This IP address has been reported a total of
185
times from
125 distinct
sources.
104.248.172.3 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 40
reports;
Germany
with 38
reports;
Netherlands
with 16
reports.
The most common categories in these recent reports were:
SSH
112
times;
Brute-Force
110
times;
Port Scan
76
times;
Hacking
15
times;
Web App Attack
6
times;
Other
10
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
SSH honeypot: automated intrusion attempts against a personal decoy server (Server Guardian Warboard ...
show moreSSH honeypot: automated intrusion attempts against a personal decoy server (Server Guardian Warboard). Read-only capture.
show less
SSH honeypot: automated intrusion attempts against a personal decoy server (Server Guardian Warboard ...
show moreSSH honeypot: automated intrusion attempts against a personal decoy server (Server Guardian Warboard). Read-only capture.
show less
Sep 28 20:26:50 ns3291745 sshd[788]: Failed password for root from 104.248.172.3 port 56714 ssh2
Sep ...
show moreSep 28 20:26:50 ns3291745 sshd[788]: Failed password for root from 104.248.172.3 port 56714 ssh2
Sep 28 20:27:05 ns3291745 sshd[882]: Failed password for root from 104.248.172.3 port 55938 ssh2
show less
DNS Compromise
DNS Poisoning
DDoS Attack
Web Spam
Port Scan
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
SSH
SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found
Port Scan
Anonymous
Sep 28 22:17:09 mail sshd-session[892267]: Invalid user admin from 104.248.172.3 port 46624
Sep 28 2 ...
show moreSep 28 22:17:09 mail sshd-session[892267]: Invalid user admin from 104.248.172.3 port 46624
Sep 28 22:18:11 mail sshd-session[892319]: Invalid user user from 104.248.172.3 port 36310
Sep 28 22:18:42 mail sshd-session[892337]: Invalid user ethos from 104.248.172.3 port 50410
...
show less
Honeypot trap triggered: unsolicited TCP connection(s) to unused port(s) 2222 on a host running no s ...
show moreHoneypot trap triggered: unsolicited TCP connection(s) to unused port(s) 2222 on a host running no such service. There is no legitimate reason to connect to these ports.
Observed 1 connection(s) from 2026-09-28T19:39:11Z to 2026-09-28T19:39:11Z UTC.
2026-09-28T19:39:11Z tcp/2222 connect, no payload (bare TCP probe)
Connection was blocked automatically at the firewall. Reported by an automated honeypot.
show less
Port Scan
Hacking
Brute-Force
IoT Targeted
Anonymous
Sep 28 22:00:49 mail sshd-session[891681]: Invalid user system from 104.248.172.3 port 38728
Sep 28 ...
show moreSep 28 22:00:49 mail sshd-session[891681]: Invalid user system from 104.248.172.3 port 38728
Sep 28 22:01:04 mail sshd-session[891694]: Invalid user sys from 104.248.172.3 port 42944
Sep 28 22:01:18 mail sshd-session[891715]: Invalid user scott from 104.248.172.3 port 51846
...
show less
SSH honeypot: automated intrusion attempts against a personal decoy server (Server Guardian Warboard ...
show moreSSH honeypot: automated intrusion attempts against a personal decoy server (Server Guardian Warboard). Read-only capture.
show less
2026-09-28T19:44:37.031831+00:00 byrd sshd-session[3943832]: Invalid user admin from 104.248.172.3 p ...
show more2026-09-28T19:44:37.031831+00:00 byrd sshd-session[3943832]: Invalid user admin from 104.248.172.3 port 40466
2026-09-28T19:44:51.768711+00:00 byrd sshd-session[3943906]: Invalid user admin from 104.248.172.3 port 53672
2026-09-28T19:45:06.529640+00:00 byrd sshd-session[3944002]: Invalid user admin from 104.248.172.3 port 59254
2026-09-28T19:45:20.998197+00:00 byrd sshd-session[3944065]: Invalid user admin from 104.248.172.3 port 38832
2026-09-28T19:45:35.886113+00:00 byrd sshd-session[3944155]: Invalid user admin from 104.248.172.3 port 44250
...
show less
2026-09-28T21:44:31.140083+02:00 coffeelake sshd[1527474]: Invalid user admin from 104.248.172.3 por ...
show more2026-09-28T21:44:31.140083+02:00 coffeelake sshd[1527474]: Invalid user admin from 104.248.172.3 port 56504
2026-09-28T21:44:45.646116+02:00 coffeelake sshd[1527730]: Invalid user admin from 104.248.172.3 port 41784
2026-09-28T21:45:00.636736+02:00 coffeelake sshd[1528059]: Invalid user admin from 104.248.172.3 port 57256
2026-09-28T21:45:15.371788+02:00 coffeelake sshd[1528320]: Invalid user admin from 104.248.172.3 port 52454
2026-09-28T21:45:29.736995+02:00 coffeelake sshd[1528482]: Invalid user admin from 104.248.172.3 port 40706
...
show less
Brute-Force
SSH
Anonymous
Sep 28 21:44:37 mail sshd-session[891066]: Invalid user admin from 104.248.172.3 port 54926
Sep 28 2 ...
show moreSep 28 21:44:37 mail sshd-session[891066]: Invalid user admin from 104.248.172.3 port 54926
Sep 28 21:44:52 mail sshd-session[891077]: Invalid user admin from 104.248.172.3 port 51980
Sep 28 21:45:07 mail sshd-session[891085]: Invalid user admin from 104.248.172.3 port 35346
...
show less
