This IP address has been reported a total of
12
times from
11 distinct
sources.
104.248.58.165 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
France
with 5
reports;
Germany
with 2
reports;
Czechia
with 1
report.
The most common categories in these recent reports were:
Port Scan
9
times;
Brute-Force
2
times;
Email Spam
1
time;
Hacking
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Port scan from this IP. Firewall dropped every packet. Targeted TCP ports: 4444. Single burst at 202 ...
show morePort scan from this IP. Firewall dropped every packet. Targeted TCP ports: 4444. Single burst at 2026-10-15 21:41 UTC.
show less
Honeypot Finding: repeated TCP service probing on TCP/7000 (service); 2 application-level events acr ...
show moreHoneypot Finding: repeated TCP service probing on TCP/7000 (service); 2 application-level events across 2 source port(s). Sensor(s): Honeytrap.
show less
Port Scan
Anonymous
2026-10-11T07:22:48.129416+02:00 vps kernel: [8066945.317906] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=f ...
show more2026-10-11T07:22:48.129416+02:00 vps kernel: [8066945.317906] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=104.248.58.165 DST=54.37.14.118 LEN=44 TOS=0x00 PREC=0x00 TTL=237 ID=46166 PROTO=TCP SPT=61005 DPT=1337 WINDOW=1025 RES=0x00 SYN URGP=0
...
show less
Honeypot Finding: repeated TCP service probing on TCP/6543 (service); 2 application-level events acr ...
show moreHoneypot Finding: repeated TCP service probing on TCP/6543 (service); 2 application-level events across 2 source port(s). Sensor(s): Honeytrap.
show less
Blocked by UFW (TCP on 6939)
Source port: 61012
TTL: 244
Packet length: 44
TOS: 0x00
This report (f ...
show moreBlocked by UFW (TCP on 6939)
Source port: 61012
TTL: 244
Packet length: 44
TOS: 0x00
This report (for 104.248.58.165) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Anonymous
denied traffic to a honeypot network. destination port 8041.
Port Scan
Hacking
Anonymous
Dec 09 18:28:58 imap-login: Info: Disconnected: Too many invalid commands (no auth attempts in 0 sec ...
show moreDec 09 18:28:58 imap-login: Info: Disconnected: Too many invalid commands (no auth attempts in 0 secs): user=<>, rip=104.248.58.165, lip=X.X.X.X, TLS, session=<Q1jNFYlFmLlo+Dql>
Dec 09 18:28:59 imap-login: Info: Disconnected: Connection closed: SSL_accept() failed: error:0A000102:SSL routines::unsupported protocol (no auth attempts in 0 secs): user=<>, rip=104.248.58.165, lip=X.X.X.X, TLS handshaking: SSL_accept() failed: error:0A000102:SSL routines::unsupported protocol, session=<JTDRFYlFmrlo+Dql>
Dec 09 18:28:59 imap-login: Info: Disconnected: Connection closed: SSL_accept() failed: error:0A000102:SSL routines::unsupported protocol (no auth attempts in 0 secs): user=<>, rip=104.248.58.165, lip=X.X.X.X, TLS handshaking: SSL_accept() failed: error:0A000102:SSL routines::unsupported protocol, session=<69LVFYlFnrlo+Dql>
...
show less
