104.248.208.166
Classification: Malicious
104.248.208.166 is a malicious IP address. Reported by 4 threat sources, last seen 2026-08-22. Network: AS14061 Digitalocean, LLC.
Current activity
- Known attacker — Seen launching attacks over the Internet.
- Known scanner — Seen scanning hosts over the Internet.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| ET CINS Active Threat Intelligence Poor Reputation IP UDP | Emerging Threats | 2026-05-19 03:14:40 | 2026-08-22 09:09:23 | attacker malicious-activity | |
| ET CINS Active Threat Intelligence Poor Reputation IP TCP | Emerging Threats | 2026-05-19 03:14:37 | 2026-08-22 09:09:22 | attacker malicious-activity | |
| Malicious Host | CIArmy | 2024-06-21 01:28:43 | 2026-08-20 20:01:52 | attacker malicious-activity | |
| Port Scanner | AbuseIPDB | 2026-05-16 07:50:03 | 2026-07-07 06:38:27 | anomalous-activity attacker malicious-activity reconnaissance | |
| Hacking | AbuseIPDB | 2026-05-16 18:41:43 | 2026-07-07 00:35:33 | attacker malicious-activity | |
| Bruteforce | AbuseIPDB | 2026-05-16 03:24:46 | 2026-07-07 00:35:33 | attacker malicious-activity | |
| HTTP Attacker | AbuseIPDB | 2026-05-20 10:05:35 | 2026-07-05 10:32:22 | attacker malicious-activity | |
| Malicious Host | AbuseIPDB | 2026-05-18 22:08:44 | 2026-07-04 05:37:43 | attacker compromised malicious-activity | |
| HTTP Scrapper | AbuseIPDB | 2026-05-19 08:51:11 | 2026-06-24 08:33:05 | anomalous-activity attacker malicious-activity | |
| DDoS Attacker | AbuseIPDB | 2026-06-03 08:49:00 | 2026-06-03 08:49:00 | attacker malicious-activity | |
| IoT Attacker | AbuseIPDB | 2026-06-03 08:49:00 | 2026-06-03 08:49:00 | malicious-activity | |
| SSH Attacker | AbuseIPDB | 2026-05-16 07:50:03 | 2026-05-29 18:41:36 | attacker malicious-activity | |
| Suspicious Host | AbuseIPDB | 2026-05-16 23:51:38 | 2026-05-16 23:51:38 | anomalous-activity | |
| SSH Attacker | Blocklist.de | 2024-07-05 11:55:20 | 2024-07-05 11:55:20 | malicious-activity |
Tags
ssh bruteforce botWhois information
- AS name
- AS14061 Digitalocean, LLC
- AS registry
- arin
- AS date
- 2018-08-06 00:00:00
- AS CIDR
- 104.248.208.0/20
- CIDR
- 104.248.0.0/16
- Registrant
- Digitalocean, LLC
- Address
- 101 Ave of the Americas FL2
- City
- Santa Clara
- State
- CA
- Postal code
- 95050
- Country
- US — United States 🇺🇸
- Contact email
- [email protected], [email protected]
- First indexed
- 2024-06-21 01:28:43
- Last updated
- 2026-08-22 09:09:44
Malicious IPs in the same CIDR
104.248.208.56 104.248.215.132 104.248.213.4 104.248.208.166 104.248.212.97