JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

204.48.24.80

Recent Activity

Abuse confidence score ?

100% Critical

380 reports

85 reporters · latest 4 hours ago

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	North Bergen, New Jersey

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 204.48.24.80

This IP address has been reported a total of 380 times from 85 distinct sources. 204.48.24.80 was first reported on February 6th 2024, and the most recent report was 4 hours ago. In the last 60 days, the top reporter locations were: Germany with 8 reports; Netherlands with 5 reports; France with 3 reports. The most common categories in these recent reports were: Web App Attack 23 times; Bad Web Bot 10 times; Brute-Force 6 times; Port Scan 5 times; Hacking 5 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 mnsf	2026-09-22 07:05:17 (4 hours ago)	Abuse Detected (10)	Brute-Force Web App Attack
🇩🇪 AetherFox	2026-09-22 06:54:19 (4 hours ago)	AetherFox VoidGuard detected: [Tue Sep 22 06:54:18.335223 2026] [authz_core:error] [pid 3544737:tid ... show more AetherFox VoidGuard detected: [Tue Sep 22 06:54:18.335223 2026] [authz_core:error] [pid 3544737:tid 3544749] [client 204.48.24.80:34374] AH01630: client denied by server configuration: proxy:http://[MASKED]/backup/ [Tue Sep 22 06:54:18.335430 2026] [authz_core:error] [pid 3544737:tid 3544749] [client 204.48.24.80:34374] AH01630: client denied by server configuration: /var/www/html/ERRORpages/403.html [Tue Sep 22 06:54:18.429916 2026] [authz_core:error] [pid 3544737:tid 3544752] [client 204.48.24.80:34374] AH01630: client denied by server configuration: proxy:http://[MASKED]/blog2/ [Tue Sep 22 06:54:18.430207 2026] [authz_core:error] [pid 3544737:tid 3544752] [client 204.48.24.80:34374] AH01630: client denied by server configuration: /var/www/html/ERRORpages/403.html [Tue Sep 22 06:54:18.524341 2026] [authz_core:error] [pid 3544737:tid 3544743] [client 204.48.24.80:34374] AH01630: client denied by server configuration: proxy:http://[MASKED]/content/ ... show less	Bad Web Bot Web App Attack
🇫🇷 Zundapper	2026-09-22 06:27:26 (5 hours ago)	204.48.24.80 - - [22/Sep/2026:08:27:25 +0200] "HEAD /backup/ HTTP/2.0" 404 0 "http://illustrami.com/ ... show more 204.48.24.80 - - [22/Sep/2026:08:27:25 +0200] "HEAD /backup/ HTTP/2.0" 404 0 "http://illustrami.com/backup/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.76 Safari/537.36" 204.48.24.80 - - [22/Sep/2026:08:27:25 +0200] "HEAD /blog2/ HTTP/2.0" 404 0 "http://illustrami.com/blog2/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.76 Safari/537.36" 204.48.24.80 - - [22/Sep/2026:08:27:25 +0200] "HEAD /blog2/ HTTP/2.0" 404 0 "http://illustrami.com/blog2/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.76 Safari/537.36" 204.48.24.80 - - [22/Sep/2026:08:27:25 +0200] "HEAD /content/ HTTP/2.0" 404 0 "http://illustrami.com/content/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.70 Safari/537.36 Vivaldi/6.7.3200.25" ... show less	Web App Attack Port Scan
🇩🇪 findlab	2026-09-22 06:15:01 (5 hours ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
🇮🇹 madaello	2026-09-22 06:14:13 (5 hours ago)	204.48.24.80 - - [22/Sep/2026:08:14:12 +0200] "HEAD /backup/ HTTP/1.1" 404 4265 "http://imperatrice. ... show more 204.48.24.80 - - [22/Sep/2026:08:14:12 +0200] "HEAD /backup/ HTTP/1.1" 404 4265 "http://imperatrice.to.it/backup/" "Mozilla/5.0 (Linux; Android 11; RMX2195) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.210 Mobile Safari/537.36 OPR/75.2.3995.72468" 204.48.24.80 - - [22/Sep/2026:08:14:12 +0200] "HEAD /blog2/ HTTP/1.1" 404 162 "http://imperatrice.to.it/blog2/" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Mobile/15E148 Safari/604.1" 204.48.24.80 - - [22/Sep/2026:08:14:12 +0200] "HEAD /content/ HTTP/1.1" 404 162 "http://imperatrice.to.it/content/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1" 204.48.24.80 - - [22/Sep/2026:08:14:12 +0200] "HEAD /home/ HTTP/1.1" 404 162 "http://imperatrice.to.it/home/" "Mozilla/5.0 (Linux; Android 10; vivo 1904) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.60 Mobile Safari/537.36" 204.48.24 ... show less	Port Scan
Anonymous	2026-09-22 06:05:31 (5 hours ago)	Blocked: Reason='Suspicious traffic score=65 (review-based detection)'; Requests=29	Hacking
