Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: North Bergen

Region: New Jersey

Country: United States

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: DigitalOcean, LLC

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspam
2019-08-27T12:19:21.422240abusebot-6.cloudsearch.cf sshd\[27048\]: Invalid user cx from 104.248.239.22 port 59440
2019-08-27 20:49:39
attackspam
2019-08-24T22:11:00.423902stark.klein-stark.info sshd\[17365\]: Invalid user tang from 104.248.239.22 port 55650
2019-08-24T22:11:00.427965stark.klein-stark.info sshd\[17365\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.239.22
2019-08-24T22:11:02.379052stark.klein-stark.info sshd\[17365\]: Failed password for invalid user tang from 104.248.239.22 port 55650 ssh2
...
2019-08-25 05:03:53
attackbotsspam
Aug 22 05:53:29 plusreed sshd[22907]: Invalid user saturday from 104.248.239.22
...
2019-08-22 19:11:22
attackbotsspam
2019-08-17T02:51:13.134511stark.klein-stark.info sshd\[27119\]: Invalid user yara from 104.248.239.22 port 60930
2019-08-17T02:51:13.141463stark.klein-stark.info sshd\[27119\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.239.22
2019-08-17T02:51:14.838687stark.klein-stark.info sshd\[27119\]: Failed password for invalid user yara from 104.248.239.22 port 60930 ssh2
...
2019-08-17 10:06:21
attackspam
Aug 14 22:13:23 aat-srv002 sshd[1153]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.239.22
Aug 14 22:13:24 aat-srv002 sshd[1153]: Failed password for invalid user matt from 104.248.239.22 port 43220 ssh2
Aug 14 22:17:40 aat-srv002 sshd[1271]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.239.22
Aug 14 22:17:41 aat-srv002 sshd[1271]: Failed password for invalid user ctrls from 104.248.239.22 port 35004 ssh2
...
2019-08-15 11:26:55
attackspambots
Aug  8 00:42:17 spiceship sshd\[23983\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.239.22  user=root
...
2019-08-08 13:58:58
attackspambots
Invalid user admin from 104.248.239.22 port 53176
2019-08-01 20:42:53
attackspam
Apr 19 10:08:36 ubuntu sshd[16564]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.239.22
Apr 19 10:08:39 ubuntu sshd[16564]: Failed password for invalid user cloud from 104.248.239.22 port 33768 ssh2
Apr 19 10:10:55 ubuntu sshd[17144]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.239.22
Apr 19 10:10:57 ubuntu sshd[17144]: Failed password for invalid user zt from 104.248.239.22 port 59436 ssh2
2019-07-31 18:23:03
attack
Invalid user hua from 104.248.239.22 port 39880
2019-07-28 08:26:11
attack
Jul 24 11:59:10 eventyay sshd[28714]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.239.22
Jul 24 11:59:12 eventyay sshd[28714]: Failed password for invalid user dev2 from 104.248.239.22 port 60944 ssh2
Jul 24 12:03:41 eventyay sshd[30007]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.239.22
...
2019-07-24 18:16:48
attack
Jul 23 23:40:19 eventyay sshd[4121]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.239.22
Jul 23 23:40:21 eventyay sshd[4121]: Failed password for invalid user luis from 104.248.239.22 port 34378 ssh2
Jul 23 23:44:42 eventyay sshd[5436]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.239.22
...
2019-07-24 05:51:47
attackbots
Jun 30 15:59:08 ns37 sshd[5388]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.239.22
Jun 30 15:59:08 ns37 sshd[5388]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.239.22
2019-06-30 22:50:00
Comments on same subnet:
IP Type Details Datetime
104.248.239.9 attackspam
invalid login attempt (test)
2020-06-11 07:28:50
104.248.239.206 attack
Hacking
2020-04-04 15:45:10
104.248.239.188 attackspambots
WordPress wp-login brute force :: 104.248.239.188 0.128 BYPASS [02/Aug/2019:02:12:36  1000] [censored_1] "POST /wp-login.php HTTP/1.1" 200 4039 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2019-08-02 01:04:35
Whois info:
b
Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.248.239.22
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10696
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.248.239.22.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019040700 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Sun Apr 07 17:56:20 +08 2019
;; MSG SIZE  rcvd: 118

Host info
Host 22.239.248.104.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 22.239.248.104.in-addr.arpa: NXDOMAIN

Related IP info:
Related comments:
IP Type Details Datetime
222.122.179.208 attackbotsspam
...
2020-03-11 12:48:51
167.71.223.51 attack
SSH invalid-user multiple login attempts
2020-03-11 12:42:24
222.186.180.142 attackspam
11.03.2020 05:08:34 SSH access blocked by firewall
2020-03-11 13:10:21
159.192.166.108 attack
Mar 11 02:13:52 *** sshd[21340]: Did not receive identification string from 159.192.166.108
2020-03-11 12:57:18
156.96.148.210 attackbots
Mar 11 07:25:56 gw1 sshd[19523]: Failed password for root from 156.96.148.210 port 46218 ssh2
...
2020-03-11 12:31:38
182.16.178.178 attackbotsspam
proto=tcp  .  spt=41357  .  dpt=25  .     Found on   Blocklist de       (64)
2020-03-11 13:05:35
116.109.110.22 attackbotsspam
" "
2020-03-11 12:25:56
103.78.180.253 attackbotsspam
Unauthorized IMAP connection attempt
2020-03-11 12:28:18
223.206.130.141 attackbotsspam
Mar 11 03:14:01 *host* sshd\[30017\]: Invalid user admin1 from 223.206.130.141 port 64367
2020-03-11 12:45:32
39.104.169.255 attackbotsspam
Website administration hacking try
2020-03-11 12:44:58
31.168.182.123 attack
Automatic report - Port Scan Attack
2020-03-11 12:49:17
51.15.41.165 attack
Brute-force attempt banned
2020-03-11 12:44:32
54.161.199.5 attackbotsspam
Mar 11 03:48:00 hosting180 sshd[19579]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ec2-54-161-199-5.compute-1.amazonaws.com  user=root
Mar 11 03:48:02 hosting180 sshd[19579]: Failed password for root from 54.161.199.5 port 60970 ssh2
...
2020-03-11 13:02:23
122.152.212.31 attackspam
Mar 11 04:22:45 icinga sshd[421]: Failed password for root from 122.152.212.31 port 58286 ssh2
Mar 11 04:26:11 icinga sshd[3963]: Failed password for root from 122.152.212.31 port 37584 ssh2
...
2020-03-11 12:54:39
121.61.152.157 attack
Unauthorized connection attempt detected from IP address 121.61.152.157 to port 23 [T]
2020-03-11 13:06:54

Recently Reported IPs

212.170.50.203 112.78.1.123 186.103.184.227 104.248.188.192
90.189.117.121 134.175.80.27 104.248.3.39 220.233.119.247
106.12.85.172 104.248.174.126 112.78.144.58 65.184.200.184
179.111.154.18 58.87.108.112 201.149.10.165 39.72.120.123
104.248.121.67 110.87.103.59 190.26.134.230 181.65.187.157