Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Frankfurt am Main

Region: Hessen

Country: Germany

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
104.248.251.166 attackspambots
Nov 24 15:44:08 sanyalnet-cloud-vps3 sshd[4893]: Connection from 104.248.251.166 port 55676 on 45.62.248.66 port 22
Nov 24 15:44:08 sanyalnet-cloud-vps3 sshd[4893]: Invalid user clela from 104.248.251.166
Nov 24 15:44:08 sanyalnet-cloud-vps3 sshd[4893]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.251.166 
Nov 24 15:44:10 sanyalnet-cloud-vps3 sshd[4893]: Failed password for invalid user clela from 104.248.251.166 port 55676 ssh2
Nov 24 15:44:10 sanyalnet-cloud-vps3 sshd[4893]: Received disconnect from 104.248.251.166: 11: Bye Bye [preauth]
Nov 24 16:27:30 sanyalnet-cloud-vps3 sshd[5821]: Connection from 104.248.251.166 port 47136 on 45.62.248.66 port 22
Nov 24 16:27:31 sanyalnet-cloud-vps3 sshd[5821]: Invalid user ubnt from 104.248.251.166
Nov 24 16:27:31 sanyalnet-cloud-vps3 sshd[5821]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.251.166 
Nov 24 16:27:33 sanyalnet-clo........
-------------------------------
2019-11-25 05:03:52
Whois info:
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#


NetRange:       104.248.0.0 - 104.248.255.255
CIDR:           104.248.0.0/16
NetName:        DIGITALOCEAN-104-248-0-0
NetHandle:      NET-104-248-0-0-1
Parent:         NET104 (NET-104-0-0-0-0)
NetType:        Direct Allocation
OriginAS:       
Organization:   DigitalOcean, LLC (DO-13)
RegDate:        2018-08-06
Updated:        2020-04-03
Comment:        Routing and Peering Policy can be found at https://www.as14061.net
Comment:        
Comment:        Please submit abuse reports at https://www.digitalocean.com/company/contact/#abuse
Ref:            https://rdap.arin.net/registry/ip/104.248.0.0



OrgName:        DigitalOcean, LLC
OrgId:          DO-13
Address:        105 Edgeview Drive, Suite 425
City:           Broomfield
StateProv:      CO
PostalCode:     80021
Country:        US
RegDate:        2012-05-14
Updated:        2025-04-11
Ref:            https://rdap.arin.net/registry/entity/DO-13


OrgTechHandle: NOC32014-ARIN
OrgTechName:   Network Operations Center
OrgTechPhone:  +1-646-827-4366 
OrgTechEmail:  noc@digitalocean.com
OrgTechRef:    https://rdap.arin.net/registry/entity/NOC32014-ARIN

OrgAbuseHandle: DIGIT19-ARIN
OrgAbuseName:   DigitalOcean Abuse
OrgAbusePhone:  +1-646-827-4366 
OrgAbuseEmail:  abuse@digitalocean.com
OrgAbuseRef:    https://rdap.arin.net/registry/entity/DIGIT19-ARIN

OrgNOCHandle: NOC32014-ARIN
OrgNOCName:   Network Operations Center
OrgNOCPhone:  +1-646-827-4366 
OrgNOCEmail:  noc@digitalocean.com
OrgNOCRef:    https://rdap.arin.net/registry/entity/NOC32014-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.248.251.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1182
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.248.251.138.		IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026102103 1800 900 604800 86400

;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Oct 22 12:01:04 CST 2026
;; MSG SIZE  rcvd: 108
Host info
Host 138.251.248.104.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 138.251.248.104.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
111.72.194.9 attackspam
Jul 19 08:16:28 srv01 postfix/smtpd\[13634\]: warning: unknown\[111.72.194.9\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul 19 08:23:33 srv01 postfix/smtpd\[13634\]: warning: unknown\[111.72.194.9\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul 19 08:23:43 srv01 postfix/smtpd\[13634\]: warning: unknown\[111.72.194.9\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul 19 08:23:59 srv01 postfix/smtpd\[13634\]: warning: unknown\[111.72.194.9\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul 19 08:24:18 srv01 postfix/smtpd\[13634\]: warning: unknown\[111.72.194.9\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2020-07-19 14:49:06
49.88.112.115 attackbotsspam
Jul 19 13:33:42 webhost01 sshd[8909]: Failed password for root from 49.88.112.115 port 13858 ssh2
...
2020-07-19 14:43:47
194.61.24.177 attackbots
Jul 19 06:31:49 XXXXXX sshd[7464]: Invalid user 0 from 194.61.24.177 port 15553
2020-07-19 15:06:23
106.75.231.107 attackbotsspam
Invalid user robin from 106.75.231.107 port 48982
2020-07-19 14:50:41
165.22.56.115 attackbotsspam
Invalid user surya from 165.22.56.115 port 33824
2020-07-19 15:01:51
150.109.104.153 attackspambots
Invalid user pankaj from 150.109.104.153 port 57534
2020-07-19 14:36:51
185.221.134.234 attackspam
 TCP (SYN) 185.221.134.234:52970 -> port 81, len 40
2020-07-19 14:51:10
102.252.66.212 attackspam
Attempts to probe for or exploit a Drupal 7.72 site on url: /wp-login.php. Reported by the module https://www.drupal.org/project/abuseipdb.
2020-07-19 15:09:44
183.61.109.23 attackspambots
Invalid user emv from 183.61.109.23 port 54355
2020-07-19 14:35:10
203.3.84.204 attackspambots
 TCP (SYN) 203.3.84.204:51248 -> port 13460, len 44
2020-07-19 14:45:26
148.153.126.126 attackbots
Invalid user indra from 148.153.126.126 port 36800
2020-07-19 15:08:41
108.62.103.209 attack
Host Scan
2020-07-19 14:48:17
189.110.194.194 attackspambots
Automatic report - Banned IP Access
2020-07-19 14:45:51
222.186.175.182 attackspam
Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-07-19T06:55:36Z and 2020-07-19T06:55:40Z
2020-07-19 15:00:11
60.53.168.38 attackspambots
Hit honeypot r.
2020-07-19 15:09:18

Recently Reported IPs

104.28.154.2 2606:4700:10::6816:2514 31.10.155.199 182.16.82.234
116.130.224.205 40.80.200.27 20.80.87.34 202.79.26.27
16.5.0.194 16.5.0.195 34.77.226.108 34.77.186.88
182.138.158.12 209.38.101.46 178.62.202.237 34.52.233.41
149.56.150.187 34.62.216.114 157.230.125.150 20.65.217.127