AbuseIPDB » 104.248.33.22

104.248.33.22 was found in our database!

This IP was reported 130 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 104.248.33.22

Whois 104.248.33.22

IP Abuse Reports for 104.248.33.22:

This IP address has been reported a total of 130 times from 101 distinct sources. 104.248.33.22 was first reported on January 20th 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
rshict	2025-01-28 10:10:32 (2 weeks ago)	Hacking, Brute-Force, Web App Attack	Hacking Brute-Force Web App Attack
urnilxfgbez	2025-01-26 23:45:00 (2 weeks ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
ThreatBook.io	2025-01-26 22:18:11 (2 weeks ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/104.248.33.22	SSH
Parth Maniar	2025-01-26 18:41:58 (2 weeks ago)	This IP address carried out 12 port scanning attempts on 25-01-2025. For more information or to repo ... show moreThis IP address carried out 12 port scanning attempts on 25-01-2025. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Port Scan SSH
MPL	2025-01-26 06:43:56 (3 weeks ago)	tcp/8000 (2 or more attempts)	Port Scan
diego	2025-01-26 06:20:20 (3 weeks ago)	Events: TCP SYN Discovery or Flooding, Seen 3 times in the last 10800 seconds	DDoS Attack
pjfasano	2025-01-25 11:13:45 (3 weeks ago)	Jan 25 11:13:39 fermi postfix/submission/smtpd[2116821]: lost connection after CONNECT from unknown[ ... show moreJan 25 11:13:39 fermi postfix/submission/smtpd[2116821]: lost connection after CONNECT from unknown[104.248.33.22] Jan 25 11:13:39 fermi postfix/submission/smtpd[2116720]: lost connection after STARTTLS from unknown[104.248.33.22] Jan 25 11:13:39 fermi postfix/submission/smtpd[2116821]: lost connection after CONNECT from unknown[104.248.33.22] Jan 25 11:13:39 fermi postfix/submission/smtpd[2116720]: lost connection after CONNECT from unknown[104.248.33.22] Jan 25 11:13:39 fermi postfix/submission/smtpd[2116821]: lost connection after CONNECT from unknown[104.248.33.22] Jan 25 11:13:40 fermi postfix/submission/smtpd[2116720]: lost connection after CONNECT from unknown[104.248.33.22] Jan 25 11:13:40 fermi postfix/submission/smtpd[2116821]: lost connection after CONNECT from unknown[104.248.33.22] Jan 25 11:13:40 fermi postfix/submission/smtpd[2116720]: lost connection after CONNECT from unknown[104.248.33.22] Jan 25 11:13:40 fermi postfix/submission/smtpd[2116821]: lost connection after ... show less	Brute-Force SSH
websync	2025-01-25 07:29:42 (3 weeks ago)	Kept connecting and disconnecting without issuing any commands	DDoS Attack
guldkage	2025-01-25 06:45:06 (3 weeks ago)	Unauthorized connection attempt detected from IP address 104.248.33.22 to port 23 (ger-03) [d]	Brute-Force Exploited Host
Largnet SOC	2025-01-25 05:11:16 (3 weeks ago)	104.248.33.22 triggered Icarus honeypot on port 143. Check us out on github.	Port Scan Hacking
Largnet SOC	2025-01-25 04:53:37 (3 weeks ago)	104.248.33.22 triggered Icarus honeypot on port 110. Check us out on github.	Port Scan Hacking
