This IP address has been reported a total of
153
times from
86 distinct
sources.
104.248.49.231 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js ...
show moreIM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js < 15.0.5/16.0.7 (CVE-2025-55182, CVE-2025-66478)
show less
[WedMay2709:07:00.0646642026][security2:error][pid1875159:tid1875470][client104.248.49.231:0]ModSecu ...
show more[WedMay2709:07:00.0646642026][security2:error][pid1875159:tid1875470][client104.248.49.231:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\\$\(\?:\\\\\\\\\(\(\?:\\\\\\\\\(.\*\\\\\\\\\)\|.\*\)\\\\\\\\\)\|\\\\\\\\{.\*\\\\\\\\}\)\|[\<\>]\\\\\\\\\(.\*\\\\\\\\\)\)\"atARGS:0.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"396\"][id\"393655\"][rev\"17\"][msg\"Atomicorp.comWAFRules:PossibleRemoteCommandExecution:UnixShellExpressionFound\"][data\"MatchedData:\${encodeuricomponent\(string\(res\)\)}307\`}\)_chunks:\$q2_formdata:{get:\$1:constructor:constructor}}}foundwithinARGS:0:{then:\$1:__proto__:thenstatus:resolved_modelreason:-1value:{then:\$b1337}_response:{_prefix:varres=\(function\(\){var_r=typeofrequire\!==undefined\?require:\(process.mainmodule\?process.mainmodule.require.bind\(process.mainmodule\):\(typeofglobalthis.require\!==undefined\?globalthis.require:null\)\)returnvuln_check_success_69420}\)\(\)throwobject.assign\(newerror\(next_redirect...\"][tag\"attack-rc
show less
SSH Brute Force (251 attempts). Targeted user: root. Active from Apr 06 13:46:04 to Apr 06 13:57:08 ...
show moreSSH Brute Force (251 attempts). Targeted user: root. Active from Apr 06 13:46:04 to Apr 06 13:57:08 PST.
show less
ThreatBook Intelligence: Scanner,Dynamic IP more details on https://threatbook.io/ip/104.248.49.231
...
show moreThreatBook Intelligence: Scanner,Dynamic IP more details on https://threatbook.io/ip/104.248.49.231
2026-04-07 00:58:00 ["uname -s -v -n -r -m"]
show less