Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
104.248.239.9 attackspam
invalid login attempt (test)
2020-06-11 07:28:50
104.248.239.206 attack
Hacking
2020-04-04 15:45:10
104.248.239.22 attackspam
2019-08-27T12:19:21.422240abusebot-6.cloudsearch.cf sshd\[27048\]: Invalid user cx from 104.248.239.22 port 59440
2019-08-27 20:49:39
104.248.239.22 attackspam
2019-08-24T22:11:00.423902stark.klein-stark.info sshd\[17365\]: Invalid user tang from 104.248.239.22 port 55650
2019-08-24T22:11:00.427965stark.klein-stark.info sshd\[17365\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.239.22
2019-08-24T22:11:02.379052stark.klein-stark.info sshd\[17365\]: Failed password for invalid user tang from 104.248.239.22 port 55650 ssh2
...
2019-08-25 05:03:53
104.248.239.22 attackbotsspam
Aug 22 05:53:29 plusreed sshd[22907]: Invalid user saturday from 104.248.239.22
...
2019-08-22 19:11:22
104.248.239.22 attackbotsspam
2019-08-17T02:51:13.134511stark.klein-stark.info sshd\[27119\]: Invalid user yara from 104.248.239.22 port 60930
2019-08-17T02:51:13.141463stark.klein-stark.info sshd\[27119\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.239.22
2019-08-17T02:51:14.838687stark.klein-stark.info sshd\[27119\]: Failed password for invalid user yara from 104.248.239.22 port 60930 ssh2
...
2019-08-17 10:06:21
104.248.239.22 attackspam
Aug 14 22:13:23 aat-srv002 sshd[1153]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.239.22
Aug 14 22:13:24 aat-srv002 sshd[1153]: Failed password for invalid user matt from 104.248.239.22 port 43220 ssh2
Aug 14 22:17:40 aat-srv002 sshd[1271]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.239.22
Aug 14 22:17:41 aat-srv002 sshd[1271]: Failed password for invalid user ctrls from 104.248.239.22 port 35004 ssh2
...
2019-08-15 11:26:55
104.248.239.22 attackspambots
Aug  8 00:42:17 spiceship sshd\[23983\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.239.22  user=root
...
2019-08-08 13:58:58
104.248.239.188 attackspambots
WordPress wp-login brute force :: 104.248.239.188 0.128 BYPASS [02/Aug/2019:02:12:36  1000] [censored_1] "POST /wp-login.php HTTP/1.1" 200 4039 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2019-08-02 01:04:35
104.248.239.22 attackspambots
Invalid user admin from 104.248.239.22 port 53176
2019-08-01 20:42:53
104.248.239.22 attackspam
Apr 19 10:08:36 ubuntu sshd[16564]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.239.22
Apr 19 10:08:39 ubuntu sshd[16564]: Failed password for invalid user cloud from 104.248.239.22 port 33768 ssh2
Apr 19 10:10:55 ubuntu sshd[17144]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.239.22
Apr 19 10:10:57 ubuntu sshd[17144]: Failed password for invalid user zt from 104.248.239.22 port 59436 ssh2
2019-07-31 18:23:03
104.248.239.22 attack
Invalid user hua from 104.248.239.22 port 39880
2019-07-28 08:26:11
104.248.239.22 attack
Jul 24 11:59:10 eventyay sshd[28714]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.239.22
Jul 24 11:59:12 eventyay sshd[28714]: Failed password for invalid user dev2 from 104.248.239.22 port 60944 ssh2
Jul 24 12:03:41 eventyay sshd[30007]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.239.22
...
2019-07-24 18:16:48
104.248.239.22 attack
Jul 23 23:40:19 eventyay sshd[4121]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.239.22
Jul 23 23:40:21 eventyay sshd[4121]: Failed password for invalid user luis from 104.248.239.22 port 34378 ssh2
Jul 23 23:44:42 eventyay sshd[5436]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.239.22
...
2019-07-24 05:51:47
104.248.239.22 attackbots
Jun 30 15:59:08 ns37 sshd[5388]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.239.22
Jun 30 15:59:08 ns37 sshd[5388]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.239.22
2019-06-30 22:50:00
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.248.239.241
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7941
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.248.239.241.		IN	A

;; AUTHORITY SECTION:
.			289	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022040201 1800 900 604800 86400

