JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.104.88.48

172.104.88.48 was found in our database!

This IP was reported 554 times. Confidence of Abuse is 0%: ?

ISP	Linode
Usage Type	Data Center/Web Hosting/Transit
ASN	AS63949
Hostname(s)	172-104-88-48.ip.linodeusercontent.com
Domain Name	linode.com
Country	🇯🇵 Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 172.104.88.48

Whois 172.104.88.48

IP Abuse Reports for 172.104.88.48:

This IP address has been reported a total of 554 times from 90 distinct sources. 172.104.88.48 was first reported on January 21st 2021, and the most recent report was 2 years ago.

Old Reports: The most recent abuse report for this IP address is from 2 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 mailox	2023-12-27 05:12:34 (2 years ago)	172.104.88.48 - - [27/Dec/2023:06:12:33 +0100] "GET /ZnJJ HTTP/1.1" 400 248 "-" "Mozilla/5.0 (compat ... show more 172.104.88.48 - - [27/Dec/2023:06:12:33 +0100] "GET /ZnJJ HTTP/1.1" 400 248 "-" "Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)" "-" ... show less	Port Scan Bad Web Bot Web App Attack
🇩🇪 SCHAPPY	2023-12-26 01:32:32 (2 years ago)	Bad bot identified by user agent	Bad Web Bot
Anonymous	2023-12-19 20:40:24 (2 years ago)	Malformed \x.. web request	Web App Attack
🇩🇪 nextweb	2023-12-18 19:11:04 (2 years ago)	(mod_security) mod_security (id:210801) triggered by 172.104.88.48 (JP/Japan/Tokyo/Tokyo/172-104-88- ... show more (mod_security) mod_security (id:210801) triggered by 172.104.88.48 (JP/Japan/Tokyo/Tokyo/172-104-88-48.ip.internet-metrics.com/[AS63949 Akamai Connected Cloud]): 5 in the last 3600 secs (CF_ENABLE) show less	Brute-Force
🇺🇸 PlexLads	2023-12-14 17:40:20 (2 years ago)	172.104.88.48 - - [14/Dec/2023:09:40:18 -0800] "GET /XAZi HTTP/1.1" 307 5167 "-" "Mozilla/5.0 (compa ... show more 172.104.88.48 - - [14/Dec/2023:09:40:18 -0800] "GET /XAZi HTTP/1.1" 307 5167 "-" "Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)" 172.104.88.48 - - [14/Dec/2023:09:40:18 -0800] "GET /login HTTP/1.1" 200 223369 "-" "Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)" 172.104.88.48 - - [14/Dec/2023:09:40:19 -0800] "GET /login HTTP/1.1" 200 223369 "-" "Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)" show less	Hacking Web App Attack
🇩🇪 mailox	2023-12-12 21:04:36 (2 years ago)	172.104.88.48 - - [12/Dec/2023:22:04:35 +0100] "GET /Fov1 HTTP/1.1" 400 248 "-" "Mozilla/5.0 (compat ... show more 172.104.88.48 - - [12/Dec/2023:22:04:35 +0100] "GET /Fov1 HTTP/1.1" 400 248 "-" "Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)" "-" ... show less	Port Scan Bad Web Bot Web App Attack
🇩🇪 SCHAPPY	2023-12-12 16:57:39 (2 years ago)	Bad bot identified by user agent	Bad Web Bot
🇨🇦 legitssl	2023-12-12 16:37:00 (2 years ago)	172.104.88.48 - - [12/Dec/2023:11:36:58 -0500] "GET /FocD HTTP/1.1" 200 979 "-" "Mozilla/5.0 (compat ... show more 172.104.88.48 - - [12/Dec/2023:11:36:58 -0500] "GET /FocD HTTP/1.1" 200 979 "-" "Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)" ... show less	Hacking Web App Attack
🇦🇺 MAGIC	2023-12-10 06:06:50 (2 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇩🇪 ut-addicted.com	2023-12-06 03:01:08 (2 years ago)	\[Wed Dec 06 04:01:07.351952 2023\] \[:error\] \[pid 2340:tid 140027511678720\] \[client 172.104.88. ... show more \[Wed Dec 06 04:01:07.351952 2023\] \[:error\] \[pid 2340:tid 140027511678720\] \[client 172.104.88.48:54170\] \[client 172.104.88.48\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded \(Total Score: 5\)"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "www.ut-addicted.com"\] \[uri "/4gsN"\] \[unique_id "ZW-j87d4hwx2WQ33ClOHqQAAAMI"\] show less	Brute-Force Web App Attack
🇩🇪 nextweb	2023-12-05 22:41:37 (2 years ago)	(mod_security) mod_security (id:210801) triggered by 172.104.88.48 (JP/Japan/Tokyo/Tokyo/172-104-88- ... show more (mod_security) mod_security (id:210801) triggered by 172.104.88.48 (JP/Japan/Tokyo/Tokyo/172-104-88-48.ip.internet-metrics.com/[AS63949 Akamai Connected Cloud]): 5 in the last 3600 secs (CF_ENABLE) show less	Brute-Force
🇩🇪 SCHAPPY	2023-12-01 23:36:36 (2 years ago)	Bad bot identified by user agent	Bad Web Bot
🇨🇦 legitssl	2023-12-01 20:01:22 (2 years ago)	172.104.88.48 - - [01/Dec/2023:15:01:20 -0500] "GET /JEcj HTTP/1.1" 200 979 "-" "Mozilla/5.0 (compat ... show more 172.104.88.48 - - [01/Dec/2023:15:01:20 -0500] "GET /JEcj HTTP/1.1" 200 979 "-" "Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)" ... show less	Hacking Web App Attack
🇩🇪 nextweb	2023-12-01 19:02:12 (2 years ago)	(mod_security) mod_security (id:210801) triggered by 172.104.88.48 (JP/Japan/Tokyo/Tokyo/172-104-88- ... show more (mod_security) mod_security (id:210801) triggered by 172.104.88.48 (JP/Japan/Tokyo/Tokyo/172-104-88-48.ip.internet-metrics.com/[AS63949 Akamai Connected Cloud]): 5 in the last 3600 secs (CF_ENABLE) show less	Brute-Force
Anonymous	2023-11-29 22:50:26 (2 years ago)	Scenario: crowdsecurity/http-bad-user-agent	Bad Web Bot

Showing 1 to 15 of 554 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 154.16.44.144

🇲🇽 200.77.172.159

🇹🇼 198.235.24.67

🇳🇱 195.178.110.26

🇦🇷 181.164.12.188

🇨🇳 113.206.146.50

🇮🇳 103.133.214.160

🇫🇷 91.231.89.188

🇩🇪 69.5.169.102

🇮🇳 38.137.11.14

🇧🇷 20.206.89.130

🇬🇧 5.252.83.99

🇬🇧 2.57.17.172

🇺🇸 2a09:bac5:9442:3af::5e:6a

🇰🇷 221.161.235.168

🇫🇮 178.20.210.152

🇺🇸 143.198.151.226

🇺🇸 107.150.103.88

🇭🇰 103.103.245.61

🇹🇭 101.108.220.91