JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.248.49.59

104.248.49.59 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 73%: ?

73%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	North Bergen, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.248.49.59

Whois 104.248.49.59

IP Abuse Reports for 104.248.49.59:

This IP address has been reported a total of 24 times from 21 distinct sources. 104.248.49.59 was first reported on January 16th 2025, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-10 05:05:16 (6 days ago)	104.248.49.59 - - [10/Jun/2026:07:05:14 +0200] "GET / HTTP/1.1" 403 5152 "-" "Mozilla/5.0 zgrab/0.x" ... show more 104.248.49.59 - - [10/Jun/2026:07:05:14 +0200] "GET / HTTP/1.1" 403 5152 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Web App Attack
🇧🇬 Stoyko Stoykov	2026-06-10 03:18:24 (6 days ago)	104.248.49.59 - - [10/Jun/2026:06:18:23 +0300] "GET / HTTP/1.1" 200 8322 "-" "Mozilla/5.0 zgrab/0.x" ... show more 104.248.49.59 - - [10/Jun/2026:06:18:23 +0300] "GET / HTTP/1.1" 200 8322 "-" "Mozilla/5.0 zgrab/0.x" ... show less	Hacking Web App Attack
🇺🇸 oralunal	2026-06-10 01:08:38 (1 week ago)	IP banned by Fail2Ban in jail suss access.log ah-app-1 ...	Bad Web Bot Web App Attack
🇹🇭 MWA SOC	2026-06-10 00:47:05 (1 week ago)		Port Scan
🇱🇹 Selckie	2026-06-10 00:16:40 (1 week ago)	fail2ban: NGINX unusual impact	Web App Attack
🇯🇵 mkaraki	2026-06-10 00:13:43 (1 week ago)	1781050421 # Service_probe # SIGNATURE_SEND # source_ip:104.248.49.59 # dst_port:443 ...	Port Scan
🇺🇸 JustMeHere	2026-06-09 18:15:25 (1 week ago)	[Tue Jun 09 14:15:21.576572 2026] [security2:error] [pid 94665:tid 94711] [client 104.248.49.59:5407 ... show more [Tue Jun 09 14:15:21.576572 2026] [security2:error] [pid 94665:tid 94711] [client 104.248.49.59:54076] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "73.88.79.72"] [uri "/"] [unique_id "aihYObrbQiJj5wDFBc-EggAAARI"] ... show less	Web App Attack
🇹🇼 kk_it_man	2026-06-09 17:03:01 (1 week ago)	ET SCAN Zmap User-Agent (Inbound)	Port Scan
🇩🇪 Kreisausschuss des Odenwaldkreises	2026-06-09 13:07:54 (1 week ago)	HAProxy NOSRV or BADREQ	Web App Attack
🇺🇸 itsnixk	2026-06-09 10:32:15 (1 week ago)	(mod_security) mod_security (id:913100) triggered by 104.248.49.59 (US/United States/-): 1 in the la ... show more (mod_security) mod_security (id:913100) triggered by 104.248.49.59 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Tue Jun 09 06:32:09.811606 2026] [security2:error] [pid 100720:tid 100849] [client 104.248.49.59:42144] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity.d/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [redacted] [severity "CRITICAL"] [ver "OWASP_CRS/4.26.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/SCANNER-DETECTION"] [tag "capec/1000/118/224/541/310"] [redacted] [uri "/"] [unique_id "aifrqUQ3V5bBCHkigpVUCgAAAC4"] show less	Port Scan
🇧🇷 diego	2026-06-09 07:55:20 (1 week ago)	[probe-44-49] 2026-06-09 07:37:20, Client: 104.248.49.59, Protocol: 6, Unauthorized activity to HTTP ... show more [probe-44-49] 2026-06-09 07:37:20, Client: 104.248.49.59, Protocol: 6, Unauthorized activity to HTTP: GET / show less	Web App Attack
🇭🇰 www.winos.me	2026-06-09 07:04:42 (1 week ago)	Shield: Layer4 Port 9 Trap	Port Scan Hacking
🇺🇸 xxkodedxx	2026-06-09 05:54:54 (1 week ago)	[Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost) Trigger: 1× edge-block in 10 ... show more [Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost) Trigger: 1× edge-block in 10m window. Origin: US / AS14061 DigitalOcean, LLC Active: 05:54:20 UTC Volume: 1 HTTP req Probed: / Status mix: 444×1 Vhost fishing: 67.217.240.72 UA: "Mozilla/5.0 zgrab/0.x" Auto-banned 30d. zorvexus-banner. show less	Bad Web Bot Web App Attack
🇳🇱 donarev419	2026-06-09 05:11:42 (1 week ago)	Connection to port 443 with data transfer. Data preview:	Port Scan Hacking
🇧🇷 diego	2026-06-09 04:20:20 (1 week ago)	[probe-44-49] 2026-06-09 04:01:31, Client: 104.248.49.59, Protocol: 6, Unauthorized activity to HTTP ... show more [probe-44-49] 2026-06-09 04:01:31, Client: 104.248.49.59, Protocol: 6, Unauthorized activity to HTTP: GET / show less	Web App Attack

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.56

🇳🇱 204.76.203.80

🇺🇸 66.132.172.230

🇵🇱 57.128.225.99

🇺🇸 34.138.198.0

🇺🇸 3.145.193.221

🇨🇳 222.176.200.31

🇨🇳 218.95.242.34

🇧🇪 198.235.24.162

🇧🇷 185.100.215.213

🇵🇾 181.85.208.56

🇧🇷 179.191.82.115

🇺🇸 170.246.53.225

🇪🇸 78.30.7.60

🇳🇱 45.142.193.121

🇧🇷 43.157.151.226

🇺🇸 37.218.217.123

🇺🇦 31.42.184.158

🇩🇪 18.196.183.90

🇨🇳 222.176.200.76