JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.248.248.145

104.248.248.145 was found in our database!

This IP was reported 3,171 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.248.248.145

Whois 104.248.248.145

IP Abuse Reports for 104.248.248.145:

This IP address has been reported a total of 3,171 times from 504 distinct sources. 104.248.248.145 was first reported on April 22nd 2023, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 scientificworld	2024-07-05 16:55:23 (1 year ago)	Blocked by SSHGuard	Brute-Force SSH
🇩🇪 ghostwarriors	2024-03-11 15:58:05 (2 years ago)	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
🇫🇮 Nixwig	2024-02-04 20:46:12 (2 years ago)	Apr 26 04:57:09 nixhub sshd[1556371]: Invalid user devops from 104.248.248.145 port 49196 Apr 26 04: ... show more Apr 26 04:57:09 nixhub sshd[1556371]: Invalid user devops from 104.248.248.145 port 49196 Apr 26 04:57:09 nixhub sshd[1556378]: Invalid user Admin from 104.248.248.145 port 49242 Apr 26 04:57:09 nixhub sshd[1556394]: Invalid user moxa from 104.248.248.145 port 49446 show less	Brute-Force SSH
🇨🇳 ThreatBook.io	2023-07-14 22:25:38 (2 years ago)	ThreatBook Intelligence: Brute Force,Spam more details on https://threatbook.io/ip/104.248.248.145 2 ... show more ThreatBook Intelligence: Brute Force,Spam more details on https://threatbook.io/ip/104.248.248.145 2023-07-14 15:05:59 ["uname -a"] 2023-07-14 15:06:15 ["uname -a"] 2023-07-14 15:06:38 ["uname -a"] 2023-07-14 15:05:47 ["uname -a"] 2023-07-14 15:06:09 ["uname -a"] 2023-07-14 15:06:31 ["uname -a"] 2023-07-14 15:06:05 ["uname -a"] show less	Brute-Force
🇬🇧 DerDoktor	2023-07-14 09:28:13 (2 years ago)	2023-07-14T09:28 Fail2ban action triggered	Port Scan Brute-Force SSH
🇫🇷 haigwepa	2023-07-14 09:17:53 (2 years ago)	Jul 14 11:17:49 haigwepa sshd[14001]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ... show more Jul 14 11:17:49 haigwepa sshd[14001]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.248.145 user=root Jul 14 11:17:51 haigwepa sshd[14001]: Failed password for root from 104.248.248.145 port 43088 ssh2 Jul 14 11:17:51 haigwepa sshd[14003]: Invalid user oracle from 104.248.248.145 port 43104 ... show less	Brute-Force SSH
🇩🇪 MaxAtslega	2023-07-14 08:45:48 (2 years ago)	Jul 14 10:45:47 lab sshd[24757]: Failed password for root from 104.248.248.145 port 49278 ssh2	Brute-Force SSH
Anonymous	2023-07-14 07:59:51 (2 years ago)		Port Scan Brute-Force SSH
🇺🇸 MPL	2023-07-14 07:25:48 (2 years ago)	tcp/22 (4 or more attempts)	Port Scan
Anonymous	2023-07-14 07:21:53 (2 years ago)	(sshd) Failed SSH login from 104.248.248.145 (DE/Germany/-): 5 in the last 3600 secs; Ports: ; Dire ... show more (sshd) Failed SSH login from 104.248.248.145 (DE/Germany/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SSHD; Logs: Jul 14 03:21:45 server5 sshd[18399]: Did not receive identification string from 104.248.248.145 Jul 14 03:21:46 server5 sshd[18400]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.248.145 user=root Jul 14 03:21:48 server5 sshd[18400]: Failed password for root from 104.248.248.145 port 37936 ssh2 Jul 14 03:21:49 server5 sshd[18461]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.248.145 user=root Jul 14 03:21:51 server5 sshd[18461]: Failed password for root from 104.248.248.145 port 57814 ssh2 show less	Brute-Force
🇬🇧 KnightIndustries	2023-07-14 07:05:24 (2 years ago)	Jul 14 07:05:18 ANDROMEDA sshd[72232]: pam_unix(sshd:auth): authentication failure; logname= uid=0 e ... show more Jul 14 07:05:18 ANDROMEDA sshd[72232]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.248.145 user=root Jul 14 07:05:19 ANDROMEDA sshd[72232]: Failed password for root from 104.248.248.145 port 41878 ssh2 Jul 14 07:05:21 ANDROMEDA sshd[72234]: Invalid user oracle from 104.248.248.145 port 41896 ... show less	Brute-Force SSH
🇬🇧 redfox	2023-07-14 06:23:19 (2 years ago)	Jul 14 08:23:14 vps643776 sshd[417112]: Failed password for root from 104.248.248.145 port 49786 ssh ... show more Jul 14 08:23:14 vps643776 sshd[417112]: Failed password for root from 104.248.248.145 port 49786 ssh2 Jul 14 08:23:14 vps643776 sshd[417114]: Invalid user oracle from 104.248.248.145 port 49800 Jul 14 08:23:14 vps643776 sshd[417114]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.248.145 Jul 14 08:23:16 vps643776 sshd[417114]: Failed password for invalid user oracle from 104.248.248.145 port 49800 ssh2 Jul 14 08:23:18 vps643776 sshd[417116]: Invalid user oracle from 104.248.248.145 port 40238 ... show less	Brute-Force SSH
🇨🇦 ggez.win	2023-07-14 05:06:46 (2 years ago)	Jul 14 05:06:45 docker01 sshd[3942128]: error: kex_exchange_identification: Connection closed by rem ... show more Jul 14 05:06:45 docker01 sshd[3942128]: error: kex_exchange_identification: Connection closed by remote host Jul 14 05:06:45 docker01 sshd[3942128]: Connection closed by 104.248.248.145 port 47792 Jul 14 05:06:45 docker01 sshd[3942129]: User root from 104.248.248.145 not allowed because none of user's groups are listed in AllowGroups ... show less	Brute-Force SSH
🇫🇷 security.rdmc.fr	2023-07-14 02:19:12 (2 years ago)	IP in Malicious Database	Web App Attack
🇬🇧 yvoictra	2023-07-14 02:06:53 (2 years ago)	Jul 14 04:06:52 lavrea sshd[2758583]: Invalid user oracle from 104.248.248.145 port 33616 ...	Brute-Force SSH

Showing 1 to 15 of 3171 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 217.160.49.114

🇨🇳 124.117.194.21

🇫🇷 91.231.89.81

🇱🇹 77.90.185.78

🇺🇸 68.66.112.120

🇳🇱 45.148.10.240

🇺🇸 162.241.239.241

🇺🇸 158.51.96.38

🇫🇮 147.185.133.143

🇨🇳 113.194.203.31

🇮🇪 108.131.61.6

🇨🇦 85.217.149.59

🇹🇷 78.187.23.197

🇺🇸 68.192.241.115

🇲🇾 47.250.40.154

🇧🇪 34.14.2.10

🇺🇸 204.111.80.18

🇷🇺 185.147.27.88

🇷🇺 104.28.213.231

🇵🇹 85.243.65.225