JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

104.248.92.59

Neutral Activity

Abuse Confidence Score

0% Low Risk

197 reports

107 reporters · latest 5 months ago

ISP: DigitalOcean, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Domain Name: digitalocean.com
Country: 🇳🇱 Netherlands
City: Amsterdam, North Holland

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

104.248.92.59 has been reported 197 times. The most recent report is from 5 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

197 from 107 distinct reporters

First reported

January 25th 2026

Most recent report

5 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 [email protected]	2026-06-08 17:58:20 UTC · (5 months ago)		Brute-Force
🇮🇹 VHosting	2026-06-08 09:20:08 UTC · (5 months ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
Anonymous	2026-06-08 09:04:27 UTC · (5 months ago)	(caddyscan) Scanner path probe from 104.248.92.59 (NL/The Netherlands/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 104.248.92.59 - - [08/Jun/2026:08:57:42 +0000] "GET /wp-login.php HTTP ... show more (caddyscan) Scanner path probe from 104.248.92.59 (NL/The Netherlands/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 104.248.92.59 - - [08/Jun/2026:08:57:42 +0000] "GET /wp-login.php HTTP/1.1" [REDACTED] 200 2627 104.248.92.59 - - [08/Jun/2026:08:57:51 +0000] "GET /wp-login.php HTTP/1.1" [REDACTED] 200 2627 104.248.92.59 - - [08/Jun/2026:09:00:50 +0000] "GET /wp-login.php HTTP/1.1" [REDACTED] 200 2627 104.248.92.59 - - [08/Jun/2026:09:00:59 +0000] "GET /wp-login.php HTTP/1.1" [REDACTED] 200 2627 104.248.92.59 - - [08/Jun/2026:09:04:22 +0000] "GET /wp-login.php HTTP/1.1" show less	Port Scan
🇺🇸 RAP	2026-06-08 01:35:23 UTC · (5 months ago)	2026-06-08 01:35:23 UTC Unauthorized activity to TCP port 8089. Web App	Port Scan Web App Attack
🇳🇱 COMPLEX	2026-05-07 00:52:33 UTC · (6 months ago)	Unsolicited TCP traffic \| Action: DROP \| Port 7000	Brute-Force
🇹🇷 sh97	2026-02-05 18:26:11 UTC · (9 months ago)	tr01: SSH Brute Force from 104.248.92.59 at 2026-02-05 23:56:11 IST	Brute-Force SSH
🇹🇷 rtbh.com.tr	2026-02-03 08:11:22 UTC · (9 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2026-02-03 00:11:20 UTC · (9 months ago)	list.rtbh.com.tr report: tcp/22	Brute-Force
🇨🇿 G3NETIC	2026-01-28 09:49:47 UTC · (9 months ago)	2026-01-26T08:48:07.940135+01:00 behemoth sshd[876227]: Failed password for root from 104.248.92.59 port 44966 ssh2 2026-01-26T08:48:55.395511+01:00 behemoth sshd[878650]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh rus ... show more 2026-01-26T08:48:07.940135+01:00 behemoth sshd[876227]: Failed password for root from 104.248.92.59 port 44966 ssh2 2026-01-26T08:48:55.395511+01:00 behemoth sshd[878650]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.92.59 user=root 2026-01-26T08:48:57.581218+01:00 behemoth sshd[878650]: Failed password for root from 104.248.92.59 port 52866 ssh2 ... show less	Brute-Force SSH
🇫🇷 ericshim.me	2026-01-27 05:00:37 UTC · (9 months ago)	Cowrie honeypot hit at 2026-01-26T07:43:07.643854Z	Brute-Force SSH
🇫🇷 SiyCah	2026-01-27 04:00:09 UTC · (9 months ago)	104.248.92.59 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time wasted: 3s. Total bytes sent by tarpit: 342B. Report generated by Endlessh Report Generator v1.2.3	Port Scan Hacking Brute-Force SSH
🇸🇬 dankmemer3920	2026-01-27 03:35:10 UTC · (9 months ago)	CrowdSec: import to_import.txt- 56363 ips	Port Scan
🇹🇷 rtbh.com.tr	2026-01-26 20:11:14 UTC · (9 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 cxnky	2026-01-26 09:15:14 UTC · (9 months ago)	2026-01-26T09:15:12.185268+00:00 graylog sshd[2451763]: Invalid user oracle from 104.248.92.59 port 56322 2026-01-26T09:15:12.321496+00:00 graylog sshd[2451763]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost= ... show more 2026-01-26T09:15:12.185268+00:00 graylog sshd[2451763]: Invalid user oracle from 104.248.92.59 port 56322 2026-01-26T09:15:12.321496+00:00 graylog sshd[2451763]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.92.59 2026-01-26T09:15:13.883201+00:00 graylog sshd[2451763]: Failed password for invalid user oracle from 104.248.92.59 port 56322 ssh2 ... show less	Brute-Force SSH
🇺🇸 stvnrdg.me	2026-01-26 09:11:14 UTC · (9 months ago)	2026-01-26 08:05:38,005 fail2ban.actions [856]: NOTICE [sshd] Ban 104.248.92.59 2026-01-26 08:38:24,519 fail2ban.actions [856]: NOTICE [sshd] Ban 104.248.92.59 2026-01-26 09:11:14,392 fail2ban.actions [856]: NOTICE [sshd] Ban ... show more 2026-01-26 08:05:38,005 fail2ban.actions [856]: NOTICE [sshd] Ban 104.248.92.59 2026-01-26 08:38:24,519 fail2ban.actions [856]: NOTICE [sshd] Ban 104.248.92.59 2026-01-26 09:11:14,392 fail2ban.actions [856]: NOTICE [sshd] Ban 104.248.92.59 ... show less	Brute-Force

Showing 1 to 15 of 197 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇲🇲 37.111.44.143

🇺🇸 216.131.82.231

🇿🇦 197.94.53.33

🇺🇸 185.191.171.9

🇺🇸 172.202.114.158

🇺🇸 149.72.198.100

🇺🇸 137.184.190.246

🇺🇸 66.132.186.228

🇺🇸 20.51.210.76

🇨🇳 219.151.22.112

🇺🇸 199.165.159.121

🇵🇰 153.117.73.70

🇨🇳 118.145.238.115

🇧🇩 103.141.209.156

🇧🇬 78.128.112.74

🇨🇦 45.198.224.230

🇩🇪 23.132.164.185

🇳🇱 204.76.203.43

🇧🇷 200.52.230.66

🇩🇪 185.201.138.140