Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Clifton

Region: New Jersey

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
104.248.240.174 attackproxy
Fraud connect
2024-05-14 20:51:04
104.248.205.67 spamattack
Phishing
2022-01-28 16:41:36
104.248.246.41 attack
fail2ban detected brute force on sshd
2020-10-12 07:24:44
104.248.205.67 attackspambots
Oct 11 20:16:41 cho sshd[449424]: Failed password for invalid user mugihiko from 104.248.205.67 port 47586 ssh2
Oct 11 20:19:53 cho sshd[449593]: Invalid user chick from 104.248.205.67 port 51910
Oct 11 20:19:53 cho sshd[449593]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.205.67 
Oct 11 20:19:53 cho sshd[449593]: Invalid user chick from 104.248.205.67 port 51910
Oct 11 20:19:55 cho sshd[449593]: Failed password for invalid user chick from 104.248.205.67 port 51910 ssh2
...
2020-10-12 02:35:14
104.248.246.41 attackbots
Invalid user test from 104.248.246.41 port 55920
2020-10-11 23:39:01
104.248.205.67 attackbots
TCP port : 3918
2020-10-11 18:26:20
104.248.246.41 attackbotsspam
(sshd) Failed SSH login from 104.248.246.41 (DE/Germany/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 11 00:30:27 server4 sshd[7206]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.246.41  user=root
Oct 11 00:30:29 server4 sshd[7206]: Failed password for root from 104.248.246.41 port 44390 ssh2
Oct 11 00:39:51 server4 sshd[12389]: Invalid user prueba from 104.248.246.41
Oct 11 00:39:52 server4 sshd[12389]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.246.41 
Oct 11 00:39:53 server4 sshd[12389]: Failed password for invalid user prueba from 104.248.246.41 port 54958 ssh2
2020-10-11 15:38:18
104.248.246.41 attack
SSH brutforce
2020-10-11 08:55:57
104.248.246.8 attackspam
Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "root" at 2020-10-07T19:04:42Z
2020-10-08 05:35:17
104.248.246.8 attack
Oct  6 06:01:26 ns4 sshd[27242]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.246.8  user=r.r
Oct  6 06:01:29 ns4 sshd[27242]: Failed password for r.r from 104.248.246.8 port 46506 ssh2
Oct  6 06:10:46 ns4 sshd[28508]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.246.8  user=r.r
Oct  6 06:10:48 ns4 sshd[28508]: Failed password for r.r from 104.248.246.8 port 33954 ssh2
Oct  6 06:14:29 ns4 sshd[28931]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.246.8  user=r.r
Oct  6 06:14:31 ns4 sshd[28931]: Failed password for r.r from 104.248.246.8 port 44924 ssh2
Oct  6 06:18:09 ns4 sshd[29265]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.246.8  user=r.r
Oct  6 06:18:11 ns4 sshd[29265]: Failed password for r.r from 104.248.246.8 port 55894 ssh2
Oct  6 06:22:32 ns4 sshd[29859]: pam........
-------------------------------
2020-10-07 21:59:43
104.248.246.8 attack
Oct  6 06:01:26 ns4 sshd[27242]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.246.8  user=r.r
Oct  6 06:01:29 ns4 sshd[27242]: Failed password for r.r from 104.248.246.8 port 46506 ssh2
Oct  6 06:10:46 ns4 sshd[28508]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.246.8  user=r.r
Oct  6 06:10:48 ns4 sshd[28508]: Failed password for r.r from 104.248.246.8 port 33954 ssh2
Oct  6 06:14:29 ns4 sshd[28931]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.246.8  user=r.r
Oct  6 06:14:31 ns4 sshd[28931]: Failed password for r.r from 104.248.246.8 port 44924 ssh2
Oct  6 06:18:09 ns4 sshd[29265]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.246.8  user=r.r
Oct  6 06:18:11 ns4 sshd[29265]: Failed password for r.r from 104.248.246.8 port 55894 ssh2
Oct  6 06:22:32 ns4 sshd[29859]: pam........
-------------------------------
2020-10-07 13:49:05
104.248.230.153 attackspam
(sshd) Failed SSH login from 104.248.230.153 (US/United States/-): 5 in the last 3600 secs
2020-10-07 05:24:27
104.248.230.153 attackspambots
Oct  6 15:02:03 xeon sshd[32516]: Failed password for root from 104.248.230.153 port 58082 ssh2
2020-10-06 21:33:55
104.248.230.153 attack
malicious Brute-Force reported by https://www.patrick-binder.de
...
2020-10-06 13:15:39
104.248.231.200 attack
Oct  4 20:50:32 electroncash sshd[3649]: Failed password for root from 104.248.231.200 port 34936 ssh2
Oct  4 20:51:37 electroncash sshd[4070]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.231.200  user=root
Oct  4 20:51:38 electroncash sshd[4070]: Failed password for root from 104.248.231.200 port 54398 ssh2
Oct  4 20:52:42 electroncash sshd[4489]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.231.200  user=root
Oct  4 20:52:45 electroncash sshd[4489]: Failed password for root from 104.248.231.200 port 45634 ssh2
...
2020-10-05 05:43:15
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.248.2.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14665
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.248.2.142.			IN	A

