JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 108.48.109.26

108.48.109.26 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 29%: ?

29%

ISP	Verizon Business
Usage Type	Fixed Line ISP
ASN	AS701
Hostname(s)	pool-108-48-109-26.washdc.fios.verizon.net
Domain Name	verizon.com
Country	🇺🇸 United States of America
City	McLean, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 108.48.109.26

Whois 108.48.109.26

IP Abuse Reports for 108.48.109.26:

This IP address has been reported a total of 11 times from 4 distinct sources. 108.48.109.26 was first reported on October 8th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-21 12:05:57 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 108.48.109.26 (pool-108-48-109-26.washdc.fios.v ... show more (mod_security) mod_security (id:225170) triggered by 108.48.109.26 (pool-108-48-109-26.washdc.fios.verizon.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 08:05:52.431162 2026] [security2:error] [pid 31719:tid 31719] [client 108.48.109.26:39392] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|engineeringarts.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "engineeringarts.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atiqoMhMC55RXGKT1OeHEwAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 LRob	2026-10-19 19:14:39 (3 days ago)	Not following 301 redirects — wasted requests \| method: POST \| path: /wp-login.php \| ua: Mozilla/5.0 ... show more Not following 301 redirects — wasted requests \| method: POST \| path: /wp-login.php \| ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 show less	Bad Web Bot
🇩🇪 LRob	2026-10-19 00:35:33 (4 days ago)	Web exploit attempt \| method: POST \| path: /wp-login.php \| ua: Mozilla/5.0 (Macintosh; Intel Mac OS ... show more Web exploit attempt \| method: POST \| path: /wp-login.php \| ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 \| 2026-10-19 00:35 UTC show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-10-16 15:12:19 (6 days ago)	(mod_security) mod_security (id:225170) triggered by 108.48.109.26 (pool-108-48-109-26.washdc.fios.v ... show more (mod_security) mod_security (id:225170) triggered by 108.48.109.26 (pool-108-48-109-26.washdc.fios.verizon.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 11:12:13.747965 2026] [security2:error] [pid 2474:tid 2474] [client 108.48.109.26:39756] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|67ronin.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "67ronin.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atI-zSDTXDx_aa5WSc1bQAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-14 16:06:47 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 108.48.109.26 (pool-108-48-109-26.washdc.fios.v ... show more (mod_security) mod_security (id:225170) triggered by 108.48.109.26 (pool-108-48-109-26.washdc.fios.verizon.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 12:06:43.193610 2026] [security2:error] [pid 29042:tid 29057] [client 108.48.109.26:60162] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|colegiopiramide.edu.gt\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "colegiopiramide.edu.gt"] [uri "/wp-json/wp/v2/users"] [unique_id "as-ok9oFNso6aQw7P1wVLgAAAEc"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-10-13 21:39:25 (1 week ago)	Not following 301 redirects — wasted requests \| method: GET \| path: /wp-login.php \| ua: Mozilla/5.0 ... show more Not following 301 redirects — wasted requests \| method: GET \| path: /wp-login.php \| ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 show less	Bad Web Bot
🇩🇪 FeG Deutschland	2026-10-13 20:11:16 (1 week ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2	Exploited Host Web App Attack
🇷🇺 AbuseIPDB informer	2026-10-13 10:04:46 (1 week ago)	nfdump top talker: 108.48.109.26 \| first seen 2026-10-13 13:04:46.464 \| duration 00:00:00.272 \| flow ... show more nfdump top talker: 108.48.109.26 \| first seen 2026-10-13 13:04:46.464 \| duration 00:00:00.272 \| flows=13 \| packets=558558 \| bytes=404.8 M \| pps=2048 \| bps=11.9 M \| bpp=724 \| proto=udp show less	DDoS Attack Port Scan Exploited Host
🇷🇺 AbuseIPDB informer	2026-10-13 10:04:45 (1 week ago)	nfdump top talker: 108.48.109.26 \| first seen 2026-10-13 13:04:45.184 \| duration 00:00:00.273 \| flow ... show more nfdump top talker: 108.48.109.26 \| first seen 2026-10-13 13:04:45.184 \| duration 00:00:00.273 \| flows=28 \| packets=1.2 M \| bytes=863.4 M \| pps=4373 \| bps=25.2 M \| bpp=720 \| proto=udp show less	DDoS Attack Port Scan Exploited Host
🇷🇺 AbuseIPDB informer	2026-10-13 08:06:12 (1 week ago)	nfdump top talker: 108.48.109.26 \| first seen 2026-10-13 08:06:12.864 \| duration 00:00:00.071 \| flow ... show more nfdump top talker: 108.48.109.26 \| first seen 2026-10-13 08:06:12.864 \| duration 00:00:00.071 \| flows=2 \| packets=47058 \| bytes=34.1 M \| pps=658 \| bps=3.8 M \| bpp=724 \| proto=any show less	DDoS Attack Port Scan Exploited Host
🇷🇺 AbuseIPDB informer	2026-10-08 10:24:25 (2 weeks ago)	nfdump top talker: 108.48.109.26 \| first seen 2026-10-08 13:24:25.088 \| duration 00:00:00.079 \| flow ... show more nfdump top talker: 108.48.109.26 \| first seen 2026-10-08 13:24:25.088 \| duration 00:00:00.079 \| flows=1 \| packets=27621 \| bytes=19.6 M \| pps=346 \| bps=2.0 M \| bpp=708 \| proto=any show less	DDoS Attack Port Scan Exploited Host

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 193.3.53.4

🇮🇩 172.232.253.221

🇸🇬 168.144.106.24

🇮🇳 165.154.201.15

🇻🇳 157.10.186.28

🇨🇳 153.37.232.22

🇺🇸 147.185.132.222

🇺🇸 147.185.132.22

🇩🇪 138.68.92.196

🇩🇪 94.130.226.243

🇷🇴 92.118.39.50

🇳🇱 91.92.242.250

🇬🇧 86.38.187.121

🇫🇷 85.217.140.6

🇷🇴 80.94.92.179

🇺🇸 51.81.165.209

🇵🇰 39.61.48.79

🇧🇪 34.76.83.197

🇨🇳 14.103.115.250

🇷🇴 2.57.122.209