Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States of America

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspam
" "
2020-10-06 07:58:35
attackspambots
 TCP (SYN) 104.248.52.139:52595 -> port 22, len 40
2020-10-06 00:19:49
attackbots
 TCP (SYN) 104.248.52.139:54796 -> port 22, len 44
2020-10-05 16:19:36
Comments on same subnet:
IP Type Details Datetime
104.248.52.211 attackbotsspam
Invalid user minecraft from 104.248.52.211 port 33728
2020-06-13 19:24:20
104.248.52.211 attack
May 27 14:07:33 legacy sshd[25754]: Failed password for root from 104.248.52.211 port 33414 ssh2
May 27 14:11:04 legacy sshd[25840]: Failed password for root from 104.248.52.211 port 38410 ssh2
...
2020-05-27 20:41:18
104.248.52.211 attackbots
May 27 08:31:50 buvik sshd[8705]: Invalid user jason4 from 104.248.52.211
May 27 08:31:50 buvik sshd[8705]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.52.211
May 27 08:31:51 buvik sshd[8705]: Failed password for invalid user jason4 from 104.248.52.211 port 56514 ssh2
...
2020-05-27 14:45:56
104.248.52.211 attack
May 26 18:54:51 abendstille sshd\[12050\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.52.211  user=root
May 26 18:54:53 abendstille sshd\[12050\]: Failed password for root from 104.248.52.211 port 55118 ssh2
May 26 18:58:13 abendstille sshd\[15713\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.52.211  user=root
May 26 18:58:15 abendstille sshd\[15713\]: Failed password for root from 104.248.52.211 port 32906 ssh2
May 26 19:01:44 abendstille sshd\[19203\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.52.211  user=root
...
2020-05-27 01:05:29
104.248.52.211 attackspambots
Unauthorized access or intrusion attempt detected from Thor banned IP
2020-05-20 18:24:56
104.248.52.211 attackspam
20 attempts against mh-ssh on cloud
2020-05-13 17:07:56
104.248.52.211 attackspam
May 13 02:02:32 Ubuntu-1404-trusty-64-minimal sshd\[31943\]: Invalid user deploy from 104.248.52.211
May 13 02:02:32 Ubuntu-1404-trusty-64-minimal sshd\[31943\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.52.211
May 13 02:02:34 Ubuntu-1404-trusty-64-minimal sshd\[31943\]: Failed password for invalid user deploy from 104.248.52.211 port 47700 ssh2
May 13 02:16:08 Ubuntu-1404-trusty-64-minimal sshd\[5848\]: Invalid user lpd from 104.248.52.211
May 13 02:16:08 Ubuntu-1404-trusty-64-minimal sshd\[5848\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.52.211
2020-05-13 09:33:03
104.248.52.211 attackspambots
Apr 27 20:08:19 vlre-nyc-1 sshd\[12686\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.52.211  user=root
Apr 27 20:08:21 vlre-nyc-1 sshd\[12686\]: Failed password for root from 104.248.52.211 port 59724 ssh2
Apr 27 20:12:13 vlre-nyc-1 sshd\[12763\]: Invalid user ubuntu from 104.248.52.211
Apr 27 20:12:13 vlre-nyc-1 sshd\[12763\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.52.211
Apr 27 20:12:16 vlre-nyc-1 sshd\[12763\]: Failed password for invalid user ubuntu from 104.248.52.211 port 44260 ssh2
...
2020-04-28 05:01:16
104.248.52.211 attack
Apr 22 05:52:29 santamaria sshd\[5049\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.52.211  user=root
Apr 22 05:52:31 santamaria sshd\[5049\]: Failed password for root from 104.248.52.211 port 43778 ssh2
Apr 22 05:57:13 santamaria sshd\[5114\]: Invalid user oracle from 104.248.52.211
Apr 22 05:57:13 santamaria sshd\[5114\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.52.211
...
2020-04-22 12:33:47
104.248.52.211 attackbots
Found by fail2ban
2020-04-18 22:35:20
104.248.52.211 attackspam
2020-04-03T00:55:55.873788vps773228.ovh.net sshd[24167]: Failed password for root from 104.248.52.211 port 37312 ssh2
2020-04-03T00:58:42.121676vps773228.ovh.net sshd[25189]: Invalid user mv from 104.248.52.211 port 34116
2020-04-03T00:58:42.141286vps773228.ovh.net sshd[25189]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.52.211
2020-04-03T00:58:42.121676vps773228.ovh.net sshd[25189]: Invalid user mv from 104.248.52.211 port 34116
2020-04-03T00:58:44.540131vps773228.ovh.net sshd[25189]: Failed password for invalid user mv from 104.248.52.211 port 34116 ssh2
...
2020-04-03 07:16:23
104.248.52.211 attackbots
SSH brute-force attempt
2020-04-01 16:54:07
104.248.52.211 attackbots
Brute force attempt
2020-03-30 07:33:15
104.248.52.211 attackspambots
Mar 28 03:52:17 vlre-nyc-1 sshd\[14967\]: Invalid user fgb from 104.248.52.211
Mar 28 03:52:17 vlre-nyc-1 sshd\[14967\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.52.211
Mar 28 03:52:19 vlre-nyc-1 sshd\[14967\]: Failed password for invalid user fgb from 104.248.52.211 port 38700 ssh2
Mar 28 03:55:35 vlre-nyc-1 sshd\[15101\]: Invalid user pmv from 104.248.52.211
Mar 28 03:55:35 vlre-nyc-1 sshd\[15101\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.52.211
...
2020-03-28 12:09:35
104.248.52.211 attackbotsspam
Mar 27 19:34:43 v22018076622670303 sshd\[12185\]: Invalid user yolanda from 104.248.52.211 port 47444
Mar 27 19:34:43 v22018076622670303 sshd\[12185\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.52.211
Mar 27 19:34:45 v22018076622670303 sshd\[12185\]: Failed password for invalid user yolanda from 104.248.52.211 port 47444 ssh2
...
2020-03-28 04:03:43
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.248.52.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43946
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.248.52.139.			IN	A

