JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.248.155.70

104.248.155.70 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.248.155.70

Whois 104.248.155.70

IP Abuse Reports for 104.248.155.70:

This IP address has been reported a total of 32 times from 28 distinct sources. 104.248.155.70 was first reported on November 7th 2025, and the most recent report was 7 months ago.

Old Reports: The most recent abuse report for this IP address is from 7 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 Gem	2025-11-12 13:13:51 (7 months ago)	Unauthorized web scan.	Web App Attack
🇫🇷 SpaceHost-Server	2025-11-07 23:27:30 (7 months ago)		Brute-Force Web App Attack
🇹🇷 rtbh.com.tr	2025-11-07 20:09:47 (7 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 TPI-Abuse	2025-11-07 09:22:28 (7 months ago)	(mod_security) mod_security (id:225170) triggered by 104.248.155.70 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 104.248.155.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 07 04:22:25.214253 2025] [security2:error] [pid 30485:tid 30485] [client 104.248.155.70:62766] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.drbolen.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.drbolen.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aQ26UewMAOyQ3i4T3b7moQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2025-11-07 08:25:16 (7 months ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇺🇸 TPI-Abuse	2025-11-07 08:13:54 (7 months ago)	(mod_security) mod_security (id:225170) triggered by 104.248.155.70 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 104.248.155.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 07 03:13:49.424252 2025] [security2:error] [pid 27350:tid 27350] [client 104.248.155.70:58362] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|dokuzadabirdeniz.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dokuzadabirdeniz.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aQ2qPUnMX0kXp09CQCBwpwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 GoodOldTOS	2025-11-07 08:13:12 (7 months ago)	Highly suspect IP	Hacking Web App Attack
🇺🇸 agenciahypelab.com.br	2025-11-07 07:34:14 (7 months ago)	WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER	Brute-Force SSH
Anonymous	2025-11-07 07:33:18 (7 months ago)	(PERMBLOCK) 104.248.155.70 (SG/Singapore/-) has had more than 4 temp blocks	Hacking
🇺🇸 TPI-Abuse	2025-11-07 07:25:34 (7 months ago)	(mod_security) mod_security (id:225170) triggered by 104.248.155.70 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 104.248.155.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 07 02:25:29.366884 2025] [security2:error] [pid 31222:tid 31256] [client 104.248.155.70:49548] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|conservativelabor.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "conservativelabor.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aQ2e6R5cqrbBe9ZGp6CTRQAAAdQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-07 07:11:15 (7 months ago)	(wordpress) Failed wordpress login from 104.248.155.70 (SG/Singapore/-)	Brute-Force
🇩🇪 Blexyel	2025-11-07 06:56:34 (7 months ago)	104.248.155.70 - - [07/Nov/2025:06:56:31 +0000] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 301 0 " ... show more 104.248.155.70 - - [07/Nov/2025:06:56:31 +0000] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" ... show less	Brute-Force Web App Attack
🇯🇵 S.O.B.A. Dev.	2025-11-07 06:15:39 (7 months ago)	Web vulnerability scanning	Web Spam Brute-Force Web App Attack
🇧🇪 taivas.nl	2025-11-07 06:02:11 (7 months ago)	Bad_requests	Bad Web Bot
🇩🇪 stinpriza	2025-11-07 06:01:25 (7 months ago)	WP Authentication attempt for unknown user	Brute-Force Web App Attack

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 209.50.169.64

🇺🇸 198.41.227.192

🇵🇱 195.116.145.127

🇬🇧 188.240.59.20

🇹🇭 147.50.103.212

🇩🇪 104.207.54.240

🇺🇸 104.207.33.248

🇧🇷 102.211.152.138

🇨🇳 101.71.134.165

🇷🇺 95.142.47.113

🇳🇱 91.92.40.12

🇩🇪 69.5.169.190

🇫🇷 51.68.107.149

🇺🇸 45.3.35.33

🇬🇧 37.10.113.211

🇩🇪 216.26.252.176

🇺🇸 216.26.229.255

🇳🇱 204.76.203.36

🇬🇧 193.176.29.8

🇧🇷 189.52.52.162