JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

104.248.52.111

Activity Trending Down

Abuse Confidence Score

14% Caution

36 reports

29 reporters · latest 1 month ago

ISP: DigitalOcean, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Domain Name: digitalocean.com
Country: 🇺🇸 United States of America
City: North Bergen, New Jersey

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

36 from 29 distinct reporters

First reported

July 31st 2023

Most recent report

1 month ago

Last 60 days

Top reporter locations 🇩🇪 Germany 1 🇪🇸 Spain 1 🇳🇱 Netherlands 1

Most common categories Port Scan 3 Hacking 2

Old reports The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 raiolanetworks.com	2026-10-09 10:45:01 UTC · (1 month ago)	Honeypot detection: port scan / service probe. 2 events observed. Reported automatically from a honeypot sensor.	Port Scan
🇳🇱 EGP Abuse Dept	2026-10-09 06:03:15 UTC · (1 month ago)	Unauthorized connection to RDP port 3389	Port Scan Hacking
Anonymous	2026-10-09 05:34:05 UTC · (1 month ago)	denied traffic to a honeypot network. destination port 27017.	Port Scan Hacking
🇹🇷 rtbh.com.tr	2026-02-21 20:11:41 UTC · (8 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 SELECT-IT Beratung und IT Dienstleistung GmbH	2026-02-20 00:54:18 UTC · (8 months ago)	2026-02-20T00:52:44.963651+00:00 Door-Opener-Proxy sshd[257470]: Failed password for invalid user hadoop from 104.248.52.111 port 56300 ssh2 2026-02-20T00:53:29.523431+00:00 Door-Opener-Proxy sshd[258300]: Invalid user hadoop from 104.248.52.111 port ... show more 2026-02-20T00:52:44.963651+00:00 Door-Opener-Proxy sshd[257470]: Failed password for invalid user hadoop from 104.248.52.111 port 56300 ssh2 2026-02-20T00:53:29.523431+00:00 Door-Opener-Proxy sshd[258300]: Invalid user hadoop from 104.248.52.111 port 60120 2026-02-20T00:53:29.623264+00:00 Door-Opener-Proxy sshd[258300]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.52.111 2026-02-20T00:53:32.283829+00:00 Door-Opener-Proxy sshd[258300]: Failed password for invalid user hadoop from 104.248.52.111 port 60120 ssh2 2026-02-20T00:54:17.393648+00:00 Door-Opener-Proxy sshd[259115]: Invalid user hadoop from 104.248.52.111 port 33988 ... show less	Brute-Force SSH
🇩🇪 teltow-flaeming.it	2026-02-20 00:44:32 UTC · (8 months ago)	SSH Brute Force ...	Brute-Force SSH
🇩🇪 Chaoskjell44	2026-02-20 00:36:02 UTC · (8 months ago)	Feb 20 00:32:54 Hazelaticketscat sshd[3466478]: Invalid user user from 104.248.52.111 port 36740 Feb 20 00:33:41 Hazelaticketscat sshd[3467740]: Invalid user user from 104.248.52.111 port 52726 Feb 20 00:34:27 Hazelaticketscat sshd[3468931]: Invalid ... show more Feb 20 00:32:54 Hazelaticketscat sshd[3466478]: Invalid user user from 104.248.52.111 port 36740 Feb 20 00:33:41 Hazelaticketscat sshd[3467740]: Invalid user user from 104.248.52.111 port 52726 Feb 20 00:34:27 Hazelaticketscat sshd[3468931]: Invalid user user from 104.248.52.111 port 51156 Feb 20 00:35:14 Hazelaticketscat sshd[3470163]: Invalid user user from 104.248.52.111 port 49708 Feb 20 00:36:01 Hazelaticketscat sshd[3471410]: Invalid user hadoop from 104.248.52.111 port 42698 ... show less	Brute-Force SSH
🇩🇪 SELECT-IT Beratung und IT Dienstleistung GmbH	2026-02-20 00:29:58 UTC · (8 months ago)	2026-02-20T00:28:22.551050+00:00 Door-Opener-Proxy sshd[237551]: Failed password for invalid user user from 104.248.52.111 port 36898 ssh2 2026-02-20T00:29:09.434167+00:00 Door-Opener-Proxy sshd[238370]: Invalid user user from 104.248.52.111 port 580 ... show more 2026-02-20T00:28:22.551050+00:00 Door-Opener-Proxy sshd[237551]: Failed password for invalid user user from 104.248.52.111 port 36898 ssh2 2026-02-20T00:29:09.434167+00:00 Door-Opener-Proxy sshd[238370]: Invalid user user from 104.248.52.111 port 58058 2026-02-20T00:29:09.530796+00:00 Door-Opener-Proxy sshd[238370]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.52.111 2026-02-20T00:29:11.755009+00:00 Door-Opener-Proxy sshd[238370]: Failed password for invalid user user from 104.248.52.111 port 58058 ssh2 2026-02-20T00:29:57.662437+00:00 Door-Opener-Proxy sshd[238387]: Invalid user user from 104.248.52.111 port 56488 ... show less	Brute-Force SSH