;; AUTHORITY SECTION:
.			393	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020100500 1800 900 604800 86400

;; Query time: 93 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Oct 05 16:19:31 CST 2020
;; MSG SIZE  rcvd: 118
Host info
Host 139.52.248.104.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 139.52.248.104.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
185.12.20.225 attackspam
Automatic report - Port Scan Attack
2020-06-10 20:17:04
106.12.174.227 attackbotsspam
Jun 10 01:28:01 web9 sshd\[27985\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.174.227  user=root
Jun 10 01:28:03 web9 sshd\[27985\]: Failed password for root from 106.12.174.227 port 35498 ssh2
Jun 10 01:33:41 web9 sshd\[28836\]: Invalid user monitor from 106.12.174.227
Jun 10 01:33:41 web9 sshd\[28836\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.174.227
Jun 10 01:33:43 web9 sshd\[28836\]: Failed password for invalid user monitor from 106.12.174.227 port 58670 ssh2
2020-06-10 19:50:21
14.181.121.16 attackspambots
1591786944 - 06/10/2020 13:02:24 Host: 14.181.121.16/14.181.121.16 Port: 445 TCP Blocked
2020-06-10 20:07:29
222.186.190.14 attackbotsspam
$f2bV_matches
2020-06-10 19:43:50
113.161.59.149 attack
Unauthorized connection attempt from IP address 113.161.59.149 on Port 445(SMB)
2020-06-10 20:05:28
67.205.175.45 attack
Lines containing failures of 67.205.175.45
Jun 10 09:57:03 keyhelp sshd[8169]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.205.175.45  user=r.r
Jun 10 09:57:04 keyhelp sshd[8169]: Failed password for r.r from 67.205.175.45 port 49800 ssh2
Jun 10 09:57:04 keyhelp sshd[8169]: Received disconnect from 67.205.175.45 port 49800:11: Bye Bye [preauth]
Jun 10 09:57:04 keyhelp sshd[8169]: Disconnected from authenticating user r.r 67.205.175.45 port 49800 [preauth]
Jun 10 10:32:10 keyhelp sshd[16755]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.205.175.45  user=r.r
Jun 10 10:32:13 keyhelp sshd[16755]: Failed password for r.r from 67.205.175.45 port 39724 ssh2
Jun 10 10:32:13 keyhelp sshd[16755]: Received disconnect from 67.205.175.45 port 39724:11: Bye Bye [preauth]
Jun 10 10:32:13 keyhelp sshd[16755]: Disconnected from authenticating user r.r 67.205.175.45 port 39724 [preauth]
Jun 10 10:........
------------------------------
2020-06-10 19:39:54
212.91.92.156 attackspambots
Unauthorized connection attempt from IP address 212.91.92.156 on Port 445(SMB)
2020-06-10 19:59:49
51.79.55.87 attackspambots
Jun 10 13:33:19 fhem-rasp sshd[10211]: Invalid user centos from 51.79.55.87 port 40218
...
2020-06-10 20:07:09
46.38.145.253 attack
Jun 10 13:45:06 statusweb1.srvfarm.net postfix/smtpd[2177]: warning: unknown[46.38.145.253]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 10 13:46:48 statusweb1.srvfarm.net postfix/smtpd[2384]: warning: unknown[46.38.145.253]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 10 13:48:27 statusweb1.srvfarm.net postfix/smtpd[2384]: warning: unknown[46.38.145.253]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 10 13:50:06 statusweb1.srvfarm.net postfix/smtpd[2384]: warning: unknown[46.38.145.253]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 10 13:51:43 statusweb1.srvfarm.net postfix/smtpd[2384]: warning: unknown[46.38.145.253]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2020-06-10 20:09:03
45.143.223.100 attackspambots
Unauthorized connection attempt from IP address 45.143.223.100 on Port 25(SMTP)
2020-06-10 20:20:14
188.218.143.247 attackspambots
Automatic report - Banned IP Access
2020-06-10 20:09:42
185.156.73.65 attackspambots
06/10/2020-07:45:06.932069 185.156.73.65 Protocol: 6 ET SCAN NMAP -sS window 1024
2020-06-10 20:10:02
187.45.80.81 attackspam
Unauthorized connection attempt from IP address 187.45.80.81 on Port 445(SMB)
2020-06-10 20:18:29
68.170.232.231 attackspam
Automatic report - Port Scan Attack
2020-06-10 19:53:12
124.225.41.231 attackspambots
Fail2Ban Ban Triggered
2020-06-10 19:36:33

Recently Reported IPs

33.158.117.254 178.221.192.193 111.162.113.214 45.27.48.161
196.240.173.95 183.109.164.73 114.67.169.63 106.12.127.39
94.191.61.146 97.253.242.208 114.231.45.160 5.189.176.84
206.189.174.127 119.45.199.253 103.223.9.109 208.101.101.130
138.124.171.98 48.165.108.189 45.231.163.160 196.17.240.15