104.248.129.252

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
32 reports
28 reporters · latest 10 months ago
ISP
DigitalOcean, LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14061
Domain Name
digitalocean.com
Country
🇩🇪 Germany
City
Frankfurt am Main, Hesse
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

104.248.129.252 has been reported 32 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
32 from 28 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 MPL
tcp/3389 (2 or more attempts)
Port Scan
🇩🇪 iNetWorker
trying to access non-authorized port
Port Scan
🇫🇷 Pythagus
Aggressive web scan
SQL Injection Bad Web Bot Web App Attack
🇩🇪 403veli
Confirmed malicious activity observed via T-Pot honeypot Observed 122 events on port 11434 (unknown) from 2026-01-06T19:01:39+00:00 to 2026-01-06T19:03:03.656000+00:00. Sample: {"src_port": 15777, "dest_port": 11434, "src_ip": "104.248.129.252"}
Exploited Host
🇩🇪 guldkage
Unauthorized connection attempt detected from IP address 104.248.129.252 to port 22 (ger-01) [SSH]
Exploited Host
🇩🇪 FutureFm
disconnect from unknown[104.248.129.252] commands=0/0
Port Scan Hacking Bad Web Bot
🇺🇸 DoomS
Brute-Force SSH
🇬🇧 [email protected]
...
Brute-Force SSH
🇫🇷 Pythagus
Aggressive web scan
SQL Injection Bad Web Bot Web App Attack
🇯🇵 mkaraki
1767653157 # Service_probe # SIGNATURE_SEND # source_ip:104.248.129.252 # dst_port:9042 ...
Port Scan
🇬🇧 Steve
Attempts against Pop3/IMAP
Brute-Force
🇩🇪 IP Analyzer
Unauthorized connection attempt from IP address 104.248.129.252
Brute-Force
Anonymous
DNS Compromise DDoS Attack
🇨🇳 ThreatBook.io
ThreatBook Intelligence: Dynamic IP,Spam more details on https://threatbook.io/ip/104.248.129.252 2026-01-04 19:42:00 / 2026-01-04 19:42:01 /
Web App Attack
🇫🇷 Thaliruth
Jan 4 23:27:55 151 postfix/smtpd[4042528]: lost connection after CONNECT from unknown[104.248.129.252] ...
Email Spam Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 195.178.110.227
🇫🇷 172.71.122.252
🇧🇷 170.233.229.67
🇦🇱 79.106.123.34
🇳🇱 45.148.10.141
🇲🇦 41.248.138.150
🇮🇩 182.10.225.46
🇵🇱 176.53.159.197
🇺🇸 162.216.149.160
🇺🇸 98.191.76.246
🇳🇱 77.239.124.40
🇺🇸 76.90.217.237
🇺🇸 199.165.159.111
🇧🇪 198.235.24.164
🇹🇼 198.235.24.107
🇧🇷 170.150.214.45
🇺🇸 170.23.30.153
🇵🇭 160.30.141.11
🇸🇪 158.173.241.47
🇫🇮 147.185.133.66
feedback