JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

104.248.26.115

Neutral Activity

Abuse Confidence Score

0% Low Risk

24 reports

23 reporters · latest 2 years ago

ISP: DigitalOcean, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Domain Name: digitalocean.com
Country: 🇩🇪 Germany
City: Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

104.248.26.115 has been reported 24 times. The most recent report is from 2 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

24 from 23 distinct reporters

First reported

May 28th 2021

Most recent report

2 years ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇺 eugenemolotov.ru	2024-03-19 21:00:02 UTC · (2 years ago)	104.248.26.115 - - [19/Mar/2024:09:31:05 +0500] "GET /upl.php HTTP/1.1" 404 143 "-" "Mozilla/5.0" 104.248.26.115 - - [19/Mar/2024:09:31:06 +0500] "GET /1.php HTTP/1.1" 404 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, ... show more 104.248.26.115 - - [19/Mar/2024:09:31:05 +0500] "GET /upl.php HTTP/1.1" 404 143 "-" "Mozilla/5.0" 104.248.26.115 - - [19/Mar/2024:09:31:06 +0500] "GET /1.php HTTP/1.1" 404 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 104.248.26.115 - - [19/Mar/2024:09:31:06 +0500] "GET /systembc/password.php HTTP/1.1" 404 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 104.248.26.115 - - [19/Mar/2024:09:31:06 +0500] "GET /password.php HTTP/1.1" 404 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 104.248.26.115 - - [19/Mar/2024:09:31:07 +0500] "GET /info.php HTTP/1.1" 404 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" show less	Web App Attack
🇺🇸 crooze.net	2024-03-19 14:08:59 UTC · (2 years ago)	104.248.26.115 - - [19/Mar/2024:10:08:58 -0400] "\x16\x03\x01\x00{\x01\x00\x00w\x03\x03\xB0>\xEE\xF5\x97\x1F3p\x03\xE7YC\xC9Ta[\x05\x06\x9B$\x9C?\xF8\xA3M\xDC~9\xA9\x14\xC2\xC4\x00\x00\x1A\xC0/\xC0+\xC0\x11\xC0\x07\xC0\x13\xC0\x09\xC0\x14\xC0" 400 15 ... show more 104.248.26.115 - - [19/Mar/2024:10:08:58 -0400] "\x16\x03\x01\x00{\x01\x00\x00w\x03\x03\xB0>\xEE\xF5\x97\x1F3p\x03\xE7YC\xC9Ta[\x05\x06\x9B$\x9C?\xF8\xA3M\xDC~9\xA9\x14\xC2\xC4\x00\x00\x1A\xC0/\xC0+\xC0\x11\xC0\x07\xC0\x13\xC0\x09\xC0\x14\xC0" 400 150 "-" "-" ... show less	Hacking Web App Attack
Anonymous	2024-03-19 13:46:25 UTC · (2 years ago)	port scan and connect, tcp 80 (http)	Port Scan
🇭🇺 HoneyPotEu	2024-03-19 13:12:05 UTC · (2 years ago)	104.248.26.115 - (14061-DIGITALOCEAN-ASN Germany Frankfurt am Main) - - [19/Mar/2024:14:12:04 +0100] "x16x03x01x00{x01x00x00wx03x03x10vxE8x8ExC1{x9AxE8xB5xCD`{YxF2xA9&xE0px7Fx17 ...	Bad Web Bot Web App Attack
🇨🇿 Countryman	2024-03-19 12:47:19 UTC · (2 years ago)	IPS detection: SystemBC.Botnet	Hacking
🇵🇱 dzpk	2024-03-19 12:31:27 UTC · (2 years ago)	104.248.26.115 - - [19/Mar/2024:13:31:26 +0100] "\x16\x03\x01\x00{\x01\x00\x00w\x03\x03\xD1\x94\x0ByE\x81\xA1\x1E3\x87\xBC-\x81\xB9Q\xB5\x80,\xC2\xC2L\xB3\xD7H\xC6\xE7\x9D\x12l;\xD8\xAF\x00\x00\x1A\xC0/\xC0+\xC0\x11\xC0\x07\xC0\x13\xC0\x09\xC0\x14\xC ... show more 104.248.26.115 - - [19/Mar/2024:13:31:26 +0100] "\x16\x03\x01\x00{\x01\x00\x00w\x03\x03\xD1\x94\x0ByE\x81\xA1\x1E3\x87\xBC-\x81\xB9Q\xB5\x80,\xC2\xC2L\xB3\xD7H\xC6\xE7\x9D\x12l;\xD8\xAF\x00\x00\x1A\xC0/\xC0+\xC0\x11\xC0\x07\xC0\x13\xC0\x09\xC0\x14\xC0" 400 150 "-" "-" "-" show less	Hacking Web App Attack
