This IP address has been reported a total of
72
times from
42 distinct
sources.
104.248.49.237 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
(sshd) Failed SSH login from 104.248.49.237 (US/United States/-): 5 in the last 3600 secs; Ports: *; ...
show more(sshd) Failed SSH login from 104.248.49.237 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Sep 5 09:42:15 15216 sshd[14019]: Did not receive identification string from 104.248.49.237 port 46052
Sep 5 09:42:40 15216 sshd[14025]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.49.237 user=root
Sep 5 09:42:42 15216 sshd[14025]: Failed password for root from 104.248.49.237 port 46054 ssh2
Sep 5 09:43:06 15216 sshd[14028]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.49.237 user=root
Sep 5 09:43:08 15216 sshd[14028]: Failed password for root from 104.248.49.237 port 51590 ssh2
show less
Brute-Force
SSH
Anonymous
2026-09-04T09:00:41.712439+00:00 arrow-nl1 sshd-session[76614]: Failed password for root from 104.24 ...
show more2026-09-04T09:00:41.712439+00:00 arrow-nl1 sshd-session[76614]: Failed password for root from 104.248.49.237 port 34844 ssh2
2026-09-04T09:00:58.693306+00:00 arrow-nl1 sshd-session[76617]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.49.237 user=root
2026-09-04T09:01:00.922371+00:00 arrow-nl1 sshd-session[76617]: Failed password for root from 104.248.49.237 port 34390 ssh2
...
show less
2026-08-23T05:56:22.491057+05:00 arrow-kz1 sshd[24438]: Failed password for root from 104.248.49.237 ...
show more2026-08-23T05:56:22.491057+05:00 arrow-kz1 sshd[24438]: Failed password for root from 104.248.49.237 port 51958 ssh2
2026-08-23T05:56:42.930313+05:00 arrow-kz1 sshd[24441]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.49.237 user=root
2026-08-23T05:56:45.347058+05:00 arrow-kz1 sshd[24441]: Failed password for root from 104.248.49.237 port 54284 ssh2
...
show less
Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 22222 [1] TCP
Reported by DisPaisy ...
show moreHoneypot [fra-de-honeypot]: Empty payload (likely service probe); 22222 [1] TCP
Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less
(sshd) Failed SSH login from 104.248.49.237 (US/United States/-): 5 in the last 3600 secs; Ports: *; ...
show more(sshd) Failed SSH login from 104.248.49.237 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Aug 22 05:17:59 14415 sshd[4555]: Did not receive identification string from 104.248.49.237 port 60512
Aug 22 05:18:11 14415 sshd[4556]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.49.237 user=root
Aug 22 05:18:13 14415 sshd[4556]: Failed password for root from 104.248.49.237 port 60514 ssh2
Aug 22 05:18:27 14415 sshd[4681]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.49.237 user=root
Aug 22 05:18:29 14415 sshd[4681]: Failed password for root from 104.248.49.237 port 58404 ssh2
show less
2026-08-21T14:41:32.891683+00:00 seraph sshd[1965803]: Failed password for invalid user root from 10 ...
show more2026-08-21T14:41:32.891683+00:00 seraph sshd[1965803]: Failed password for invalid user root from 104.248.49.237 port 55496 ssh2
2026-08-21T14:41:48.335209+00:00 seraph sshd[1965931]: User root from 104.248.49.237 not allowed because not listed in AllowUsers
2026-08-21T14:41:51.728922+00:00 seraph sshd[1965931]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.49.237 user=root
2026-08-21T14:41:54.106941+00:00 seraph sshd[1965931]: Failed password for invalid user root from 104.248.49.237 port 52740 ssh2
2026-08-21T14:42:09.780987+00:00 seraph sshd[1966147]: User root from 104.248.49.237 not allowed because not listed in AllowUsers
...
show less
Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 2222 [1] TCP
Reported by DisPaisy ...
show moreHoneypot [fra-de-honeypot]: Empty payload (likely service probe); 2222 [1] TCP
Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less
(sshd) Failed SSH login from 104.248.49.237 (US/United States/-): 5 in the last 3600 secs; Ports: *; ...
show more(sshd) Failed SSH login from 104.248.49.237 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Aug 19 05:14:41 14506 sshd[20961]: Did not receive identification string from 104.248.49.237 port 47226
Aug 19 05:14:57 14506 sshd[20966]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.49.237 user=root
Aug 19 05:14:59 14506 sshd[20966]: Failed password for root from 104.248.49.237 port 37112 ssh2
Aug 19 05:15:22 14506 sshd[21410]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.49.237 user=root
Aug 19 05:15:24 14506 sshd[21410]: Failed password for root from 104.248.49.237 port 43994 ssh2
show less
(sshd) Failed SSH login from 104.248.49.237 (US/United States/-): 5 in the last 3600 secs; Ports: *; ...
show more(sshd) Failed SSH login from 104.248.49.237 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Aug 19 04:10:58 14218 sshd[11097]: Did not receive identification string from 104.248.49.237 port 34606
Aug 19 04:11:15 14218 sshd[11098]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.49.237 user=root
Aug 19 04:11:17 14218 sshd[11098]: Failed password for root from 104.248.49.237 port 34618 ssh2
Aug 19 04:11:37 14218 sshd[11448]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.49.237 user=root
Aug 19 04:11:38 14218 sshd[11448]: Failed password for root from 104.248.49.237 port 52788 ssh2
show less
Brute-Force
SSH
Showing 1 to
15
of 72 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