JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.248.124.46

104.248.124.46 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	North Bergen, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.248.124.46

Whois 104.248.124.46

IP Abuse Reports for 104.248.124.46:

This IP address has been reported a total of 27 times from 15 distinct sources. 104.248.124.46 was first reported on December 27th 2025, and the most recent report was 6 months ago.

Old Reports: The most recent abuse report for this IP address is from 6 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2025-12-29 21:31:21 (6 months ago)	(mod_security) mod_security (id:240335) triggered by 104.248.124.46 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 104.248.124.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 16:31:13.416501 2025] [security2:error] [pid 10626:tid 10626] [client 104.248.124.46:60674] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 104.248.124.46 (+1 hits since last alert)\|insidepublications.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "insidepublications.com"] [uri "/xmlrpc.php"] [unique_id "aVLzIaUH6Jri1TiFLFgZtwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 20:20:07 (6 months ago)	(mod_security) mod_security (id:240335) triggered by 104.248.124.46 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 104.248.124.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 15:20:02.178302 2025] [security2:error] [pid 30320:tid 30320] [client 104.248.124.46:34190] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 104.248.124.46 (+1 hits since last alert)\|artbytracyjane.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "artbytracyjane.com"] [uri "/xmlrpc.php"] [unique_id "aVLicsdGGmlkiliocq8VjwAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 19:27:08 (6 months ago)	(mod_security) mod_security (id:240335) triggered by 104.248.124.46 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 104.248.124.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 14:27:04.357910 2025] [security2:error] [pid 18194:tid 18194] [client 104.248.124.46:59808] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 104.248.124.46 (+1 hits since last alert)\|thehealthyplaceclayton.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "thehealthyplaceclayton.com"] [uri "/xmlrpc.php"] [unique_id "aVLWCHiviN99-shVtzvP2gAAACQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 weblite	2025-12-29 18:30:27 (6 months ago)	WP_XMLRPC_ABUSE	Brute-Force Web App Attack
🇺🇸 Jason Howell	2025-12-29 18:28:58 (6 months ago)	104.248.124.46 - - [29/Dec/2025:12:28:57 -0600] "POST /xmlrpc.php HTTP/1.1" 200 3223 "-" "Mozilla/5. ... show more 104.248.124.46 - - [29/Dec/2025:12:28:57 -0600] "POST /xmlrpc.php HTTP/1.1" 200 3223 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.181 Safari/537.36" 104.248.124.46 - - [29/Dec/2025:12:28:57 -0600] "POST /xmlrpc.php HTTP/1.1" 200 3222 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.181 Safari/537.36" 104.248.124.46 - - [29/Dec/2025:12:28:57 -0600] "POST /xmlrpc.php HTTP/1.1" 200 3223 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.181 Safari/537.36" 104.248.124.46 - - [29/Dec/2025:12:28:57 -0600] "POST /xmlrpc.php HTTP/1.1" 200 3223 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.181 Safari/537.36" 104.248.124.46 - - [29/Dec/2025:12:28:58 -0600] "POST /xmlrpc.php HTTP/1.1" 200 3221 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKi ... show less	Web App Attack
🇳🇱 Site.eu	2025-12-29 15:17:29 (6 months ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇺🇸 TPI-Abuse	2025-12-29 13:16:13 (6 months ago)	(mod_security) mod_security (id:240335) triggered by 104.248.124.46 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 104.248.124.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 08:16:09.635590 2025] [security2:error] [pid 22502:tid 22509] [client 104.248.124.46:37154] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 104.248.124.46 (+1 hits since last alert)\|greaternorthmiamihistory.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "greaternorthmiamihistory.org"] [uri "/xmlrpc.php"] [unique_id "aVJ_GbCDvlZNawKJ6vgtVQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 masterguru	2025-12-29 11:39:38 (6 months ago)	xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (5000900-122)	Web App Attack
🇩🇪 dbmwebdesign	2025-12-29 11:30:29 (6 months ago)	WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 11:20:00 (6 months ago)	(mod_security) mod_security (id:240335) triggered by 104.248.124.46 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 104.248.124.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 06:19:57.861114 2025] [security2:error] [pid 2865787:tid 2865802] [client 104.248.124.46:36044] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 104.248.124.46 (+1 hits since last alert)\|ianajewellery.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "ianajewellery.com"] [uri "/xmlrpc.php"] [unique_id "aVJj3ZyqIHY7ymJpK4UNLQAAAM0"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2025-12-29 09:23:39 (6 months ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇫🇷 dynamix	2025-12-29 04:05:41 (6 months ago)	Multiple WAF Violations	Web App Attack
🇲🇾 Rizzy	2025-12-29 03:19:41 (6 months ago)	Multiple WAF Violations	Brute-Force Web App Attack
Anonymous	2025-12-29 02:18:33 (6 months ago)	Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1	Hacking Web App Attack
🇫🇷 Kenshin869	2025-12-29 01:15:18 (6 months ago)	Wordpress unauthorized access attempt	Brute-Force

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇹 109.70.100.7

🇦🇹 209.242.203.6

🇩🇪 164.92.240.151

🇨🇦 143.110.218.178

🇦🇺 134.199.149.189

🇦🇹 109.70.100.6

🇦🇹 109.70.100.4

🇫🇷 91.231.89.237

🇩🇪 213.209.159.236

🇩🇪 185.242.3.195

🇦🇱 109.236.45.28

🇦🇹 109.70.100.15

🇮🇩 103.160.150.106

🇬🇧 77.68.29.20

🇮🇩 69.5.23.222

🇰🇷 58.229.141.26

🇺🇸 52.224.109.126

🇨🇳 211.93.6.230

🇧🇷 200.219.200.16

🇨🇳 175.30.48.15