JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

104.248.154.60

Neutral Activity

Abuse Confidence Score

0% Low Risk

38 reports

28 reporters · latest 8 months ago

ISP: DigitalOcean, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Domain Name: digitalocean.com
Country: 🇸🇬 Singapore
City: Singapore

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

104.248.154.60 has been reported 38 times. The most recent report is from 8 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

38 from 28 distinct reporters

First reported

February 21st 2026

Most recent report

8 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 ras07	2026-02-22 01:00:04 UTC · (8 months ago)	SSH login attempts with user root.	Brute-Force SSH
🇲🇽 gbzret4d	2026-02-22 00:10:57 UTC · (8 months ago)	Blocked by CrowdSec. Scenario: crowdsecurity/ssh-slow-bf	Brute-Force SSH
🇮🇱 31323334.xyz	2026-02-22 00:07:32 UTC · (8 months ago)	Feb 22 00:05:31 instance-20241026-2018 sshd[1376339]: Failed password for root from 104.248.154.60 port 33240 ssh2 Feb 22 00:06:32 instance-20241026-2018 sshd[1376399]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= ... show more Feb 22 00:05:31 instance-20241026-2018 sshd[1376339]: Failed password for root from 104.248.154.60 port 33240 ssh2 Feb 22 00:06:32 instance-20241026-2018 sshd[1376399]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.154.60 user=root Feb 22 00:06:34 instance-20241026-2018 sshd[1376399]: Failed password for root from 104.248.154.60 port 50880 ssh2 Feb 22 00:07:29 instance-20241026-2018 sshd[1376454]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.154.60 user=root Feb 22 00:07:31 instance-20241026-2018 sshd[1376454]: Failed password for root from 104.248.154.60 port 60410 ssh2 ... show less	Brute-Force SSH
🇳🇱 Antti	2026-02-22 00:07:26 UTC · (8 months ago)	Feb 22 00:05:25 antti-vps2 sshd[1042784]: User root from 104.248.154.60 not allowed because none of user's groups are listed in AllowGroups Feb 22 00:06:27 antti-vps2 sshd[1042966]: Connection from 104.248.154.60 port 35310 on 10.0.0.124 port 22 rdom ... show more Feb 22 00:05:25 antti-vps2 sshd[1042784]: User root from 104.248.154.60 not allowed because none of user's groups are listed in AllowGroups Feb 22 00:06:27 antti-vps2 sshd[1042966]: Connection from 104.248.154.60 port 35310 on 10.0.0.124 port 22 rdomain "" Feb 22 00:06:28 antti-vps2 sshd[1042966]: User root from 104.248.154.60 not allowed because none of user's groups are listed in AllowGroups Feb 22 00:07:25 antti-vps2 sshd[1043149]: Connection from 104.248.154.60 port 60312 on 10.0.0.124 port 22 rdomain "" Feb 22 00:07:26 antti-vps2 sshd[1043149]: User root from 104.248.154.60 not allowed because none of user's groups are listed in AllowGroups ... show less	Brute-Force SSH
🇨🇦 KatSystems	2026-02-22 00:07:14 UTC · (8 months ago)	2026-02-22T00:05:14.291134+00:00 vps-b43e0d3e sshd-session[153521]: Failed password for root from 104.248.154.60 port 56522 ssh2 2026-02-22T00:06:12.506583+00:00 vps-b43e0d3e sshd-session[153548]: pam_unix(sshd:auth): authentication failure; logname= ... show more 2026-02-22T00:05:14.291134+00:00 vps-b43e0d3e sshd-session[153521]: Failed password for root from 104.248.154.60 port 56522 ssh2 2026-02-22T00:06:12.506583+00:00 vps-b43e0d3e