Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States of America

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
Sep  2 16:25:48 vpn01 sshd[19892]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.57.107
Sep  2 16:25:50 vpn01 sshd[19892]: Failed password for invalid user courier from 104.248.57.107 port 13203 ssh2
...
2020-09-03 03:54:29
attackbotsspam
*Port Scan* detected from 104.248.57.107 (US/United States/New Jersey/North Bergen/-). 4 hits in the last 30 seconds
2020-09-02 19:35:25
Comments on same subnet:
IP Type Details Datetime
104.248.57.44 attack
123
2023-03-21 07:11:39
104.248.57.44 attack
$f2bV_matches
2020-10-04 03:25:15
104.248.57.44 attackbotsspam
(sshd) Failed SSH login from 104.248.57.44 (US/United States/-): 5 in the last 3600 secs
2020-10-03 19:19:48
104.248.57.44 attack
Sep 26 17:17:10 ns392434 sshd[31440]: Invalid user teacher from 104.248.57.44 port 45812
Sep 26 17:17:10 ns392434 sshd[31440]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.57.44
Sep 26 17:17:10 ns392434 sshd[31440]: Invalid user teacher from 104.248.57.44 port 45812
Sep 26 17:17:12 ns392434 sshd[31440]: Failed password for invalid user teacher from 104.248.57.44 port 45812 ssh2
Sep 26 17:24:42 ns392434 sshd[31569]: Invalid user cloud from 104.248.57.44 port 58364
Sep 26 17:24:42 ns392434 sshd[31569]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.57.44
Sep 26 17:24:42 ns392434 sshd[31569]: Invalid user cloud from 104.248.57.44 port 58364
Sep 26 17:24:44 ns392434 sshd[31569]: Failed password for invalid user cloud from 104.248.57.44 port 58364 ssh2
Sep 26 17:27:22 ns392434 sshd[31652]: Invalid user test1 from 104.248.57.44 port 45422
2020-09-27 01:36:49
104.248.57.44 attackspambots
k+ssh-bruteforce
2020-09-26 17:29:46
104.248.57.44 attack
SSH invalid-user multiple login try
2020-09-16 01:59:00
104.248.57.44 attackbots
$f2bV_matches
2020-09-15 17:52:21
104.248.57.44 attackspam
Invalid user elias from 104.248.57.44 port 44796
2020-09-14 21:16:02
104.248.57.44 attackspam
Invalid user elias from 104.248.57.44 port 44796
2020-09-14 13:09:14
104.248.57.44 attackbotsspam
B: Abusive ssh attack
2020-09-14 05:10:11
104.248.57.44 attackspam
Sep  9 08:48:05 root sshd[24202]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.57.44 
Sep  9 08:48:07 root sshd[24202]: Failed password for invalid user confluence1 from 104.248.57.44 port 57582 ssh2
...
2020-09-09 22:17:48
104.248.57.44 attack
Sep  9 08:48:05 root sshd[24202]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.57.44 
Sep  9 08:48:07 root sshd[24202]: Failed password for invalid user confluence1 from 104.248.57.44 port 57582 ssh2
...
2020-09-09 16:02:50
104.248.57.44 attackbotsspam
Bruteforce detected by fail2ban
2020-09-09 08:12:25
104.248.57.44 attackbots
Sep  3 01:47:11 h2646465 sshd[15143]: Invalid user idb from 104.248.57.44
Sep  3 01:47:11 h2646465 sshd[15143]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.57.44
Sep  3 01:47:11 h2646465 sshd[15143]: Invalid user idb from 104.248.57.44
Sep  3 01:47:13 h2646465 sshd[15143]: Failed password for invalid user idb from 104.248.57.44 port 41380 ssh2
Sep  3 01:53:10 h2646465 sshd[15827]: Invalid user hbm from 104.248.57.44
Sep  3 01:53:10 h2646465 sshd[15827]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.57.44
Sep  3 01:53:10 h2646465 sshd[15827]: Invalid user hbm from 104.248.57.44
Sep  3 01:53:11 h2646465 sshd[15827]: Failed password for invalid user hbm from 104.248.57.44 port 50398 ssh2
Sep  3 01:56:29 h2646465 sshd[16383]: Invalid user admin from 104.248.57.44
...
2020-09-04 02:14:35
104.248.57.44 attack
Sep  3 01:47:11 h2646465 sshd[15143]: Invalid user idb from 104.248.57.44
Sep  3 01:47:11 h2646465 sshd[15143]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.57.44
Sep  3 01:47:11 h2646465 sshd[15143]: Invalid user idb from 104.248.57.44
Sep  3 01:47:13 h2646465 sshd[15143]: Failed password for invalid user idb from 104.248.57.44 port 41380 ssh2
Sep  3 01:53:10 h2646465 sshd[15827]: Invalid user hbm from 104.248.57.44
Sep  3 01:53:10 h2646465 sshd[15827]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.57.44
Sep  3 01:53:10 h2646465 sshd[15827]: Invalid user hbm from 104.248.57.44
Sep  3 01:53:11 h2646465 sshd[15827]: Failed password for invalid user hbm from 104.248.57.44 port 50398 ssh2
Sep  3 01:56:29 h2646465 sshd[16383]: Invalid user admin from 104.248.57.44
...
2020-09-03 17:40:59
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.248.57.107
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 57529
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.248.57.107.			IN	A

