JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.248.133.110

104.248.133.110 was found in our database!

This IP was reported 56 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.248.133.110

Whois 104.248.133.110

IP Abuse Reports for 104.248.133.110:

This IP address has been reported a total of 56 times from 44 distinct sources. 104.248.133.110 was first reported on May 25th 2026, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 licen777	2026-06-05 13:46:55 (6 days ago)	Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-06-05T13:45:55Z and 2026-06-0 ... show more Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-06-05T13:45:55Z and 2026-06-05T13:46:55Z show less	Brute-Force SSH
🇺🇸 gu-alvareza	2026-06-05 07:05:18 (6 days ago)	Nmap.Script.Scanner	Port Scan
Anonymous	2026-06-04 23:07:19 (1 week ago)	[Thu Jun 04 16:07:16.282996 2026] [authz_core:error] [pid 1549040] [client 104.248.133.110:19935] AH ... show more [Thu Jun 04 16:07:16.282996 2026] [authz_core:error] [pid 1549040] [client 104.248.133.110:19935] AH01630: client denied by server configuration: /home/appowner/www/sec/sdk [Thu Jun 04 16:07:16.284849 2026] [authz_core:error] [pid 1556041] [client 104.248.133.110:17257] AH01630: client denied by server configuration: /home/appowner/www/sec/odinhttpcall1780614435 [Thu Jun 04 16:07:16.889747 2026] [authz_core:error] [pid 1549081] [client 104.248.133.110:13073] AH01630: client denied by server configuration: /home/appowner/www/sec/evox [Thu Jun 04 16:07:16.927855 2026] [authz_core:error] [pid 1556031] [client 104.248.133.110:16733] AH01630: client denied by server configuration: /home/appowner/www/sec/HNAP1 [Thu Jun 04 16:07:18.230461 2026] [authz_core:error] [pid 1549038] [client 104.248.133.110:2067] AH01630: client denied by server configuration: /home/appowner/www/sec/ ... show less	Brute-Force SSH
🇫🇷 pm33	2026-06-04 22:04:01 (1 week ago)	Probing for resource vulnerabilities HTTP(S)	Web App Attack
Anonymous	2026-06-04 09:56:46 (1 week ago)	$f2bV_matches	Brute-Force SSH
🇩🇪 Axel	2026-06-04 06:58:57 (1 week ago)	[2026-06-04 06:58:57 UTC] Honeypot HTTP-Alt connection attempt \| AXFRA HONEYPOT	Web App Attack
🇩🇪 DerDoktor	2026-06-04 05:03:02 (1 week ago)	endlessh: 2026-06-04 07:03:01.797062339 2026-06-04T05:03:01.796Z CLOSE host=104.248.133.110 port=43 ... show more endlessh: 2026-06-04 07:03:01.797062339 2026-06-04T05:03:01.796Z CLOSE host=104.248.133.110 port=4337 fd=6 time=10.004 bytes=0 ... show less	Port Scan SSH
🇲🇹 neilcaruana	2026-06-04 04:38:58 (1 week ago)	Sentinel detected an attack on port [18789]	Hacking
🇩🇪 kreativstrecke	2026-06-04 03:00:50 (1 week ago)	2026-06-04T05:00:41.710093+02:00 srv02 postfix/submission/smtpd[78971]: lost connection after CONNEC ... show more 2026-06-04T05:00:41.710093+02:00 srv02 postfix/submission/smtpd[78971]: lost connection after CONNECT from unknown[104.248.133.110] 2026-06-04T05:00:41.738063+02:00 srv02 postfix/submission/smtpd[78971]: improper command pipelining after CONNECT from unknown[104.248.133.110]: EHLO\r\n 2026-06-04T05:00:49.222364+02:00 srv02 postfix/submission/smtpd[78971]: lost connection after EHLO from unknown[104.248.133.110] ... show less	Brute-Force
🇷🇺 apa4h	2026-06-04 02:30:02 (1 week ago)	banned by Fail2Ban postfix	Brute-Force
🇬🇧 PeravixGroup	2026-06-03 21:01:06 (1 week ago)	Honeypot detection: FTP brute-force or anonymous access attempt on port 21. Severity: MEDIUM. Aaran. ... show more Honeypot detection: FTP brute-force or anonymous access attempt on port 21. Severity: MEDIUM. Aaran.cloud show less	FTP Brute-Force Brute-Force
🇬🇧 gurnip	2026-06-03 11:36:18 (1 week ago)	Vulnerability probe of page /odinhttpcall1780486577, not found on server.	Brute-Force Web App Attack
Anonymous	2026-06-03 10:49:08 (1 week ago)	104.248.133.110 - - [03/Jun/2026:19:49:05 +0900] "GET / HTTP/1.0" 403 3090 "-" "-" 104.248.133.110 - ... show more 104.248.133.110 - - [03/Jun/2026:19:49:05 +0900] "GET / HTTP/1.0" 403 3090 "-" "-" 104.248.133.110 - - [03/Jun/2026:19:49:06 +0900] "GET /odinhttpcall1780483746 HTTP/1.1" 403 3086 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" 104.248.133.110 - - [03/Jun/2026:19:49:07 +0900] "POST /sdk HTTP/1.1" 403 3087 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" 104.248.133.110 - - [03/Jun/2026:19:49:08 +0900] "GET /HNAP1 HTTP/1.1" 403 3086 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" 104.248.133.110 - - [03/Jun/2026:19:49:08 +0900] "GET /evox/about HTTP/1.1" 403 3087 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" ... show less	Brute-Force
🇦🇪 abusiveIntelligence	2026-06-03 05:50:00 (1 week ago)	RDP connect attempt: Nmap Scanner	Brute-Force
🇺🇸 donarev419	2026-06-03 00:01:35 (1 week ago)	Port scan detected on port 8080 (connection without data transfer)	Port Scan

Showing 1 to 15 of 56 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.147.125.87

🇧🇷 205.210.31.231

🇧🇪 198.235.24.161

🇮🇩 180.248.49.237

🇺🇸 54.144.94.156

🇳🇱 45.198.224.18

🇺🇦 37.221.133.104

🇺🇸 20.163.34.47

🇺🇸 205.210.31.83

🇺🇸 198.57.179.68

🇺🇸 195.250.29.165

🇺🇸 195.184.76.201

🇧🇷 177.190.77.164

🇳🇱 172.211.56.214

🇮🇳 128.185.228.134

🇮🇳 128.185.220.90

🇮🇳 128.185.218.118

🇺🇸 104.243.35.104

🇭🇰 47.243.207.112

🇹🇷 31.145.131.202