JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

104.248.92.8

Recent Activity

Abuse confidence score ?

25% Elevated

13 reports

9 reporters · latest 4 hours ago

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Hostname(s)	74751.forestengine.net
Domain Name	digitalocean.com
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 104.248.92.8

This IP address has been reported a total of 13 times from 9 distinct sources. 104.248.92.8 was first reported on February 14th 2025, and the most recent report was 4 hours ago. In the last 60 days, the top reporter locations were: Brazil with 1 report; France with 1 report; United Kingdom of Great Britain and Northern Ireland with 1 report. The most common categories in these recent reports were: Web App Attack 1 time; Bad Web Bot 1 time; Hacking 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 diego	2026-09-26 15:32:29 (4 hours ago)	[arem1] 2026-09-26 15:15:35, Client: 104.248.92.8, Protocol: 6, Unauthorized activity to HTTP: GET /	Web App Attack
🇬🇧 pinguin	2026-09-26 14:58:35 (5 hours ago)	Triggered Cloudflare WAF (firewallCustom) from NL. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from NL. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 ForestEngine/1.0 (+https://forestengine.net/#opt-out) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇷 masterguru	2026-09-26 13:27:20 (6 hours ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 104.248.92.8 (NL/The Netherlands/7475 ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 104.248.92.8 (NL/The Netherlands/74751.forestengine.net): 1 in the last 3600 secs (0-195) show less	Hacking
🇫🇷 masterguru	2026-04-29 16:03:50 (4 months ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 104.248.92.8 (NL/The Netherlands/-): ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 104.248.92.8 (NL/The Netherlands/-): 1 in the last 3600 secs (0-197) show less	Hacking
🇺🇸 MPL	2026-04-21 07:35:23 (5 months ago)	tcp/995 (2 or more attempts)	Port Scan
🇳🇱 EGP Abuse Dept	2026-04-21 07:12:56 (5 months ago)	Unsolicited connection to port 465	Port Scan Hacking
🇺🇸 MPL	2026-04-21 06:19:49 (5 months ago)	tcp/8443	Port Scan
🇫🇮 6kilowatti	2025-06-22 10:59:58 (1 year ago)	Blocked by UFW on koti [8088/tcp] Source port: 61007 TTL: 242 Packet length: 44 TOS: 0x00 This repo ... show more Blocked by UFW on koti [8088/tcp] Source port: 61007 TTL: 242 Packet length: 44 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 iNetWorker	2025-06-22 09:56:07 (1 year ago)	trying to access non-authorized port	Port Scan
🇳🇱 Study Bitcoin 🤗	2025-06-19 19:51:01 (1 year ago)	Port probe to tcp/443 (https) [srv136]	Port Scan Brute-Force Bad Web Bot Web App Attack
🇺🇸 MPL	2025-06-19 19:41:31 (1 year ago)	tcp/11000 (2 or more attempts)	Port Scan
🇨🇭 SOC [GOLINE SA]	2025-02-22 07:45:13 (1 year ago)	(mod_security) mod_security (id:949110) triggered by 104.248.92.8 (NL/The Netherlands/North Holland/ ... show more (mod_security) mod_security (id:949110) triggered by 104.248.92.8 (NL/The Netherlands/North Holland/Amsterdam/-/[AS14061 DIGITALOCEAN-ASN]): 1 in the last 3600 secs; IP: 104.248.92.8; Ports: *; Direction: 0; Trigger: LF_TRIGGER; Logs: [Sat Feb 22 08:45:10.292885 2025] [security2:error] [pid 255120:tid 255218] [client 104.248.92.8:37636] [client 104.248.92.8] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.goline.ch"] [uri "/"] [unique_id "Z7mAhqvWAvo66b3JdkqUWwAAAFM"] show less	Brute-Force
🇨🇭 SOC [GOLINE SA]	2025-02-14 13:00:24 (1 year ago)	(mod_security) mod_security (id:949110) triggered by 104.248.92.8 (NL/The Netherlands/North Holland/ ... show more (mod_security) mod_security (id:949110) triggered by 104.248.92.8 (NL/The Netherlands/North Holland/Amsterdam/-/[AS14061 DIGITALOCEAN-ASN]): 1 in the last 3600 secs; IP: 104.248.92.8; Ports: *; Direction: 0; Trigger: LF_TRIGGER; Logs: [Fri Feb 14 14:00:22.702446 2025] [security2:error] [pid 7720:tid 7779] [client 104.248.92.8:48006] [client 104.248.92.8] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.goline.ch"] [uri "/"] [unique_id "Z68-ZnRZBD9C1CVu9AtJ0AAAAAQ"] show less	Brute-Force

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇰 202.163.68.224

🇺🇸 104.197.224.57

🇦🇷 200.59.127.182

🇲🇦 196.119.111.83

🇧🇷 189.108.215.39

🇺🇸 185.243.5.56

🇩🇪 178.27.90.142

🇯🇵 118.194.228.239

🇺🇸 107.180.88.176

🇺🇸 104.198.191.22

🇺🇸 72.218.4.50

🇵🇹 46.102.23.55

🇹🇷 46.1.203.49

🇨🇳 27.184.158.54

🇩🇴 191.97.106.92

🇷🇺 85.175.199.180

🇩🇪 69.5.169.79

🇦🇷 45.228.188.224

🇺🇸 34.46.76.205

🇰🇷 222.110.147.56