JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.248.133.158

104.248.133.158

Recent Activity

23 reports found in our database

100% ▲ ▲ ▲ Critical

Abuse confidence score ?

ISP

DigitalOcean, LLC

Usage Type

Data Center/Web Hosting/Transit

ASN

AS14061

Domain Name

digitalocean.com

Country

🇩🇪 Germany

City

Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 104.248.133.158:

This IP address has been reported a total of 23 times from 21 distinct sources. 104.248.133.158 was first reported on August 17th 2025, and the most recent report was 1 day ago. In the last 60 days, the top reporter locations were: Germany with 10 reports; United States of America with 4 reports; Netherlands with 3 reports. The most common categories in these recent reports were: Web App Attack 16 times; Bad Web Bot 8 times; Brute-Force 6 times; Hacking 5 times; Port Scan 2 times; Other 2 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 SCHAPPY	2026-09-14 00:19:01 (1 day ago)	Probing for non-installed web apps or current vulnerabilities.	Hacking Web App Attack
🇩🇪 Holger	2026-09-14 00:17:20 (1 day ago)	Bruteforce WebAttack	Brute-Force Web App Attack
🇺🇸 kosada.com	2026-09-13 23:20:50 (1 day ago)	Repeated requests for suspicious nonexistent URLs, for example: /wp/ (HTTP/2.0 port 443, user agent: ... show more Repeated requests for suspicious nonexistent URLs, for example: /wp/ (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Mobile/15E148 Safari/604.1") show less	Web App Attack
🇦🇺 paulshipley.com.au	2026-09-13 23:15:58 (1 day ago)	levellapromotions.com.au:443 104.248.133.158 - - [14/Sep/2026:09:15:57 +1000] "HEAD /wordpress/ HTTP ... show more levellapromotions.com.au:443 104.248.133.158 - - [14/Sep/2026:09:15:57 +1000] "HEAD /wordpress/ HTTP/1.1" 404 5067 "https://focuspromo.com.au/wordpress/" "Mozilla/5.0 (Linux; Android 14; SM-A146P) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/25.0 Chrome/123.0.6312.120 Mobile Safari/537.36" ... show less	Web App Attack
🇳🇱 Joop	2026-09-13 23:15:18 (1 day ago)	2026-09-14 01:15:17 +0200 s40 /backup/	Web App Attack
Anonymous	2026-09-13 23:09:15 (1 day ago)	LH-Watcher: BRUTE_FORCE	Bad Web Bot
🇩🇪 findlab	2026-09-13 22:00:01 (1 day ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
🇬🇧 Xiaohack	2026-09-13 21:56:04 (1 day ago)	2026-09-13 23:56:02 WARNING: 404 list at URL: /wordpress/ - Referrer: http://ferrimadera.com/wordpre ... show more 2026-09-13 23:56:02 WARNING: 404 list at URL: /wordpress/ - Referrer: http://ferrimadera.com/wordpress/ - List: 404 Not Found: The requested URL was not found on the server. If you entered the URL manually please check your spelling and try again. - IP: 104.248.133.158 - User-Agent: Mozilla/5.0 (Linux; Android 12; TECNO CK6n) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.50 Mobile Safari/537.36 [in routes : not_found_error : 31] 2026-09-13 23:56:02 WARNING: 404 list at URL: /old/ - Referrer: http://ferrimadera.com/old/ - List: 404 Not Found: The requested URL was not found on the server. If you entered the URL manually please check your spelling and try again. - IP: 104.248.133.158 - User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 17_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1 [in routes : not_found_error : 31] 2026-09-13 23:56:02 WARNING: 404 list at URL: /backup/ - Referrer: http://ferrimadera.com/backup/ - List: 404 Not ... show less	Open Proxy Bad Web Bot
🇩🇪 filstal.org	2026-09-13 21:56:03 (1 day ago)	Persistent security scanner: 8 repeated bans (automated vulnerability probing)	Bad Web Bot Web App Attack
🇳🇱 BlueWire Hosting	2026-09-13 21:42:20 (1 day ago)	Aggressive scanning resulting into 404	Bad Web Bot
Anonymous	2026-09-13 21:40:20 (1 day ago)	🔥 Web application attack detected. Vulnerability scanning and exploitation attempts identified.	Web App Attack
🇸🇪 SkyDancer	2026-09-13 20:51:25 (1 day ago)	Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blo ... show more Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blocked by SkyDancer Ai(web-X). show less	Hacking Brute-Force
🇩🇪 Vegascosmetics	2026-09-13 20:45:36 (1 day ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after admin/path reconnaissance / port-scan ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after admin/path reconnaissance / port-scan-like web scan. Evidence: AttackPattern: /backup/ (Match: /backup/) show less	Port Scan Hacking Web App Attack
🇳🇱 MM-bot	2026-09-13 20:32:21 (1 day ago)	URL-probe: HTTP/1.1 HEAD request on /wordpress/ (2026-09-13 22:32:21 UTC+2)	Web App Attack Hacking
🇧🇪 cmbplf	2026-09-13 20:06:20 (1 day ago)	5.816 head requests in 1 hour (1w4h20m)	Brute-Force Bad Web Bot

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 70.169.11.197

🇺🇸 47.77.231.150

🇬🇧 5.226.140.101

🇫🇷 2001:863:3ac:6de3:802e:7878:1009:8683

🇳🇱 204.76.203.213

🇺🇸 195.184.76.130

🇺🇸 173.254.211.184

🇫🇷 162.19.126.75

🇲🇽 148.244.254.66

🇺🇸 144.172.107.23

🇲🇾 113.211.215.87

🇨🇳 112.2.74.151

🇵🇱 109.205.211.29

🇺🇿 109.94.173.183

🇩🇰 103.204.121.242

🇮🇩 103.191.129.50

🇵🇭 103.65.185.34

🇰🇪 102.204.89.200

🇫🇷 91.231.89.110

🇺🇸 66.132.186.193