;; Query time: 85 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Apr 03 06:09:42 CST 2022
;; MSG SIZE  rcvd: 108
Host info
Host 241.239.248.104.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 241.239.248.104.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
221.127.9.100 attackbotsspam
Attempt to attack host OS, exploiting network vulnerabilities, on 27-09-2019 13:06:14.
2019-09-28 03:56:33
182.234.145.179 attackspambots
" "
2019-09-28 03:26:35
5.135.182.84 attackspambots
Sep 27 17:33:08 SilenceServices sshd[17311]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.135.182.84
Sep 27 17:33:10 SilenceServices sshd[17311]: Failed password for invalid user docker from 5.135.182.84 port 55650 ssh2
Sep 27 17:38:25 SilenceServices sshd[20608]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.135.182.84
2019-09-28 03:41:14
223.165.6.3 attackbots
Attempt to attack host OS, exploiting network vulnerabilities, on 27-09-2019 13:06:15.
2019-09-28 03:55:29
59.7.48.245 attackspam
2019-09-27T12:06:09.569307abusebot-6.cloudsearch.cf sshd\[23956\]: Invalid user misp from 59.7.48.245 port 33424
2019-09-28 04:04:21
54.36.126.112 attackbots
Sep 27 08:05:52 localhost kernel: [3323770.467179] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=54.36.126.112 DST=[mungedIP2] LEN=68 TOS=0x00 PREC=0x00 TTL=244 ID=33458 PROTO=UDP SPT=30120 DPT=111 LEN=48 
Sep 27 08:06:11 localhost kernel: [3323789.640502] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=54.36.126.112 DST=[mungedIP2] LEN=68 TOS=0x00 PREC=0x00 TTL=244 ID=37579 PROTO=UDP SPT=30120 DPT=111 LEN=48 
Sep 27 08:06:16 localhost kernel: [3323794.569282] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=54.36.126.112 DST=[mungedIP2] LEN=68 TOS=0x00 PREC=0x00 TTL=244 ID=38620 PROTO=UDP SPT=30120 DPT=111 LEN=48
2019-09-28 03:54:12
203.201.62.37 attackspambots
Attempt to attack host OS, exploiting network vulnerabilities, on 27-09-2019 13:06:10.
2019-09-28 04:02:20
183.129.150.2 attackspambots
Invalid user gk from 183.129.150.2 port 41693
2019-09-28 03:37:59
77.247.110.127 attackbots
*Port Scan* detected from 77.247.110.127 (NL/Netherlands/-). 4 hits in the last 15 seconds
2019-09-28 03:30:01
37.59.8.84 attackbots
WordPress wp-login brute force :: 37.59.8.84 0.140 BYPASS [27/Sep/2019:22:06:32  1000] [censored_1] "POST /wp-login.php HTTP/1.1" 200 3972 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2019-09-28 03:39:49
192.241.175.250 attack
$f2bV_matches_ltvn
2019-09-28 03:37:36
223.223.131.222 attack
Attempt to attack host OS, exploiting network vulnerabilities, on 27-09-2019 13:06:15.
2019-09-28 03:55:04
114.32.153.15 attackspam
Sep 27 21:28:59 dev0-dcfr-rnet sshd[16488]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.32.153.15
Sep 27 21:29:01 dev0-dcfr-rnet sshd[16488]: Failed password for invalid user csserver from 114.32.153.15 port 34188 ssh2
Sep 27 21:42:27 dev0-dcfr-rnet sshd[16555]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.32.153.15
2019-09-28 03:43:38
51.77.157.78 attackspam
Sep 27 17:33:50 heissa sshd\[20949\]: Invalid user ftptest from 51.77.157.78 port 46342
Sep 27 17:33:50 heissa sshd\[20949\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.ip-51-77-157.eu
Sep 27 17:33:53 heissa sshd\[20949\]: Failed password for invalid user ftptest from 51.77.157.78 port 46342 ssh2
Sep 27 17:37:38 heissa sshd\[21360\]: Invalid user user from 51.77.157.78 port 58646
Sep 27 17:37:38 heissa sshd\[21360\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.ip-51-77-157.eu
2019-09-28 03:54:31
103.45.154.215 attackspambots
Sep 27 08:23:37 xb3 sshd[19917]: Failed password for invalid user nelio from 103.45.154.215 port 33834 ssh2
Sep 27 08:23:38 xb3 sshd[19917]: Received disconnect from 103.45.154.215: 11: Bye Bye [preauth]
Sep 27 08:48:16 xb3 sshd[23795]: Failed password for invalid user tg from 103.45.154.215 port 49696 ssh2
Sep 27 08:48:17 xb3 sshd[23795]: Received disconnect from 103.45.154.215: 11: Bye Bye [preauth]
Sep 27 08:52:24 xb3 sshd[22191]: Failed password for invalid user nate from 103.45.154.215 port 52942 ssh2
Sep 27 08:52:25 xb3 sshd[22191]: Received disconnect from 103.45.154.215: 11: Bye Bye [preauth]
Sep 27 09:00:41 xb3 sshd[18607]: Failed password for invalid user mmoseley from 103.45.154.215 port 59432 ssh2
Sep 27 09:00:42 xb3 sshd[18607]: Received disconnect from 103.45.154.215: 11: Bye Bye [preauth]
Sep 27 09:04:56 xb3 sshd[28945]: Failed password for invalid user so360 from 103.45.154.215 port 34442 ssh2
Sep 27 09:04:56 xb3 sshd[28945]: Received disconnect from 103........
-------------------------------
2019-09-28 03:53:39

Recently Reported IPs

104.248.239.199 104.248.240.232 104.248.247.140 104.248.247.240
104.248.25.17 104.248.30.163 104.248.32.221 104.248.36.150
104.248.36.220 104.248.40.75 104.248.53.181 104.248.57.173
104.248.58.15 104.248.83.9 104.248.87.242 104.248.9.225
104.248.90.125 104.248.91.49 104.248.92.190 106.1.104.119