JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.248.237.120

104.248.237.120 was found in our database!

This IP was reported 48 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Hostname(s)	whatzaper.com
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	North Bergen, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.248.237.120

Whois 104.248.237.120

IP Abuse Reports for 104.248.237.120:

This IP address has been reported a total of 48 times from 37 distinct sources. 104.248.237.120 was first reported on April 18th 2023, and the most recent report was 2 years ago.

Old Reports: The most recent abuse report for this IP address is from 2 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Rich Maynard	2024-06-11 15:12:00 (2 years ago)	Dear user, The IP address [104.248.237.120] experienced 2 failed attempts when attempting to log ... show more Dear user, The IP address [104.248.237.120] experienced 2 failed attempts when attempting to log into FTP running on AstroParrotsNAS within 5 minutes, and was blocked at 2023-12-15 07:08. From AstroParrotsNAS show less	FTP Brute-Force Brute-Force
🇺🇸 WhiteFireOCN1	2024-02-17 00:39:06 (2 years ago)	5 unauthorized connection attempts to port 3306 TCP/3306 - 104[.]248[.]237[.]120:55422 - 2024-02-17T ... show more 5 unauthorized connection attempts to port 3306 TCP/3306 - 104[.]248[.]237[.]120:55422 - 2024-02-17T00:35:49 TCP/3306 - 104[.]248[.]237[.]120:55446 - 2024-02-17T00:35:49 TCP/3306 - 104[.]248[.]237[.]120:44972 - 2024-02-17T00:38:07 TCP/3306 - 104[.]248[.]237[.]120:44996 - 2024-02-17T00:38:07 TCP/3306 - 104[.]248[.]237[.]120:42636 - 2024-02-17T00:38:07 show less	Port Scan
🇧🇾 StatsMe	2024-02-06 21:11:23 (2 years ago)	2024-02-06T06:52:34.406131+0300 ET SCAN Suspicious inbound to mySQL port 3306	Port Scan
🇧🇾 sashan	2024-02-06 04:05:20 (2 years ago)	2024-02-06T07:05:19.915122+03:00 gate kernel: [104358.349476] nftables: JAIL-SQL IN=wan OUT= MAC= SR ... show more 2024-02-06T07:05:19.915122+03:00 gate kernel: [104358.349476] nftables: JAIL-SQL IN=wan OUT= MAC= SRC=104.248.237.120 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=2589 DF PROTO=TCP SPT=55994 DPT=3306 WINDOW=29200 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 KitsuneTech	2024-01-19 09:36:51 (2 years ago)	104.248.237.120 - - [19/Jan/2024:03:36:50 -0600] "GET /phpmyadmin2011/index.php?lang=en HTTP/1.1" 30 ... show more 104.248.237.120 - - [19/Jan/2024:03:36:50 -0600] "GET /phpmyadmin2011/index.php?lang=en HTTP/1.1" 301 264 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" ... show less	Hacking
🇺🇸 mnsf	2024-01-19 01:10:22 (2 years ago)	Too many Status 50X (128) Request Overload (128)	Brute-Force Web App Attack
🇮🇪 Jim Keir	2024-01-16 11:17:59 (2 years ago)	2024-01-16 11:17:58 104.248.237.120 File scanning, blocking 104.248.237.120 for 5 minutes	Web App Attack
🇩🇪 GAS	2024-01-13 22:06:02 (2 years ago)	GET /_phpmyadmin/index.php?lang=en HTTP/1.1 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/ ... show more GET /_phpmyadmin/index.php?lang=en HTTP/1.1 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 show less	Port Scan Hacking
Anonymous	2024-01-07 07:14:15 (2 years ago)	104.248.237.120 - - [07/Jan/2024:08:14:14 +0100] "GET /mysql/pma/index.php?lang=en HTTP/1.1" 403 344 ... show more 104.248.237.120 - - [07/Jan/2024:08:14:14 +0100] "GET /mysql/pma/index.php?lang=en HTTP/1.1" 403 344 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇸 WhiteFireOCN1	2024-01-04 18:26:51 (2 years ago)	128 unauthorized connection attempts to port 80 HTTP GET to /sql/sqladmin/index[.]php from 104[.]248 ... show more 128 unauthorized connection attempts to port 80 HTTP GET to /sql/sqladmin/index[.]php from 104[.]248[.]237[.]120:50072 - 2024-01-04T18:24:41 HTTP GET to /sql/phpmyadmin5/index[.]php from 104[.]248[.]237[.]120:50072 - 2024-01-04T18:24:42 HTTP GET to /sql/phpmyadmin4/index[.]php from 104[.]248[.]237[.]120:50072 - 2024-01-04T18:24:43 HTTP GET to /administrator/phpmyadmin/index[.]php from 104[.]248[.]237[.]120:50072 - 2024-01-04T18:24:44 HTTP GET to /administrator/web/index[.]php from 104[.]248[.]237[.]120:50072 - 2024-01-04T18:24:44 HTTP GET to /sql/phpMyAdmin/index[.]php from 104[.]248[.]237[.]120:50072 - 2024-01-04T18:24:45 HTTP GET to /administrator/admin/index[.]php from 104[.]248[.]237[.]120:50072 - 2024-01-04T18:24:46 HTTP GET to /1phpmyadmin/index[.]php from 104[.]248[.]237[.]120:50072 - 2024-01-04T18:24:47 show less	Hacking Web App Attack
🇪🇸 domotuto.com	2023-12-22 12:54:03 (2 years ago)	Mikrotik port scanner detected. EA4GKQ	Port Scan
🇪🇸 domotuto.com	2023-12-21 12:54:02 (2 years ago)	Mikrotik port scanner detected. EA4GKQ	Port Scan
🇺🇸 anon333	2023-12-06 11:34:05 (2 years ago)	Hacker syslog review x 7890.564085367	Hacking
🇪🇸 tg_de	2023-11-28 19:14:26 (2 years ago)	128 attempts since 28.11.2023 19:14:11 UTC - last search for: /db/phpmyadmin4/index.php?lang=en	Web App Attack
Anonymous	2023-11-20 18:50:01 (2 years ago)	2023-11-20 18:50:00 140225755637504 [Warning] Access denied for user 'root'@'104.248.237.120' (using ... show more 2023-11-20 18:50:00 140225755637504 [Warning] Access denied for user 'root'@'104.248.237.120' (using password: YES) 2023-11-20 18:50:00 140225228388096 [Warning] Access denied for user 'root'@'104.248.237.120' (using password: YES) 2023-11-20 18:50:00 140225377433344 [Warning] Access denied for user 'root'@'104.248.237.120' (using password: YES) ... show less	Brute-Force

Showing 1 to 15 of 48 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇾 103.175.16.86

🇿🇼 41.175.90.253

🇺🇸 40.124.186.155

🇬🇧 185.216.145.163

🇨🇳 180.184.178.165

🇺🇸 162.216.149.39

🇨🇳 115.231.78.11

🇸🇬 112.140.184.197

🇧🇬 101.99.94.181

🇨🇦 85.217.149.3

🇺🇸 66.234.152.124

🇺🇸 66.132.186.133

🇨🇳 221.234.36.123

🇩🇪 217.227.123.97

🇨🇳 39.104.64.139

🇺🇸 20.171.25.13

🇷🇺 5.101.17.180

🇳🇱 5.61.209.43

🇺🇸 162.216.149.19

🇮🇳 159.65.144.72