🇩🇪 Vegascosmetics	2026-09-22 05:57:27 (5 hours ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after admin/path reconnaissance / port-scan ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after admin/path reconnaissance / port-scan-like web scan. Evidence: AttackPattern: /backup/ (Match: /backup/) show less	Port Scan Hacking Web App Attack
Anonymous	2026-09-22 05:44:09 (5 hours ago)	Web probing (28 hits in 24h) on default-vhost: sensitive-path scans and/or 404 bursts. Reported by C ... show more Web probing (28 hits in 24h) on default-vhost: sensitive-path scans and/or 404 bursts. Reported by CRMON. show less	Web App Attack
🇦🇺 2000cn.com.au	2026-09-22 05:36:59 (5 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇳🇱 Alt255	2026-09-22 05:33:05 (5 hours ago)	[ti-01ov] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail <nam ... show more [ti-01ov] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail <name>. Example: 204.48.24.80 - - \[22/Sep/2026:07:32:54 +0200\] "HEAD /backup/ HTTP/1.1" 404 5585 "http://imoos.org/backup/" "Mozilla/5.0 \(Macintosh\; Intel Mac OS X 13_5\) AppleWebKit/605.1.15 \(KHTML, like Gecko\) Version/16.5 Safari/605.1.15" 204.48.24.80 - - \[22/Sep/2026:07:32:54 +0200\] "HEAD /blog2/ HTTP/1.1" 404 266 "http://imoos.org/blog2/" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/127.0.6534.42 Safari/537.36" 204.48.24.80 - - \[22/Sep/2026:07:32:54 +0200\] "HEAD /content/ HTTP/1.1" 404 266 "http://imoos.org/content/" "Mozilla/5.0 \(Linux\; Android 12\; TECNO CK6n\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/125.0.6422.50 Mobile Safari/537.36" 204.48.24.80 - - \[22/Sep/2026:07:32:54 ... show less	Bad Web Bot Web App Attack
🇳🇿 Tripwire	2026-09-22 05:03:19 (6 hours ago)	Scanning for exploits - /backup/	Web App Attack
Anonymous	2026-09-22 04:55:36 (6 hours ago)	204.48.24.80 - - [22/Sep/2026:12:55:31 +0800] "HEAD /blog2/ HTTP/1.1" 404 - "http://ideo.com.hk/blog ... show more 204.48.24.80 - - [22/Sep/2026:12:55:31 +0800] "HEAD /blog2/ HTTP/1.1" 404 - "http://ideo.com.hk/blog2/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1" 204.48.24.80 - - [22/Sep/2026:12:55:32 +0800] "HEAD /content/ HTTP/1.1" 404 - "http://ideo.com.hk/content/" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.6540.18 Safari/537.36" 204.48.24.80 - - [22/Sep/2026:12:55:32 +0800] "HEAD /content/ HTTP/1.1" 404 - "http://ideo.com.hk/content/" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.6540.18 Safari/537.36" 204.48.24.80 - - [22/Sep/2026:12:55:33 +0800] "HEAD /us/ HTTP/1.1" 404 - "http://ideo.com.hk/us/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:127.0) Gecko/20100101 Firefox/127.0" 204.48.24.80 - - [22/Sep/2026:12:55:33 +0800] "HEAD /us/ HTTP/1.1" 404 - "http://ideo.com.hk/us/" "Mozilla/5.0 (Windows NT 10 ... show less	Bad Web Bot Web App Attack
🇫🇷 Zundapper	2026-09-22 04:49:12 (6 hours ago)	204.48.24.80 - - [22/Sep/2026:06:49:09 +0200] "HEAD /backup/ HTTP/2.0" 404 0 "https://www.illustrami ... show more 204.48.24.80 - - [22/Sep/2026:06:49:09 +0200] "HEAD /backup/ HTTP/2.0" 404 0 "https://www.illustrami.com/backup/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1" 204.48.24.80 - - [22/Sep/2026:06:49:10 +0200] "HEAD /blog2/ HTTP/2.0" 404 0 "https://www.illustrami.com/blog2/" "Mozilla/5.0 (Linux; Android 14; RMX3842) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.44 Mobile Safari/537.36" 204.48.24.80 - - [22/Sep/2026:06:49:11 +0200] "HEAD /content/ HTTP/2.0" 404 0 "https://www.illustrami.com/content/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.7 Mobile/15E148 Safari/604.1" 204.48.24.80 - - [22/Sep/2026:06:49:11 +0200] "HEAD /home/ HTTP/2.0" 404 0 "https://www.illustrami.com/home/" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.5993.90 Safari/537.36" 204.48.24.80 - - [22/Sep/2026:06:49 ... show less	Web App Attack Port Scan
🇳🇱 e.fierstra	2026-09-22 04:45:41 (6 hours ago)	excessive HTTP 404 errors	Bad Web Bot
🇩🇪 Séfora Srl	2026-09-22 04:35:04 (6 hours ago)	crowdsecurity/http-probing detected by CrowdSec	Web App Attack

Showing 1 to 15 of 380 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇴 2800:320:c03c:2c00:6c43:2b35:4db1:c624

🇺🇸 198.30.203.199

🇬🇧 195.140.214.20

🇮🇷 193.39.9.244

🇮🇳 122.187.228.253

🇺🇦 91.90.11.154

🇷🇺 82.208.71.68

🇺🇸 34.58.182.201

🇺🇸 20.15.226.1

🇺🇸 206.204.22.78

🇹🇿 197.186.15.26

🇪🇸 194.146.92.72

🇪🇸 172.68.134.62

🇵🇰 165.99.207.153

🇺🇸 153.66.21.126

🇨🇦 146.190.249.88

🇰🇷 125.141.68.76

🇰🇷 119.207.26.11

🇲🇲 103.213.30.130

🇧🇬 79.124.62.230