JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

104.248.91.67

Activity Trending Down

Abuse Confidence Score

16% Caution

345 reports

228 reporters · latest 3 weeks ago

ISP: DigitalOcean, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Domain Name: digitalocean.com
Country: 🇳🇱 Netherlands
City: Amsterdam, North Holland

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

345 from 228 distinct reporters

First reported

November 8th 2021

Most recent report

3 weeks ago

Last 60 days

Top reporter locations 🇵🇱 Poland 3 🇩🇪 Germany 1 🇳🇱 Netherlands 1

Most common categories Web App Attack 4 Bad Web Bot 3 Port Scan 1 Hacking 1

Old reports The most recent abuse report for this IP address is from 3 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Mangelot Hosting	2026-10-22 05:39:23 UTC · (3 weeks ago)	(wp_login_try) srv101 WordPress login brute force 104.248.91.67 (NL/The Netherlands/-): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:	Web App Attack
🇵🇱 Budyn	2026-10-22 05:26:48 UTC · (3 weeks ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: auth.goblinpot.online \| URI: /wp-login.php \| UA: Mozilla/5.0 ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: auth.goblinpot.online \| URI: /wp-login.php \| UA: Mozilla/5.0 \| BODY: [Empty / GET Request] \| HEADERS: {"X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"NL","Cf-Connecting-Ip":"104.248.91.67","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a4e616d57f4cbd9c-AMS","Connection":"Keep-Alive","Accept":"\/","Accept-Encoding":"gzip, br","X-Forwarded-For":"104.248.91.67"} show less	Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-10-21 15:30:32 UTC · (3 weeks ago)	Malicious web bot or vulnerability scanner caught probing infrastructure endpoints. Evidence: 104.248.91.67 - - [21/Oct/2026:12:39:19 +0000] "GET /wp-login.php HTTP/1.1" 404 100 "-" "Mozilla/5.0" 104.248.91.67 - - [21/Oct/2026:12:47:27 +0000] "GET /w ... show more Malicious web bot or vulnerability scanner caught probing infrastructure endpoints. Evidence: 104.248.91.67 - - [21/Oct/2026:12:39:19 +0000] "GET /wp-login.php HTTP/1.1" 404 100 "-" "Mozilla/5.0" 104.248.91.67 - - [21/Oct/2026:12:47:27 +0000] "GET /wp-login.php HTTP/1.1" 404 100 "-" "Mozilla/5.0" ... show less	Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-10-21 12:39:17 UTC · (3 weeks ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: forum.sweetpuddingtrap.top \| URI: /wp-login.php \| UA: Mozilla ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: forum.sweetpuddingtrap.top \| URI: /wp-login.php \| UA: Mozilla/5.0 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇩🇪 Tsumugi Kotobuki	2026-10-21 05:15:24 UTC · (3 weeks ago)	Port Scan on Honeypot \| Ports: 8080/HTTP-proxy \| Proto: TCP(1) \| Flags: all SYN \| TTL: 246 \| Len: 44B \| Win: 1024(1) \| F2B/ufw-honeypot@2026-10-21T05:15:24Z	Port Scan Hacking
🇫🇷 gooko	2026-05-11 13:47:39 UTC · (6 months ago)	SSH brute-force attack detected by fail2ban jail 'sshd'	Brute-Force SSH
🇿🇦 Tokolosh Hunters	2026-03-02 11:04:48 UTC · (8 months ago)	IntelFeedsIP - 02-03-2026 - VF	Brute-Force
🇺🇸 jdellamorte	2026-02-23 12:39:17 UTC · (8 months ago)	SSH honeypot (Cowrie) attack detected. // Attack phases: system recon, malware deployment, competing miner removal, malware drop. // HASSH: 2ec37a7cc8daf20b10e1ad6221061ca5 // SSH client: SSH-2.0-Go // Auth: 2 attempts (2 success, 0 failed). // Creds ... show more SSH honeypot (Cowrie) attack detected. // Attack phases: system recon, malware deployment, competing miner removal, malware drop. // HASSH: 2ec37a7cc8daf20b10e1ad6221061ca5 // SSH client: SSH-2.0-Go // Auth: 2 attempts (2 success, 0 failed). // Creds: root/123 // Post-exploit: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH a ; echo $HOME ; echo '123' \| sudo -S bash -c 'chmod +x '"'"'/root/.16'"'"'' \|\| bash -c 'chmod +x // Files dropped: /root/.16 // SHA256: 944634b227e1abd88e5d6b106a81d420d04d542de337759e3e30b5f846a1b8c3 // Malware ID (YARA): Dot16_XMRig [high]: XMRig miner with RandomX JIT — deployed as .16/.b0s/.X0-lock by Dot16 actor show less	Brute-Force SSH
🇮🇳 sh97	2026-01-23 08:04:14 UTC · (9 months ago)	IN01-DRDP-HYD: Blocked by Fail2Ban for SSH Brute Force from 104.248.91.67 at 2026-01-23 08:04:14 UTC	Brute-Force SSH
🇺🇸 user8765309	2026-01-12 05:51:04 UTC · (10 months ago)	2026-01-12T05:49:51.311971 host sshd[2439007]: Invalid user XXXX from 104.248.91.67 port 41550	Brute-Force SSH
