AbuseIPDB » 104.248.20.143

104.248.20.143 was found in our database!

This IP was reported 149 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 104.248.20.143

Whois 104.248.20.143

IP Abuse Reports for 104.248.20.143:

This IP address has been reported a total of 149 times from 116 distinct sources. 104.248.20.143 was first reported on August 30th 2024, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Linuxmalwarehuntingnl	2024-10-07 01:00:07 (3 months ago)	Honeypot HIT	Brute-Force
Flo Flo	2024-10-06 23:48:59 (3 months ago)	104.248.20.143 - - - [07/Oct/2024:01:48:58 +0200] "82.66.117.16" "GET / HTTP/1.1" 444 0 "-" "Mozilla ... show more104.248.20.143 - - - [07/Oct/2024:01:48:58 +0200] "82.66.117.16" "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" 0.000 ... show less	Web App Attack
Shadymint	2024-10-06 22:15:09 (3 months ago)	url probing from IP marked as abusive	Web App Attack
begou.dev	2024-10-06 22:01:40 (3 months ago)	[Threat Intelligence] Port Scanning and/or Unauthorized access -> TCP/995	Port Scan
Rosh	2024-10-06 22:00:10 (3 months ago)	AH02811: stderr from /var/www/vhosts/default/cgi-binauthLogin.cgi: script not found or unable to sta ... show moreAH02811: stderr from /var/www/vhosts/default/cgi-binauthLogin.cgi: script not found or unable to stat show less	Hacking Web App Attack
GVS - Web Content	2024-10-06 21:00:05 (3 months ago)	Spam email content, infected attachments, phishing emails and mail login attempts.	Phishing Email Spam Brute-Force
urmarcht	2024-10-06 20:18:33 (3 months ago)	Bot attack detected : webscan vurnerability	Web App Attack
unifr	2024-10-06 18:03:32 (3 months ago)	Unauthorized IMAP connection attempt	Brute-Force
TrafficAnalyser	2024-10-06 14:37:06 (3 months ago)	Probing "GET /cgi-bin/authLogin.cgi HTTP/1.1"	Web App Attack
geot	2024-10-06 12:58:05 (3 months ago)	GET /v2/_catalog HTTP/1.1 GET /cgi-bin/authLogin.cgi HTTP/1.1	Web App Attack
ⓔⓜⓙⓔⓔ	2024-10-06 08:23:16 (3 months ago)	SMB 🖴 Honeypot: connected to port 445 by 104.248.20.143: port 64602	Port Scan
Rcat	2024-10-06 08:21:14 (3 months ago)	104.248.20.143 - - [06/Oct/2024:17:21:13 +0900] "GET /solr/admin/info/system HTTP/1.1" 400 150 "-" " ... show more104.248.20.143 - - [06/Oct/2024:17:21:13 +0900] "GET /solr/admin/info/system HTTP/1.1" 400 150 "-" "Go-http-client/1.1" ... show less	Hacking
fynndows.de	2024-10-06 08:16:23 (3 months ago)	Requested URL: /cgi-bin/authLogin.cgi, Method: GET, User-Agent: Go-http-client/1.1	Brute-Force Bad Web Bot Web App Attack
check-the-sum.fr	2024-10-06 08:00:20 (3 months ago)	Scan the port number 22 (SSH)	Port Scan SSH
Anonymous	2024-10-06 06:50:52 (3 months ago)	fail2ban apache-modsecurity [msg "Host header is a numeric IP address"] [uri "/"]	Web App Attack