JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.104.248.7

185.104.248.7 was found in our database!

This IP was reported 200 times. Confidence of Abuse is 0%: ?

ISP	FIRSTSERVER
Usage Type	Data Center/Web Hosting/Transit
ASN	AS204997
Hostname(s)	vm4239929.firstbyte.club
Domain Name	first-server.net
Country	🇷🇺 Russian Federation
City	Moscow, Moscow

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.104.248.7

Whois 185.104.248.7

IP Abuse Reports for 185.104.248.7:

This IP address has been reported a total of 200 times from 73 distinct sources. 185.104.248.7 was first reported on November 23rd 2020, and the most recent report was 6 months ago.

Old Reports: The most recent abuse report for this IP address is from 6 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 Origon	2025-12-26 06:15:39 (6 months ago)	http-admin-interface-probing - IP: 185.104.248.7 - time="2025-12-26T07:15:38+01:00" level=info msg= ... show more http-admin-interface-probing - IP: 185.104.248.7 - time="2025-12-26T07:15:38+01:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-admin-interface-probing by ip 185.104.248.7 (RU/50113) : 4h ban on Ip 185.104.248.7" module=db show less	Web App Attack
🇹🇷 rtbh.com.tr	2025-12-10 20:10:23 (7 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-12-09 20:10:22 (7 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 lavnet.net	2025-11-06 13:17:13 (8 months ago)	185.104.248.7 - - [06/Nov/2025:13:17:02 +0000] "GET /admin/ HTTP/1.1" 404 2066 "-" "Mozilla/5.0 (Mac ... show more 185.104.248.7 - - [06/Nov/2025:13:17:02 +0000] "GET /admin/ HTTP/1.1" 404 2066 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 185.104.248.7 - - [06/Nov/2025:13:17:04 +0000] "GET /manager/ HTTP/1.1" 404 2066 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 YaBrowser/25.2.0.0 Safari/537.36" 185.104.248.7 - - [06/Nov/2025:13:17:07 +0000] "GET /admin/content/sitetree/ HTTP/1.1" 404 2066 "-" "Mozilla/5.0 (X11; Linux i686; rv:123.0) Gecko/20100101 Firefox/123.0" 185.104.248.7 - - [06/Nov/2025:13:17:09 +0000] "GET /simpla/ HTTP/1.0" 404 2073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:127.0) Gecko/20100101 Firefox/127.0" 185.104.248.7 - - [06/Nov/2025:13:17:10 +0000] "GET /js/mage/cookies.js HTTP/1.1" 404 2066 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 Edg/130.0.0.0" 185.104.248.7 - - [06/Nov/202 ... show less	Brute-Force
🇨🇭 Origon	2025-10-27 02:38:38 (8 months ago)	http-admin-interface-probing - IP: 185.104.248.7 - time="2025-10-27T03:38:38+01:00" level=info msg= ... show more http-admin-interface-probing - IP: 185.104.248.7 - time="2025-10-27T03:38:38+01:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-admin-interface-probing by ip 185.104.248.7 (RU/50113) : 4h ban on Ip 185.104.248.7" show less	Web App Attack
🇳🇱 i-turnradio.nl	2025-09-28 23:53:54 (9 months ago)	2025-09-29 @ 01:53:53 (CET) ~ Blocked based on risk assessment and prior abuse reports	Web App Attack
🇩🇪 hbrks	2025-09-28 04:00:01 (9 months ago)	1 attack(s) detected since 2025-09-28T04:00:01.683Z, such as these: {"event":"nginx_block","ip":"185 ... show more 1 attack(s) detected since 2025-09-28T04:00:01.683Z, such as these: {"event":"nginx_block","ip":"185.104.248.7","host":"kasm.life","request":"HEAD / HTTP/1.1","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36","reason":"service:unknow","timestamp":"2025-09-28T04:00:01 00:00","logentry":"kasm.life 185.104.248.7 - - [28/Sep/2025:04:00:01 0000] HEAD / HTTP/1.1 444 0 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 - matched:service:unknow"} * Report Details : https://p4u.xyz/2MTE7JFP1RD/1 IP Details *: https://p4u.xyz/2MTE7JFP1RD/2 show less	Web Spam Hacking Bad Web Bot
🇩🇪 Mykola Spesivtsev	2025-09-13 19:10:40 (10 months ago)	HTTP Tarpit detected bot activity:TargetPort:80, Path:/, Method:HEAD, UA:Mozilla/5.0 (X11; Linux x86 ... show more HTTP Tarpit detected bot activity:TargetPort:80, Path:/, Method:HEAD, UA:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.3 show less	Port Scan Bad Web Bot Web App Attack
🇦🇺 MAGIC	2025-08-20 03:05:33 (10 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 vestibtech	2025-08-01 12:35:27 (11 months ago)	185.104.248.7 - - [01/Aug/2025:06:35:27 -0600] "GET /js/mage/cookies.js HTTP/1.1" 404 10171 "-" "Moz ... show more 185.104.248.7 - - [01/Aug/2025:06:35:27 -0600] "GET /js/mage/cookies.js HTTP/1.1" 404 10171 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 Edg/130.0.0.0" ... show less	Web App Attack
🇺🇸 vestibtech	2025-06-24 04:35:03 (1 year ago)	185.104.248.7 - - [23/Jun/2025:22:35:02 -0600] "GET /js/mage/cookies.js HTTP/1.1" 404 10175 "-" "Moz ... show more 185.104.248.7 - - [23/Jun/2025:22:35:02 -0600] "GET /js/mage/cookies.js HTTP/1.1" 404 10175 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 YaBrowser/24.10.0.0 Safari/537.36" ... show less	Web App Attack
🇨🇳 ThreatBook.io	2025-06-21 23:48:32 (1 year ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/185.104.248.7 2025-06- ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/185.104.248.7 2025-06-21 01:42:20 / show less	Web App Attack
🇩🇪 0x44	2025-06-13 04:37:04 (1 year ago)	[13/Jun/2025] * Spam host detected, probing for vulnerabilities	Web Spam Exploited Host Web App Attack
🇦🇺 MAGIC	2025-06-12 09:06:30 (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2025-06-09 17:53:02 (1 year ago)	Malicious activity detected	Hacking Web App Attack

Showing 1 to 15 of 200 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 42.51.33.162

🇺🇸 2607:f8b0:400e:c17::125

🇮🇳 2409:40d2:206c:4bcd:785b:53f0:c67b:20dd

🇩🇪 194.88.98.94

🇵🇱 176.53.159.197

🇩🇪 172.104.224.113

🇦🇪 152.32.180.86

🇮🇳 122.170.99.195

🇳🇬 102.88.21.136

🇹🇷 94.154.43.184

🇲🇦 80.250.47.1

🇧🇬 79.124.49.114

🇺🇸 44.219.241.135

🇺🇸 44.26.71.207

🇩🇪 2a09:bac5:27ba:1b4b::2b8:9b

🇨🇳 218.201.39.71

🇰🇷 211.43.22.205

🇳🇱 195.178.110.30

🇮🇩 182.10.131.102

🇦🇲 178.78.141.37