Log in to view charts and search reports for this IP.
Log In
No reports in the last 60 days
104.248.203.224 has been reported 115
times. The most recent report is from
.
The full history is preserved below and remains searchable. A
0% score reflects the absence of recent activity, but
this is not a guarantee that earlier reports were invalid. Abuse confidence score decays,
naturally, over time, when the abusive activity stops.
IP Abuse Reports for 104.248.203.224
This IP address has been reported a total of
115
times from
98 distinct
sources.
104.248.203.224 was first reported on
, and the most recent report was
.
(DNSAXFR) NS1 DNS AXFR scan detected 104.248.203.224 (NL/The Netherlands/-): 1 in the last 600 secs; ...
show more(DNSAXFR) NS1 DNS AXFR scan detected 104.248.203.224 (NL/The Netherlands/-): 1 in the last 600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
25 Jun 2026 18:38:38UTC:Distributed Brute Force Password Attack (smtp, ftp, imap, pop, ssh) includin ...
show more25 Jun 2026 18:38:38UTC:Distributed Brute Force Password Attack (smtp, ftp, imap, pop, ssh) including ip address 104.248.203.224
show less
36 attempts since 18.01.2026 16:30:32 CET - last one: 2026-01-18T17:04:08.543489+01:00 alpha sshd-se ...
show more36 attempts since 18.01.2026 16:30:32 CET - last one: 2026-01-18T17:04:08.543489+01:00 alpha sshd-session[792249]: Connection closed by invalid user debian 104.248.203.224 port 60500 [preauth]
show less
2026-01-18T16:31:36.498133+01:00 debianserver sshd-session[1387327]: Failed password for invalid use ...
show more2026-01-18T16:31:36.498133+01:00 debianserver sshd-session[1387327]: Failed password for invalid user admin from 104.248.203.224 port 55934 ssh2
2026-01-18T16:51:56.062554+01:00 debianserver sshd-session[1388131]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.203.224 user=backup
2026-01-18T16:51:57.839431+01:00 debianserver sshd-session[1388131]: Failed password for backup from 104.248.203.224 port 39060 ssh2
...
show less
Automatically reported by the Fail2Ban security system due to suspicious activity
Brute-Force
SSH
Anonymous
Jan 18 18:30:24 38 sshd[2643959]: Invalid user admin from 104.248.203.224 port 60284
Jan 18 18:31:42 ...
show moreJan 18 18:30:24 38 sshd[2643959]: Invalid user admin from 104.248.203.224 port 60284
Jan 18 18:31:42 38 sshd[2643975]: Invalid user admin from 104.248.203.224 port 51406
Jan 18 18:32:55 38 sshd[2644033]: Invalid user admin from 104.248.203.224 port 48244
Jan 18 18:34:12 38 sshd[2644045]: Invalid user admin from 104.248.203.224 port 60010
Jan 18 18:35:19 38 sshd[2644063]: Invalid user admin from 104.248.203.224 port 49278
...
show less