104.248.166.158

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
60% Elevated
22 reports
21 reporters · latest 1 day ago
ISP
DigitalOcean, LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14061
Domain Name
digitalocean.com
Country
🇬🇧 United Kingdom of Great Britain and Northern Ireland
City
London, England
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
22 from 21 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 2 🇹🇷 Turkey 2 🇨🇿 Czechia 1
Most common categories Port Scan 9 Hacking 3 Email Spam 1 Brute-Force 1 DNS Compromise 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
Keenetic Firewall: Unauthorized connection attempt to ports [465/tcp]. Blocked via Kernel/NFLOG Trap. (5 hits in 24h).
Hacking Port Scan
🇩🇪 iNetWorker
firewall-block, port(s): 465/tcp
Port Scan
🇹🇷 mixnet
Port scan: SYN-only probes to 253 hosts / 1 port (465) in 10 minutes. Detected by Mixnet network flow monitoring.
Port Scan
🇹🇷 Domainhizmetleri.com
Source: DH Hunter (Honeypot) | Reason: Portscan (1 ports, 1 attempts in 480h, non-TR)
Port Scan
🇨🇿 lp
anomaly: tcp_port_scan, 3757 > threshold 500, repeats 45368 times
Port Scan
🇯🇵 HeliJP
2026-11-11T10:23:14Z - Unauthorized connection attempt from IP address 104.248.166.158 on port 465.
Port Scan Hacking Brute-Force
🇮🇱 Ilop
[v4-00] Blocked by os-abuseipdb; 5 hits, proto=tcp, ports=465, src_ip=104.248.166.158
Port Scan Hacking
🇫🇮 Maxetow
Scan port: 465 | 1 total | size=60B
Port Scan
🇫🇷 uthul
T-Pot honeypot: 6 hits on ports [465] (automated)
Email Spam Port Scan
🇩🇪 xortex
several attempts to forbidden dns queries
DNS Compromise DNS Poisoning
🇫🇷 masterguru
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 104.248.166.158 (GB/United Kingdom/-): 1 in the last 3600 secs (0-197)
Hacking
🇳🇱 EGP Abuse Dept
Unauthorized connection to MySQL port 3306
Port Scan Hacking
🇺🇸 Hobby Bob
Feb 19 10:32:11 server dovecot: imap-login: Disconnected: Too many invalid commands (no auth attempts in 1 secs): user=, rip=104.248.166.158, lip=X.X.X.X session=
Port Scan Hacking
🇷🇸 Smel
MH/MP Probe, Scan, Hack -
Port Scan Hacking
🇩🇪 ioexploit.
SYN -> SYN-ACK scan Source port: 61000 Destination port: 4567
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇪 198.235.24.132
🇰🇷 175.209.156.146
🇩🇪 159.89.2.211
🇫🇮 147.185.133.177
🇻🇬 103.47.145.73
🇨🇳 101.96.193.183
🇺🇸 100.4.96.210
🇫🇷 85.204.70.92
🇧🇪 34.77.175.43
🇺🇸 199.165.159.131
🇸🇰 185.188.236.181
🇺🇸 172.234.199.190
🇮🇳 103.176.160.146
🇫🇷 91.231.89.151
🇫🇷 91.196.152.196
🇬🇧 46.101.52.11
🇹🇭 27.130.13.2
🇳🇱 213.209.159.238
🇨🇱 200.120.222.113
🇬🇧 195.96.139.226
feedback