104.248.197.196
Classification: Malicious
104.248.197.196 is a malicious IP address. Reported by 4 threat sources, last seen 2026-08-08. Network: AS14061 DigitalOcean, LLC.
Current activity
- Known attacker — Seen launching attacks over the Internet.
- Known scanner — Seen scanning hosts over the Internet.
- IoT threat — Seen attacking IoT devices.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Bruteforce | AbuseIPDB | 2026-08-05 14:29:14 | 2026-08-08 04:52:42 | attacker malicious-activity | |
| SSH Attacker | AbuseIPDB | 2026-08-05 14:29:14 | 2026-08-08 04:52:42 | attacker malicious-activity | |
| SSH Attacker | Blocklist.de | 2026-08-06 14:00:20 | 2026-08-06 14:00:20 | attacker malicious-activity | |
| Port Scanner | AbuseIPDB | 2026-08-02 04:45:45 | 2026-08-05 22:45:00 | anomalous-activity attacker malicious-activity reconnaissance | |
| Hacking | AbuseIPDB | 2026-08-02 05:11:30 | 2026-08-05 16:33:07 | attacker malicious-activity | |
| DDoS Attacker | AbuseIPDB | 2026-08-05 14:40:35 | 2026-08-05 14:40:35 | attacker malicious-activity | |
| FTP Attacker | AbuseIPDB | 2026-08-05 14:40:35 | 2026-08-05 14:40:35 | attacker malicious-activity | |
| SQL Injection | AbuseIPDB | 2026-08-05 14:40:35 | 2026-08-05 14:40:35 | attacker malicious-activity | |
| IMAP Attacker | AbuseIPDB | 2026-08-05 14:40:35 | 2026-08-05 14:40:35 | attacker malicious-activity | |
| HTTP Scrapper | AbuseIPDB | 2026-08-05 14:40:35 | 2026-08-05 14:40:35 | anomalous-activity attacker malicious-activity | |
| IoT Attacker | AbuseIPDB | 2026-08-05 14:40:35 | 2026-08-05 14:40:35 | iot malicious-activity | |
| Malicious Host | HoneyDB | 2026-08-05 00:00:00 | 2026-08-05 00:00:00 | attacker malicious-activity | |
| VPN | IPWhois.io | 2024-12-27 05:44:24 | 2025-01-31 10:20:17 | anonymization | |
| Suspicious Host | AbuseIPDB | 2024-12-26 23:46:00 | 2024-12-26 23:46:00 | anomalous-activity |
Tags
ssh bruteforce botWhois information
- AS name
- AS14061 DigitalOcean, LLC
- AS registry
- arin
- AS date
- 2018-08-06 00:00:00
- AS CIDR
- 104.248.192.0/20
- CIDR
- 104.248.0.0/16
- Registrant
- DigitalOcean, LLC
- Address
- 101 Ave of the Americas FL2
- City
- Amsterdam
- State
- NY
- Postal code
- 1012 AB
- Country
- NL — Netherlands 🇳🇱
- Contact email
- [email protected], [email protected]
- First indexed
- 2024-12-27 05:44:21
- Last updated
- 2026-08-14 17:44:43
Malicious IPs in the same CIDR
104.248.193.2 104.248.203.32 104.248.195.171 104.248.199.34 104.248.193.48 104.248.204.13 104.248.193.159 104.248.202.187 104.248.197.3 104.248.194.104 104.248.194.198 104.248.197.196 104.248.196.119 104.248.199.73