.248.46.212 104.251.217.213 104.36.123.212 104.37.102.209
104.37.103.209 104.37.103.81 104.43.194.101 104.43.248.47
104.45.16.187 104.45.186.45 104.45.230.249 104.45.68.14