JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.131.39.48

104.131.39.48 was found in our database!

This IP was reported 380 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Clifton, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.131.39.48

Whois 104.131.39.48

IP Abuse Reports for 104.131.39.48:

This IP address has been reported a total of 380 times from 104 distinct sources. 104.131.39.48 was first reported on October 18th 2023, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 rtbh.com.tr	2025-02-27 20:49:25 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-02-26 20:49:27 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇮🇳 Parth Maniar	2025-02-26 14:43:31 (1 year ago)	This IP address carried out 249 SSH credential attack (attempts) on 25-02-2025. For more information ... show more This IP address carried out 249 SSH credential attack (attempts) on 25-02-2025. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Brute-Force SSH
🇳🇱 ATV	2025-02-26 03:03:04 (1 year ago)	Unsolicited connection attempts to port 2222	Port Scan
🇨🇳 ThreatBook.io	2025-02-26 00:11:50 (1 year ago)	ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/104.131.39.48	Brute-Force
🇨🇿 ☠\|ʂɧąɖơῳ\|☠	2025-02-25 22:36:44 (1 year ago)	[2025 Feb 25 23:36:10] Suspiciously High Count (1259 x) of RST Packets / 24 Hours detected from 104. ... show more [2025 Feb 25 23:36:10] Suspiciously High Count (1259 x) of RST Packets / 24 Hours detected from 104.131.39.48 () 00:00:06 \| SPT=36774 > DPT=2222 00:00:07 \| SPT=36774 > DPT=2222 00:00:45 \| SPT=53608 > DPT=2222 00:00:46 \| SPT=53608 > DPT=2222 00:00:47 \| SPT=53608 > DPT=2222 00:01:26 \| SPT=41358 > DPT=2222 00:01:27 \| SPT=41358 > DPT=2222 00:01:28 \| SPT=41358 > DPT=2222 00:02:08 \| SPT=44702 > DPT=2222 00:02:10 \| SPT=44702 > DPT=2222 00:02:52 \| SPT=46262 > DPT=2222 00:02:53 \| SPT=46262 > DPT=2222 00:03:32 \| SPT=33470 > DPT=2222 00:03:33 \| SPT=33470 > DPT=2222 00:03:34 \| SPT=33470 > DPT=2222 00:04:12 \| SPT=43150 > DPT=2222 00:04:13 \| SPT=43150 > DPT=2222 00:04:14 \| SPT=43150 > DPT=2222 00:04:53 \| SPT=40324 > DPT=2222 00:04:54 \| SPT=40324 > DPT=2222 00:04:55 \| SPT=40324 > DPT=2222 00:05:34 \| SPT=35146 > DPT=2222 00:05:35 \| SPT=35146 > DPT=2222 00:05:36 \| SPT=35146 > DPT=2222 00:06:14 \| SPT=47330 > DPT=2222 show less	Hacking
🇹🇷 rtbh.com.tr	2025-02-25 20:49:28 (1 year ago)	list.rtbh.com.tr report: tcp/0, tcp/2222	Brute-Force
🇺🇸 thardie	2025-02-25 19:07:14 (1 year ago)	2025-02-25T11:04:26.317945-08:00 orcas sshd[5041]: Invalid user binance from 104.131.39.48 2025-02-2 ... show more 2025-02-25T11:04:26.317945-08:00 orcas sshd[5041]: Invalid user binance from 104.131.39.48 2025-02-25T11:05:10.026902-08:00 orcas sshd[6250]: Invalid user kraken from 104.131.39.48 2025-02-25T11:05:50.581492-08:00 orcas sshd[7168]: Invalid user bitfinex from 104.131.39.48 2025-02-25T11:06:32.333226-08:00 orcas sshd[10431]: Invalid user kucoin from 104.131.39.48 2025-02-25T11:07:13.470079-08:00 orcas sshd[12007]: Invalid user gemini from 104.131.39.48 ... show less	Brute-Force SSH
