This IP address has been reported a total of
95
times from
47 distinct
sources.
104.248.119.140 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 6
reports;
France
with 5
reports;
United States of America
with 4
reports.
The most common categories in these recent reports were:
Port Scan
21
times;
Brute-Force
5
times;
Hacking
3
times;
SSH
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Honeypot detection: port scan / service probe. 4 events observed. 2 distinct ports targeted. Reporte ...
show moreHoneypot detection: port scan / service probe. 4 events observed. 2 distinct ports targeted. Reported automatically from a honeypot sensor.
show less
Honeypot Finding: repeated TCP service probing on TCP/2181 (service); 27 application-level events ac ...
show moreHoneypot Finding: repeated TCP service probing on TCP/2181 (service); 27 application-level events across 27 source port(s). Sensor(s): Honeytrap.
show less
Honeypot Finding: repeated TCP service probing on TCP/8883 (service); 7 application-level events acr ...
show moreHoneypot Finding: repeated TCP service probing on TCP/8883 (service); 7 application-level events across 7 source port(s). Sensor(s): Honeytrap.
show less
Honeypot Finding: active TCP application payload captured by Honeytrap; 14 payload-bearing connectio ...
show moreHoneypot Finding: active TCP application payload captured by Honeytrap; 14 payload-bearing connection/event(s), 873 payload byte(s) total, maximum payload 223 byte(s). Target port(s): 2181.
show less
Honeypot Finding: repeated TCP service probing on TCP/11211 (Memcached); 14 application-level events ...
show moreHoneypot Finding: repeated TCP service probing on TCP/11211 (Memcached); 14 application-level events across 14 source port(s). Sensor(s): Honeytrap.
show less
{"event":{"DateTime":"2026-10-08T08:59:13Z","RemoteAddr":"104.248.119.140:8667","Protocol":"TCP","Co ...
show more{"event":{"DateTime":"2026-10-08T08:59:13Z","RemoteAddr":"104.248.119.140:8667","Protocol":"TCP","Command":"","CommandOutput":"","Status":"Stateless","Msg":"New TCP attempt","ID":"47a0660e-0688-42e2-85ed-9d03eb766039","Environ":"","User":"","Password":"","Client":"","Headers":"","HeadersMap":null,"Cookies":"","UserAgent":"","HostHTTPRequest":"","Body":"","HTTPMethod":"","RequestURI":"","Description":"Mysql 8.0.29","SourceIp":"104.248.119.140","SourcePort":"8667","TLSServerName":"","Handler":""},"level":"info","msg":"New Event","status":"Stateless"}
{"event":{"DateTime":"2026-10-08T08:59:19Z","RemoteAddr":"104.248.119.140:20369","Protocol":"TCP","Command":"\r\n\r\n","CommandOutput":"","Status":"Stateless","Msg":"New TCP attempt","ID":"3df03ac7-647c-4b2a-bcf4-23e9ec525524","Environ":"","User":"","Password":"","Client":"","Headers":"","HeadersMap":null,"Cookies":"","UserAgent":"","HostHTTPRequest":"","Body":"","HTTPMethod":"","RequestURI":"","Description":"Mysql 8.0.29","SourceIp":"104.248.119.140","SourcePort":
show less