🇩🇪 ipcop.net	2026-02-20 00:18:11 UTC · (8 months ago)	Malicious activity detected from 104.248.52.111.	Brute-Force
🇩🇪 Chaoskjell44	2026-02-20 00:08:25 UTC · (8 months ago)	Feb 20 00:05:18 Hazelaticketscat sshd[3422914]: Invalid user oracle from 104.248.52.111 port 44138 Feb 20 00:06:06 Hazelaticketscat sshd[3424123]: Invalid user oracle from 104.248.52.111 port 49806 Feb 20 00:06:52 Hazelaticketscat sshd[3425380]: Inva ... show more Feb 20 00:05:18 Hazelaticketscat sshd[3422914]: Invalid user oracle from 104.248.52.111 port 44138 Feb 20 00:06:06 Hazelaticketscat sshd[3424123]: Invalid user oracle from 104.248.52.111 port 49806 Feb 20 00:06:52 Hazelaticketscat sshd[3425380]: Invalid user oracle from 104.248.52.111 port 34402 Feb 20 00:07:38 Hazelaticketscat sshd[3426535]: Invalid user oracle from 104.248.52.111 port 46568 Feb 20 00:08:24 Hazelaticketscat sshd[3427840]: Invalid user oracle from 104.248.52.111 port 44996 ... show less	Brute-Force SSH
🇨🇿 ICT KnTl	2026-02-20 00:05:44 UTC · (8 months ago)	2026-02-20T01:04:54.729390+01:00 secure sshd[47517]: Invalid user oracle from 104.248.52.111 port 59580 2026-02-20T01:05:43.592121+01:00 secure sshd[47520]: Invalid user oracle from 104.248.52.111 port 57788 ...	Brute-Force SSH
🇩🇪 SELECT-IT Beratung und IT Dienstleistung GmbH	2026-02-20 00:05:28 UTC · (8 months ago)	2026-02-20T00:03:52.011598+00:00 Door-Opener-Proxy sshd[216885]: Failed password for invalid user oracle from 104.248.52.111 port 42858 ssh2 2026-02-20T00:04:37.636325+00:00 Door-Opener-Proxy sshd[217712]: Invalid user oracle from 104.248.52.111 port ... show more 2026-02-20T00:03:52.011598+00:00 Door-Opener-Proxy sshd[216885]: Failed password for invalid user oracle from 104.248.52.111 port 42858 ssh2 2026-02-20T00:04:37.636325+00:00 Door-Opener-Proxy sshd[217712]: Invalid user oracle from 104.248.52.111 port 33726 2026-02-20T00:04:37.966236+00:00 Door-Opener-Proxy sshd[217712]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.52.111 2026-02-20T00:04:40.446358+00:00 Door-Opener-Proxy sshd[217712]: Failed password for invalid user oracle from 104.248.52.111 port 33726 ssh2 2026-02-20T00:05:26.950340+00:00 Door-Opener-Proxy sshd[218542]: Invalid user oracle from 104.248.52.111 port 58740 ... show less	Brute-Force SSH
🇮🇹 alph44	2026-02-20 00:02:56 UTC · (8 months ago)	SSH brute force attack detected: 5 failed attempts	Brute-Force
🇩🇪 Chaoskjell44	2026-02-19 23:41:43 UTC · (8 months ago)	Feb 19 23:38:29 Hazelaticketscat sshd[3380490]: Invalid user postgres from 104.248.52.111 port 58680 Feb 19 23:39:17 Hazelaticketscat sshd[3381761]: Invalid user postgres from 104.248.52.111 port 43594 Feb 19 23:40:05 Hazelaticketscat sshd[3383068]: ... show more Feb 19 23:38:29 Hazelaticketscat sshd[3380490]: Invalid user postgres from 104.248.52.111 port 58680 Feb 19 23:39:17 Hazelaticketscat sshd[3381761]: Invalid user postgres from 104.248.52.111 port 43594 Feb 19 23:40:05 Hazelaticketscat sshd[3383068]: Invalid user postgres from 104.248.52.111 port 38412 Feb 19 23:40:53 Hazelaticketscat sshd[3384281]: Invalid user postgres from 104.248.52.111 port 47872 Feb 19 23:41:42 Hazelaticketscat sshd[3385601]: Invalid user postgres from 104.248.52.111 port 43694 ... show less	Brute-Force SSH
🇩🇪 F242	2026-02-19 23:38:16 UTC · (8 months ago)	Failed SSH Login	Brute-Force SSH

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇦 207.219.222.29

🇹🇷 185.231.227.47

🇺🇸 154.194.240.211

🇺🇸 70.183.233.246

🇺🇸 52.248.42.156

🇺🇸 45.33.125.204

🇹🇯 195.7.15.250

🇺🇸 192.210.242.65

🇧🇷 191.240.210.112

🇧🇬 187.15.105.17

🇫🇷 173.212.217.75

🇺🇸 162.243.161.246

🇺🇸 162.216.149.69

🇮🇳 152.56.135.158

🇨🇳 118.196.118.181

🇨🇳 118.196.92.141

🇳🇱 109.160.32.141

🇳🇱 109.160.32.127

🇹🇷 95.8.177.233

🇳🇱 81.171.72.135