Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Germany

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
Dec 11 07:28:44 herz-der-gamer sshd[26689]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.42.94  user=vmail
Dec 11 07:28:46 herz-der-gamer sshd[26689]: Failed password for vmail from 104.248.42.94 port 56192 ssh2
...
2019-12-11 16:53:11
attackspambots
Dec  9 05:56:06 v22018076622670303 sshd\[22485\]: Invalid user mobile from 104.248.42.94 port 52208
Dec  9 05:56:06 v22018076622670303 sshd\[22485\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.42.94
Dec  9 05:56:09 v22018076622670303 sshd\[22485\]: Failed password for invalid user mobile from 104.248.42.94 port 52208 ssh2
...
2019-12-09 13:56:28
attackspam
2019-11-22T22:55:50.489874abusebot-4.cloudsearch.cf sshd\[5583\]: Invalid user admin from 104.248.42.94 port 39292
2019-11-23 07:32:31
attack
Nov 17 23:21:47 icinga sshd[4842]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.42.94 
Nov 17 23:21:49 icinga sshd[4842]: Failed password for invalid user xbmc from 104.248.42.94 port 49854 ssh2
Nov 17 23:42:58 icinga sshd[24675]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.42.94 
...
2019-11-18 07:49:25
Comments on same subnet:
IP Type Details Datetime
104.248.42.231 attackbotsspam
Wed 17 01:29:19 60001/tcp
2019-07-17 20:31:05
104.248.42.231 attackspambots
NAME : DO-13 CIDR : 104.248.0.0/16 SYN Flood DDoS Attack USA - New York - block certain countries :) IP: 104.248.42.231  Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN  - data recovery https://help-dysk.pl
2019-07-12 01:08:45
104.248.42.231 attackspambots
5500/tcp 5500/tcp
[2019-07-08/10]2pkt
2019-07-10 21:10:55
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.248.42.94
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14633
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.248.42.94.			IN	A

;; AUTHORITY SECTION:
.			598	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019111701 1800 900 604800 86400

;; Query time: 127 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Nov 18 07:49:21 CST 2019
;; MSG SIZE  rcvd: 117
Host info
Host 94.42.248.104.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 94.42.248.104.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
218.92.0.250 attackspambots
Oct  8 20:43:43 scw-6657dc sshd[29414]: Failed password for root from 218.92.0.250 port 23411 ssh2
Oct  8 20:43:43 scw-6657dc sshd[29414]: Failed password for root from 218.92.0.250 port 23411 ssh2
Oct  8 20:43:47 scw-6657dc sshd[29414]: Failed password for root from 218.92.0.250 port 23411 ssh2
...
2020-10-09 04:46:34
103.108.87.161 attack
Fail2Ban
2020-10-09 04:51:54
62.99.90.10 attackspambots
Oct  8 13:08:04 jumpserver sshd[581751]: Failed password for root from 62.99.90.10 port 46268 ssh2
Oct  8 13:11:48 jumpserver sshd[581790]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.99.90.10  user=root
Oct  8 13:11:50 jumpserver sshd[581790]: Failed password for root from 62.99.90.10 port 50906 ssh2
...
2020-10-09 04:31:58
132.232.1.155 attackspambots
Oct  8 10:48:56 rancher-0 sshd[539150]: Invalid user @QW from 132.232.1.155 port 33254
Oct  8 10:48:59 rancher-0 sshd[539150]: Failed password for invalid user @QW from 132.232.1.155 port 33254 ssh2
...
2020-10-09 04:17:01
128.199.122.121 attack
Oct  8 16:36:46 haigwepa sshd[4226]: Failed password for root from 128.199.122.121 port 52552 ssh2
...
2020-10-09 04:34:43
161.97.75.168 attackspam
bruteforce, ssh, scan port
2020-10-09 04:20:39
182.61.169.153 attackbots
Oct  8 19:31:43 l03 sshd[15753]: Invalid user postgresqlpostgresql from 182.61.169.153 port 39202
...
2020-10-09 04:19:15
218.92.0.249 attackbots
Oct  8 22:20:20 server sshd[12854]: Failed none for root from 218.92.0.249 port 27732 ssh2
Oct  8 22:20:22 server sshd[12854]: Failed password for root from 218.92.0.249 port 27732 ssh2
Oct  8 22:20:25 server sshd[12854]: Failed password for root from 218.92.0.249 port 27732 ssh2
2020-10-09 04:23:47
46.146.136.8 attack
Oct  9 01:44:22 dhoomketu sshd[3674441]: Failed password for root from 46.146.136.8 port 41604 ssh2
Oct  9 01:45:34 dhoomketu sshd[3674493]: Invalid user support1 from 46.146.136.8 port 59774
Oct  9 01:45:34 dhoomketu sshd[3674493]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.146.136.8 
Oct  9 01:45:34 dhoomketu sshd[3674493]: Invalid user support1 from 46.146.136.8 port 59774
Oct  9 01:45:36 dhoomketu sshd[3674493]: Failed password for invalid user support1 from 46.146.136.8 port 59774 ssh2
...
2020-10-09 04:42:40
211.193.253.14 attackspam
Icarus honeypot on github
2020-10-09 04:50:40
171.245.235.43 attack
SSH login attempts.
2020-10-09 04:20:09
113.161.69.158 attackbots
SSH login attempts.
2020-10-09 04:40:12
5.183.255.44 attackbotsspam
C1,Magento Bruteforce Login Attack POST /index.php/admin/
2020-10-09 04:17:54
106.12.108.170 attackspam
firewall-block, port(s): 3838/tcp
2020-10-09 04:25:26
171.246.63.231 attackspam
 TCP (SYN) 171.246.63.231:63240 -> port 23, len 44
2020-10-09 04:32:17

Recently Reported IPs

197.39.91.226 145.87.18.92 17.43.193.73 228.93.157.67
229.213.162.214 114.128.242.175 62.15.52.45 43.219.164.15
46.86.172.232 237.177.123.70 1.165.114.53 78.186.169.39
190.218.38.71 180.183.54.148 42.177.161.195 78.47.192.194
89.180.163.202 78.47.198.174 78.47.198.110 180.180.218.76