Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
104.248.240.174 attackproxy
Fraud connect
2024-05-14 20:51:04
104.248.205.67 spamattack
Phishing
2022-01-28 16:41:36
104.248.246.41 attack
fail2ban detected brute force on sshd
2020-10-12 07:24:44
104.248.205.67 attackspambots
Oct 11 20:16:41 cho sshd[449424]: Failed password for invalid user mugihiko from 104.248.205.67 port 47586 ssh2
Oct 11 20:19:53 cho sshd[449593]: Invalid user chick from 104.248.205.67 port 51910
Oct 11 20:19:53 cho sshd[449593]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.205.67 
Oct 11 20:19:53 cho sshd[449593]: Invalid user chick from 104.248.205.67 port 51910
Oct 11 20:19:55 cho sshd[449593]: Failed password for invalid user chick from 104.248.205.67 port 51910 ssh2
...
2020-10-12 02:35:14
104.248.246.41 attackbots
Invalid user test from 104.248.246.41 port 55920
2020-10-11 23:39:01
104.248.205.67 attackbots
TCP port : 3918
2020-10-11 18:26:20
104.248.246.41 attackbotsspam
(sshd) Failed SSH login from 104.248.246.41 (DE/Germany/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 11 00:30:27 server4 sshd[7206]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.246.41  user=root
Oct 11 00:30:29 server4 sshd[7206]: Failed password for root from 104.248.246.41 port 44390 ssh2
Oct 11 00:39:51 server4 sshd[12389]: Invalid user prueba from 104.248.246.41
Oct 11 00:39:52 server4 sshd[12389]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.246.41 
Oct 11 00:39:53 server4 sshd[12389]: Failed password for invalid user prueba from 104.248.246.41 port 54958 ssh2
2020-10-11 15:38:18
104.248.246.41 attack
SSH brutforce
2020-10-11 08:55:57
104.248.246.8 attackspam
Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "root" at 2020-10-07T19:04:42Z
2020-10-08 05:35:17
104.248.246.8 attack
Oct  6 06:01:26 ns4 sshd[27242]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.246.8  user=r.r
Oct  6 06:01:29 ns4 sshd[27242]: Failed password for r.r from 104.248.246.8 port 46506 ssh2
Oct  6 06:10:46 ns4 sshd[28508]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.246.8  user=r.r
Oct  6 06:10:48 ns4 sshd[28508]: Failed password for r.r from 104.248.246.8 port 33954 ssh2
Oct  6 06:14:29 ns4 sshd[28931]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.246.8  user=r.r
Oct  6 06:14:31 ns4 sshd[28931]: Failed password for r.r from 104.248.246.8 port 44924 ssh2
Oct  6 06:18:09 ns4 sshd[29265]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.246.8  user=r.r
Oct  6 06:18:11 ns4 sshd[29265]: Failed password for r.r from 104.248.246.8 port 55894 ssh2
Oct  6 06:22:32 ns4 sshd[29859]: pam........
-------------------------------
2020-10-07 21:59:43
104.248.246.8 attack
Oct  6 06:01:26 ns4 sshd[27242]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.246.8  user=r.r
Oct  6 06:01:29 ns4 sshd[27242]: Failed password for r.r from 104.248.246.8 port 46506 ssh2
Oct  6 06:10:46 ns4 sshd[28508]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.246.8  user=r.r
Oct  6 06:10:48 ns4 sshd[28508]: Failed password for r.r from 104.248.246.8 port 33954 ssh2
Oct  6 06:14:29 ns4 sshd[28931]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.246.8  user=r.r
Oct  6 06:14:31 ns4 sshd[28931]: Failed password for r.r from 104.248.246.8 port 44924 ssh2
Oct  6 06:18:09 ns4 sshd[29265]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.246.8  user=r.r
Oct  6 06:18:11 ns4 sshd[29265]: Failed password for r.r from 104.248.246.8 port 55894 ssh2
Oct  6 06:22:32 ns4 sshd[29859]: pam........
-------------------------------
2020-10-07 13:49:05
104.248.230.153 attackspam
(sshd) Failed SSH login from 104.248.230.153 (US/United States/-): 5 in the last 3600 secs
2020-10-07 05:24:27
104.248.230.153 attackspambots
Oct  6 15:02:03 xeon sshd[32516]: Failed password for root from 104.248.230.153 port 58082 ssh2
2020-10-06 21:33:55
104.248.230.153 attack
malicious Brute-Force reported by https://www.patrick-binder.de
...
