104.248.154.217
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- DigitalOcean, LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14061
- Domain Name
- digitalocean.com
- Country
- 🇸🇬 Singapore
- City
- Singapore
No reports in the last 60 days
104.248.154.217 has been reported 28 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
28 from
25 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇬🇧 consul.to |
Web attack/malicious scanning detected
|
Web App Attack | |
| 🇬🇧 openstrike.co.uk |
45 attacks on PHP URLs, Wordpress URLs:
GET /wp-includes/id3/license.txt/xmlrpc.php?rsd HTTP/1.1
GET /wp-includes/id3/license.txt/cms/wp-includes/wlwmanifest.xml HTTP/1.1
|
Web App Attack | |
| 🇬🇧 SilverZippo |
Web App Attack
|
Web App Attack | |
| 🇭🇳 unph |
Intento de acceso sospechoso en el login de WordPress
|
Brute-Force | |
| 🇦🇺 clapper |
(mod_security) mod_security (id:350202) triggered by 104.248.154.217 (SG/Singapore/-): 5 in the last 3600 secs; ID: rub
|
Brute-Force Bad Web Bot | |
| 🇦🇺 2000cn.com.au |
This IP was detected by CrowdSec triggering crowdsecurity/http-bf-wordpress_bf
|
Brute-Force Web App Attack | |
| 🇦🇺 nzhost.co.nz |
$f2bV_matches
|
Hacking Brute-Force | |
| 🇺🇦 URAN Publishing Service |
104.248.154.217 - - [24/Oct/2025:15:18:26 +0300] "GET //wp-includes/ID3/license.txt HTTP/1.1" 404 2667 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
...
|
Web App Attack | |
| 🇬🇧 CrystalMaker |
|
Web App Attack | |
| 🇩🇪 ps-center |
DIS: Web Attack GET /blog/wp-includes/wlwmanifest.xml
|
Web Spam Hacking Bad Web Bot Web App Attack | |
| Anonymous |
Malicious activity detected
|
Hacking Web App Attack | |
| 🇮🇩 Burayot |
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 104.248.154.217 (SG/Singapore/-): 1 in the last 3600 secs
|
Web App Attack | |
| 🇧🇪 cmbplf |
2.401 requests with url.path */wp-includes/wlwmanifest.xml
2.008 requests with url.path */xmlrpc.php
|
Brute-Force Bad Web Bot | |
| Anonymous |
Trawling for Open Source CMS installs
|
Hacking Brute-Force | |
| 🇮🇩 Burayot |
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 104.248.154.217 (SG/Singapore/-): 2 in the last 3600 secs
|
Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown