JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

104.248.5.167

Neutral Activity

Abuse Confidence Score

0% Low Risk

79 reports

59 reporters · latest 10 months ago

ISP: DigitalOcean, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Domain Name: digitalocean.com
Country: 🇺🇸 United States of America
City: Clifton, New Jersey

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

104.248.5.167 has been reported 79 times. The most recent report is from 10 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

79 from 59 distinct reporters

First reported

July 5th 2025

Most recent report

10 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 MPL	2025-12-18 19:46:53 UTC · (10 months ago)	tcp/4782	Port Scan
🇧🇷 somosbr	2025-12-18 18:56:16 UTC · (10 months ago)	[2025-12-18T18:56:16Z] Unsolicited scan from 104.248.5.167 to port 10000/tcp	Port Scan
🇦🇺 nzhost.co.nz	2025-12-10 03:47:09 UTC · (11 months ago)	$f2bV_matches	Hacking Brute-Force
🇧🇪 Ivo Vynckier	2025-12-06 15:08:00 UTC · (11 months ago)	104.248.5.167 - - [05/Dec/2025:15:38:29 +0100] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 403 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.248.5.167 - - [05/Dec/20 ... show more 104.248.5.167 - - [05/Dec/2025:15:38:29 +0100] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 403 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.248.5.167 - - [05/Dec/2025:15:38:29 +0100] "GET /xmlrpc.php?rsd HTTP/1.1" 403 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" show less	Web App Attack
🇳🇱 homeshowdomain.nl	2025-12-05 22:59:20 UTC · (11 months ago)	Auto-ban: 216 malicious requests on 2025-12-04 (e.g., env/backup probes, brute-force, or error bursts).	Hacking Web App Attack SSH
🇺🇸 TPI-Abuse	2025-12-05 18:18:19 UTC · (11 months ago)	(mod_security) mod_security (id:225170) triggered by 104.248.5.167 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 13:18:14.004535 2025] [security2:error] [pid 10640:tid 10640] [client 104.248.5.167:0] ModSe ... show more (mod_security) mod_security (id:225170) triggered by 104.248.5.167 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 13:18:14.004535 2025] [security2:error] [pid 10640:tid 10640] [client 104.248.5.167:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.virtualizecr.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.virtualizecr.net"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTMh5TWIgNObjhh4WTh-PQAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 strefapi_com	2025-12-05 11:50:51 UTC · (11 months ago)	Brute-force, web ...	Hacking Brute-Force Web App Attack
🇬🇧 [email protected]	2025-12-05 00:33:59 UTC · (11 months ago)	...	Brute-Force SSH
🇺🇸 Major Hostility	2025-12-05 00:28:01 UTC · (11 months ago)	"GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 "GET /xmlrpc.php?rsd HTTP/1.1" 403 "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 "GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 "GET ... show more "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 "GET /xmlrpc.php?rsd HTTP/1.1" 403 "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 "GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 "GET /website/wp-includes/wlwmanifest.xml HTTP/1.1" 404 "GET /wp/wp-includes/wlwmanifest.xml HTTP/1.1" 404 "GET /news/wp-includes/wlwmanifest.xml HTTP/1.1" 404 "GET /2018/wp-includes/wlwmanifest.xml HTTP/1.1" 404 "GET /2019/wp-includes/wlwmanifest.xml HTTP/1.1" 404 "GET /shop/wp-includes/wlwmanifest.xml HTTP/1.1" 404 "GET /wp1/wp-includes/wlwmanifest.xml HTTP/1.1" 404 "GET /test/wp-includes/wlwmanifest.xml HTTP/1.1" 404 "GET /media/wp-includes/wlwmanifest.xml HTTP/1.1" 404 show less	Web App Attack
🇫🇷 SpaceHost-Server	2025-12-04 23:27:26 UTC · (11 months ago)		Brute-Force Web App Attack
Anonymous	2025-12-04 23:19:56 UTC · (11 months ago)	wordpress-trap	Web App Attack
🇬🇧 Mendip_Defender	2025-12-04 21:53:59 UTC · (11 months ago)	104.248.5.167 - - [04/Dec/2025:21:53:46 +0000] "GET //wp-includes/wlwmanifest.xml HTTP/1.0" 404 4876 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.248.5.167 - - [04/Dec/2 ... show more 104.248.5.167 - - [04/Dec/2025:21:53:46 +0000] "GET //wp-includes/wlwmanifest.xml HTTP/1.0" 404 4876 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.248.5.167 - - [04/Dec/2025:21:53:47 +0000] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.0" 404 4876 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.248.5.167 - - [04/Dec/2025:21:53:47 +0000] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.0" 404 4876 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" ... show less	Hacking Web App Attack
Anonymous	2025-12-04 20:57:50 UTC · (11 months ago)	(wordpress) Failed wordpress login from 104.248.5.167 (US/United States/-)	Brute-Force
🇹🇷 rtbh.com.tr	2025-12-04 20:10:16 UTC · (11 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Anonymous	2025-12-04 19:00:15 UTC · (11 months ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack

Showing 1 to 15 of 79 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇷🇸 77.243.22.153

🇩🇪 69.5.169.96

🇺🇸 157.230.236.73

🇫🇮 147.185.133.163

🇺🇸 136.108.115.49

🇳🇱 64.225.75.246

🇰🇷 58.229.253.119

🇧🇷 45.166.206.88

🇺🇸 45.146.55.116

🇬🇧 35.203.210.219

🇬🇧 217.146.80.112

🇺🇸 204.48.22.175

🇻🇳 113.192.16.241

🇩🇪 89.200.169.12

🇲🇹 77.71.137.246

🇬🇧 35.203.211.204

🇧🇷 205.210.31.241

🇺🇸 157.230.227.200

🇺🇸 136.115.133.141

🇨🇳 123.129.205.22