2020-10-06 13:15:39
104.248.231.200 attack
Oct  4 20:50:32 electroncash sshd[3649]: Failed password for root from 104.248.231.200 port 34936 ssh2
Oct  4 20:51:37 electroncash sshd[4070]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.231.200  user=root
Oct  4 20:51:38 electroncash sshd[4070]: Failed password for root from 104.248.231.200 port 54398 ssh2
Oct  4 20:52:42 electroncash sshd[4489]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.231.200  user=root
Oct  4 20:52:45 electroncash sshd[4489]: Failed password for root from 104.248.231.200 port 45634 ssh2
...
2020-10-05 05:43:15
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.248.2.80
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7383
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.248.2.80.			IN	A

;; AUTHORITY SECTION:
.			199	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022033100 1800 900 604800 86400

;; Query time: 25 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Mar 31 17:12:08 CST 2022
;; MSG SIZE  rcvd: 105
Host info
Host 80.2.248.104.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 80.2.248.104.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
46.245.21.130 attack
W 31101,/var/log/nginx/access.log,-,-
2020-08-03 23:21:53
106.13.136.8 attack
Aug  3 14:15:13 roki-contabo sshd\[1008\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.136.8  user=root
Aug  3 14:15:14 roki-contabo sshd\[1008\]: Failed password for root from 106.13.136.8 port 60272 ssh2
Aug  3 14:22:19 roki-contabo sshd\[1253\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.136.8  user=root
Aug  3 14:22:21 roki-contabo sshd\[1253\]: Failed password for root from 106.13.136.8 port 45562 ssh2
Aug  3 14:25:45 roki-contabo sshd\[1405\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.136.8  user=root
...
2020-08-03 22:59:22
190.89.117.182 attack
xmlrpc attack
2020-08-03 23:05:40
216.218.206.88 attackspambots
389/tcp 3389/tcp 1883/tcp...
[2020-06-04/08-03]31pkt,14pt.(tcp),1pt.(udp)
2020-08-03 22:54:18
39.104.14.232 attack
Lines containing failures of 39.104.14.232 (max 1000)
Aug  3 12:20:10 UTC__SANYALnet-Labs__cac12 sshd[12812]: Connection from 39.104.14.232 port 56584 on 64.137.176.96 port 22
Aug  3 12:20:12 UTC__SANYALnet-Labs__cac12 sshd[12812]: User r.r from 39.104.14.232 not allowed because not listed in AllowUsers
Aug  3 12:20:12 UTC__SANYALnet-Labs__cac12 sshd[12812]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=39.104.14.232  user=r.r
Aug  3 12:20:14 UTC__SANYALnet-Labs__cac12 sshd[12812]: Failed password for invalid user r.r from 39.104.14.232 port 56584 ssh2
Aug  3 12:20:14 UTC__SANYALnet-Labs__cac12 sshd[12812]: Received disconnect from 39.104.14.232 port 56584:11: Bye Bye [preauth]
Aug  3 12:20:14 UTC__SANYALnet-Labs__cac12 sshd[12812]: Disconnected from 39.104.14.232 port 56584 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=39.104.14.232
2020-08-03 22:51:22
49.144.206.246 attackspam
Sniffing for wp-login
2020-08-03 23:00:45
66.249.64.147 attack
Automatic report - Banned IP Access
2020-08-03 22:57:04
163.179.126.39 attackspam
Aug  3 17:04:03 abendstille sshd\[2696\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.179.126.39  user=root
Aug  3 17:04:05 abendstille sshd\[2696\]: Failed password for root from 163.179.126.39 port 57340 ssh2
Aug  3 17:07:09 abendstille sshd\[5788\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.179.126.39  user=root
Aug  3 17:07:11 abendstille sshd\[5788\]: Failed password for root from 163.179.126.39 port 16164 ssh2
Aug  3 17:10:21 abendstille sshd\[8813\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.179.126.39  user=root
...
2020-08-03 23:20:14
193.112.191.228 attackbotsspam
Banned for a week because repeated abuses, for example SSH, but not only
2020-08-03 22:45:14
120.92.150.145 attackbots
Aug  3 14:25:28 fhem-rasp sshd[30882]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.92.150.145  user=root
Aug  3 14:25:29 fhem-rasp sshd[30882]: Failed password for root from 120.92.150.145 port 31642 ssh2
...
