Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Clifton

Region: New Jersey

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
104.248.240.174 attackproxy
Fraud connect
2024-05-14 20:51:04
104.248.205.67 spamattack
Phishing
2022-01-28 16:41:36
104.248.246.41 attack
fail2ban detected brute force on sshd
2020-10-12 07:24:44
104.248.205.67 attackspambots
Oct 11 20:16:41 cho sshd[449424]: Failed password for invalid user mugihiko from 104.248.205.67 port 47586 ssh2
Oct 11 20:19:53 cho sshd[449593]: Invalid user chick from 104.248.205.67 port 51910
Oct 11 20:19:53 cho sshd[449593]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.205.67 
Oct 11 20:19:53 cho sshd[449593]: Invalid user chick from 104.248.205.67 port 51910
Oct 11 20:19:55 cho sshd[449593]: Failed password for invalid user chick from 104.248.205.67 port 51910 ssh2
...
2020-10-12 02:35:14
104.248.246.41 attackbots
Invalid user test from 104.248.246.41 port 55920
2020-10-11 23:39:01
104.248.205.67 attackbots
TCP port : 3918
2020-10-11 18:26:20
104.248.246.41 attackbotsspam
(sshd) Failed SSH login from 104.248.246.41 (DE/Germany/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 11 00:30:27 server4 sshd[7206]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.246.41  user=root
Oct 11 00:30:29 server4 sshd[7206]: Failed password for root from 104.248.246.41 port 44390 ssh2
Oct 11 00:39:51 server4 sshd[12389]: Invalid user prueba from 104.248.246.41
Oct 11 00:39:52 server4 sshd[12389]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.246.41 
Oct 11 00:39:53 server4 sshd[12389]: Failed password for invalid user prueba from 104.248.246.41 port 54958 ssh2
2020-10-11 15:38:18
104.248.246.41 attack
SSH brutforce
2020-10-11 08:55:57
104.248.246.8 attackspam
Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "root" at 2020-10-07T19:04:42Z
2020-10-08 05:35:17
104.248.246.8 attack
Oct  6 06:01:26 ns4 sshd[27242]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.246.8  user=r.r
Oct  6 06:01:29 ns4 sshd[27242]: Failed password for r.r from 104.248.246.8 port 46506 ssh2
Oct  6 06:10:46 ns4 sshd[28508]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.246.8  user=r.r
Oct  6 06:10:48 ns4 sshd[28508]: Failed password for r.r from 104.248.246.8 port 33954 ssh2
Oct  6 06:14:29 ns4 sshd[28931]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.246.8  user=r.r
Oct  6 06:14:31 ns4 sshd[28931]: Failed password for r.r from 104.248.246.8 port 44924 ssh2
Oct  6 06:18:09 ns4 sshd[29265]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.246.8  user=r.r
Oct  6 06:18:11 ns4 sshd[29265]: Failed password for r.r from 104.248.246.8 port 55894 ssh2
Oct  6 06:22:32 ns4 sshd[29859]: pam........
-------------------------------
2020-10-07 21:59:43
104.248.246.8 attack
Oct  6 06:01:26 ns4 sshd[27242]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.246.8  user=r.r
Oct  6 06:01:29 ns4 sshd[27242]: Failed password for r.r from 104.248.246.8 port 46506 ssh2
Oct  6 06:10:46 ns4 sshd[28508]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.246.8  user=r.r
Oct  6 06:10:48 ns4 sshd[28508]: Failed password for r.r from 104.248.246.8 port 33954 ssh2
Oct  6 06:14:29 ns4 sshd[28931]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.246.8  user=r.r
Oct  6 06:14:31 ns4 sshd[28931]: Failed password for r.r from 104.248.246.8 port 44924 ssh2
Oct  6 06:18:09 ns4 sshd[29265]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.246.8  user=r.r
Oct  6 06:18:11 ns4 sshd[29265]: Failed password for r.r from 104.248.246.8 port 55894 ssh2
Oct  6 06:22:32 ns4 sshd[29859]: pam........
-------------------------------
2020-10-07 13:49:05
104.248.230.153 attackspam
(sshd) Failed SSH login from 104.248.230.153 (US/United States/-): 5 in the last 3600 secs
2020-10-07 05:24:27
104.248.230.153 attackspambots
Oct  6 15:02:03 xeon sshd[32516]: Failed password for root from 104.248.230.153 port 58082 ssh2
2020-10-06 21:33:55
104.248.230.153 attack
malicious Brute-Force reported by https://www.patrick-binder.de
...
2020-10-06 13:15:39
104.248.231.200 attack
Oct  4 20:50:32 electroncash sshd[3649]: Failed password for root from 104.248.231.200 port 34936 ssh2
Oct  4 20:51:37 electroncash sshd[4070]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.231.200  user=root
Oct  4 20:51:38 electroncash sshd[4070]: Failed password for root from 104.248.231.200 port 54398 ssh2
Oct  4 20:52:42 electroncash sshd[4489]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.231.200  user=root
Oct  4 20:52:45 electroncash sshd[4489]: Failed password for root from 104.248.231.200 port 45634 ssh2
...
2020-10-05 05:43:15
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.248.2.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14665
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.248.2.142.			IN	A

