104.248.196.119
Classification: Malicious
104.248.196.119 is a malicious IP address. Reported by 7 threat sources, last seen 2026-08-14. Network: AS14061 DigitalOcean, LLC.
Current activity
- Known attacker — Seen launching attacks over the Internet.
- Known scanner — Seen scanning hosts over the Internet.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Kimwolf | ThreatFox Abuse.ch | 2026-08-14 12:45:43 | 2026-08-14 13:10:04 | malicious-activity | |
| Hacking | AbuseIPDB | 2026-08-10 15:58:54 | 2026-08-14 01:12:31 | attacker malicious-activity | |
| Port Scanner | AbuseIPDB | 2026-08-10 15:38:22 | 2026-08-14 01:12:31 | anomalous-activity attacker malicious-activity reconnaissance | |
| SSH Attacker | AbuseIPDB | 2026-08-14 01:01:16 | 2026-08-14 01:01:16 | attacker malicious-activity | |
| Bruteforce | AbuseIPDB | 2026-08-10 21:40:20 | 2026-08-14 01:01:16 | attacker malicious-activity | |
| HTTP Attacker | AbuseIPDB | 2026-08-10 08:47:47 | 2026-08-13 16:07:23 | attacker malicious-activity | |
| HTTP Scrapper | AbuseIPDB | 2026-08-13 02:25:44 | 2026-08-13 02:25:44 | anomalous-activity attacker malicious-activity | |
| Malicious Host | HoneyDB | 2026-02-09 00:00:00 | 2026-08-11 00:00:00 | attacker malicious-activity | |
| Malicious Host | AbuseIPDB | 2026-02-08 23:16:00 | 2026-08-10 22:23:50 | attacker compromised malicious-activity | |
| Suspicious Host | AbuseIPDB | 2026-04-09 04:07:56 | 2026-04-09 04:07:56 | anomalous-activity | |
| Bruteforce login attacker | Blocklist.de | 2026-02-10 05:00:21 | 2026-02-11 05:00:31 | malicious-activity | |
| HTTP Attacker | Blocklist.de | 2026-02-11 03:00:37 | 2026-02-11 03:00:37 | malicious-activity | |
| Proxy | FireHOL | 2023-03-11 17:02:49 | 2025-10-07 01:02:21 | anonymization | |
| Anonymizer | Maltiverse Research Team | 2020-11-21 20:11:41 | 2021-04-05 21:19:54 | anonymizer | |
| Anonymizer | Maltiverse | 2019-09-23 02:08:05 | 2019-09-23 02:08:05 |
Tags
anonymization anonymizer attacker login bruteforce bot joomla wordpress apache ddos rfi kimwolf port:25001 c2Whois information
- AS name
- AS14061 DigitalOcean, LLC
- AS registry
- arin
- AS date
- 2018-08-06 00:00:00
- AS CIDR
- 104.248.192.0/20
- CIDR
- 104.248.0.0/16
- Registrant
- DigitalOcean, LLC
- Address
- 101 Ave of the Americas 10th Floor
- City
- Amsterdam
- State
- NY
- Postal code
- 1012 AB
- Country
- NL — Netherlands 🇳🇱
- Contact email
- [email protected], [email protected]
- First indexed
- 2019-09-23 02:08:05
- Last updated
- 2026-08-14 14:26:22
Malicious IPs in the same CIDR
104.248.199.34 104.248.193.48 104.248.203.32 104.248.204.13 104.248.193.159 104.248.202.187 104.248.197.3 104.248.194.104 104.248.194.198 104.248.197.196 104.248.196.119 104.248.199.73 104.248.195.171 104.248.193.2