JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

104.248.92.79

Neutral Activity

Abuse Confidence Score

0% Low Risk

192 reports

115 reporters · latest 6 months ago

ISP: DigitalOcean, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Domain Name: digitalocean.com
Country: 🇳🇱 Netherlands
City: Amsterdam, North Holland

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

104.248.92.79 has been reported 192 times. The most recent report is from 6 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

192 from 115 distinct reporters

First reported

December 3rd 2025

Most recent report

6 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-05-08 13:04:36 UTC · (6 months ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 104.248.92.79 (NL/The Netherlands/-): 2 in the last 3600 secs (0-201)	Hacking
🇰🇷 winter	2026-05-07 09:40:33 UTC · (6 months ago)	Connection attemp from 104.248.92.79 to port 22	Brute-Force SSH
🇩🇪 Justin F. \| AS204464	2026-05-07 08:11:08 UTC · (6 months ago)	Honeypot [nx-infrastructure]: HTTP/1.1 request on 8089 GET / User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,i ... show more Honeypot [nx-infrastructure]: HTTP/1.1 request on 8089 GET / User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate; 8089 [2] TCP Reported by: Justin F. show less	Hacking Bad Web Bot
🇺🇸 MPL	2026-05-07 08:08:25 UTC · (6 months ago)	tcp/8083	Port Scan
🇩🇪 dispaisyenterprises	2026-04-26 16:35:30 UTC · (6 months ago)	Honeypot [fra-de-honeypot]: HTTP/1.1 request on 14000 GET / User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,im ... show more Honeypot [fra-de-honeypot]: HTTP/1.1 request on 14000 GET / User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate; 14000 [2] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇬🇧 thetomtaylor.co.uk	2026-04-08 23:08:04 UTC · (7 months ago)	Fail2Ban - [SSH]Brute-force login attempts on sshd ... [ice01,ice02,wa02]	Brute-Force SSH
🇨🇳 ThreatBook.io	2026-03-12 22:16:56 UTC · (8 months ago)	ThreatBook Intelligence: Scanner,Spam more details on https://threatbook.io/ip/104.248.92.79	SSH
🇧🇪 cmbplf	2026-03-12 11:28:08 UTC · (8 months ago)	2.114 POST requests with url.path */wp-login.php	Brute-Force Bad Web Bot
🇺🇸 Rocky Mountain Bioengineering Symposium	2026-03-12 10:10:29 UTC · (8 months ago)	104.248.92.79 - - [12/Mar/2026:04:10:29 -0600] "GET /wp-login.php HTTP/1.1" 301 511 "-" "Mozilla/5.0" ...	Web App Attack
🇺🇸 MPL	2026-03-12 07:06:24 UTC · (8 months ago)	tcp/1000	Port Scan
🇺🇸 MPL	2026-03-12 01:02:35 UTC · (8 months ago)	tcp/1912	Port Scan
🇺🇸 MPL	2026-03-12 00:39:25 UTC · (8 months ago)	tcp/8090	Port Scan
🇺🇸 cbz	2026-03-11 22:24:49 UTC · (8 months ago)	2026-03-11T17:21:58.502225-05:00 us-east2.cbz.pw sshd-session[844496]: Failed password for invalid user test1 from 104.248.92.79 port 38604 ssh2 2026-03-11T17:23:16.976534-05:00 us-east2.cbz.pw sshd-session[844522]: Invalid user test2 from 104.248.92 ... show more 2026-03-11T17:21:58.502225-05:00 us-east2.cbz.pw sshd-session[844496]: Failed password for invalid user test1 from 104.248.92.79 port 38604 ssh2 2026-03-11T17:23:16.976534-05:00 us-east2.cbz.pw sshd-session[844522]: Invalid user test2 from 104.248.92.79 port 44014 2026-03-11T17:23:17.482263-05:00 us-east2.cbz.pw sshd-session[844522]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.92.79 2026-03-11T17:23:19.785385-05:00 us-east2.cbz.pw sshd-session[844522]: Failed password for invalid user test2 from 104.248.92.79 port 44014 ssh2 2026-03-11T17:24:48.873981-05:00 us-east2.cbz.pw sshd-session[844559]: Invalid user test3 from 104.248.92.79 port 37076 ... show less	Brute-Force SSH
🇺🇸 dankmemer3920	2026-03-11 22:24:42 UTC · (8 months ago)	Fail2Ban sshd: 3 attempts from 104.248.92.79 (p)	Brute-Force SSH
🇳🇴 Harald	2026-03-11 22:23:42 UTC · (8 months ago)	Mar 11 22:22:20 jump sshd[2782578]: Invalid user test1 from 104.248.92.79 port 40598 Mar 11 22:22:21 jump sshd[2782578]: Failed password for invalid user test1 from 104.248.92.79 port 40598 ssh2 Mar 11 22:23:41 jump sshd[2782617]: Invalid user test2 ... show more Mar 11 22:22:20 jump sshd[2782578]: Invalid user test1 from 104.248.92.79 port 40598 Mar 11 22:22:21 jump sshd[2782578]: Failed password for invalid user test1 from 104.248.92.79 port 40598 ssh2 Mar 11 22:23:41 jump sshd[2782617]: Invalid user test2 from 104.248.92.79 port 57618 ... show less	Brute-Force SSH

Showing 1 to 15 of 192 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇦🇱 79.106.203.15

🇹🇷 2a00:1d34:cc2f:ab01:1863:9be9:2125:ce9f

🇮🇩 2001:448a:2050:50a0:19eb:8f7c:5135:8836

🇧🇷 205.210.31.146

🇩🇪 164.90.163.126

🇳🇱 77.239.124.49

🇳🇱 77.239.124.46

🇳🇱 77.67.26.235

🇩🇪 69.5.169.127

🇩🇪 69.5.169.126

🇩🇪 69.5.169.125

🇩🇪 69.5.169.100

🇩🇪 69.5.169.88

🇩🇪 69.5.169.23

🇺🇸 45.61.92.252

🇻🇳 14.191.83.24

🇨🇳 14.103.118.198

🇳🇱 209.38.111.160

🇳🇵 163.53.25.157

🇺🇿 84.54.70.73