JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.248.89.128

104.248.89.128 was found in our database!

This IP was reported 241 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.248.89.128

Whois 104.248.89.128

IP Abuse Reports for 104.248.89.128:

This IP address has been reported a total of 241 times from 114 distinct sources. 104.248.89.128 was first reported on October 2nd 2025, and the most recent report was 7 months ago.

Old Reports: The most recent abuse report for this IP address is from 7 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇬 dankmemer3920	2026-01-27 03:33:37 (7 months ago)	CrowdSec: import to_import.txt- 56363 ips	Port Scan
🇹🇷 rtbh.com.tr	2026-01-26 20:11:14 (7 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇨🇳 ThreatBook.io	2026-01-25 23:26:44 (7 months ago)	ThreatBook Intelligence: Scanner,Spam more details on https://threatbook.io/ip/104.248.89.128	SSH
Anonymous	2026-01-25 18:24:37 (7 months ago)	2026-01-25T19:22:11.125207+01:00 luspi-server sshd-session[1133756]: Invalid user admin from 104.248 ... show more 2026-01-25T19:22:11.125207+01:00 luspi-server sshd-session[1133756]: Invalid user admin from 104.248.89.128 port 54052 2026-01-25T19:22:48.335816+01:00 luspi-server sshd-session[1135022]: Invalid user admin from 104.248.89.128 port 42430 2026-01-25T19:23:24.609836+01:00 luspi-server sshd-session[1136381]: Invalid user admin from 104.248.89.128 port 45158 2026-01-25T19:23:57.901783+01:00 luspi-server sshd-session[1137448]: Invalid user admin from 104.248.89.128 port 43298 2026-01-25T19:24:31.095556+01:00 luspi-server sshd-session[1138660]: Invalid user admin from 104.248.89.128 port 38580 ... show less	Brute-Force SSH
🇳🇱 tkhaldi	2026-01-25 18:23:46 (7 months ago)	2026-01-25T18:22:35.297507+00:00 scw-determined-maxwell sshd[3445705]: Invalid user admin from 104.2 ... show more 2026-01-25T18:22:35.297507+00:00 scw-determined-maxwell sshd[3445705]: Invalid user admin from 104.248.89.128 port 54046 2026-01-25T18:23:11.914040+00:00 scw-determined-maxwell sshd[3445748]: Invalid user admin from 104.248.89.128 port 55476 2026-01-25T18:23:45.615954+00:00 scw-determined-maxwell sshd[3445801]: Invalid user admin from 104.248.89.128 port 40650 ... show less	Brute-Force SSH
🇫🇷 John Doe	2026-01-25 18:23:35 (7 months ago)		Brute-Force SSH
🇳🇱 kipfel★	2026-01-25 18:23:35 (7 months ago)	2026-01-25T19:22:23.905638+01:00 lw-dedi-hdz-10g2480-ams sshd-session[2855372]: Invalid user admin f ... show more 2026-01-25T19:22:23.905638+01:00 lw-dedi-hdz-10g2480-ams sshd-session[2855372]: Invalid user admin from 104.248.89.128 port 60006 2026-01-25T19:23:01.666013+01:00 lw-dedi-hdz-10g2480-ams sshd-session[2855429]: Invalid user admin from 104.248.89.128 port 35564 2026-01-25T19:23:35.380457+01:00 lw-dedi-hdz-10g2480-ams sshd-session[2855485]: Invalid user admin from 104.248.89.128 port 36826 ... show less	Brute-Force SSH
🇫🇷 TuxCLOUD	2026-01-25 18:23:08 (7 months ago)	Jan 25 19:22:30 s1-4-gra7 sshd[966769]: Invalid user admin from 104.248.89.128 port 36706 Jan 25 19: ... show more Jan 25 19:22:30 s1-4-gra7 sshd[966769]: Invalid user admin from 104.248.89.128 port 36706 Jan 25 19:23:07 s1-4-gra7 sshd[966798]: Invalid user admin from 104.248.89.128 port 36890 show less	Brute-Force SSH
🇫🇷 ImMarvolo	2026-01-25 18:22:43 (7 months ago)	2026-01-25T18:22:42.478517+00:00 sgb-01 sshd-session[508449]: Invalid user admin from 104.248.89.128 ... show more 2026-01-25T18:22:42.478517+00:00 sgb-01 sshd-session[508449]: Invalid user admin from 104.248.89.128 port 53618 ... show less	Brute-Force SSH
🇫🇷 alexsky06	2026-01-25 18:22:42 (7 months ago)	Ip 104.248.89.128 performed 'crowdsecurity/ssh-slow-bf' (24 events over 13m49.599046665s) at 2026-01 ... show more Ip 104.248.89.128 performed 'crowdsecurity/ssh-slow-bf' (24 events over 13m49.599046665s) at 2026-01-25 18:22:41.524829096 +0000 UTC show less	Brute-Force SSH
