JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.248.203.154

104.248.203.154 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 32%: ?

32%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.248.203.154

Whois 104.248.203.154

IP Abuse Reports for 104.248.203.154:

This IP address has been reported a total of 16 times from 16 distinct sources. 104.248.203.154 was first reported on June 25th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇱🇹 NotACaptcha	2026-07-05 07:48:09 (1 day ago)	Unauthorised access (Jul 5 10:48) SRC=104.248.203.154 LEN=44 TTL=245 ID=26078 TCP DPT=3389 WINDOW=1 ... show more Unauthorised access (Jul 5 10:48) SRC=104.248.203.154 LEN=44 TTL=245 ID=26078 TCP DPT=3389 WINDOW=1025 SYN show less	Port Scan
🇬🇧 Nov	2026-07-05 07:47:10 (1 day ago)	Unauthorized access attempt (tcp/11000)	Port Scan
🇫🇷 Petre 21_ip	2026-07-05 07:37:46 (1 day ago)	2026-07-05T09:37:45.216996+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c ... show more 2026-07-05T09:37:45.216996+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=104.248.203.154 DST=155.133.26.57 LEN=44 TOS=0x00 PREC=0x00 TTL=244 ID=42973 PROTO=TCP SPT=61011 DPT=8083 WINDOW=1025 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇩🇪 _ArminS_	2026-07-05 07:37:02 (1 day ago)	SP-Scan 61007:8808 detected 2026.07.05 09:37:02 blocked until 2026.08.24 02:39:49	Port Scan
Anonymous	2026-07-02 13:32:15 (4 days ago)	Port scan / connection attempts on ports 8085/TCP, 8087/TCP, 27017/TCP to unused IP	Port Scan
🇳🇱 EGP Abuse Dept	2026-03-23 00:15:03 (3 months ago)	Port connection indicating compromised host	Port Scan Hacking Exploited Host
🇹🇷 Threat.live	2025-12-22 05:15:14 (6 months ago)	Brute Force, tcp/22	Brute-Force
🇬🇧 oolivero45	2025-12-22 05:04:47 (6 months ago)	Dec 22 05:01:41 nervous-edison8 sshd[802441]: Failed password for root from 104.248.203.154 port 375 ... show more Dec 22 05:01:41 nervous-edison8 sshd[802441]: Failed password for root from 104.248.203.154 port 37554 ssh2 Dec 22 05:03:13 nervous-edison8 sshd[803133]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.203.154 user=root Dec 22 05:03:15 nervous-edison8 sshd[803133]: Failed password for root from 104.248.203.154 port 58336 ssh2 Dec 22 05:04:44 nervous-edison8 sshd[803800]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.203.154 user=root Dec 22 05:04:46 nervous-edison8 sshd[803800]: Failed password for root from 104.248.203.154 port 57300 ssh2 ... show less	Brute-Force SSH
🇦🇺 specializedtom	2025-12-22 05:00:20 (6 months ago)	Fail2Ban triggered a ban on 104.248.203.154 for postfix-sasl	Phishing Email Spam Spoofing
🇩🇪 FunyMails	2025-12-22 04:59:59 (6 months ago)	Dec 22 04:58:13 localhost sshd[3764982]: Connection closed by authenticating user root 104.248.203.1 ... show more Dec 22 04:58:13 localhost sshd[3764982]: Connection closed by authenticating user root 104.248.203.154 port 39814 [preauth] Dec 22 04:59:56 localhost sshd[3764984]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.203.154 user=root Dec 22 04:59:59 localhost sshd[3764984]: Failed password for root from 104.248.203.154 port 38178 ssh2 ... show less	Brute-Force SSH
🇩🇪 Alex1992	2025-12-22 04:59:05 (6 months ago)	2025-12-22T07:59:03.203799+03:00 servereu7fbb sshd[302310]: pam_unix(sshd:auth): authentication fail ... show more 2025-12-22T07:59:03.203799+03:00 servereu7fbb sshd[302310]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.203.154 user=root 2025-12-22T07:59:04.671357+03:00 servereu7fbb sshd[302310]: Failed password for root from 104.248.203.154 port 42726 ssh2 ... show less	Brute-Force SSH
🇨🇭 Elysium Security	2025-12-22 04:54:22 (6 months ago)	Mass port scanning on a whole network	Port Scan
🇫🇷 centurion	2025-12-22 02:05:47 (6 months ago)	Unauthorized attempt on uptime [8080/tcp] Source port: 61015 TTL: 244 Packet length: 44 TOS: 0x00 ht ... show more Unauthorized attempt on uptime [8080/tcp] Source port: 61015 TTL: 244 Packet length: 44 TOS: 0x00 https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 RAP	2025-12-22 01:33:26 (6 months ago)	2025-12-22 01:33:26 UTC Unauthorized activity to TCP port 8088. Web App	Port Scan Web App Attack
🇩🇪 Admins@FBN	2025-11-12 04:37:45 (7 months ago)	FW-PortScan: Traffic Blocked srcport=61015 dstport=8089	Port Scan

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 2602:80d:1005::18

🇺🇸 195.184.76.61

🇧🇷 191.253.105.84

🇬🇧 185.216.145.169

🇹🇭 152.32.247.54

🇺🇸 107.172.62.122

🇬🇧 92.60.127.186

🇸🇬 47.84.109.175

🇺🇸 44.22.143.42

🇳🇱 195.170.172.118

🇭🇺 185.187.72.102

🇲🇾 173.239.236.215

🇫🇷 161.97.184.39

🇰🇷 121.141.77.215

🇳🇬 62.173.38.229

🇺🇸 54.184.242.161

🇸🇬 47.82.53.248

🇳🇱 45.148.10.157

🇧🇪 44.11.33.80

🇹🇼 211.75.3.37