2020-08-03 23:10:38
103.123.219.1 attack
Lines containing failures of 103.123.219.1
Aug  3 10:11:25 shared05 sshd[21339]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.123.219.1  user=r.r
Aug  3 10:11:27 shared05 sshd[21339]: Failed password for r.r from 103.123.219.1 port 39054 ssh2
Aug  3 10:11:27 shared05 sshd[21339]: Received disconnect from 103.123.219.1 port 39054:11: Bye Bye [preauth]
Aug  3 10:11:27 shared05 sshd[21339]: Disconnected from authenticating user r.r 103.123.219.1 port 39054 [preauth]
Aug  3 10:19:13 shared05 sshd[23822]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.123.219.1  user=r.r
Aug  3 10:19:15 shared05 sshd[23822]: Failed password for r.r from 103.123.219.1 port 55244 ssh2
Aug  3 10:19:15 shared05 sshd[23822]: Received disconnect from 103.123.219.1 port 55244:11: Bye Bye [preauth]
Aug  3 10:19:15 shared05 sshd[23822]: Disconnected from authenticating user r.r 103.123.219.1 port 55244 [preauth........
------------------------------
2020-08-03 23:20:46
109.232.224.53 attack
Lines containing failures of 109.232.224.53
Aug  3 00:43:26 shared01 sshd[5560]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.232.224.53  user=r.r
Aug  3 00:43:28 shared01 sshd[5560]: Failed password for r.r from 109.232.224.53 port 58722 ssh2
Aug  3 00:43:28 shared01 sshd[5560]: Received disconnect from 109.232.224.53 port 58722:11: Bye Bye [preauth]
Aug  3 00:43:28 shared01 sshd[5560]: Disconnected from authenticating user r.r 109.232.224.53 port 58722 [preauth]
Aug  3 00:53:41 shared01 sshd[9366]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.232.224.53  user=r.r
Aug  3 00:53:43 shared01 sshd[9366]: Failed password for r.r from 109.232.224.53 port 35322 ssh2
Aug  3 00:53:43 shared01 sshd[9366]: Received disconnect from 109.232.224.53 port 35322:11: Bye Bye [preauth]
Aug  3 00:53:43 shared01 sshd[9366]: Disconnected from authenticating user r.r 109.232.224.53 port 35322 [preaut........
------------------------------
2020-08-03 23:22:33
88.244.83.25 attack
Aug  3 11:39:40 zimbra sshd[30396]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.244.83.25  user=r.r
Aug  3 11:39:42 zimbra sshd[30396]: Failed password for r.r from 88.244.83.25 port 45734 ssh2
Aug  3 11:39:43 zimbra sshd[30396]: Received disconnect from 88.244.83.25 port 45734:11: Bye Bye [preauth]
Aug  3 11:39:43 zimbra sshd[30396]: Disconnected from 88.244.83.25 port 45734 [preauth]
Aug  3 12:02:52 zimbra sshd[16102]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.244.83.25  user=proxy
Aug  3 12:02:54 zimbra sshd[16102]: Failed password for proxy from 88.244.83.25 port 52078 ssh2
Aug  3 12:02:55 zimbra sshd[16102]: Received disconnect from 88.244.83.25 port 52078:11: Bye Bye [preauth]
Aug  3 12:02:55 zimbra sshd[16102]: Disconnected from 88.244.83.25 port 52078 [preauth]
Aug  3 12:08:38 zimbra sshd[20541]: Invalid user 1234qw from 88.244.83.25
Aug  3 12:08:38 zimbra sshd[20541]........
-------------------------------
2020-08-03 23:19:06
198.38.84.254 attackbotsspam
198.38.84.254 - - [03/Aug/2020:15:51:40 +0200] "POST /xmlrpc.php HTTP/1.1" 403 146 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
198.38.84.254 - - [03/Aug/2020:16:06:20 +0200] "POST /xmlrpc.php HTTP/1.1" 403 146 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-08-03 22:41:27
150.136.116.126 attack
Aug  3 03:15:54 web1 sshd\[13325\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.136.116.126  user=root
Aug  3 03:15:56 web1 sshd\[13325\]: Failed password for root from 150.136.116.126 port 39436 ssh2
Aug  3 03:19:44 web1 sshd\[13672\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.136.116.126  user=root
Aug  3 03:19:47 web1 sshd\[13672\]: Failed password for root from 150.136.116.126 port 50336 ssh2
Aug  3 03:23:41 web1 sshd\[14017\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.136.116.126  user=root
2020-08-03 22:51:43

Recently Reported IPs

104.248.196.99 104.248.20.130 104.248.200.217 104.252.179.8
104.252.196.7 104.252.220.240 104.252.40.199 104.253.232.186
104.253.55.2 104.253.85.6 104.254.181.96 104.254.183.13
104.254.183.35 104.254.183.9 104.254.24.18 104.254.244.157
104.254.245.69 104.254.246.125 104.254.246.245 104.255.171.48