104.248.129.14
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- DigitalOcean, LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14061
- Domain Name
- digitalocean.com
- Country
- 🇩🇪 Germany
- City
- Frankfurt am Main, Hesse
Abuse Reports
Total reports
33 from
26 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇦🇺 dyln |
Dyls honeypot brute-force: Telnet (6 total hits)
|
Brute-Force | |
| 🇺🇸 drewf.ink |
[15:42] Attempted telnet login with credentials :(empty)
|
Brute-Force IoT Targeted | |
| 🇺🇸 ShadowWhisperer |
recon - telnet (Nmap telnet scan) [nmap, scanner]
|
Port Scan IoT Targeted | |
| Anonymous |
Secure Socket Layer (SSL) Version 3.0.
|
Hacking | |
| 🇨🇦 alexbfr |
Fail2Ban report from custom-honeypot; service=FTP; application_protocol=FTP; transport=TCP; destination_port=21; observed_at=2026-10-23T10:15:57Z; reported_at=2026-10-23T10:15:58Z
2026-10-23T10:15:57Z activity=connection accepted
|
FTP Brute-Force | |
| 🇺🇸 kosada.com |
Repeated requests for suspicious nonexistent URLs, for example: /HNAP1 (HTTP/1.1 port 443, bogus vhost, user agent: "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)")
|
Web App Attack | |
| 🇫🇷 Kejult |
Honeypot Finding: repeated TCP service probing on TCP/443 (HTTPS); 8 application-level events across 8 source port(s). Sensor(s): H0neytr4p.
|
Port Scan | |
| 🇨🇦 Anymous |
POST /sdk HTTP/1.1 403 6157 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)"
|
Bad Web Bot | |
| 🇫🇷 Kejult |
Honeypot Finding: active TCP application payload captured by Honeytrap; 13 payload-bearing connection/event(s), 866 payload byte(s) total, maximum payload 223 byte(s). Target port(s): 8086.
|
Port Scan Hacking | |
| 🇫🇷 fzc2000 |
Repeated TCP connections to unused ports on a honeypot
|
Port Scan | |
| 🇪🇸 raiolanetworks.com |
Honeypot detection: SSH/Telnet brute-force. 4 events observed. Reported automatically from a honeypot sensor.
|
Brute-Force SSH | |
| Anonymous |
SIEM ALERT AUTO REPORT
|
Email Spam | |
| 🇩🇪 EnthecSolutions |
Detected by Enthec Solutions. | Attempts: 30 in 24h | Target port: 18789
|
Port Scan Hacking | |
| 🇺🇸 gu-alvareza |
Nmap.Script.Scanner
|
Port Scan | |
| 🇦🇺 LiftUp Hosting |
Honeypot hit: Empty payload (likely service probe); 9092 [21] TCP
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown