AbuseIPDB » 104.207.148.231
104.207.148.231 was found in our database!
This IP was reported 20 times. Confidence of Abuse is 91%: ?
| ISP | Vultr Holdings, LLC |
|---|---|
| Usage Type | Data Center/Web Hosting/Transit |
| ASN | AS20473 |
| Hostname(s) |
104.207.148.231.vultrusercontent.com |
| Domain Name | vultr.com |
| Country | 🇺🇸 United States of America |
| City | Santa Clara, California |
IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.
IP Abuse Reports for 104.207.148.231:
This IP address has been reported a total of 20 times from 17 distinct sources. 104.207.148.231 was first reported on , and the most recent report was .
Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories | |
|---|---|---|---|---|
| 🇧🇷 gabzin |
[19:58:36] TCP Connection from 104.207.148.231:56426 to *****:3389.
|
Port Scan | ||
| 🇺🇸 Loris007 |
Fail2Ban (Opencanary (RDP)) detected attack from 104.207.148.231
|
Port Scan Brute-Force SSH | ||
| 🇩🇪 Luhte |
|
Port Scan Hacking | ||
| Anonymous |
Trying ports that it shouldn't be.
|
Port Scan Hacking Exploited Host | ||
| 🇵🇱 nfsec.pl |
Detected: TCP scan on port: 3389 with flags: SYN
|
Port Scan | ||
| 🇩🇪 Honeypot-EU-Fru |
1785278469 - 07/29/2026 00:41:09 Host: 104.207.148.231/104.207.148.231 Port: 3389 TCP Blocked
...
|
Port Scan | ||
| 🇯🇵 mkaraki |
1785278421 # Service_probe # SIGNATURE_SEND # source_ip:104.207.148.231 # dst_port:3389
...
|
Port Scan | ||
| 🇺🇸 HamSammich |
Automated sensor: 1 RDP connection/probe attempts over the last 24h (latest 2026-07-28T22:40Z).
|
Port Scan Brute-Force | ||
| 🇩🇪 XYCoderXY |
SSH/web brute-force & exploit scanning against lumerux.com (automated report).
|
Brute-Force SSH | ||
| 🇺🇸 ShadowWhisperer |
RDP
|
Port Scan | ||
| 🇩🇪 Loris007 |
Fail2Ban (Opencanary) detected attack from 104.207.148.231
|
Port Scan Brute-Force | ||
| Anonymous |
Tried our host z.
|
Port Scan Hacking Exploited Host | ||
| 🇫🇷 Coco Bongo |
1785277404 - 07/29/2026 00:23:24 Host: 104.207.148.231/104.207.148.231 Port: 3389 TCP Blocked
...
|
Port Scan | ||
| 🇨🇦 alexbfr |
Fail2Ban report from custom-honeypot; automated RDP honeypot detection.
|
Hacking | ||
| 🇦🇹 begou.dev |
[Threat Intelligence] Port Scanning and/or Unauthorized access -> TCP/3389
|
Port Scan |
Showing 1 to 15 of 20 reports
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