Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Frankfurt am Main

Region: Hessen

Country: Germany

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
104.248.252.49 attack
$f2bV_matches
2020-09-16 03:04:11
Whois info:
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#


NetRange:       104.248.0.0 - 104.248.255.255
CIDR:           104.248.0.0/16
NetName:        DIGITALOCEAN-104-248-0-0
NetHandle:      NET-104-248-0-0-1
Parent:         NET104 (NET-104-0-0-0-0)
NetType:        Direct Allocation
OriginAS:       
Organization:   DigitalOcean, LLC (DO-13)
RegDate:        2018-08-06
Updated:        2020-04-03
Comment:        Routing and Peering Policy can be found at https://www.as14061.net
Comment:        
Comment:        Please submit abuse reports at https://www.digitalocean.com/company/contact/#abuse
Ref:            https://rdap.arin.net/registry/ip/104.248.0.0



OrgName:        DigitalOcean, LLC
OrgId:          DO-13
Address:        105 Edgeview Drive, Suite 425
City:           Broomfield
StateProv:      CO
PostalCode:     80021
Country:        US
RegDate:        2012-05-14
Updated:        2025-04-11
Ref:            https://rdap.arin.net/registry/entity/DO-13


OrgAbuseHandle: DIGIT19-ARIN
OrgAbuseName:   DigitalOcean Abuse
OrgAbusePhone:  +1-646-827-4366 
OrgAbuseEmail:  abuse@digitalocean.com
OrgAbuseRef:    https://rdap.arin.net/registry/entity/DIGIT19-ARIN

OrgTechHandle: NOC32014-ARIN
OrgTechName:   Network Operations Center
OrgTechPhone:  +1-646-827-4366 
OrgTechEmail:  noc@digitalocean.com
OrgTechRef:    https://rdap.arin.net/registry/entity/NOC32014-ARIN

OrgNOCHandle: NOC32014-ARIN
OrgNOCName:   Network Operations Center
OrgNOCPhone:  +1-646-827-4366 
OrgNOCEmail:  noc@digitalocean.com
OrgNOCRef:    https://rdap.arin.net/registry/entity/NOC32014-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.248.252.131
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56458
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.248.252.131.		IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026060401 1800 900 604800 86400

;; Query time: 5 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jun 05 11:00:24 CST 2026
;; MSG SIZE  rcvd: 108
Host info
Host 131.252.248.104.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 131.252.248.104.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
192.182.207.131 attackbots
Telnet/23 MH Probe, BF, Hack -
2019-09-01 04:39:03
51.38.238.87 attack
Invalid user persona from 51.38.238.87 port 55756
2019-09-01 04:22:41
118.24.21.19 attackbotsspam
Aug 31 05:41:50 web9 sshd\[11699\]: Invalid user antony from 118.24.21.19
Aug 31 05:41:50 web9 sshd\[11699\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.21.19
Aug 31 05:41:52 web9 sshd\[11699\]: Failed password for invalid user antony from 118.24.21.19 port 57468 ssh2
Aug 31 05:48:22 web9 sshd\[12899\]: Invalid user samba from 118.24.21.19
Aug 31 05:48:22 web9 sshd\[12899\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.21.19
2019-09-01 04:29:20
188.128.39.127 attackbotsspam
Aug 31 19:49:44 xeon sshd[53523]: Failed password for invalid user ftp_test from 188.128.39.127 port 55418 ssh2
2019-09-01 04:10:14
134.209.7.179 attack
Aug 31 22:03:47 dedicated sshd[26604]: Invalid user pos2 from 134.209.7.179 port 35672
2019-09-01 04:08:56
36.68.237.249 attackspam
Unauthorized connection attempt from IP address 36.68.237.249 on Port 445(SMB)
2019-09-01 04:24:39
14.183.107.205 attack
Unauthorized connection attempt from IP address 14.183.107.205 on Port 445(SMB)
2019-09-01 04:41:29
201.150.94.162 attackbotsspam
Unauthorized connection attempt from IP address 201.150.94.162 on Port 445(SMB)
2019-09-01 04:32:27
129.28.20.224 attack
Aug 31 17:51:12 plex sshd[22157]: Invalid user nsuser from 129.28.20.224 port 59514
2019-09-01 04:07:38
201.99.120.13 attackbots
Aug 31 14:09:28 ns41 sshd[5852]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.99.120.13
2019-09-01 04:42:21
117.119.83.87 attackbotsspam
Aug 31 21:15:16 nextcloud sshd\[14514\]: Invalid user dmu from 117.119.83.87
Aug 31 21:15:16 nextcloud sshd\[14514\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.119.83.87
Aug 31 21:15:18 nextcloud sshd\[14514\]: Failed password for invalid user dmu from 117.119.83.87 port 33652 ssh2
...
2019-09-01 04:08:01
103.53.165.1 attackspambots
Invalid user FadeCommunity from 103.53.165.1 port 30696
2019-09-01 04:31:48
51.68.188.67 attack
Invalid user testuser from 51.68.188.67 port 53254
2019-09-01 04:14:10
128.199.185.164 attackbotsspam
Aug 31 12:06:45 web8 sshd\[25953\]: Invalid user raphaela from 128.199.185.164
Aug 31 12:06:45 web8 sshd\[25953\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.185.164
Aug 31 12:06:47 web8 sshd\[25953\]: Failed password for invalid user raphaela from 128.199.185.164 port 34184 ssh2
Aug 31 12:11:27 web8 sshd\[28155\]: Invalid user sms from 128.199.185.164
Aug 31 12:11:27 web8 sshd\[28155\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.185.164
2019-09-01 04:18:41
106.75.103.35 attackbots
Aug 31 20:15:57 MK-Soft-VM6 sshd\[7795\]: Invalid user chen from 106.75.103.35 port 60660
Aug 31 20:15:57 MK-Soft-VM6 sshd\[7795\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.103.35
Aug 31 20:15:59 MK-Soft-VM6 sshd\[7795\]: Failed password for invalid user chen from 106.75.103.35 port 60660 ssh2
...
2019-09-01 04:49:07

Recently Reported IPs

34.174.44.101 66.132.172.209 91.92.42.170 112.28.65.104
58.212.237.39 34.89.17.151 139.212.68.120 2606:4700:10::6814:7294
2606:4700:10::6814:4402 5.226.140.72 213.166.84.57 95.111.250.103
31.14.254.79 2606:4700:10::6814:5588 2606:4700:10::6814:8373 8.216.84.231
8.216.90.105 159.138.238.238 139.135.42.213 103.173.7.166