JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.248.197.172

104.248.197.172 was found in our database!

This IP was reported 382 times. Confidence of Abuse is 17%: ?

17%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.248.197.172

Whois 104.248.197.172

IP Abuse Reports for 104.248.197.172:

This IP address has been reported a total of 382 times from 218 distinct sources. 104.248.197.172 was first reported on March 12th 2021, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 webadmin	2026-05-11 02:49:17 (1 month ago)		Web App Attack
🇦🇹 urnilxfgbez	2026-04-19 22:45:00 (1 month ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇺🇸 xmission.com	2026-04-19 14:53:06 (1 month ago)	Blocked by UFW (TCP on 12000) Source port: 61005 TTL: 237 Packet length: 44 TOS: 0x08 This report ( ... show more Blocked by UFW (TCP on 12000) Source port: 61005 TTL: 237 Packet length: 44 TOS: 0x08 This report (for 104.248.197.172) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 RAP	2026-04-18 02:04:36 (1 month ago)	2026-04-18 02:04:36 UTC Unauthorized activity to TCP port 8443. Web App	Port Scan Web App Attack
🇺🇸 MPL	2026-04-18 01:40:44 (1 month ago)	tcp/8001 (2 or more attempts)	Port Scan
🇬🇧 thetomtaylor.co.uk	2026-04-07 13:14:29 (2 months ago)	Fail2Ban - [SSH]Brute-force login attempts on sshd ... [ice01]	Brute-Force SSH
🇹🇷 rtbh.com.tr	2026-02-06 20:11:25 (4 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇫🇷 SpaceHost-Server	2026-02-04 23:26:33 (4 months ago)		Brute-Force Web App Attack
🇹🇷 rtbh.com.tr	2026-02-04 20:11:24 (4 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 itsolon	2026-02-04 05:25:58 (4 months ago)	Fail2Ban plesk-modsecurity ban	Web App Attack SSH
🇦🇹 urnilxfgbez	2026-02-03 23:45:00 (4 months ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇨🇭 N3prena	2026-02-03 19:46:52 (4 months ago)	Feb 3 20:45:40 node106710-www2-cepv-ch sshd[438201]: Failed password for root from 104.248.197.172 ... show more Feb 3 20:45:40 node106710-www2-cepv-ch sshd[438201]: Failed password for root from 104.248.197.172 port 53172 ssh2 Feb 3 20:46:49 node106710-www2-cepv-ch sshd[438224]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.197.172 user=root Feb 3 20:46:51 node106710-www2-cepv-ch sshd[438224]: Failed password for root from 104.248.197.172 port 43202 ssh2 Feb 3 20:46:49 node106710-www2-cepv-ch sshd[438224]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.197.172 user=root Feb 3 20:46:51 node106710-www2-cepv-ch sshd[438224]: Failed password for root from 104.248.197.172 port 43202 ssh2 ... show less	Brute-Force SSH
Anonymous	2026-02-03 19:44:42 (4 months ago)	Port Scanner	Port Scan
Anonymous	2026-02-03 19:44:08 (4 months ago)	2026-02-03T20:42:54.558620+01:00 test sshd-session[9448]: pam_unix(sshd:auth): authentication failur ... show more 2026-02-03T20:42:54.558620+01:00 test sshd-session[9448]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.197.172 user=root 2026-02-03T20:42:56.131589+01:00 test sshd-session[9448]: Failed password for root from 104.248.197.172 port 41172 ssh2 2026-02-03T20:42:57.726092+01:00 test sshd-session[9448]: Connection closed by authenticating user root 104.248.197.172 port 41172 [preauth] 2026-02-03T20:44:06.487148+01:00 test sshd-session[9461]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.197.172 user=root 2026-02-03T20:44:07.916403+01:00 test sshd-session[9461]: Failed password for root from 104.248.197.172 port 47540 ssh2 ... show less	Brute-Force SSH
🇳🇱 GlobalArt, Inc	2026-02-03 19:42:06 (4 months ago)	2026-02-03T22:39:40.321303+03:00 proxy-msk1 sshd[10951]: Failed password for root from 104.248.197.1 ... show more 2026-02-03T22:39:40.321303+03:00 proxy-msk1 sshd[10951]: Failed password for root from 104.248.197.172 port 38770 ssh2 2026-02-03T22:40:51.444218+03:00 proxy-msk1 sshd[11001]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.197.172 user=root 2026-02-03T22:40:52.847068+03:00 proxy-msk1 sshd[11001]: Failed password for root from 104.248.197.172 port 48004 ssh2 2026-02-03T22:42:04.216616+03:00 proxy-msk1 sshd[11032]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.197.172 user=root 2026-02-03T22:42:05.640142+03:00 proxy-msk1 sshd[11032]: Failed password for root from 104.248.197.172 port 56516 ssh2 show less	Brute-Force SSH

Showing 1 to 15 of 382 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 113.231.14.16

🇮🇳 216.10.247.192

🇺🇸 165.154.235.9

🇺🇸 98.84.131.195

🇧🇬 91.191.209.198

🇨🇳 45.254.50.253

🇩🇪 155.117.127.214

🇩🇪 64.89.163.131

🇺🇸 52.167.144.220

🇺🇸 2605:59c8:44d4:9508:a547:3e22:492b:be46

🇺🇸 216.25.89.117

🇵🇪 181.176.9.81

🇯🇵 160.251.101.169

🇸🇪 81.226.88.121

🇺🇸 216.25.89.79

🇧🇷 205.210.31.208

🇺🇿 185.191.141.115

🇺🇸 165.227.209.27

🇺🇸 98.83.94.113

🇷🇴 92.118.39.236