🇺🇸 cbz	2026-01-12 05:46:45 UTC · (10 months ago)	2026-01-12T00:45:29.519952-05:00 us-east2.cbz.pw sshd-session[541806]: Failed password for invalid user test from 104.248.91.67 port 55976 ssh2 2026-01-12T00:46:05.015585-05:00 us-east2.cbz.pw sshd-session[541811]: Invalid user test from 104.248.91.6 ... show more 2026-01-12T00:45:29.519952-05:00 us-east2.cbz.pw sshd-session[541806]: Failed password for invalid user test from 104.248.91.67 port 55976 ssh2 2026-01-12T00:46:05.015585-05:00 us-east2.cbz.pw sshd-session[541811]: Invalid user test from 104.248.91.67 port 37288 2026-01-12T00:46:05.107713-05:00 us-east2.cbz.pw sshd-session[541811]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.91.67 2026-01-12T00:46:07.215732-05:00 us-east2.cbz.pw sshd-session[541811]: Failed password for invalid user test from 104.248.91.67 port 37288 ssh2 2026-01-12T00:46:44.426770-05:00 us-east2.cbz.pw sshd-session[541816]: Invalid user test from 104.248.91.67 port 57586 ... show less	Brute-Force SSH
🇫🇷 zazou1998	2026-01-12 05:43:26 UTC · (10 months ago)	Jan 12 06:42:49 mail sshd[3955752]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.91.67 Jan 12 06:42:51 mail sshd[3955752]: Failed password for invalid user admin from 104.248.91.67 port 55112 ssh2 Ja ... show more Jan 12 06:42:49 mail sshd[3955752]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.91.67 Jan 12 06:42:51 mail sshd[3955752]: Failed password for invalid user admin from 104.248.91.67 port 55112 ssh2 Jan 12 06:43:25 mail sshd[3955832]: Invalid user admin from 104.248.91.67 port 60234 ... show less	Brute-Force SSH
Anonymous	2026-01-12 05:38:57 UTC · (10 months ago)	2026-01-12T10:36:16.595607+05:00 server sshd[560857]: Invalid user admin from 104.248.91.67 port 36362 2026-01-12T10:36:57.691288+05:00 server sshd[560859]: Invalid user admin from 104.248.91.67 port 50004 2026-01-12T10:37:40.282850+05:00 server sshd ... show more 2026-01-12T10:36:16.595607+05:00 server sshd[560857]: Invalid user admin from 104.248.91.67 port 36362 2026-01-12T10:36:57.691288+05:00 server sshd[560859]: Invalid user admin from 104.248.91.67 port 50004 2026-01-12T10:37:40.282850+05:00 server sshd[560861]: Invalid user admin from 104.248.91.67 port 47280 2026-01-12T10:38:18.780659+05:00 server sshd[560867]: Invalid user admin from 104.248.91.67 port 33302 2026-01-12T10:38:57.394383+05:00 server sshd[560872]: Invalid user admin from 104.248.91.67 port 57652 ... show less	Brute-Force SSH
🇩🇪 scenario	2026-01-12 05:38:19 UTC · (10 months ago)	2026-01-12T06:35:34.569636+01:00 eu-central-01 sshd[617010]: Invalid user admin from 104.248.91.67 port 37876 2026-01-12T06:36:17.563807+01:00 eu-central-01 sshd[617012]: Invalid user admin from 104.248.91.67 port 53982 2026-01-12T06:36:58.585465+01: ... show more 2026-01-12T06:35:34.569636+01:00 eu-central-01 sshd[617010]: Invalid user admin from 104.248.91.67 port 37876 2026-01-12T06:36:17.563807+01:00 eu-central-01 sshd[617012]: Invalid user admin from 104.248.91.67 port 53982 2026-01-12T06:36:58.585465+01:00 eu-central-01 sshd[617016]: Invalid user admin from 104.248.91.67 port 57426 2026-01-12T06:37:41.149637+01:00 eu-central-01 sshd[617021]: Invalid user admin from 104.248.91.67 port 57950 2026-01-12T06:38:19.554544+01:00 eu-central-01 sshd[617023]: Invalid user admin from 104.248.91.67 port 55062 ... show less	Brute-Force SSH
Anonymous	2026-01-12 05:38:09 UTC · (10 months ago)	2026-01-11T22:35:21.527998-07:00 hessvillage.com sshd[264195]: Invalid user admin from 104.248.91.67 port 60322 2026-01-11T22:36:05.875321-07:00 hessvillage.com sshd[264209]: Invalid user admin from 104.248.91.67 port 44704 2026-01-11T22:36:47.103374 ... show more 2026-01-11T22:35:21.527998-07:00 hessvillage.com sshd[264195]: Invalid user admin from 104.248.91.67 port 60322 2026-01-11T22:36:05.875321-07:00 hessvillage.com sshd[264209]: Invalid user admin from 104.248.91.67 port 44704 2026-01-11T22:36:47.103374-07:00 hessvillage.com sshd[264219]: Invalid user admin from 104.248.91.67 port 39080 2026-01-11T22:37:29.212429-07:00 hessvillage.com sshd[264231]: Invalid user admin from 104.248.91.67 port 48076 2026-01-11T22:38:08.596480-07:00 hessvillage.com sshd[264246]: Invalid user admin from 104.248.91.67 port 45276 ... show less	Brute-Force

Showing 1 to 15 of 345 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇬🇧 217.146.80.106

🇳🇱 204.76.203.213

🇪🇨 181.188.237.219

🇧🇷 177.73.222.80

🇨🇳 101.91.114.194

🇺🇸 74.208.99.215

🇳🇱 45.66.35.43

🇸🇬 43.134.54.246

🇺🇸 40.124.171.144

🇳🇱 185.218.86.33

🇵🇰 182.190.201.183

🇦🇷 181.45.132.82

🇯🇵 139.162.112.248

🇮🇩 103.174.238.9

🇺🇸 100.28.153.226

🇺🇸 98.190.61.247

🇷🇺 90.151.171.108

🇺🇿 84.54.72.3

🇩🇪 2a14:c380:1300:ef::a

🇬🇧 217.146.80.98