This IP address has been reported a total of
15
times from
10 distinct
sources.
104.248.170.167 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
Blocked by UFW (TCP on 27017)
Source port: 61007
TTL: 239
Packet length: 44
TOS: 0x08
This report ( ...
show moreBlocked by UFW (TCP on 27017)
Source port: 61007
TTL: 239
Packet length: 44
TOS: 0x08
This report (for 104.248.170.167) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Blocked by UFW (TCP on 8089)
Source port: 61005
TTL: 240
Packet length: 44
TOS: 0x08
This report (f ...
show moreBlocked by UFW (TCP on 8089)
Source port: 61005
TTL: 240
Packet length: 44
TOS: 0x08
This report (for 104.248.170.167) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Source IP 104.248.170.167 repeatedly attempted unauthorized SSH authentication against my server ove ...
show moreSource IP 104.248.170.167 repeatedly attempted unauthorized SSH authentication against my server over several hours.
Observed behavior:
- Repeated login attempts targeting the "root" account
- Failed password authentication
- Connection closed after each attempt
- Pattern consistent with automated SSH credential scanning
Sample logs:
Mar 07 21:05:15 Failed password for root from 104.248.170.167 port 54080 ssh2
Mar 07 21:05:15 Connection closed by authenticating user root 104.248.170.167 port 54080 [preauth]
Mar 07 21:06:46 Failed password for root from 104.248.170.167 port 44060 ssh2
Mar 07 21:06:48 Connection closed by authenticating user root 104.248.170.167 port 44060 [preauth]
All attempts failed. Only legitimate SSH access was from my own IP.
This activity persisted for multiple hours and appears to be automated credential probing.
show less
2026-03-07T18:24:31.655183-05:00 nextcloud sshd[4058975]: Invalid user developer from 104.248.170.16 ...
show more2026-03-07T18:24:31.655183-05:00 nextcloud sshd[4058975]: Invalid user developer from 104.248.170.167 port 46164
2026-03-07T18:24:53.841643-05:00 nextcloud sshd[4064393]: Invalid user developer from 104.248.170.167 port 47880
2026-03-07T18:25:18.810594-05:00 nextcloud sshd[4071978]: Invalid user developer from 104.248.170.167 port 51316
2026-03-07T18:25:42.928548-05:00 nextcloud sshd[4077340]: Invalid user developer from 104.248.170.167 port 38784
2026-03-07T18:26:06.108902-05:00 nextcloud sshd[4084021]: Invalid user developer from 104.248.170.167 port 53410
...
show less
2026-03-07T17:22:42.355562-05:00 nextcloud sshd[3090312]: Invalid user mysql from 104.248.170.167 po ...
show more2026-03-07T17:22:42.355562-05:00 nextcloud sshd[3090312]: Invalid user mysql from 104.248.170.167 port 52158
2026-03-07T17:23:08.960684-05:00 nextcloud sshd[3097091]: Invalid user mysql from 104.248.170.167 port 33166
2026-03-07T17:23:31.896178-05:00 nextcloud sshd[3103268]: Invalid user git from 104.248.170.167 port 45720
2026-03-07T17:23:56.630711-05:00 nextcloud sshd[3109589]: Invalid user git from 104.248.170.167 port 60450
2026-03-07T17:24:23.947451-05:00 nextcloud sshd[3117149]: Invalid user git from 104.248.170.167 port 40250
...
show less
[fail2ban Auto Report] 2026-03-07T17:23:35.848035-05:00 alpha sshd-session[273578]: Invalid user git ...
show more[fail2ban Auto Report] 2026-03-07T17:23:35.848035-05:00 alpha sshd-session[273578]: Invalid user git from 104.248.170.167 port 41804
...
show less
2026-03-07T16:19:52.336977-05:00 nextcloud sshd[2105577]: Invalid user admin from 104.248.170.167 po ...
show more2026-03-07T16:19:52.336977-05:00 nextcloud sshd[2105577]: Invalid user admin from 104.248.170.167 port 35674
2026-03-07T16:20:37.511695-05:00 nextcloud sshd[2117109]: Invalid user admin from 104.248.170.167 port 37780
2026-03-07T16:21:14.056824-05:00 nextcloud sshd[2127306]: Invalid user admin from 104.248.170.167 port 60252
2026-03-07T16:21:52.713103-05:00 nextcloud sshd[2136261]: Invalid user admin from 104.248.170.167 port 37212
2026-03-07T16:22:28.463861-05:00 nextcloud sshd[2146625]: Invalid user admin from 104.248.170.167 port 34454
...
show less
2026-03-07T16:20:01.527112-05:00 ovh-vm-us-starter-97-vin sshd[1187508]: Invalid user admin from 104 ...
show more2026-03-07T16:20:01.527112-05:00 ovh-vm-us-starter-97-vin sshd[1187508]: Invalid user admin from 104.248.170.167 port 48052
2026-03-07T16:20:46.237501-05:00 ovh-vm-us-starter-97-vin sshd[1187513]: Invalid user admin from 104.248.170.167 port 52096
2026-03-07T16:21:23.500353-05:00 ovh-vm-us-starter-97-vin sshd[1187518]: Invalid user admin from 104.248.170.167 port 53166
...
show less
[fail2ban Auto Report] 2026-03-07T16:19:58.518985-05:00 alpha sshd-session[145428]: Invalid user adm ...
show more[fail2ban Auto Report] 2026-03-07T16:19:58.518985-05:00 alpha sshd-session[145428]: Invalid user admin from 104.248.170.167 port 46310
...
show less
Brute-Force
SSH
Anonymous
Mar 7 21:07:54 ns5024002 sshd[1659203]: Failed password for root from 104.248.170.167 port 60308 ss ...
show moreMar 7 21:07:54 ns5024002 sshd[1659203]: Failed password for root from 104.248.170.167 port 60308 ssh2
Mar 7 21:08:47 ns5024002 sshd[1659909]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.170.167 user=root
Mar 7 21:08:49 ns5024002 sshd[1659909]: Failed password for root from 104.248.170.167 port 53710 ssh2
Mar 7 21:09:44 ns5024002 sshd[1660632]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.170.167 user=root
Mar 7 21:09:47 ns5024002 sshd[1660632]: Failed password for root from 104.248.170.167 port 49902 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 15 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