JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.248.195.166

104.248.195.166 was found in our database!

This IP was reported 263 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.248.195.166

Whois 104.248.195.166

IP Abuse Reports for 104.248.195.166:

This IP address has been reported a total of 263 times from 133 distinct sources. 104.248.195.166 was first reported on March 16th 2025, and the most recent report was 5 months ago.

Old Reports: The most recent abuse report for this IP address is from 5 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 rtbh.com.tr	2025-12-26 20:10:40 (5 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇱🇺 SiteXL	2025-12-26 09:12:01 (5 months ago)	{"event":{"DateTime":"2025-12-24T09:10:36Z","RemoteAddr":"104.248.195.166:55864","Protocol":"SSH","C ... show more {"event":{"DateTime":"2025-12-24T09:10:36Z","RemoteAddr":"104.248.195.166:55864","Protocol":"SSH","Command":"","CommandOutput":"","Status":"Stateless","Msg":"New SSH Login Attempt","ID":"06d922bc-c067-4488-9e98-17b555b98cd5","Environ":"","User":"root","Password":"root123","Client":"SSH-2.0-Go","Headers":"","HeadersMap":null,"Cookies":"","UserAgent":"","HostHTTPRequest":"","Body":"","HTTPMethod":"","RequestURI":"","Description":"SSH interactive","SourceIp":"104.248.195.166","SourcePort":"55864","TLSServerName":"","Handler":""},"level":"info","msg":"New Event","status":"Stateless"} {"event":{"DateTime":"2025-12-24T09:11:39Z","RemoteAddr":"104.248.195.166:45112","Protocol":"SSH","Command":"","CommandOutput":"","Status":"Stateless","Msg":"New SSH Login Attempt","ID":"4619febf-287c-49da-88fd-669d8217958b","Environ":"","User":"root","Password":"toor","Client":"SSH-2.0-Go","Headers":"","HeadersMap":null,"Cookies":"","UserAgent":"","HostHTTPRequest":"","Body":"","HTTPMethod":"","RequestURI":"","Description":"SSH inte show less	Port Scan Hacking Brute-Force SSH
🇫🇷 SiyCah	2025-12-26 07:00:03 (5 months ago)	104.248.195.166 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total tim ... show more 104.248.195.166 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time wasted: 3s. Total bytes sent by tarpit: 288B. Report generated by Endlessh Report Generator v1.2.3 show less	Port Scan Hacking Brute-Force SSH
🇫🇷 SpaceHost-Server	2025-12-25 23:26:56 (5 months ago)		Brute-Force Web App Attack
🇨🇳 ThreatBook.io	2025-12-25 22:36:58 (5 months ago)	ThreatBook Intelligence: Scanner,Dynamic IP more details on https://threatbook.io/ip/104.248.195.166	Brute-Force
🇫🇷 SiyCah	2025-12-25 07:00:03 (5 months ago)	104.248.195.166 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total tim ... show more 104.248.195.166 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time wasted: 3s. Total bytes sent by tarpit: 288B. Report generated by Endlessh Report Generator v1.2.3 show less	Port Scan Hacking Brute-Force SSH
🇦🇹 urnilxfgbez	2025-12-24 23:45:00 (5 months ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇫🇷 SpaceHost-Server	2025-12-24 23:26:52 (5 months ago)		Brute-Force Web App Attack
🇹🇷 rtbh.com.tr	2025-12-24 20:10:37 (5 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇬🇧 Russ Hore	2025-12-24 16:01:57 (5 months ago)	2025-12-24T16:00:48.968151+00:00 ubuntu sshd[301313]: Failed password for invalid user debian from 1 ... show more 2025-12-24T16:00:48.968151+00:00 ubuntu sshd[301313]: Failed password for invalid user debian from 104.248.195.166 port 38038 ssh2 2025-12-24T16:01:21.921034+00:00 ubuntu sshd[301324]: Invalid user debian from 104.248.195.166 port 34028 2025-12-24T16:01:22.083652+00:00 ubuntu sshd[301324]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.195.166 2025-12-24T16:01:24.122303+00:00 ubuntu sshd[301324]: Failed password for invalid user debian from 104.248.195.166 port 34028 ssh2 2025-12-24T16:01:56.868860+00:00 ubuntu sshd[301329]: Invalid user debian from 104.248.195.166 port 35282 ... show less	Brute-Force SSH
🇫🇷 Hiigara	2025-12-24 16:00:50 (5 months ago)	connection attempt : 104.248.195.166 on port : tcp/22 (SSH)	Port Scan
Anonymous	2025-12-24 15:59:49 (5 months ago)	Dec 24 15:59:19 s158416 sshd[54622]: Invalid user debian from 104.248.195.166 port 59716 Dec 24 15:5 ... show more Dec 24 15:59:19 s158416 sshd[54622]: Invalid user debian from 104.248.195.166 port 59716 Dec 24 15:59:19 s158416 sshd[54622]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.195.166 Dec 24 15:59:19 s158416 sshd[54622]: Invalid user debian from 104.248.195.166 port 59716 Dec 24 15:59:21 s158416 sshd[54622]: Failed password for invalid user debian from 104.248.195.166 port 59716 ssh2 Dec 24 15:59:47 s158416 sshd[54707]: Invalid user debian from 104.248.195.166 port 34890 ... show less	Brute-Force SSH
🇳🇱 Brict IT	2025-12-24 15:59:27 (5 months ago)	2025-12-24T16:59:27.001764+01:00 sshd[29941]: Connection closed by invalid user 104.248.195.166 port ... show more 2025-12-24T16:59:27.001764+01:00 sshd[29941]: Connection closed by invalid user 104.248.195.166 port [preauth] show less	Brute-Force SSH
🇩🇪 JustPlayer	2025-12-24 15:59:01 (5 months ago)	2025-12-24T16:58:28.094326+01:00 de-milk-fsn01 sshd[1193364]: Invalid user debian from 104.248.195.1 ... show more 2025-12-24T16:58:28.094326+01:00 de-milk-fsn01 sshd[1193364]: Invalid user debian from 104.248.195.166 port 42920 2025-12-24T16:59:00.075854+01:00 de-milk-fsn01 sshd[1193461]: Invalid user debian from 104.248.195.166 port 50486 ... show less	Brute-Force SSH
🇵🇱 sefinek.net	2025-12-24 15:42:55 (5 months ago)	Honeypot hit: Brute-force attack detected on 22/SSH • Credentials: admin:123456, admin:12345, admin: ... show more Honeypot hit: Brute-force attack detected on 22/SSH • Credentials: admin:123456, admin:12345, admin:1234567, admin:12345678, admin:123456789, admin:password, admin:password1, admin:admin123, admin:root123, admin:P@ssw0rd123, admin:letmein • Number of login attempts: 11 • 4 command(s) were executed during the session • Client: SSH-2.0-Go show less	Hacking Brute-Force SSH

Showing 1 to 15 of 263 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇳 203.23.199.89

🇹🇼 198.235.24.81

🇺🇸 47.251.84.56

🇨🇦 216.73.162.133

🇸🇬 172.253.211.23

🇨🇳 116.237.181.57

🇺🇸 64.23.161.101

🇱🇹 45.227.254.170

🇧🇷 20.206.91.91

🇨🇳 14.103.115.143

🇨🇦 4.204.223.67

🇨🇦 216.73.162.152

🇨🇦 216.73.162.134

🇺🇸 198.46.168.51

🇪🇹 196.190.43.161

🇮🇹 158.173.77.50

🇨🇳 124.193.81.23

🇨🇳 101.81.76.237

🇮🇪 52.50.83.207

🇨🇳 27.150.188.148