;; AUTHORITY SECTION:
.			435	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2021010200 1800 900 604800 86400

;; Query time: 30 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jan 02 14:03:58 CST 2021
;; MSG SIZE  rcvd: 117
Host info
Host 142.2.248.104.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 142.2.248.104.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
106.52.176.118 attackbotsspam
$f2bV_matches
2020-07-14 07:26:15
103.149.208.9 attackbots
Port Scan detected!
...
2020-07-14 07:26:58
209.17.96.18 attackbotsspam
IP: 209.17.96.18
Ports affected
    HTTP protocol over TLS/SSL (443) 
Abuse Confidence rating 100%
Found in DNSBL('s)
ASN Details
   AS174 COGENT-174
   United States (US)
   CIDR 209.17.96.0/20
Log Date: 13/07/2020 7:53:04 PM UTC
2020-07-14 07:06:36
77.82.83.212 attackspam
Unauthorized connection attempt from IP address 77.82.83.212 on Port 445(SMB)
2020-07-14 07:09:13
71.58.98.157 attackbotsspam
SSH invalid-user multiple login try
2020-07-14 07:13:09
141.98.81.42 attackspam
Jul 14 01:25:27 ns382633 sshd\[17952\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.81.42  user=root
Jul 14 01:25:29 ns382633 sshd\[17952\]: Failed password for root from 141.98.81.42 port 4041 ssh2
Jul 14 01:25:42 ns382633 sshd\[17970\]: Invalid user guest from 141.98.81.42 port 3365
Jul 14 01:25:42 ns382633 sshd\[17970\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.81.42
Jul 14 01:25:44 ns382633 sshd\[17970\]: Failed password for invalid user guest from 141.98.81.42 port 3365 ssh2
2020-07-14 07:30:13
216.189.116.247 attackbots
" "
2020-07-14 07:09:51
177.131.6.15 attackbots
Invalid user aaron from 177.131.6.15 port 43026
2020-07-14 07:26:36
129.211.8.43 attackspambots
SSH invalid-user multiple login attempts
2020-07-14 07:34:22
159.65.155.255 attack
Jul 14 00:36:43 piServer sshd[3236]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.155.255 
Jul 14 00:36:44 piServer sshd[3236]: Failed password for invalid user xd from 159.65.155.255 port 36780 ssh2
Jul 14 00:39:59 piServer sshd[3580]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.155.255 
...
2020-07-14 07:04:11
185.51.124.41 attackspambots
Automatic report - Banned IP Access
2020-07-14 07:31:40
101.91.119.172 attackspam
Jul 14 01:45:44 lukav-desktop sshd\[18543\]: Invalid user pd from 101.91.119.172
Jul 14 01:45:44 lukav-desktop sshd\[18543\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.91.119.172
Jul 14 01:45:46 lukav-desktop sshd\[18543\]: Failed password for invalid user pd from 101.91.119.172 port 39258 ssh2
Jul 14 01:48:43 lukav-desktop sshd\[18564\]: Invalid user agr from 101.91.119.172
Jul 14 01:48:43 lukav-desktop sshd\[18564\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.91.119.172
2020-07-14 06:58:08
103.99.1.183 attack
Port scan: Attack repeated for 24 hours
2020-07-14 07:27:26
122.51.171.165 attack
SSH Invalid Login
2020-07-14 07:29:25
137.220.134.191 attack
Auto Detect Rule!
proto TCP (SYN), 137.220.134.191:56247->gjan.info:1433, len 40
2020-07-14 07:08:57

Recently Reported IPs

190.2.131.175 193.187.118.104 104.245.144.56 196.18.32.132
45.57.163.199 45.57.163.197 168.245.143.179 172.96.92.175
23.236.243.183 103.125.28.175 23.236.243.185 107.175.204.213
123.22.32.202 157.55.39.116 45.229.54.102 107.6.168.242
193.32.249.167 85.25.185.248 37.134.148.147 164.68.122.236