sshd-session[153548]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.154.60 user=root 2026-02-22T00:06:14.402298+00:00 vps-b43e0d3e sshd-session[153548]: Failed password for root from 104.248.154.60 port 35392 ssh2 2026-02-22T00:07:12.360258+00:00 vps-b43e0d3e sshd-session[153570]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.154.60 user=root 2026-02-22T00:07:14.228217+00:00 vps-b43e0d3e sshd-session[153570]: Failed password for root from 104.248.154.60 port 48054 ssh2 ... show less	Brute-Force SSH
🇧🇷 ItsClairton	2026-02-22 00:07:11 UTC · (8 months ago)	Feb 21 21:05:09 game-04 sshd[3456606]: Failed password for root from 104.248.154.60 port 34084 ssh2 Feb 21 21:06:09 game-04 sshd[3457628]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.154.60 user=ro ... show more Feb 21 21:05:09 game-04 sshd[3456606]: Failed password for root from 104.248.154.60 port 34084 ssh2 Feb 21 21:06:09 game-04 sshd[3457628]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.154.60 user=root Feb 21 21:06:11 game-04 sshd[3457628]: Failed password for root from 104.248.154.60 port 47710 ssh2 Feb 21 21:07:09 game-04 sshd[3460335]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.154.60 user=root Feb 21 21:07:11 game-04 sshd[3460335]: Failed password for root from 104.248.154.60 port 60228 ssh2 ... show less	Brute-Force SSH
🇧🇷 Felipe Brunelli de Andrade	2026-02-22 00:04:07 UTC · (8 months ago)	2026-02-21T21:03:07.438349-03:00 dns1 sshd[19646]: Failed password for root from 104.248.154.60 port 57062 ssh2 2026-02-21T21:03:08.475755-03:00 dns1 sshd[19646]: Connection closed by authenticating user root 104.248.154.60 port 57062 [preauth] 2026- ... show more 2026-02-21T21:03:07.438349-03:00 dns1 sshd[19646]: Failed password for root from 104.248.154.60 port 57062 ssh2 2026-02-21T21:03:08.475755-03:00 dns1 sshd[19646]: Connection closed by authenticating user root 104.248.154.60 port 57062 [preauth] 2026-02-21T21:04:03.317417-03:00 dns1 sshd[19667]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.154.60 user=root 2026-02-21T21:04:05.561613-03:00 dns1 sshd[19667]: Failed password for root from 104.248.154.60 port 41484 ssh2 2026-02-21T21:04:06.330758-03:00 dns1 sshd[19667]: Connection closed by authenticating user root 104.248.154.60 port 41484 [preauth] show less	Brute-Force SSH
🇩🇪 NetWatch	2026-02-22 00:03:15 UTC · (8 months ago)	The IP 104.248.154.60 tried multiple SSH_BRUTE_FORCE logins	Brute-Force
🇨🇦 zXero	2026-02-22 00:03:13 UTC · (8 months ago)	Fail2Ban automatic report - jail: geoip-ssh	Brute-Force SSH DDoS Attack
🇨🇦 senkodev	2026-02-22 00:03:06 UTC · (8 months ago)	2026-02-22T00:02:10.958447Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 104.248.154.60:45306 (158.69.22.11:2222) [session: a4b03b6a59ef] 2026-02-22T00:03:06.634202Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 104.248.154.60:45004 ... show more 2026-02-22T00:02:10.958447Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 104.248.154.60:45306 (158.69.22.11:2222) [session: a4b03b6a59ef] 2026-02-22T00:03:06.634202Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 104.248.154.60:45004 (158.69.22.11:2222) [session: 5dc2f91fc1ad] ... show less	Brute-Force SSH
