JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

104.248.160.236

Recent Activity

Abuse confidence score ?

100% Critical

80 reports

67 reporters · latest 35 minutes ago

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	London, England

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 104.248.160.236

Export CSV

This IP address has been reported a total of 80 times from 67 distinct sources. 104.248.160.236 was first reported on June 14th 2026, and the most recent report was 35 minutes ago. In the last 60 days, the top reporter locations were: Germany with 29 reports; France with 14 reports; United States of America with 13 reports. The most common categories in these recent reports were: Web App Attack 50 times; Bad Web Bot 20 times; Port Scan 19 times; Hacking 18 times; Brute-Force 12 times; Other 6 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Serpentex	2026-10-24 11:00:36 (35 minutes ago)	104.248.160.236 - - [24/Oct/2026:13:00:34 +0200] "\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03/\xD2i ... show more 104.248.160.236 - - [24/Oct/2026:13:00:34 +0200] "\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03/\xD2i\xED\x14\x1A\x98\x8F\xF5\xA447&b\xD9\x1C\x13\x82\xE8\xC3\x9Ar~\xF6\x5C\xE9\|\x88k\xC6S. \x0B\xDB2=\x19\xF3\x1E\xA4/\xA1\xA6;1\x1D$]\xCF\xD9\x9B\xB2WH7\xB6c\x189\x8E\xFA\xD4n\x08\x00>\x13\x02\x13\x03\x13\x01\xC0,\xC00\x00\x9F\xCC\xA9\xCC\xA8\xCC\xAA\xC0+\xC0/\x00\x9E\xC0$\xC0(\x00k\xC0#\xC0'\x00g\xC0" 400 150 "-" "-" 104.248.160.236 - - [24/Oct/2026:13:00:35 +0200] "\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03\x03\xEB\x9Bh\x7F\xED\xB5\xA3s\xFC\xB3\xB9\xB9\xB3\xB0\x09\x7F\xED&\x13EK\x06\xBD]\x19h\x09\xB3\x1A0\xF3 \xE3-r\x0BO\x80\x17\x18\xEB31\xD4\xC8\xF0\xB6\xB6!\xC2,\x02A\x06[\xC4\xA8\xA3po\xE0]\x0Ce\x00>\x13\x02\x13\x03\x13\x01\xC0,\xC00\x00\x9F\xCC\xA9\xCC\xA8\xCC\xAA\xC0+\xC0/\x00\x9E\xC0$\xC0(\x00k\xC0#\xC0'\x00g\xC0" 400 150 "-" "-" 104.248.160.236 - - [24/Oct/2026:13:00:35 +0200] "\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03\xB4\xE8\xC7e3$q\x22:\x11\x17;\xBB\xA1\xB7\x95\xCE\xAB\xAB\x ... show less	Bad Web Bot Web App Attack
🇩🇪 XYCoderXY	2026-10-24 10:59:02 (36 minutes ago)	HTTP vulnerability scan: 27 requests between 2026-10-24 10:59:02 and 10:59:23 UTC. Targets: exposed ... show more HTTP vulnerability scan: 27 requests between 2026-10-24 10:59:02 and 10:59:23 UTC. Targets: exposed secrets, config and source-control files. Examples: /.env, /.env.bak, /.env.backup, /src/.env. No legitimate visitor of this server sends these requests. Source blocked. - Lumerux Defense (lumerux.com), automated report. Contact: [email protected] show less	Web App Attack
🇳🇱 MyGlobalFlowers	2026-10-24 08:11:10 (3 hours ago)	Multiple WAF Violations	Web App Attack
🇳🇱 Alt255	2026-10-24 08:02:53 (3 hours ago)	[topuur03bd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. E ... show more [topuur03bd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.248.160.236 - - [24/Oct/2026:10:02:32 +0200] "GET /.env.bak HTTP/1.1" 403 7917 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ... show less	Bad Web Bot Web App Attack
Anonymous	2026-10-24 04:12:26 (7 hours ago)	Blocked by firewall on hugin [8080/tcp] \| Rule: UFW \| SPT: 38552 \| TTL: 54 \| LEN: 60 \| TOS: 0x00 • R ... show more Blocked by firewall on hugin [8080/tcp] \| Rule: UFW \| SPT: 38552 \| TTL: 54 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 Dennis	2026-10-24 03:51:20 (7 hours ago)	104.248.160.236 has been banned for triggering http-sensitive-files (5 events over 130.409362ms).	Brute-Force Web App Attack