🇩🇪 Interceptor_HQ	2026-01-25 18:21:55 (7 months ago)	Interceptor Intrusion Detection: pam_unix(sshd:auth): authentication failure;; logname= uid=0 euid=0 ... show more Interceptor Intrusion Detection: pam_unix(sshd:auth): authentication failure;; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.89.128 user=root - pam_unix(sshd:auth): authentication failure;; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.89.128 user=root - Failed password for root from 104.248.89.128 port 51918 ssh2 - pam_unix(sshd:auth): authentication failure;; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.89.128 user=root - pam_unix(sshd:auth): authentication failure;; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.89.128 user=root - Failed password for root from 104.248.89.128 port 42476 ssh2 - Failed password for root from 104.248.89.128 port 56188 ssh2 - pam_unix(sshd:auth): authentication failure;; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.89.128 user=root - Failed password for root from 104.248.89.128 port 56188 ssh2 - Failed password for root from 104.248.89.128 port 43764 ssh2 - Failed password for root from 104.248.89.128 port 43764 ssh2 - Failed password for root fro show less	Brute-Force SSH
🇹🇷 Threat.live	2026-01-25 18:20:10 (7 months ago)	Brute Force, tcp/22	Brute-Force
🇫🇮 pr0vieh	2026-01-25 18:14:02 (7 months ago)	2026-01-25T19:11:39.896593+01:00 Linux10 sshd-session[2641505]: pam_unix(sshd:auth): authentication ... show more 2026-01-25T19:11:39.896593+01:00 Linux10 sshd-session[2641505]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.89.128 user=root 2026-01-25T19:11:42.205494+01:00 Linux10 sshd-session[2641505]: Failed password for root from 104.248.89.128 port 38374 ssh2 2026-01-25T19:12:15.356598+01:00 Linux10 sshd-session[2643628]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.89.128 user=root 2026-01-25T19:12:17.122517+01:00 Linux10 sshd-session[2643628]: Failed password for root from 104.248.89.128 port 59808 ssh2 2026-01-25T19:12:50.373068+01:00 Linux10 sshd-session[2645459]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.89.128 user=root 2026-01-25T19:12:51.892501+01:00 Linux10 sshd-session[2645459]: Failed password for root from 104.248.89.128 port 40350 ssh2 2026-01-25T19:13:24.682155+01:00 Linux10 sshd-session[2647608]: pam_unix(sshd:auth): authen ... show less	Brute-Force SSH
Anonymous	2026-01-25 18:13:16 (7 months ago)	2026-01-25T18:11:26.523173+00:00 TP72 sshd[1835253]: pam_unix(sshd:auth): authentication failure; lo ... show more 2026-01-25T18:11:26.523173+00:00 TP72 sshd[1835253]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.89.128 user=root 2026-01-25T18:11:28.467917+00:00 TP72 sshd[1835253]: Failed password for root from 104.248.89.128 port 37620 ssh2 2026-01-25T18:12:03.147475+00:00 TP72 sshd[1835443]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.89.128 user=root 2026-01-25T18:12:04.836455+00:00 TP72 sshd[1835443]: Failed password for root from 104.248.89.128 port 35664 ssh2 2026-01-25T18:12:38.434082+00:00 TP72 sshd[1835644]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.89.128 user=root 2026-01-25T18:12:40.594919+00:00 TP72 sshd[1835644]: Failed password for root from 104.248.89.128 port 46190 ssh2 2026-01-25T18:13:13.268859+00:00 TP72 sshd[1835832]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10 ... show less	Brute-Force SSH
🇫🇷 guille-rodriguez	2026-01-25 18:13:12 (7 months ago)	SSH BruteForce detected by Fail2Ban (failures=8, source=VPSO)	Brute-Force SSH

Showing 1 to 15 of 241 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 220.196.191.58

🇳🇱 193.47.62.69

🇬🇧 188.240.59.18

🇦🇷 186.131.252.144

🇵🇰 182.189.226.143

🇨🇳 106.75.36.139

🇸🇬 47.84.109.20

🇳🇱 45.148.10.212

🇩🇪 43.157.95.239

🇺🇸 4.148.17.124

🇨🇳 221.228.203.3

🇭🇰 219.78.63.235

🇵🇦 190.140.23.103

🇳🇱 148.222.185.74

🇨🇳 112.102.168.25

🇨🇳 111.225.214.181

🇺🇸 74.7.227.191

🇳🇱 45.138.12.22

🇬🇧 35.203.211.6

🇫🇮 2.27.203.200