JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.248.152.210

104.248.152.210 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.248.152.210

Whois 104.248.152.210

IP Abuse Reports for 104.248.152.210:

This IP address has been reported a total of 30 times from 13 distinct sources. 104.248.152.210 was first reported on April 29th 2025, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 mcarthey	2026-08-29 16:37:47 (3 days ago)	Automated honeypot report from mcarthey.com. 7 hits across 4 bait families (config-php, dotenv, git- ... show more Automated honeypot report from mcarthey.com. 7 hits across 4 bait families (config-php, dotenv, git-config, git-head) in the last 24h. Full log: https://mcarthey.com/Shame show less	Bad Web Bot Web App Attack
🇮🇩 Burayot	2025-06-20 23:30:55 (1 year ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 104.248.152.210 (SG/Singapore/-): 2 ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 104.248.152.210 (SG/Singapore/-): 2 in the last 3600 secs show less	Web App Attack
🇬🇧 findlab	2025-06-14 20:10:02 (1 year ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
🇮🇳 zam	2025-06-05 22:27:17 (1 year ago)	104.248.152.210 - - [05/Jun/2025:22:27:14 +0000] "GET /.well-known/acme-challenge/index.php HTTP/1.1 ... show more 104.248.152.210 - - [05/Jun/2025:22:27:14 +0000] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 261 104.248.152.210 - - [05/Jun/2025:22:27:14 +0000] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 261 104.248.152.210 - - [05/Jun/2025:22:27:14 +0000] "GET /?loadme HTTP/1.1" 301 232 104.248.152.210 - - [05/Jun/2025:22:27:14 +0000] "GET /.tmb/wso.php HTTP/1.1" 301 237 104.248.152.210 - - [05/Jun/2025:22:27:14 +0000] "GET /_.php HTTP/1.1" 301 230 {"log":"104.248.152.210 - - [05/Jun/2025:22:27:15 +0000] "GET /.well-known/acme-challenge/inputs.php HTTP/1 show less	Web App Attack
🇹🇭 MWA SOC	2025-06-04 11:43:32 (1 year ago)		Hacking
🇮🇳 zam	2025-06-02 21:39:48 (1 year ago)	104.248.152.210 - - [02/Jun/2025:21:39:45 +0000] "GET /.well-known/acme-challenge/index.php HTTP/1.1 ... show more 104.248.152.210 - - [02/Jun/2025:21:39:45 +0000] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 404 196 104.248.152.210 - - [02/Jun/2025:21:39:45 +0000] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 404 196 104.248.152.210 - - [02/Jun/2025:21:39:45 +0000] "GET /.tmb/wso.php HTTP/1.1" 404 7749 104.248.152.210 - - [02/Jun/2025:21:39:45 +0000] "GET /_.php HTTP/1.1" 404 7749 104.248.152.210 - - [02/Jun/2025:21:39:46 +0000] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 404 196 {"log":"104.248.152.210 - - [02 show less	Web App Attack
🇮🇩 Incidents Response Neptus Team	2025-05-26 17:57:00 (1 year ago)	Report Abuse IP	Hacking Exploited Host Web App Attack
🇮🇩 hermawan	2025-05-26 10:41:18 (1 year ago)	[Mon May 26 17:40:47.292714 2025] [security2:error] [pid 57571:tid 139688509699776] [client 104.248. ... show more [Mon May 26 17:40:47.292714 2025] [security2:error] [pid 57571:tid 139688509699776] [client 104.248.152.210:61010] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "142"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: /?loadme found within SERVER_NAME: staklim-jatim.bmkg.go.id request_line = GET /?loadme HTTP/1.1 Request URI RAW = /?loadme Request Basename = "] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "aDRFL_xwumN8NjGdfwhIlgAAAFg"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[57627] [GdSslB/PU4Y] [aDRFL_xwumN8NjGdfwhIlgAAAFg] keep_alive=[0] [2025-05-26 17:40:47.292721] [R:aDRFL_xwumN8NjGdfwhIlgAAAFg] UA:'Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome ... show less	Hacking Web App Attack
🇮🇩 Incidents Response Neptus Team	2025-05-26 07:35:00 (1 year ago)	Report Abuse IP	Hacking Bad Web Bot Exploited Host Web App Attack
🇮🇩 Incidents Response Neptus Team	2025-05-26 02:48:00 (1 year ago)	Report Abuse IP	Hacking Exploited Host Web App Attack
🇮🇩 Incidents Response Neptus Team	2025-05-19 19:52:00 (1 year ago)	Report Abuse IP	Hacking Exploited Host Web App Attack
🇮🇩 RasyiidWho	2025-05-19 12:59:20 (1 year ago)	ip112.20 . 104.248.152.210 - - [19/May/2025:19:59:12 +0700] "GET /wp-admin/about.php HTTP/1.1" 404 5 ... show more ip112.20 . 104.248.152.210 - - [19/May/2025:19:59:12 +0700] "GET /wp-admin/about.php HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" ... show less	DDoS Attack Port Scan Brute-Force Bad Web Bot Web App Attack SSH
🇮🇩 Burayot	2025-05-17 02:33:58 (1 year ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 104.248.152.210 (SG/Singapore/-): 1 ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 104.248.152.210 (SG/Singapore/-): 1 in the last 3600 secs show less	Web App Attack
🇺🇸 jormaster3k	2025-05-17 00:11:46 (1 year ago)	Attack against Apache (too many 404s)	Web App Attack
🇮🇩 RasyiidWho	2025-05-14 20:51:48 (1 year ago)	ip112.20 . 104.248.152.210 - - [15/May/2025:03:51:47 +0700] "GET /wp-admin/admin.php HTTP/1.1" 404 5 ... show more ip112.20 . 104.248.152.210 - - [15/May/2025:03:51:47 +0700] "GET /wp-admin/admin.php HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" ... show less	DDoS Attack Port Scan Brute-Force Bad Web Bot Web App Attack SSH

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 123.160.173.138

🇨🇳 119.166.180.214

🇨🇳 113.206.130.38

🇺🇸 104.152.52.106

🇩🇪 69.5.169.248

🇱🇹 62.60.130.142

🇧🇪 34.14.122.221

🇨🇳 222.246.42.26

🇹🇼 220.132.194.158

🇦🇷 200.59.104.110

🇧🇷 189.111.1.93

🇨🇳 117.156.90.64

🇧🇬 95.43.230.209

🇫🇷 91.196.152.189

🇬🇧 90.250.40.19

🇸🇦 77.31.239.85

🇳🇱 45.148.10.152

🇹🇼 34.80.206.194

🇺🇸 104.152.52.109

🇮🇳 103.87.175.110