JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.168.92.88

104.168.92.88 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 55%: ?

55%

ISP	HostPapa
Usage Type	Data Center/Web Hosting/Transit
ASN	AS36352
Hostname(s)	104-168-92-88-host.colocrossing.com
Domain Name	hostpapa.com
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.168.92.88

Whois 104.168.92.88

IP Abuse Reports for 104.168.92.88:

This IP address has been reported a total of 24 times from 11 distinct sources. 104.168.92.88 was first reported on November 6th 2025, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-20 11:15:02 (3 hours ago)	(mod_security) mod_security (id:210492) triggered by 104.168.92.88 (104-168-92-88-host.colocrossing. ... show more (mod_security) mod_security (id:210492) triggered by 104.168.92.88 (104-168-92-88-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 07:14:58.478902 2026] [security2:error] [pid 11371:tid 11383] [client 104.168.92.88:57641] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gfx-technology.com"] [uri "/.git/HEAD"] [unique_id "aq_AMjGpyP_qF6a1UxevAgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 BlueWire Hosting	2026-09-19 01:40:39 (1 day ago)	High-confidence malicious configuration/VCS probe	Web App Attack
🇺🇸 TPI-Abuse	2026-09-18 19:43:10 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 104.168.92.88 (104-168-92-88-host.colocrossing. ... show more (mod_security) mod_security (id:210492) triggered by 104.168.92.88 (104-168-92-88-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 15:42:20.250710 2026] [security2:error] [pid 6008:tid 6130] [client 104.168.92.88:59390] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.meisterx.aafm.us"] [uri "/.git/HEAD"] [unique_id "aq2UHJv0YynBFetnvKP1fgAAAMY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2026-09-18 14:48:14 (2 days ago)	[18/Sep/2026:17:48:14 +0300] -- 104.168.92.88 Ban reason: User-Agent Python-urllib	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-18 13:42:03 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 104.168.92.88 (104-168-92-88-host.colocrossing. ... show more (mod_security) mod_security (id:210492) triggered by 104.168.92.88 (104-168-92-88-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 09:42:00.131416 2026] [security2:error] [pid 6937:tid 6937] [client 104.168.92.88:41259] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "glendaleheritage.org"] [uri "/.git/HEAD"] [unique_id "aq0_qLlhmqnMtCh_qH6MkwAAACE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 15:16:35 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 104.168.92.88 (104-168-92-88-host.colocrossing. ... show more (mod_security) mod_security (id:210492) triggered by 104.168.92.88 (104-168-92-88-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 11:16:24.681165 2026] [security2:error] [pid 4173:tid 4173] [client 104.168.92.88:52857] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bawaselcenter.iahksa.com"] [uri "/.git/HEAD"] [unique_id "aqqyyBDV0l9v-XC_AKxyIAAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 11:24:09 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 104.168.92.88 (104-168-92-88-host.colocrossing. ... show more (mod_security) mod_security (id:210492) triggered by 104.168.92.88 (104-168-92-88-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 07:23:58.315062 2026] [security2:error] [pid 16838:tid 16838] [client 104.168.92.88:60942] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.brbcoin.com"] [uri "/.git/HEAD"] [unique_id "aqp8TqIVfZuzdsYK_rWZdAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-13 04:24:51 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 104.168.92.88 (104-168-92-88-host.colocrossing. ... show more (mod_security) mod_security (id:210492) triggered by 104.168.92.88 (104-168-92-88-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 13 00:24:42.219037 2026] [security2:error] [pid 10283:tid 10283] [client 104.168.92.88:54415] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.adampayments.com"] [uri "/.git/HEAD"] [unique_id "aqYlijZayPGjQ9D5hZ-joQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-12 22:08:05 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 104.168.92.88 (104-168-92-88-host.colocrossing. ... show more (mod_security) mod_security (id:210492) triggered by 104.168.92.88 (104-168-92-88-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 18:07:43.898433 2026] [security2:error] [pid 22429:tid 22429] [client 104.168.92.88:59040] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "accordionfactory.com.accordionclub.org"] [uri "/.git/HEAD"] [unique_id "aqXNL-_ir20HRwDsGmK3agAAAEw"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Trashware	2026-09-12 07:06:42 (1 week ago)	Troll got lost in Hellpot	Hacking Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-09-10 22:00:38 (1 week ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-09. show less	Web App Attack SSH Hacking
🇳🇱 homeshowdomain.nl	2026-09-09 22:02:33 (1 week ago)	Auto-ban: >3000 req/min op 2026-09-09	Web App Attack SSH Hacking
Anonymous	2026-09-08 17:09:40 (1 week ago)	GET /.git/HEAD HTTP/1.1 ...	Web App Attack
🇵🇱 sefinek.net	2026-09-08 10:30:16 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoi ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoint: /.git/HEAD \| UA: Python-urllib/3.10 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-05 13:11:10 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 104.168.92.88 (104-168-92-88-host.colocrossing. ... show more (mod_security) mod_security (id:210492) triggered by 104.168.92.88 (104-168-92-88-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 09:11:04.919491 2026] [security2:error] [pid 17658:tid 17658] [client 104.168.92.88:49774] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.crystaljohns.com"] [uri "/.git/HEAD"] [unique_id "apwU6I3w81cIuADsM-_5LgAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 207.90.244.28

🇧🇷 191.37.76.156

🇨🇳 180.76.184.79

🇺🇸 150.107.36.236

🇺🇸 2604:a880:400:d1:0:5:29e:c001

🇧🇪 193.121.36.17

🇨🇳 175.10.57.135

🇺🇸 172.169.235.38

🇵🇹 94.63.178.248

🇺🇸 45.42.214.211

🇺🇸 35.196.55.242

🇺🇸 34.174.144.139

🇮🇳 2401:4900:8380:5286:d50d:2fd0:175:c7ab

🇳🇱 195.178.110.227

🇧🇷 190.89.55.250

🇮🇹 109.53.245.92

🇩🇪 64.89.163.141

🇫🇮 45.87.249.146

🇿🇦 41.13.198.4

🇺🇸 12.202.15.69