Anonymous	2026-10-24 03:44:16 (7 hours ago)	This IP was detected by CrowdSec triggering local/abuseipdb-watchlist	Port Scan
🇩🇪 sdos.es	2026-10-24 01:08:57 (10 hours ago)	"Restricted File Access Attempt - Matched Data: /.env found within REQUEST_FILENAME: /.env"	Web App Attack
🇩🇪 shurizma	2026-10-24 00:41:21 (10 hours ago)	104.248.160.236 - - [24/Oct/2026:00:41:20 +0000] "GET /.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Window ... show more 104.248.160.236 - - [24/Oct/2026:00:41:20 +0000] "GET /.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ... show less	Web App Attack Bad Web Bot
🇩🇪 edena	2026-10-24 00:02:17 (11 hours ago)	104.248.160.236 - - [24/Oct/2026:02:02:16 +0200] "GET /.env HTTP/1.1" 403 303 "-" "Mozilla/5.0 (Wind ... show more 104.248.160.236 - - [24/Oct/2026:02:02:16 +0200] "GET /.env HTTP/1.1" 403 303 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 104.248.160.236 - - [24/Oct/2026:02:02:16 +0200] "GET /.env.bak HTTP/1.1" 403 303 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 104.248.160.236 - - [24/Oct/2026:02:02:16 +0200] "GET /.env.backup HTTP/1.1" 403 303 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ... show less	Web App Attack Bad Web Bot
🇩🇪 gadix	2026-10-23 23:58:51 (11 hours ago)	[24/Oct/2026:01:58:50.738700 +0200] atv0umAjY97cEL8j9euvTQAAAAY 104.248.160.236 42978 127.0.0.1 7080 ... show more [24/Oct/2026:01:58:50.738700 +0200] atv0umAjY97cEL8j9euvTQAAAAY 104.248.160.236 42978 127.0.0.1 7080 [24/Oct/2026:01:58:50.759594 +0200] atv0ulE6H4MSsHySGjogVQAAAAI 104.248.160.236 42982 127.0.0.1 7080 [24/Oct/2026:01:58:50.780295 +0200] atv0utVeMfT8KWYibMSuUgAAAAs 104.248.160.236 42998 127.0.0.1 7080 ... show less	Web App Attack
🇺🇸 hyena	2026-10-23 21:10:21 (14 hours ago)	Repeated mod_security events.	Web App Attack
🇬🇧 Artelis	2026-10-23 19:39:07 (15 hours ago)	104.248.160.236 - - [23/Oct/2026:19:39:06 +0000] "GET /.env HTTP/1.1" 404 146 "-" "Mozilla/5.0 (Wind ... show more 104.248.160.236 - - [23/Oct/2026:19:39:06 +0000] "GET /.env HTTP/1.1" 404 146 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 104.248.160.236 - - [23/Oct/2026:19:39:06 +0000] "GET /.env.bak HTTP/1.1" 404 146 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 104.248.160.236 - - [23/Oct/2026:19:39:06 +0000] "GET /.env.backup HTTP/1.1" 404 146 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 104.248.160.236 - - [23/Oct/2026:19:39:06 +0000] "GET /app/.env HTTP/1.1" 404 146 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 104.248.160.236 - - [23/Oct/2026:19:39:06 +0000] "GET /.env.production HTTP/1.1" 404 146 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 104.248.160.236 - - [23/Oct/2026:19:39:06 +0000] "GET /src/.env HTTP/1.1" 404 146 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 104.248.160.236 - - [23/Oct/2026:19:39:06 +0000] "GET /.env HTTP/1.1" 404 146 "-" "Mozilla/5.0 (Wind ... show less	Web App Attack
🇬🇧 Don Felip	2026-10-23 18:03:51 (17 hours ago)	Web Exploiter - Banned by Fail2Ban	Hacking Web App Attack
🇬🇧 thetomtaylor.co.uk	2026-10-23 15:05:05 (20 hours ago)	Fail2Ban - [NGINX]Malicious request blocked on nginx-444 ... [wa01,wa02]	Hacking Bad Web Bot

Showing 1 to 15 of 80 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 85.217.140.22

🇨🇦 158.69.208.18

🇨🇳 123.129.245.249

🇧🇩 103.60.175.195

🇩🇪 93.152.221.60

🇷🇴 80.94.95.226

🇨🇦 70.26.193.117

🇺🇸 66.249.65.2

🇲🇾 49.124.151.27

🇨🇳 47.97.112.136

🇧🇷 34.39.192.170

🇩🇪 209.38.233.70

🇷🇺 188.187.56.170

🇰🇷 168.107.49.174

🇺🇸 134.122.30.157

🇨🇭 132.243.175.144

🇨🇳 123.123.204.152

🇰🇷 112.219.151.50

🇮🇳 110.226.114.176

🇿🇦 105.233.69.218