;; AUTHORITY SECTION:
.			435	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2021010200 1800 900 604800 86400

;; Query time: 30 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jan 02 14:03:58 CST 2021
;; MSG SIZE  rcvd: 117
Host info
Host 142.2.248.104.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 142.2.248.104.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
47.91.226.110 attack
Sep  5 18:52:36 b-vps wordpress(rreb.cz)[2192]: Authentication attempt for unknown user martin from 47.91.226.110
...
2020-09-06 05:29:50
45.145.67.39 attackspambots
3341/tcp 3000/tcp 4000/tcp...
[2020-08-12/09-05]284pkt,86pt.(tcp)
2020-09-06 05:07:27
222.186.173.201 attackbotsspam
2020-09-05T21:05:27.894268shield sshd\[9401\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.201  user=root
2020-09-05T21:05:29.695930shield sshd\[9401\]: Failed password for root from 222.186.173.201 port 61474 ssh2
2020-09-05T21:05:33.125061shield sshd\[9401\]: Failed password for root from 222.186.173.201 port 61474 ssh2
2020-09-05T21:05:36.773635shield sshd\[9401\]: Failed password for root from 222.186.173.201 port 61474 ssh2
2020-09-05T21:05:39.495830shield sshd\[9401\]: Failed password for root from 222.186.173.201 port 61474 ssh2
2020-09-06 05:05:56
45.143.223.106 attackbotsspam
[2020-09-05 17:13:14] NOTICE[1194][C-00000f3f] chan_sip.c: Call from '' (45.143.223.106:63929) to extension '00441904911024' rejected because extension not found in context 'public'.
[2020-09-05 17:13:14] SECURITY[1233] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-09-05T17:13:14.866-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="00441904911024",SessionID="0x7f2ddc0f4e48",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.223.106/63929",ACLName="no_extension_match"
[2020-09-05 17:13:47] NOTICE[1194][C-00000f41] chan_sip.c: Call from '' (45.143.223.106:49698) to extension '011441904911024' rejected because extension not found in context 'public'.
[2020-09-05 17:13:47] SECURITY[1233] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-09-05T17:13:47.677-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="011441904911024",SessionID="0x7f2ddc1b7848",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP
...
2020-09-06 05:22:48
45.225.110.227 attackbots
Automatic report - Port Scan Attack
2020-09-06 05:09:24
140.246.65.111 attackbots
RDP brute force attack detected by fail2ban
2020-09-06 05:05:31
51.83.98.104 attackspambots
Sep  5 18:08:54 vps-51d81928 sshd[237468]: Failed password for invalid user ki from 51.83.98.104 port 48650 ssh2
Sep  5 18:12:56 vps-51d81928 sshd[237498]: Invalid user lcc from 51.83.98.104 port 55266
Sep  5 18:12:56 vps-51d81928 sshd[237498]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.98.104 
Sep  5 18:12:56 vps-51d81928 sshd[237498]: Invalid user lcc from 51.83.98.104 port 55266
