JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 198.211.104.174

198.211.104.174 was found in our database!

This IP was reported 49 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	North Bergen, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 198.211.104.174

Whois 198.211.104.174

IP Abuse Reports for 198.211.104.174:

This IP address has been reported a total of 49 times from 28 distinct sources. 198.211.104.174 was first reported on July 1st 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-06 16:33:38 (1 week ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
🇩🇪 ghostwarriors	2026-07-06 08:51:17 (1 week ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇬🇧 openstrike.co.uk	2026-07-03 05:16:08 (1 week ago)	3 attacks on VC URLs: GET /.git/config HTTP/1.1	Hacking
🇩🇪 ghostwarriors	2026-07-03 02:23:00 (1 week ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-02 21:59:29 (1 week ago)	Auto-ban: >3000 req/min op 2026-07-02	Web App Attack SSH Hacking
Anonymous	2026-07-02 20:21:05 (1 week ago)	PSCSERV WPSCAN 198.211.104.174	Bad Web Bot Web App Attack
🇺🇸 infra-monitor	2026-07-02 15:00:04 (1 week ago)	Automated ban via infra-monitor: mgmt-path-probe, suspicious-probe	Port Scan Web App Attack
🇬🇧 myintarweb	2026-07-02 14:46:02 (1 week ago)	198.211.104.174 - - [02/Jul/2026:15:46:01 +0100] 80 "GET /.git/config HTTP/1.1" 301 1647 "-" "Mozill ... show more 198.211.104.174 - - [02/Jul/2026:15:46:01 +0100] 80 "GET /.git/config HTTP/1.1" 301 1647 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Hacking Bad Web Bot Web App Attack
🇺🇸 technojoe99	2026-07-02 14:01:58 (1 week ago)	Exploit scan from 198.211.104.174. GET /.git/config HTTP/1.1.	Web App Attack
🇩🇪 Ba-Yu	2026-07-02 11:59:41 (1 week ago)	General hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 11:11:09 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 198.211.104.174 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 198.211.104.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 07:11:04.824576 2026] [security2:error] [pid 9463:tid 9463] [client 198.211.104.174:50586] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "twilighthackers.com"] [uri "/.git/config"] [unique_id "akZHSNo5JC_OhyMYJZNNAgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 09:55:14 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 198.211.104.174 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 198.211.104.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 05:55:07.161616 2026] [security2:error] [pid 2638:tid 2638] [client 198.211.104.174:55528] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "savingspools.com"] [uri "/.git/config"] [unique_id "akY1e0EmN6I1dE6EQlfc7gAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-07-02 09:44:05 (1 week ago)	Web vulnerability probing: /.git/config	Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 08:58:20 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 198.211.104.174 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 198.211.104.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 04:58:15.057226 2026] [security2:error] [pid 26322:tid 26342] [client 198.211.104.174:45988] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mateo-abogados.com"] [uri "/.git/config"] [unique_id "akYoJ6uvruljczXBsqeptAAAARE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 07:30:48 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 198.211.104.174 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 198.211.104.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 03:30:44.135898 2026] [security2:error] [pid 14744:tid 14744] [client 198.211.104.174:38716] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sprek.net"] [uri "/.git/config"] [unique_id "akYTpBIdG_Q_zQFyAK3nZwAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 49 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 167.148.201.87

🇬🇧 154.16.44.30

🇨🇳 150.255.54.23

🇻🇳 123.18.185.20

🇸🇬 116.88.116.62

🇰🇷 112.169.39.169

🇮🇳 106.219.121.20

🇺🇸 64.23.164.7

🇱🇹 62.60.130.219

🇺🇸 44.211.20.78

🇭🇰 43.154.140.188

🇬🇧 35.203.210.147

🇮🇳 2401:4900:8834:c8e7:b485:b6b7:7ec4:d125

🇬🇧 217.146.80.119

🇪🇹 196.189.126.10

🇨🇦 184.151.85.100

🇵🇱 176.53.159.197

🇺🇸 162.216.149.230

🇩🇪 80.243.227.69

🇺🇸 64.62.156.118