Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States of America

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackbotsspam
Invalid user minecraft from 104.248.52.211 port 33728
2020-06-13 19:24:20
attack
May 27 14:07:33 legacy sshd[25754]: Failed password for root from 104.248.52.211 port 33414 ssh2
May 27 14:11:04 legacy sshd[25840]: Failed password for root from 104.248.52.211 port 38410 ssh2
...
2020-05-27 20:41:18
attackbots
May 27 08:31:50 buvik sshd[8705]: Invalid user jason4 from 104.248.52.211
May 27 08:31:50 buvik sshd[8705]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.52.211
May 27 08:31:51 buvik sshd[8705]: Failed password for invalid user jason4 from 104.248.52.211 port 56514 ssh2
...
2020-05-27 14:45:56
attack
May 26 18:54:51 abendstille sshd\[12050\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.52.211  user=root
May 26 18:54:53 abendstille sshd\[12050\]: Failed password for root from 104.248.52.211 port 55118 ssh2
May 26 18:58:13 abendstille sshd\[15713\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.52.211  user=root
May 26 18:58:15 abendstille sshd\[15713\]: Failed password for root from 104.248.52.211 port 32906 ssh2
May 26 19:01:44 abendstille sshd\[19203\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.52.211  user=root
...
2020-05-27 01:05:29
attackspambots
Unauthorized access or intrusion attempt detected from Thor banned IP
2020-05-20 18:24:56
attackspam
20 attempts against mh-ssh on cloud
2020-05-13 17:07:56
attackspam
May 13 02:02:32 Ubuntu-1404-trusty-64-minimal sshd\[31943\]: Invalid user deploy from 104.248.52.211
May 13 02:02:32 Ubuntu-1404-trusty-64-minimal sshd\[31943\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.52.211
May 13 02:02:34 Ubuntu-1404-trusty-64-minimal sshd\[31943\]: Failed password for invalid user deploy from 104.248.52.211 port 47700 ssh2
May 13 02:16:08 Ubuntu-1404-trusty-64-minimal sshd\[5848\]: Invalid user lpd from 104.248.52.211
May 13 02:16:08 Ubuntu-1404-trusty-64-minimal sshd\[5848\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.52.211
2020-05-13 09:33:03
attackspambots
Apr 27 20:08:19 vlre-nyc-1 sshd\[12686\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.52.211  user=root
Apr 27 20:08:21 vlre-nyc-1 sshd\[12686\]: Failed password for root from 104.248.52.211 port 59724 ssh2
Apr 27 20:12:13 vlre-nyc-1 sshd\[12763\]: Invalid user ubuntu from 104.248.52.211
Apr 27 20:12:13 vlre-nyc-1 sshd\[12763\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.52.211
Apr 27 20:12:16 vlre-nyc-1 sshd\[12763\]: Failed password for invalid user ubuntu from 104.248.52.211 port 44260 ssh2
...
2020-04-28 05:01:16
attack
Apr 22 05:52:29 santamaria sshd\[5049\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.52.211  user=root
Apr 22 05:52:31 santamaria sshd\[5049\]: Failed password for root from 104.248.52.211 port 43778 ssh2
Apr 22 05:57:13 santamaria sshd\[5114\]: Invalid user oracle from 104.248.52.211
Apr 22 05:57:13 santamaria sshd\[5114\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.52.211
...
2020-04-22 12:33:47
attackbots
Found by fail2ban
2020-04-18 22:35:20
attackspam
2020-04-03T00:55:55.873788vps773228.ovh.net sshd[24167]: Failed password for root from 104.248.52.211 port 37312 ssh2
2020-04-03T00:58:42.121676vps773228.ovh.net sshd[25189]: Invalid user mv from 104.248.52.211 port 34116
2020-04-03T00:58:42.141286vps773228.ovh.net sshd[25189]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.52.211
2020-04-03T00:58:42.121676vps773228.ovh.net sshd[25189]: Invalid user mv from 104.248.52.211 port 34116
2020-04-03T00:58:44.540131vps773228.ovh.net sshd[25189]: Failed password for invalid user mv from 104.248.52.211 port 34116 ssh2
...
2020-04-03 07:16:23
attackbots
SSH brute-force attempt
2020-04-01 16:54:07
attackbots
Brute force attempt
2020-03-30 07:33:15
attackspambots
Mar 28 03:52:17 vlre-nyc-1 sshd\[14967\]: Invalid user fgb from 104.248.52.211
Mar 28 03:52:17 vlre-nyc-1 sshd\[14967\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.52.211
Mar 28 03:52:19 vlre-nyc-1 sshd\[14967\]: Failed password for invalid user fgb from 104.248.52.211 port 38700 ssh2
Mar 28 03:55:35 vlre-nyc-1 sshd\[15101\]: Invalid user pmv from 104.248.52.211
Mar 28 03:55:35 vlre-nyc-1 sshd\[15101\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.52.211
...
2020-03-28 12:09:35
attackbotsspam
Mar 27 19:34:43 v22018076622670303 sshd\[12185\]: Invalid user yolanda from 104.248.52.211 port 47444
Mar 27 19:34:43 v22018076622670303 sshd\[12185\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.52.211
Mar 27 19:34:45 v22018076622670303 sshd\[12185\]: Failed password for invalid user yolanda from 104.248.52.211 port 47444 ssh2
...
2020-03-28 04:03:43
attackbotsspam
Fail2Ban Ban Triggered (2)
2020-03-17 08:34:22
attackbotsspam
$f2bV_matches
2020-03-13 14:11:10
Comments on same subnet:
IP Type Details Datetime
104.248.52.139 attackspam
" "
2020-10-06 07:58:35
104.248.52.139 attackspambots
 TCP (SYN) 104.248.52.139:52595 -> port 22, len 40
2020-10-06 00:19:49
104.248.52.139 attackbots
 TCP (SYN) 104.248.52.139:54796 -> port 22, len 44
2020-10-05 16:19:36
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.248.52.211
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6736
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.248.52.211.			IN	A