saloniamatteo	2025-01-25 04:13:18 (3 weeks ago)	Jan 25 05:13:16 localhost postfix/smtps/smtpd[13148]: improper command pipelining after CONNECT from ... show moreJan 25 05:13:16 localhost postfix/smtps/smtpd[13148]: improper command pipelining after CONNECT from unknown[104.248.33.22]: \026\003\003\001\246\001\000\001\242\003\003(\243E\f\2238\360 \003\001\334\nG\333.I\211\201.\270{\373\205!qiS>\354(\r\252 \006\202P]7\307\024\365\031\350\245\302\233\\h\245\232h\032\240k\225e\201Zc\221\020\2273\253\374\000\212\000\026\0003\000g\300\236\300\242\000\236\0009\000k\300\237\300\243\000\237 Jan 25 05:13:17 localhost postfix/smtps/smtpd[13148]: improper command pipelining after CONNECT from unknown[104.248.33.22]: \026\003\003\001\246\001\000\001\242\003\003\002\273\347\341\275\3515\362\226\234\024\3436\274\340\200]\031Jg\361\032\347\035j\201\|\334\251\256)\353 \207\376\261\024\034<S\364Q\260\3244P%\203\230\032b\2567\366\242\335i7S\351\237\262\227Um\000\212\000\005\000\004\000\a\000\300\000\204\000\272\000A\000\235\300\241\300\235\000= Jan 25 05:13:17 localhost postfix/smtps/smtpd[13148]: improper command pipelining after CONNECT from unknown[104.248.33. ... show less	Brute-Force Exploited Host Web App Attack
8legz.net	2025-01-25 02:02:35 (3 weeks ago)	2025-01-25T03:02:34.969586+01:00 8legz postfix/submission/smtpd[512060]: improper command pipelining ... show more2025-01-25T03:02:34.969586+01:00 8legz postfix/submission/smtpd[512060]: improper command pipelining after CONNECT from unknown[104.248.33.22]: \026\003\003\001\246\001\000\001\242\003\003\357\rc\vh4fM\246\374c2X$D\303lz$\247.\311\323\213\247\202F+\376\005\3438 \213\315\333Z\025\364\|L\365\232#\354;\324,X\231\342)F\024\000\374\220<\207\344f\333\003\375\017\000\212\000\026\0003\000g\300\236\300\242\000\236\0009\000k\300\237\300\243\000\237 2025-01-25T03:02:34.983869+01:00 8legz postfix/submission/smtpd[512060]: improper command pipelining after CONNECT from unknown[104.248.33.22]: \026\003\003\001\246\001\000\001\242\003\003&\t\021\300Q\364\252\320\205\212\222WP8\357&\327K)jX\302\345\236Jjt\210*\2448\177 \032\371D\227\240M\246Y4\242 ?K\200\250\276i\241\340\212A7\245\353z9\b\257\357\261\2502\000\212\000\005\000\004\000\a\000\300\000\204\000\272\000A\000\235\300\241\300\235\000= ... show less	Brute-Force
begou.dev	2025-01-25 01:58:49 (3 weeks ago)	[Threat Intelligence] Port Scanning and/or Unauthorized access -> TCP/993	Port Scan
icera-network.de	2025-01-25 01:29:02 (3 weeks ago)	Jan 25 02:29:02 mail postfix/submission/smtpd[2177437]: improper command pipelining after CONNECT fr ... show moreJan 25 02:29:02 mail postfix/submission/smtpd[2177437]: improper command pipelining after CONNECT from unknown[104.248.33.22]: \026\003\003\001\231\001\000\001\225\003\003\300\310\273N\315ZD\363\330[Z\|\ao\207\340M\204~i\023rH\255Hp\314\331\030\312\v\030 #\300\2565\220n\331l,\235\330\334\251\304\371\033\323-\a\005h\262\271\320\256\355eH\023`G\000\214\332\332\300\022\300\023\300\a\300'\314\024\300/\023\001\300\024\023\002\300( Jan 25 02:29:02 mail postfix/submission/smtpd[2177437]: improper command pipelining after CONNECT from unknown[104.248.33.22]: \026\003\002\001\232\001\000\001\226\003\002\233\037<o\226\351]qZ\362tO3\217Ya<\203i\252\315\344,V\030\017\303%\353\351f \272\265E4\a\315\270\3303\213\027\334\244\231\376\360_\314\035\224L\a\223\377^W\3211_&()\000\212\000\026\0003\000g\300\236\300\242\000\236\0009\000k\300\237\300\243\000\237 Jan 25 02:29:02 mail postfix/submission/smtpd[2177437]: improper command pipelining after CONNECT from unknown[104.248.33.22]: \026\003\001\001\247\ ... show less	Brute-Force