JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.248.203.87

104.248.203.87 was found in our database!

This IP was reported 445 times. Confidence of Abuse is 46%: ?

46%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.248.203.87

Whois 104.248.203.87

IP Abuse Reports for 104.248.203.87:

This IP address has been reported a total of 445 times from 241 distinct sources. 104.248.203.87 was first reported on May 17th 2023, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 6kilowatti	2026-06-11 01:37:17 (2 days ago)	2026-06-11T04:37:16.273578+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18 ... show more 2026-06-11T04:37:16.273578+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18:bd:57:7e:08:00 SRC=104.248.203.87 DST=5.61.88.83 LEN=44 TOS=0x00 PREC=0x00 TTL=241 ID=33320 PROTO=TCP SPT=61000 DPT=4000 WINDOW=1025 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇬🇧 Andrew	2026-06-11 01:28:20 (2 days ago)	2026-06-11T01:28:15.352075+00:00 Debian sshd[340844]: error: kex_exchange_identification: client sen ... show more 2026-06-11T01:28:15.352075+00:00 Debian sshd[340844]: error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" 2026-06-11T01:28:15.352262+00:00 Debian sshd[340844]: banner exchange: Connection from 104.248.203.87 port 47036: invalid format ... show less	Port Scan Hacking Brute-Force SSH
🇬🇧 PeravixGroup	2026-06-11 00:58:46 (2 days ago)	Honeypot detection: Android Debug Bridge (ADB) unauthorized access attempt on port 5555. Severity: M ... show more Honeypot detection: Android Debug Bridge (ADB) unauthorized access attempt on port 5555. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Hacking
🇵🇱 sefinek.net	2026-06-11 00:21:33 (2 days ago)	Honeypot hit: HTTP/1.1 request on 8000 GET / User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:142.0) ... show more Honeypot hit: HTTP/1.1 request on 8000 GET / User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate; 8000 [2] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇺🇸 MPL	2026-05-12 20:14:06 (1 month ago)	tcp ports: 1337,1177 (3 or more attempts)	Port Scan
🇫🇷 Petre 21_ip	2026-05-12 03:32:44 (1 month ago)	2026-05-12T05:32:43.843396+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c ... show more 2026-05-12T05:32:43.843396+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=104.248.203.87 DST=155.133.26.57 LEN=44 TOS=0x00 PREC=0x00 TTL=244 ID=6537 PROTO=TCP SPT=61001 DPT=11000 WINDOW=1025 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 xmission.com	2026-05-12 03:27:51 (1 month ago)	Blocked by UFW (TCP on 1883) Source port: 61002 TTL: 238 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 1883) Source port: 61002 TTL: 238 Packet length: 44 TOS: 0x08 This report (for 104.248.203.87) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 zupan	2026-05-12 01:02:10 (1 month ago)	Blocked by UFW on vps [465/tcp] \| SPT: 61005 \| TTL: 246 \| LEN: 44 \| TOS: 0x00 • Reported by: github. ... show more Blocked by UFW on vps [465/tcp] \| SPT: 61005 \| TTL: 246 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Email Spam
🇺🇸 sumnone	2026-05-12 01:00:17 (1 month ago)	Port probing on unauthorized port 8181	Port Scan Hacking Exploited Host
🇺🇸 Cyber Crusader	2026-05-11 18:13:57 (1 month ago)	Hundreds of Attempts (at least) to Connect to and Access Firewall Ports	Port Scan Hacking Brute-Force
🇮🇹 sh97	2026-02-12 10:23:34 (4 months ago)	IT02-IF: SSH Brute Force from 104.248.203.87 at 2026-02-12 15:53:34 IST	Brute-Force SSH
🇹🇷 rtbh.com.tr	2026-02-10 20:11:30 (4 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2026-02-09 20:11:28 (4 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇳🇱 Godert Jan van Manen	2026-02-09 08:53:28 (4 months ago)	Feb 9 09:52:38 odin sshd[21782]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ... show more Feb 9 09:52:38 odin sshd[21782]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.203.87 Feb 9 09:52:40 odin sshd[21782]: Failed password for invalid user guest from 104.248.203.87 port 44376 ssh2 Feb 9 09:53:28 odin sshd[21842]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.203.87 show less	Brute-Force SSH
🇩🇪 pianoman911	2026-02-09 08:38:19 (4 months ago)	Feb 9 09:34:53 bigpie sshd[1300162]: Invalid user test from 104.248.203.87 port 44004 Feb 9 09:35: ... show more Feb 9 09:34:53 bigpie sshd[1300162]: Invalid user test from 104.248.203.87 port 44004 Feb 9 09:35:46 bigpie sshd[1309982]: Invalid user test from 104.248.203.87 port 52782 Feb 9 09:36:39 bigpie sshd[1319800]: Invalid user test from 104.248.203.87 port 54112 Feb 9 09:37:29 bigpie sshd[1329560]: Invalid user test from 104.248.203.87 port 34868 Feb 9 09:38:19 bigpie sshd[1338902]: Invalid user test from 104.248.203.87 port 40654 ... show less	Brute-Force SSH

Showing 1 to 15 of 445 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇦 194.42.205.100

🇺🇸 162.216.149.213

🇬🇧 217.146.80.115

🇺🇸 205.210.31.73

🇯🇵 203.25.124.213

🇩🇪 194.88.98.108

🇧🇷 187.56.175.194

🇮🇳 182.95.48.122

🇲🇾 180.74.84.64

🇺🇸 172.93.106.153

🇹🇭 147.50.231.135

🇺🇸 136.144.35.46

🇩🇪 88.99.137.102

🇨🇦 85.217.149.63

🇷🇴 80.94.95.211

🇫🇷 80.87.206.193

🇭🇰 43.154.160.183

🇸🇬 43.134.235.87

🇮🇩 36.65.4.110

🇰🇷 211.230.140.85