;; AUTHORITY SECTION:
.			594	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020031202 1800 900 604800 86400

;; Query time: 110 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 13 14:11:02 CST 2020
;; MSG SIZE  rcvd: 118
Host info
Host 211.52.248.104.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 211.52.248.104.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
68.183.83.166 attack
Jul 15 04:30:42 123flo sshd[24447]: Invalid user fake from 68.183.83.166
Jul 15 04:30:42 123flo sshd[24447]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.83.166 
Jul 15 04:30:42 123flo sshd[24447]: Invalid user fake from 68.183.83.166
Jul 15 04:30:43 123flo sshd[24447]: Failed password for invalid user fake from 68.183.83.166 port 57572 ssh2
Jul 15 04:30:44 123flo sshd[24449]: Invalid user user from 68.183.83.166
2019-07-15 18:19:19
106.13.120.143 attackspambots
Jul 15 10:18:42 vps691689 sshd[22937]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.120.143
Jul 15 10:18:44 vps691689 sshd[22937]: Failed password for invalid user toor from 106.13.120.143 port 33798 ssh2
...
2019-07-15 18:34:15
152.136.36.250 attackbots
Jun 30 20:56:46 [snip] sshd[5473]: Invalid user nathalie from 152.136.36.250 port 40712
Jun 30 20:56:46 [snip] sshd[5473]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.36.250
Jun 30 20:56:48 [snip] sshd[5473]: Failed password for invalid user nathalie from 152.136.36.250 port 40712 ssh2[...]
2019-07-15 18:47:49
167.86.111.59 attack
Automatic report - Port Scan Attack
2019-07-15 18:01:14
5.45.68.19 attackspam
WP Authentication failure
2019-07-15 18:24:20
185.222.211.114 attackspam
Jul 15 06:16:48 box kernel: [1278833.603132] [UFW BLOCK] IN=eth0 OUT= MAC=[munged] SRC=185.222.211.114 DST=[munged] LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=63291 PROTO=TCP SPT=41487 DPT=3352 WINDOW=1024 RES=0x00 SYN URGP=0 
Jul 15 06:26:02 box kernel: [1279386.754503] [UFW BLOCK] IN=eth0 OUT= MAC=[munged] SRC=185.222.211.114 DST=[munged] LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=53879 PROTO=TCP SPT=41487 DPT=3315 WINDOW=1024 RES=0x00 SYN URGP=0 
Jul 15 06:56:32 box kernel: [1281217.586988] [UFW BLOCK] IN=eth0 OUT= MAC=[munged] SRC=185.222.211.114 DST=[munged] LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=9248 PROTO=TCP SPT=41487 DPT=3320 WINDOW=1024 RES=0x00 SYN URGP=0 
Jul 15 09:43:11 box kernel: [1291216.134170] [UFW BLOCK] IN=eth0 OUT= MAC=[munged] SRC=185.222.211.114 DST=[munged] LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=49027 PROTO=TCP SPT=41487 DPT=3345 WINDOW=1024 RES=0x00 SYN URGP=0 
Jul 15 10:55:59 box kernel: [1295584.659609] [UFW BLOCK] IN=eth0 OUT= MAC=[munged] SRC=185.222.211.114 DST=[munged] LEN=40 TOS=0x00 PREC=0x0
2019-07-15 18:17:04
106.13.51.110 attack
Jul 15 08:26:59 animalibera sshd[5132]: Invalid user juliet from 106.13.51.110 port 35258
...
2019-07-15 18:25:01
51.83.72.147 attackbotsspam
Jul 15 04:12:12 vps200512 sshd\[3064\]: Invalid user jenkins from 51.83.72.147
Jul 15 04:12:12 vps200512 sshd\[3064\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.72.147
