Log in to view charts and search reports for this IP.
Log In
Top Reporter Countries (Last 60 Days)
Example preview
Report Categories (Last 60 Days)
Example preview
Reports Activity
Example preview
Account required for the enhanced features
Log inSign up
IP Abuse Reports for 104.248.49.237:
This IP address has been reported a total of
72
times from
42 distinct
sources.
104.248.49.237 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 20
reports;
Germany
with 17
reports;
France
with 10
reports.
The most common categories in these recent reports were:
Brute-Force
63
times;
SSH
57
times;
Port Scan
7
times;
Hacking
2
times;
Web App Attack
2
times;
Other
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
(sshd) Failed SSH login from 104.248.49.237 (US/United States/-): 5 in the last 3600 secs; Ports: *; ...
show more(sshd) Failed SSH login from 104.248.49.237 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Sep 5 09:42:15 15216 sshd[14019]: Did not receive identification string from 104.248.49.237 port 46052
Sep 5 09:42:40 15216 sshd[14025]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.49.237 user=root
Sep 5 09:42:42 15216 sshd[14025]: Failed password for root from 104.248.49.237 port 46054 ssh2
Sep 5 09:43:06 15216 sshd[14028]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.49.237 user=root
Sep 5 09:43:08 15216 sshd[14028]: Failed password for root from 104.248.49.237 port 51590 ssh2
show less
Brute-Force
SSH
Anonymous
2026-09-04T09:00:41.712439+00:00 arrow-nl1 sshd-session[76614]: Failed password for root from 104.24 ...
show more2026-09-04T09:00:41.712439+00:00 arrow-nl1 sshd-session[76614]: Failed password for root from 104.248.49.237 port 34844 ssh2
2026-09-04T09:00:58.693306+00:00 arrow-nl1 sshd-session[76617]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.49.237 user=root
2026-09-04T09:01:00.922371+00:00 arrow-nl1 sshd-session[76617]: Failed password for root from 104.248.49.237 port 34390 ssh2
...
show less
2026-08-23T05:56:22.491057+05:00 arrow-kz1 sshd[24438]: Failed password for root from 104.248.49.237 ...
show more2026-08-23T05:56:22.491057+05:00 arrow-kz1 sshd[24438]: Failed password for root from 104.248.49.237 port 51958 ssh2
2026-08-23T05:56:42.930313+05:00 arrow-kz1 sshd[24441]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.49.237 user=root
2026-08-23T05:56:45.347058+05:00 arrow-kz1 sshd[24441]: Failed password for root from 104.248.49.237 port 54284 ssh2
...
show less
Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 22222 [1] TCP
Reported by DisPaisy ...
show moreHoneypot [fra-de-honeypot]: Empty payload (likely service probe); 22222 [1] TCP
Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less
(sshd) Failed SSH login from 104.248.49.237 (US/United States/-): 5 in the last 3600 secs; Ports: *; ...
show more(sshd) Failed SSH login from 104.248.49.237 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Aug 22 05:17:59 14415 sshd[4555]: Did not receive identification string from 104.248.49.237 port 60512
Aug 22 05:18:11 14415 sshd[4556]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.49.237 user=root
Aug 22 05:18:13 14415 sshd[4556]: Failed password for root from 104.248.49.237 port 60514 ssh2
Aug 22 05:18:27 14415 sshd[4681]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.49.237 user=root
Aug 22 05:18:29 14415 sshd[4681]: Failed password for root from 104.248.49.237 port 58404 ssh2
show less
2026-08-21T14:41:32.891683+00:00 seraph sshd[1965803]: Failed password for invalid user root from 10 ...
show more2026-08-21T14:41:32.891683+00:00 seraph sshd[1965803]: Failed password for invalid user root from 104.248.49.237 port 55496 ssh2
2026-08-21T14:41:48.335209+00:00 seraph sshd[1965931]: User root from 104.248.49.237 not allowed because not listed in AllowUsers
2026-08-21T14:41:51.728922+00:00 seraph sshd[1965931]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.49.237 user=root
2026-08-21T14:41:54.106941+00:00 seraph sshd[1965931]: Failed password for invalid user root from 104.248.49.237 port 52740 ssh2
2026-08-21T14:42:09.780987+00:00 seraph sshd[1966147]: User root from 104.248.49.237 not allowed because not listed in AllowUsers
...
show less
Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 2222 [1] TCP
Reported by DisPaisy ...
show moreHoneypot [fra-de-honeypot]: Empty payload (likely service probe); 2222 [1] TCP
Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less
(sshd) Failed SSH login from 104.248.49.237 (US/United States/-): 5 in the last 3600 secs; Ports: *; ...
show more(sshd) Failed SSH login from 104.248.49.237 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Aug 19 05:14:41 14506 sshd[20961]: Did not receive identification string from 104.248.49.237 port 47226
Aug 19 05:14:57 14506 sshd[20966]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.49.237 user=root
Aug 19 05:14:59 14506 sshd[20966]: Failed password for root from 104.248.49.237 port 37112 ssh2
Aug 19 05:15:22 14506 sshd[21410]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.49.237 user=root
Aug 19 05:15:24 14506 sshd[21410]: Failed password for root from 104.248.49.237 port 43994 ssh2
show less
(sshd) Failed SSH login from 104.248.49.237 (US/United States/-): 5 in the last 3600 secs; Ports: *; ...
show more(sshd) Failed SSH login from 104.248.49.237 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Aug 19 04:10:58 14218 sshd[11097]: Did not receive identification string from 104.248.49.237 port 34606
Aug 19 04:11:15 14218 sshd[11098]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.49.237 user=root
Aug 19 04:11:17 14218 sshd[11098]: Failed password for root from 104.248.49.237 port 34618 ssh2
Aug 19 04:11:37 14218 sshd[11448]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.49.237 user=root
Aug 19 04:11:38 14218 sshd[11448]: Failed password for root from 104.248.49.237 port 52788 ssh2
show less
