104.248.243.140

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
42 reports
31 reporters · latest 6 months ago
ISP
DigitalOcean, LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14061
Domain Name
digitalocean.com
Country
🇩🇪 Germany
City
Frankfurt am Main, Hesse
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

104.248.243.140 has been reported 42 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
42 from 31 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 donarev419
Port scan detected on port 6443 (connection without data transfer)
Port Scan
🇩🇪 _ArminS_
Spam detected 2026.04.29 05:53:52 blocked until 2026.05.13 05:53:52
Email Spam
🇧🇷 Sipo Chutão
/nice%20ports%2C/Tri%6Eity.txt%2ebak
Hacking
🇩🇪 Honeypot-EU-Fru
Apr 29 04:41:30 [redacted] dovecot: imap-login: Disconnected (disconnected before auth was ready, waited 1 secs): user=<>, rip=104.248.243.140, lip=[redacted], TLS handshaking: read(size=1026) failed: Con ...
Email Spam Brute-Force
🇩🇪 dispaisyenterprises
Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 1234 [16] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB
Port Scan
🇨🇳 ThreatBook.io
ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/104.248.243.140
SSH
🇺🇸 DiodeDave
Attempted access after blacklisting
Email Spam
🇫🇷 Thaliruth
Apr 28 19:36:48 151 postfix/smtpd[2094106]: lost connection after CONNECT from unknown[104.248.243.140] ...
Hacking Brute-Force
🇺🇸 bulkvm.com
[bulkvm.com/honeypot] Generic HTTP. Port: 6493, request: GET / HTTP/1.0 , Time: 2026-04-28 07:23:31 UTC
Hacking
🇨🇳 ThreatBook.io
2026-04-27 03:35:32 / 2026-04-27 03:35:33 /nice%20ports%2C/Tri%6Eity.txt%2ebak 2026-04-27 03:35:32 /
Web App Attack
🇫🇷 sthoyer.de
Web App Attack
🇺🇸 donarev419
Port scan detected on port 8080 (connection without data transfer)
Port Scan
🇧🇪 Depress0
SSH login attempts (endlessh): 2026-04-26T17:39:48.786Z ACCEPT host=::ffff:104.248.243.140 port=27769 fd=6 n=3/4096
Brute-Force SSH
🇨🇦 Largnet SOC
104.248.243.140 triggered Icarus honeypot on port 25. Check us out on github.
Port Scan Hacking
🇺🇸 gu-alvareza
Nmap.Script.Scanner
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 172.212.203.49
🇺🇸 138.68.232.180
🇳🇱 109.160.32.178
🇳🇱 77.239.124.252
🇳🇱 45.94.31.16
🇳🇱 194.26.192.113
🇳🇱 193.47.62.69
🇬🇧 185.216.145.175
🇮🇳 183.82.102.205
🇨🇳 183.56.196.185
🇹🇷 104.28.244.150
🇻🇳 103.39.125.146
🇩🇪 93.152.221.19
🇧🇬 78.128.114.166
🇳🇱 77.91.71.92
🇸🇬 68.183.229.126
feedback