🇩🇪 mxpgmbh	2025-02-25 19:05:57 (1 year ago)	2025-02-25T20:05:14.440263+01:00 ** sshd[7557]: pam_unix(sshd:auth): authentication failure; logna ... show more 2025-02-25T20:05:14.440263+01:00 sshd[7557]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.39.48 2025-02-25T20:05:16.990349+01:00 sshd[7557]: Failed password for invalid user from 104.131.39.48 port 53224 ssh2 2025-02-25T20:05:54.967974+01:00 sshd[9179]: Invalid user from 104.131.39.48 port 53236 2025-02-25T20:05:55.068714+01:00 sshd[9179]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.39.48 2025-02-25T20:05:56.911606+01:00 sshd[9179]: Failed password for invalid user ** from 104.131.39.48 port 53236 ssh2 show less	Brute-Force SSH
🇳🇱 bitosis	2025-02-25 19:05:39 (1 year ago)	Feb 25 20:04:13 jumphost sshd[3470164]: Invalid user binance from 104.131.39.48 port 59944 Feb 25 20 ... show more Feb 25 20:04:13 jumphost sshd[3470164]: Invalid user binance from 104.131.39.48 port 59944 Feb 25 20:04:57 jumphost sshd[3470192]: Invalid user kraken from 104.131.39.48 port 43518 Feb 25 20:05:38 jumphost sshd[3470212]: Invalid user bitfinex from 104.131.39.48 port 56964 ... show less	Brute-Force SSH
🇫🇮 itbyhf	2025-02-25 19:05:27 (1 year ago)	2025-02-25T21:04:02.210289+02:00 backup-hel sshd[1233206]: Failed password for invalid user binance ... show more 2025-02-25T21:04:02.210289+02:00 backup-hel sshd[1233206]: Failed password for invalid user binance from 104.131.39.48 port 53822 ssh2 2025-02-25T21:04:45.057465+02:00 backup-hel sshd[1233210]: Invalid user kraken from 104.131.39.48 port 52866 2025-02-25T21:04:45.167958+02:00 backup-hel sshd[1233210]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.39.48 2025-02-25T21:04:46.403622+02:00 backup-hel sshd[1233210]: Failed password for invalid user kraken from 104.131.39.48 port 52866 ssh2 2025-02-25T21:05:26.697978+02:00 backup-hel sshd[1233220]: Invalid user bitfinex from 104.131.39.48 port 42308 ... show less	Brute-Force SSH
🇳🇱 Study Bitcoin 🤗	2025-02-25 18:40:16 (1 year ago)	Port probe to tcp/2222 (rockwell csp2) [srv127]	Port Scan SSH
🇺🇸 MPL	2025-02-25 18:36:03 (1 year ago)	tcp/2222 (3 or more attempts)	Port Scan
🇺🇸 MPL	2025-02-25 18:02:09 (1 year ago)	tcp/2222 (12 or more attempts)	Port Scan
🇧🇷 diego	2025-02-25 18:01:12 (1 year ago)	Events: TCP SYN Discovery or Flooding, Seen 24 times in the last 10800 seconds	DDoS Attack

Showing 1 to 15 of 380 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇺 2406:da1c:dd:1702:8f30:6a28:814b:8182

🇳🇱 185.242.226.33

🇨🇳 121.227.152.171

🇫🇷 85.217.140.12

🇩🇪 69.5.169.229

🇺🇸 47.85.8.171

🇺🇸 216.244.66.195

🇺🇸 209.50.165.248

🇺🇸 209.50.160.13

🇨🇳 202.117.56.252

🇧🇪 198.235.24.149

🇧🇷 164.152.36.29

🇺🇸 104.207.46.245

🇺🇸 104.207.33.34

🇩🇪 69.5.169.182

🇬🇧 35.203.210.250

🇬🇧 35.203.210.119

🇩🇪 5.83.135.102

🇭🇰 219.77.29.251

🇷🇺 152.32.176.68