Sep  5 18:12:58 vps-51d81928 sshd[237498]: Failed password for invalid user lcc from 51.83.98.104 port 55266 ssh2
...
2020-09-06 05:06:44
106.54.123.84 attackbotsspam
2020-09-05T17:43:49.862101shield sshd\[22121\]: Invalid user emily from 106.54.123.84 port 36456
2020-09-05T17:43:49.871337shield sshd\[22121\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.123.84
2020-09-05T17:43:52.161300shield sshd\[22121\]: Failed password for invalid user emily from 106.54.123.84 port 36456 ssh2
2020-09-05T17:45:24.224832shield sshd\[22259\]: Invalid user zt from 106.54.123.84 port 52580
2020-09-05T17:45:24.234498shield sshd\[22259\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.123.84
2020-09-06 05:19:56
193.169.255.40 attackbotsspam
Sep  5 21:49:39 mail postfix/smtpd\[30679\]: warning: unknown\[193.169.255.40\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Sep  5 21:49:45 mail postfix/smtpd\[30680\]: warning: unknown\[193.169.255.40\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Sep  5 21:49:55 mail postfix/smtpd\[30679\]: warning: unknown\[193.169.255.40\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Sep  5 21:50:05 mail postfix/smtpd\[30680\]: warning: unknown\[193.169.255.40\]: SASL LOGIN authentication failed: Connection lost to authentication server\
2020-09-06 05:25:08
194.180.224.130 attack
 TCP (SYN) 194.180.224.130:59361 -> port 22, len 44
2020-09-06 05:39:53
128.199.204.26 attackspambots
2020-09-05T21:43:36.442208snf-827550 sshd[2103]: Failed password for invalid user cron from 128.199.204.26 port 50448 ssh2
2020-09-05T21:51:11.849855snf-827550 sshd[2138]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.204.26  user=root
2020-09-05T21:51:13.703555snf-827550 sshd[2138]: Failed password for root from 128.199.204.26 port 57048 ssh2
...
2020-09-06 05:15:24
116.228.53.227 attackspam
Sep  5 10:07:49 mockhub sshd[1854]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.228.53.227
Sep  5 10:07:52 mockhub sshd[1854]: Failed password for invalid user hek from 116.228.53.227 port 41328 ssh2
...
2020-09-06 05:41:21
193.25.121.249 attack
port scan and connect, tcp 80 (http)
2020-09-06 05:36:21
222.186.169.194 attack
Sep  5 23:28:14 vps647732 sshd[10069]: Failed password for root from 222.186.169.194 port 51894 ssh2
Sep  5 23:28:18 vps647732 sshd[10069]: Failed password for root from 222.186.169.194 port 51894 ssh2
...
2020-09-06 05:39:28
163.172.40.236 attackspambots
163.172.40.236 - - [06/Sep/2020:00:48:10 +0400] "POST /GponForm/diag_Form?style/ HTTP/1.1" 502 157 "-" "curl/7.3.2"
...
2020-09-06 05:17:17

Recently Reported IPs

190.2.131.175 193.187.118.104 104.245.144.56 196.18.32.132
45.57.163.199 45.57.163.197 168.245.143.179 172.96.92.175
23.236.243.183 103.125.28.175 23.236.243.185 107.175.204.213
123.22.32.202 157.55.39.116 45.229.54.102 107.6.168.242
193.32.249.167 85.25.185.248 37.134.148.147 164.68.122.236