🇩🇪 guldkage	2026-02-22 00:02:13 UTC · (8 months ago)	Unauthorized connection attempt detected from IP address 104.248.154.60 to port 22 (ger-03) [Z]	Brute-Force Exploited Host
🇬🇧 billy549	2026-02-21 18:48:13 UTC · (8 months ago)	2026-02-21T18:43:53.395799+00:00 ubuntu-hpe-gen8 sshd[1397420]: Invalid user oracle from 104.248.154.60 port 40122 2026-02-21T18:44:55.752950+00:00 ubuntu-hpe-gen8 sshd[1397544]: Invalid user oracle from 104.248.154.60 port 55748 2026-02-21T18:45:59. ... show more 2026-02-21T18:43:53.395799+00:00 ubuntu-hpe-gen8 sshd[1397420]: Invalid user oracle from 104.248.154.60 port 40122 2026-02-21T18:44:55.752950+00:00 ubuntu-hpe-gen8 sshd[1397544]: Invalid user oracle from 104.248.154.60 port 55748 2026-02-21T18:45:59.807787+00:00 ubuntu-hpe-gen8 sshd[1397660]: Invalid user oracle from 104.248.154.60 port 47270 2026-02-21T18:47:05.766324+00:00 ubuntu-hpe-gen8 sshd[1397779]: Invalid user oracle from 104.248.154.60 port 36514 2026-02-21T18:48:12.042953+00:00 ubuntu-hpe-gen8 sshd[1397879]: Invalid user oracle from 104.248.154.60 port 47420 ... show less	Brute-Force SSH
🇩🇪 Sculk Ltd.	2026-02-21 18:43:35 UTC · (8 months ago)	Feb 21 21:39:18 localhost sshd[669736]: Invalid user oracle from 104.248.154.60 port 38708 Feb 21 21:40:21 localhost sshd[669740]: Invalid user oracle from 104.248.154.60 port 45424 Feb 21 21:41:24 localhost sshd[669748]: Invalid user oracle from 104 ... show more Feb 21 21:39:18 localhost sshd[669736]: Invalid user oracle from 104.248.154.60 port 38708 Feb 21 21:40:21 localhost sshd[669740]: Invalid user oracle from 104.248.154.60 port 45424 Feb 21 21:41:24 localhost sshd[669748]: Invalid user oracle from 104.248.154.60 port 36620 Feb 21 21:42:29 localhost sshd[669777]: Invalid user oracle from 104.248.154.60 port 59694 Feb 21 21:43:35 localhost sshd[669799]: Invalid user oracle from 104.248.154.60 port 34302 ... show less	Brute-Force SSH
🇺🇸 SiteHUB Agency	2026-02-21 18:43:06 UTC · (8 months ago)	Brute force activities detected and blocked	Brute-Force
🇬🇧 billy549	2026-02-21 18:28:43 UTC · (8 months ago)	2026-02-21T18:24:29.302094+00:00 ubuntu-hpe-gen8 sshd[1394140]: Invalid user oracle from 104.248.154.60 port 37910 2026-02-21T18:25:33.139755+00:00 ubuntu-hpe-gen8 sshd[1394458]: Invalid user oracle from 104.248.154.60 port 42640 2026-02-21T18:26:34. ... show more 2026-02-21T18:24:29.302094+00:00 ubuntu-hpe-gen8 sshd[1394140]: Invalid user oracle from 104.248.154.60 port 37910 2026-02-21T18:25:33.139755+00:00 ubuntu-hpe-gen8 sshd[1394458]: Invalid user oracle from 104.248.154.60 port 42640 2026-02-21T18:26:34.598192+00:00 ubuntu-hpe-gen8 sshd[1394585]: Invalid user oracle from 104.248.154.60 port 36584 2026-02-21T18:27:38.190363+00:00 ubuntu-hpe-gen8 sshd[1394703]: Invalid user oracle from 104.248.154.60 port 55318 2026-02-21T18:28:42.222121+00:00 ubuntu-hpe-gen8 sshd[1394888]: Invalid user oracle from 104.248.154.60 port 34366 ... show less	Brute-Force SSH

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 213.209.159.210

🇩🇪 195.182.16.23

🇲🇽 187.189.146.22

🇮🇩 182.253.251.49

🇺🇸 162.216.150.246

🇸🇬 159.223.61.156

🇲🇩 89.149.89.121

🇮🇷 87.107.171.136

🇺🇸 34.138.148.10

🇸🇬 34.21.194.253

🇩🇪 23.132.164.185

🇦🇷 181.2.21.185

🇰🇷 175.209.156.146

🇺🇸 150.221.241.30

🇲🇦 102.53.15.180

🇬🇧 35.203.211.231

🇲🇽 187.191.37.43

🇵🇰 153.117.68.75

🇦🇹 135.136.51.215

🇷🇴 80.94.95.115