JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 118.248.48.88

118.248.48.88 was found in our database!

This IP was reported 4 times. Confidence of Abuse is 4%: ?

ISP	CHINANET Hunan province network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Changsha, Hunan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 118.248.48.88

Whois 118.248.48.88

IP Abuse Reports for 118.248.48.88:

This IP address has been reported a total of 4 times from 2 distinct sources. 118.248.48.88 was first reported on July 3rd 2025, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-21 19:01:06 (4 days ago)	(mod_security) mod_security (id:210831) triggered by 118.248.48.88 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 118.248.48.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 15:01:01.781808 2026] [security2:error] [pid 17540:tid 17540] [client 118.248.48.88:5542] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|lockyers.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "lockyers.com"] [uri "/index.html"] [unique_id "ajg07c9vD2bw-Y3y8LpHkQAAAAA"], referer: http://lockyers.com/index.html show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-21 00:41:36 (5 days ago)	(mod_security) mod_security (id:210831) triggered by 118.248.48.88 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 118.248.48.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 20:41:30.498327 2026] [security2:error] [pid 9468:tid 9468] [client 118.248.48.88:4442] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.bzbdesigns.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.bzbdesigns.com"] [uri "/"] [unique_id "ajczOvkoHb4MQo-j5dIG3wAAAAM"], referer: http://www.bzbdesigns.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2026-01-27 00:19:56 (4 months ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/118.248.48.88 2026-01-26 14 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/118.248.48.88 2026-01-26 14:43:33 /cc.gif 2026-01-26 14:44:00 /cc.gif 2026-01-26 14:43:24 /cc.gif show less	Web App Attack
🇨🇳 ThreatBook.io	2025-07-03 23:50:20 (11 months ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/118.248.48.88 2025-07-03 15 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/118.248.48.88 2025-07-03 15:52:26 /sitemap.xml show less	Web App Attack

Showing 1 to 4 of 4 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇰 119.160.215.52

🇭🇰 199.45.154.178

🇺🇸 162.216.150.85

🇲🇾 160.187.211.96

🇨🇳 117.14.51.58

🇹🇷 46.197.12.155

🇳🇱 45.148.10.147

🇸🇬 43.173.179.163

🇮🇩 202.10.38.67

🇳🇱 192.109.200.204

🇪🇨 190.94.137.82

🇩🇪 167.94.146.43

🇨🇩 102.216.240.61

🇫🇷 91.196.152.34

🇨🇦 20.63.103.145

🇸🇬 172.216.169.231

🇺🇸 91.230.168.118

🇬🇧 165.154.252.172

🇮🇩 103.186.31.66

🇺🇸 100.28.191.174