JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.248.229.126

104.248.229.126 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	North Bergen, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.248.229.126

Whois 104.248.229.126

IP Abuse Reports for 104.248.229.126:

This IP address has been reported a total of 26 times from 25 distinct sources. 104.248.229.126 was first reported on March 13th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-09-28 07:09:17 (2 days ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: WordPress scanning show less	Bad Web Bot Web App Attack
🇳🇱 0xffffffff	2026-09-27 11:09:45 (3 days ago)	[2026-09-27 14:09:41.429192] [authz_core:error] [pid 900112:tid 127980287203008] [client 104.248.229 ... show more [2026-09-27 14:09:41.429192] [authz_core:error] [pid 900112:tid 127980287203008] [client 104.248.229.126:0] AH01630: client denied by server configuration: /var/www//cms, referer http:///cms/ , error_notes:non-dirs , URI:'/cms/' [2026-09-27 14:09:42.470118] [authz_core:error] [pid 900112:tid 127980303988416] [client 104.248.229.126:0] AH01630: client denied by server configuration: /var/www//wordpress, referer http:///wordpress/ , error_notes:non-dirs , URI:'/wordpress/' [2026-09-27 14:09:42.575893] [authz_core:error] [pid 900112:tid 127980295595712] [client 104.248.229.126:0] AH01630: client denied by server configuration: /var/www//backup, referer http:///backup/ , error_notes:non-dirs , URI:'/backup/' [2026-09-27 14:09:42.680208] [authz_core:error] [pid 864399:tid 127980169615040] [client 104.248.229.126:0] AH01630: client denied by server configuration: /var/www//old, referer http:///old/ , error_notes:non-dirs , URI:'/old/' [2026-09-27 14:09:42.784472] [authz_core:error] [pid 900112:tid 127980312 show less	Web App Attack Bad Web Bot
Anonymous	2026-09-27 10:57:49 (3 days ago)	Banned by Fail2Ban on server	Web App Attack
🇫🇷 regishoussin	2026-09-27 10:43:08 (3 days ago)	Automated web scanning detected by Wazuh (rule 100180): repeated 400/404 errors from mass probing of ... show more Automated web scanning detected by Wazuh (rule 100180): repeated 400/404 errors from mass probing of admin/backdoor paths (e.g. wp-login.php, known CMS shell filenames) on an Apache web server, on 2026-09-27 10:43 UTC. show less	Bad Web Bot Web App Attack
🇧🇪 taivas.nl	2026-09-27 10:02:12 (3 days ago)	Site scraper	Web App Attack
🇫🇷 Zundapper	2026-09-27 09:54:13 (3 days ago)	104.248.229.126 - - [27/Sep/2026:11:54:12 +0200] "HEAD /site1/ HTTP/2.0" 404 0 "http://propc.it/site ... show more 104.248.229.126 - - [27/Sep/2026:11:54:12 +0200] "HEAD /site1/ HTTP/2.0" 404 0 "http://propc.it/site1/" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.5993.90 Safari/537.36" 104.248.229.126 - - [27/Sep/2026:11:54:12 +0200] "HEAD /shop/ HTTP/2.0" 404 0 "http://propc.it/shop/" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" 104.248.229.126 - - [27/Sep/2026:11:54:12 +0200] "HEAD /2023/ HTTP/2.0" 404 0 "http://propc.it/2023/" "Mozilla/5.0 (Linux; Android 14; OnePlus 12) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.102 Mobile Safari/537.36" 104.248.229.126 - - [27/Sep/2026:11:54:13 +0200] "HEAD /cms/ HTTP/2.0" 404 0 "http://propc.it/cms/" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edg/128.0.2790.25 Chrome/128.0.6540.22 Safari/537.36" 104.248.229.126 - - [27/Sep/2026:11:54:13 +0200] "HEAD /us/ HTTP/2.0" 404 0 "http://propc.it/us/" "Mozilla/5.0 (Linux; Android 11; mot ... show less	Web App Attack Port Scan
🇩🇪 33three	2026-09-27 09:06:16 (3 days ago)	Fail2Ban jail WebAttack triggered	Brute-Force
🇺🇸 mnsf	2026-09-27 08:05:59 (3 days ago)	Too many Status 40X (11)	Brute-Force Web App Attack
🇧🇪 cmbplf	2026-09-27 08:02:03 (3 days ago)	10.985 head requests in 1 hour (2w2d17h)	Brute-Force Bad Web Bot
🇩🇪 psauxit	2026-09-27 07:58:22 (3 days ago)	Fail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrp ... show more Fail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrpc_attack, wp-login brute force, excessive crawling/scraping show less	Web App Attack Hacking
🇵🇱 TaKeN	2026-09-27 07:51:54 (3 days ago)	Automated Wazuh observation. Wazuh rule 31151 lvl=10 detected repeated HTTP web application probing ... show more Automated Wazuh observation. Wazuh rule 31151 lvl=10 detected repeated HTTP web application probing from this source IP. Observed 1 matching Wazuh alert(s) between 2026-09-27T09:51:54+02:00 and 2026-09-27T09:51:54+02:00. show less	Web App Attack Hacking
Anonymous	2026-09-27 07:05:06 (3 days ago)	Blocked: Reason='Suspicious traffic score=65 (review-based detection)'; Requests=29	Hacking
🇩🇪 LRob	2026-09-27 06:44:26 (3 days ago)	This address swept through a list of pages that do not exist on our site within seconds — a scanner ... show more This address swept through a list of pages that do not exist on our site within seconds — a scanner working through its wordlist of exploitable paths. Blocked; please check the machine behind it for a scanner or malware. \| method: HEAD \| path: /site1/ (+5 more) \| 2026-09-27 06:44 UTC show less	Port Scan Web App Attack
🇳🇱 Site.eu	2026-09-27 06:32:49 (3 days ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 Lino Project	2026-09-27 06:31:03 (3 days ago)	104.248.229.126 - - [27/Sep/2026:08:30:59 +0200] "HEAD /media/ HTTP/1.1" 302 158 "-" "Mozilla/5.0 (i ... show more 104.248.229.126 - - [27/Sep/2026:08:30:59 +0200] "HEAD /media/ HTTP/1.1" 302 158 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.7 Mobile/15E148 Safari/604.1" ... show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 160.187.54.114

🇳🇱 104.23.170.75

🇷🇴 92.118.39.213

🇺🇦 92.43.82.67

🇷🇺 90.151.171.109

🇷🇴 80.94.92.28

🇺🇸 72.212.168.84

🇭🇰 43.100.100.9

🇺🇸 195.184.76.3

🇳🇱 192.42.116.61

🇮🇩 180.254.108.155

🇧🇷 179.51.153.37

🇵🇰 175.107.216.53

🇳🇱 160.119.76.142

🇺🇸 147.185.132.135

🇺🇸 147.185.132.12

🇺🇸 104.253.48.70

🇳🇱 104.23.170.152

🇳🇱 94.154.43.146

🇧🇬 78.128.114.162