Jul 15 04:12:14 vps200512 sshd\[3064\]: Failed password for invalid user jenkins from 51.83.72.147 port 34536 ssh2
Jul 15 04:16:58 vps200512 sshd\[3144\]: Invalid user willy from 51.83.72.147
Jul 15 04:16:58 vps200512 sshd\[3144\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.72.147
2019-07-15 18:12:22
103.249.52.5 attack
Jul 15 10:04:14 meumeu sshd[11294]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.249.52.5 
Jul 15 10:04:16 meumeu sshd[11294]: Failed password for invalid user pa from 103.249.52.5 port 39734 ssh2
Jul 15 10:10:16 meumeu sshd[12474]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.249.52.5 
...
2019-07-15 18:42:25
79.137.35.70 attack
Jul 15 09:28:42 h2177944 sshd\[16641\]: Invalid user nginx from 79.137.35.70 port 45910
Jul 15 09:28:42 h2177944 sshd\[16641\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.137.35.70
Jul 15 09:28:44 h2177944 sshd\[16641\]: Failed password for invalid user nginx from 79.137.35.70 port 45910 ssh2
Jul 15 09:33:29 h2177944 sshd\[16964\]: Invalid user mqm from 79.137.35.70 port 44308
...
2019-07-15 18:31:05
165.22.177.186 attack
timhelmke.de 165.22.177.186 \[15/Jul/2019:08:24:21 +0200\] "POST /wp-login.php HTTP/1.1" 200 5593 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
timhelmke.de 165.22.177.186 \[15/Jul/2019:08:24:24 +0200\] "POST /wp-login.php HTTP/1.1" 200 5582 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2019-07-15 18:27:22
45.6.27.171 attack
Jul 15 08:19:09 rigel postfix/smtpd[32407]: connect from unknown[45.6.27.171]
Jul 15 08:19:14 rigel postfix/smtpd[32407]: warning: unknown[45.6.27.171]: SASL CRAM-MD5 authentication failed: authentication failure
Jul 15 08:19:14 rigel postfix/smtpd[32407]: warning: unknown[45.6.27.171]: SASL PLAIN authentication failed: authentication failure
Jul 15 08:19:16 rigel postfix/smtpd[32407]: warning: unknown[45.6.27.171]: SASL LOGIN authentication failed: authentication failure


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=45.6.27.171
2019-07-15 18:39:11
148.72.144.10 attackbotsspam
1900/udp 123/udp...
[2019-05-15/07-15]16pkt,2pt.(udp)
2019-07-15 18:02:20
206.189.190.32 attackbotsspam
Jul 15 07:26:19 ip-172-31-1-72 sshd\[14769\]: Invalid user revista from 206.189.190.32
Jul 15 07:26:19 ip-172-31-1-72 sshd\[14769\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.190.32
Jul 15 07:26:21 ip-172-31-1-72 sshd\[14769\]: Failed password for invalid user revista from 206.189.190.32 port 50374 ssh2
Jul 15 07:30:46 ip-172-31-1-72 sshd\[14860\]: Invalid user jenkins from 206.189.190.32
Jul 15 07:30:46 ip-172-31-1-72 sshd\[14860\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.190.32
2019-07-15 18:19:45
46.214.85.87 attack
Automatic report - Port Scan Attack
2019-07-15 18:37:46

Recently Reported IPs

57.224.194.20 192.241.239.177 159.206.138.93 61.168.71.245
90.90.120.6 13.203.11.115 38.229.159.16 72.17.143.129
180.252.145.153 222.33.12.17 234.86.118.11 160.201.14.101
58.186.196.117 215.8.183.51 36.90.68.10 179.181.186.224
223.21.116.226 171.7.216.144 22.72.2.199 172.16.0.2