JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.248.192.137

104.248.192.137 was found in our database!

This IP was reported 157 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.248.192.137

Whois 104.248.192.137

IP Abuse Reports for 104.248.192.137:

This IP address has been reported a total of 157 times from 98 distinct sources. 104.248.192.137 was first reported on February 3rd 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 gooko	2026-05-11 13:47:28 (1 month ago)	SSH brute-force attack detected by fail2ban jail 'sshd'	Brute-Force SSH
🇺🇸 xmission.com	2026-03-18 00:48:36 (3 months ago)	Blocked by UFW (TCP on 1244) Source port: 61010 TTL: 238 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 1244) Source port: 61010 TTL: 238 Packet length: 44 TOS: 0x08 This report (for 104.248.192.137) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇸🇪 SkyDancer	2026-03-18 00:44:13 (3 months ago)	Multiple intrusion attempts via RDP. Attack automatically blocked by SkyDancer Ai(RDP-X).	Hacking Brute-Force
🇵🇱 sefinek.net	2026-03-17 19:55:39 (3 months ago)	Honeypot hit: HTTP/1.1 request on 4000 GET / User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKi ... show more Honeypot hit: HTTP/1.1 request on 4000 GET / User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate; 4000 [2] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇺🇸 xmission.com	2026-03-17 19:55:18 (3 months ago)	Blocked by UFW (TCP on 5000) Source port: 61007 TTL: 236 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 5000) Source port: 61007 TTL: 236 Packet length: 44 TOS: 0x08 This report (for 104.248.192.137) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 phil2k	2026-03-02 11:14:25 (3 months ago)	Firewall: Within 2026-02-04 03:12:48 - 2026-02-04 03:12:48 CET(+0100) identified: unallowed access f ... show more Firewall: Within 2026-02-04 03:12:48 - 2026-02-04 03:12:48 CET(+0100) identified: unallowed access from 104.248.192.137 on port 22(ssh) (1 trial) show less	Port Scan Brute-Force SSH
🇹🇷 rtbh.com.tr	2026-02-08 16:11:26 (4 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2026-02-05 20:11:24 (4 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇫🇮 Deltron3030	2026-02-05 06:15:51 (4 months ago)	SSH brute-force attempt from 104.248.192.137 blocked by .	Brute-Force SSH
🇫🇷 SpaceHost-Server	2026-02-04 23:26:30 (4 months ago)		Brute-Force Web App Attack
🇹🇷 rtbh.com.tr	2026-02-04 20:11:24 (4 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇨🇭 Modules	2026-02-04 11:00:00 (4 months ago)	Cowrie honeypot: cowrie.session.connect, Protocol: ssh \| Cowrie honeypot: cowrie.session.closed, Pro ... show more Cowrie honeypot: cowrie.session.connect, Protocol: ssh \| Cowrie honeypot: cowrie.session.closed, Protocol: ssh \| Cowrie honeypot: cowrie.client.version, Protocol: ssh \| Cowrie honeypot: cowrie.client.kex, Protocol: ssh \| Cowrie honeypot: cowrie.login.success - user: root - password: 123456, Protocol: ssh \| Cowrie honeypot: cowrie.session.params, Protocol: ssh \| Cowrie honeypot: cowrie.command.input, Protocol: ssh \| Cowrie honeypot: cowrie.command.failed, Protocol: ssh \| Cowrie honeypot: cowrie.log.closed, Protocol: ssh (338 events, first: 2026-02-04T02:17:27.024Z, last: 2026-02-04T02:50:00.575Z) show less	Port Scan SSH
🇫🇮 6kilowatti	2026-02-04 04:08:28 (4 months ago)	2026-02-04T06:08:27.401656+02:00 oh6ah sshd[2633159]: Invalid user mysql from 104.248.192.137 port 3 ... show more 2026-02-04T06:08:27.401656+02:00 oh6ah sshd[2633159]: Invalid user mysql from 104.248.192.137 port 36434 ... show less	Brute-Force SSH
🇷🇺 RuVeR	2026-02-04 04:07:32 (4 months ago)	2026-02-04T07:05:29.365636pantelemone.ru sshd[3242970]: Failed password for mysql from 104.248.192.1 ... show more 2026-02-04T07:05:29.365636pantelemone.ru sshd[3242970]: Failed password for mysql from 104.248.192.137 port 41950 ssh2 2026-02-04T07:06:28.264527pantelemone.ru sshd[3243132]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.192.137 user=mysql 2026-02-04T07:06:30.074484pantelemone.ru sshd[3243132]: Failed password for mysql from 104.248.192.137 port 57330 ssh2 2026-02-04T07:07:29.309440pantelemone.ru sshd[3243206]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.192.137 user=mysql 2026-02-04T07:07:31.493612pantelemone.ru sshd[3243206]: Failed password for mysql from 104.248.192.137 port 56980 ssh2 ... show less	Brute-Force SSH
🇫🇷 viki53	2026-02-04 04:07:23 (4 months ago)	Feb 4 05:05:20 portfolio-web sshd[1246381]: Failed password for mysql from 104.248.192.137 port 584 ... show more Feb 4 05:05:20 portfolio-web sshd[1246381]: Failed password for mysql from 104.248.192.137 port 58406 ssh2 Feb 4 05:06:19 portfolio-web sshd[1247014]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.192.137 user=mysql Feb 4 05:06:20 portfolio-web sshd[1247014]: Failed password for mysql from 104.248.192.137 port 43522 ssh2 Feb 4 05:07:20 portfolio-web sshd[1247643]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.192.137 user=mysql Feb 4 05:07:22 portfolio-web sshd[1247643]: Failed password for mysql from 104.248.192.137 port 55324 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 157 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 222.99.52.202

🇨🇴 190.60.60.242

🇬🇧 185.247.137.165

🇻🇳 171.231.184.170

🇺🇸 147.185.132.116

🇺🇸 143.198.71.145

🇨🇦 104.207.49.171

🇬🇧 87.236.176.178

🇬🇧 35.203.210.230

🇨🇳 8.134.239.76

🇺🇸 205.210.31.86

🇩🇪 194.5.49.11

🇲🇽 189.203.182.63

🇺🇸 165.154.206.222

🇺🇸 155.103.69.40

🇻🇳 103.154.62.14

🇧🇩 103.26.136.173

🇳🇱 81.19.216.115

🇳🇱 45.153.34.158

🇧🇪 34.77.47.9