🇺🇸 Shouddy Tarano	2024-03-19 11:22:29 UTC · (2 years ago)	[Tue Mar 19 07:22:14.582797 2024] [authz_core:error] [pid 3201051:tid 3201188] [client 104.248.26.115:51828] AH01630: client denied by server configuration: /var/www/html/ [Tue Mar 19 07:22:14.771027 2024] [authz_core:error] [pid 3201033:tid 3201122] ... show more [Tue Mar 19 07:22:14.582797 2024] [authz_core:error] [pid 3201051:tid 3201188] [client 104.248.26.115:51828] AH01630: client denied by server configuration: /var/www/html/ [Tue Mar 19 07:22:14.771027 2024] [authz_core:error] [pid 3201033:tid 3201122] [client 104.248.26.115:51844] AH01630: client denied by server configuration: /var/www/html/form.html [Tue Mar 19 07:22:14.958417 2024] [authz_core:error] [pid 3201051:tid 3201191] [client 104.248.26.115:51854] AH01630: client denied by server configuration: /var/www/html/upl.php [Tue Mar 19 07:22:15.338140 2024] [authz_core:error] [pid 3201051:tid 3201194] [client 104.248.26.115:51870] AH01630: client denied by server configuration: /var/www/html/geoip [Tue Mar 19 07:22:15.526222 2024] [authz_core:error] [pid 3201257:tid 3201286] [client 104.248.26.115:51874] AH01630: client denied by server configuration: /var/www/html/favicon.ico ... show less	DDoS Attack Web Spam Brute-Force Web App Attack
🇺🇸 FireballDWF	2024-03-19 11:00:10 UTC · (2 years ago)	404 NOT FOUND	Web App Attack
🇨🇭 Mario Bretscher	2024-03-19 08:05:23 UTC · (2 years ago)	[Tue Mar 19 09:05:21.659868 2024] [php:error] [pid 2660097] [client 104.248.26.115:35924] script '/var/www/html/upl.php' not found or unable to stat [Tue Mar 19 09:05:21.865953 2024] [php:error] [pid 2658713] [client 104.248.26.115:35966] script '/va ... show more [Tue Mar 19 09:05:21.659868 2024] [php:error] [pid 2660097] [client 104.248.26.115:35924] script '/var/www/html/upl.php' not found or unable to stat [Tue Mar 19 09:05:21.865953 2024] [php:error] [pid 2658713] [client 104.248.26.115:35966] script '/var/www/html/1.php' not found or unable to stat [Tue Mar 19 09:05:22.069663 2024] [php:error] [pid 2658720] [client 104.248.26.115:36000] script '/var/www/html/password.php' not found or unable to stat ... show less	Web App Attack
🇦🇺 ozisp.com.au	2024-03-19 06:42:08 UTC · (2 years ago)	US_DigitalOcean,_<33>1710830527 [119:33:2] (http_inspect) UNESCAPED SPACE IN HTTP URI [Classification: Unknown Traffic] [Priority: 3] {TCP} 104.248.26.115:34888	Hacking
🇷🇺 PetrHu	2024-03-19 05:36:21 UTC · (2 years ago)	104.248.26.115 - - [19/Mar/2024:08:36:20 +0300] 85.209.2.96 "GET /form.html HTTP/1.1" 404 146 0.000 "-" "curl/8.1.2"	Bad Web Bot Web App Attack
🇰🇿 ramiil	2024-03-19 04:40:13 UTC · (2 years ago)	nala.py pattern: .ph	Web App Attack
🇫🇷 guillaume illien	2024-03-19 04:30:47 UTC · (2 years ago)	104.248.26.115 - - [19/Mar/2024:04:30:46 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 104.248.26.115 - - [19/Mar/2024:04:30:47 +0000] "GET /form. ... show more 104.248.26.115 - - [19/Mar/2024:04:30:46 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 104.248.26.115 - - [19/Mar/2024:04:30:47 +0000] "GET /form.html HTTP/1.1" 301 178 "-" "curl/8.1.2" 104.248.26.115 - - [19/Mar/2024:04:30:47 +0000] "GET /upl.php HTTP/1.1" 301 178 "-" "Mozilla/5.0" 104.248.26.115 - - [19/Mar/2024:04:30:47 +0000] "GET /geoip/ HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 104.248.26.115 - - [19/Mar/2024:04:30:47 +0000] "GET /1.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 104.248.26.115 - - [19/Mar/2024:04:30:47 +0000] "GET /bundle.js HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 104.248.26.115 - - ... show less	Hacking Brute-Force Web App Attack SSH
🇩🇪 reger-men	2024-03-19 01:05:25 UTC · (2 years ago)	IP & Port Scan.	Port Scan Brute-Force SSH
Anonymous	2024-03-19 01:00:51 UTC · (2 years ago)	Ports: 20,21,25,53,80,110,143,443,465,587,993,995,2077,2078,2079,2080,2082,2083,2086,2087,2095,2096,3306,2195; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 184.154.16.90

🇭🇰 165.154.63.157

🇺🇸 162.216.149.131

🇭🇳 154.12.110.198

🇺🇸 152.36.103.123

🇨🇳 121.46.244.21

🇸🇬 114.119.132.76

🇺🇸 104.236.17.83

🇬🇧 81.19.219.230

🇫🇮 45.147.8.80

🇵🇱 45.138.12.40

🇧🇪 35.210.187.214

🇮🇪 13.69.226.145

🇧🇩 202.84.34.85

🇺🇸 195.184.76.7

🇳🇱 185.223.235.9

🇫🇮 147.185.133.179

🇺🇸 134.33.64.214

🇨🇳 122.243.201.159

🇫🇷 75.119.150.164