;; AUTHORITY SECTION:
.			324	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020090200 1800 900 604800 86400

;; Query time: 106 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Sep 02 19:35:20 CST 2020
;; MSG SIZE  rcvd: 118
Host info
Host 107.57.248.104.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 107.57.248.104.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
118.27.39.94 attack
Brute%20Force%20SSH
2020-09-10 05:52:31
105.66.129.142 attackspam
abasicmove.de 105.66.129.142 [09/Sep/2020:18:54:29 +0200] "POST /wp-login.php HTTP/1.1" 200 6672 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
abasicmove.de 105.66.129.142 [09/Sep/2020:18:54:35 +0200] "POST /wp-login.php HTTP/1.1" 200 6618 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-09-10 05:32:58
190.131.215.29 attack
php WP PHPmyadamin ABUSE blocked for 12h
2020-09-10 05:49:35
51.38.188.20 attackbots
$f2bV_matches
2020-09-10 05:28:13
45.140.17.63 attackspambots
IP 45.140.17.63 attacked honeypot on port: 5588 at 9/9/2020 9:53:59 AM
2020-09-10 05:44:14
46.105.29.160 attackspambots
Sep  9 18:05:35 game-panel sshd[9895]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.105.29.160
Sep  9 18:05:37 game-panel sshd[9895]: Failed password for invalid user satelbrasil from 46.105.29.160 port 42302 ssh2
Sep  9 18:09:08 game-panel sshd[10136]: Failed password for root from 46.105.29.160 port 46754 ssh2
2020-09-10 05:52:54
175.192.191.226 attack
Sep  9 20:25:46 eventyay sshd[2759]: Failed password for root from 175.192.191.226 port 60783 ssh2
Sep  9 20:29:03 eventyay sshd[2848]: Failed password for root from 175.192.191.226 port 57751 ssh2
...
2020-09-10 05:35:14
167.114.86.47 attackspam
2020-09-09T22:55:24.292386ks3355764 sshd[22276]: Failed password for root from 167.114.86.47 port 49252 ssh2
2020-09-09T22:57:26.536794ks3355764 sshd[22294]: Invalid user zxin10 from 167.114.86.47 port 35746
...
2020-09-10 05:45:11
51.178.50.20 attackbots
detected by Fail2Ban
2020-09-10 05:47:36
114.142.169.59 attack
1599670498 - 09/09/2020 18:54:58 Host: 114.142.169.59/114.142.169.59 Port: 445 TCP Blocked
2020-09-10 05:22:49
194.135.15.6 attack
Dovecot Invalid User Login Attempt.
2020-09-10 05:18:49
189.59.5.81 attack
[munged]::443 189.59.5.81 - - [09/Sep/2020:18:53:50 +0200] "POST /[munged]: HTTP/1.1" 200 12000 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0"
[munged]::443 189.59.5.81 - - [09/Sep/2020:18:53:55 +0200] "POST /[munged]: HTTP/1.1" 200 8174 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0"
[munged]::443 189.59.5.81 - - [09/Sep/2020:18:53:59 +0200] "POST /[munged]: HTTP/1.1" 200 8174 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0"
[munged]::443 189.59.5.81 - - [09/Sep/2020:18:54:01 +0200] "POST /[munged]: HTTP/1.1" 200 8174 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0"
[munged]::443 189.59.5.81 - - [09/Sep/2020:18:54:05 +0200] "POST /[munged]: HTTP/1.1" 200 8174 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0"
[munged]::443 189.59.5.81 - - [09/Sep/2020:18:54:09 +0200] "POS
2020-09-10 05:38:37
106.13.231.150 attackspam
Sep  9 17:44:20 firewall sshd[1154]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.231.150
Sep  9 17:44:20 firewall sshd[1154]: Invalid user hadoop from 106.13.231.150
Sep  9 17:44:22 firewall sshd[1154]: Failed password for invalid user hadoop from 106.13.231.150 port 34804 ssh2
...
2020-09-10 05:38:05
184.105.247.250 attack
 TCP (SYN) 184.105.247.250:60470 -> port 23, len 44
2020-09-10 05:48:22
5.253.27.243 attackbotsspam
2020-09-09T16:57:25.6540101495-001 sshd[37190]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.253.27.243  user=root
2020-09-09T16:57:28.1458711495-001 sshd[37190]: Failed password for root from 5.253.27.243 port 48072 ssh2
2020-09-09T17:01:06.8728641495-001 sshd[37363]: Invalid user zcx from 5.253.27.243 port 50534
2020-09-09T17:01:06.8766111495-001 sshd[37363]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.253.27.243
2020-09-09T17:01:06.8728641495-001 sshd[37363]: Invalid user zcx from 5.253.27.243 port 50534
2020-09-09T17:01:08.7056881495-001 sshd[37363]: Failed password for invalid user zcx from 5.253.27.243 port 50534 ssh2
...
2020-09-10 05:49:03

Recently Reported IPs

35.220.150.114 77.223.77.81 45.148.122.155 38.115.231.197
138.123.26.12 107.129.254.92 79.103.187.128 186.50.220.115
182.166.113.65 210.237.222.169 104.148.159.132 125.77.39.115
71.12.94.203 181.206.49.140 37.10.204.1 183.128.119.184
244.113.189.35 123.47.238.95 188.104.127.15 186.167.51.10