JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

104.219.235.108

Neutral Activity

Abuse Confidence Score

0% Low Risk

66 reports

39 reporters · latest 8 months ago

ISP: DataWagon LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS27176
Hostname(s): a08.educationonlinelife.net
Domain Name: datawagon.com
Country: 🇺🇸 United States of America
City: Buffalo, New York

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

104.219.235.108 has been reported 66 times. The most recent report is from 8 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

66 from 39 distinct reporters

First reported

October 15th 2025

Most recent report

8 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 S.O.B.A. Dev.	2026-02-26 01:56:48 (8 months ago)	Persistent port scanning or vulnerability scanning	Port Scan
🇺🇸 octageeks.com	2026-02-21 05:07:17 (8 months ago)	Wordpress malicious attack:[octablocked]	Web App Attack
Anonymous	2026-02-21 04:05:20 (8 months ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Backup file probing, Cloud secrets probing	Bad Web Bot Web App Attack
Anonymous	2026-02-20 03:08:29 (8 months ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Backup file probing, Cloud secrets probing	Bad Web Bot Web App Attack
🇮🇹 alph44	2026-02-16 13:16:27 (8 months ago)	(mod_security) mod_security (id:949110) triggered by 104.219.235.108 (US/United States/a08.educationonlinelife.net): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs:	Web App Attack
🇺🇸 TPI-Abuse	2026-02-16 12:35:39 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 104.219.235.108 (a08.educationonlinelife.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 16 07:35:36.453408 2026] [security2:error] [pid 19721:tid 19734] [c ... show more (mod_security) mod_security (id:210492) triggered by 104.219.235.108 (a08.educationonlinelife.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 16 07:35:36.453408 2026] [security2:error] [pid 19721:tid 19734] [client 104.219.235.108:53064] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.clearwaterpumpservices.com"] [uri "/.env"] [unique_id "aZMPGGvyu2FQn8lUD5UwsgAAAUs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-16 03:36:53 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 104.219.235.108 (a08.educationonlinelife.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 22:36:50.412762 2026] [security2:error] [pid 3940:tid 3940] [cli ... show more (mod_security) mod_security (id:210492) triggered by 104.219.235.108 (a08.educationonlinelife.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 22:36:50.412762 2026] [security2:error] [pid 3940:tid 3940] [client 104.219.235.108:63094] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "awakenings.info"] [uri "/.env"] [unique_id "aZKQ0iC7L9TjqUf42da1nwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-16 01:25:52 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 104.219.235.108 (a08.educationonlinelife.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 20:25:47.567229 2026] [security2:error] [pid 29018:tid 29018] [c ... show more (mod_security) mod_security (id:210492) triggered by 104.219.235.108 (a08.educationonlinelife.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 20:25:47.567229 2026] [security2:error] [pid 29018:tid 29018] [client 104.219.235.108:49789] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aquascapes.net"] [uri "/aquascapes.net/.env"] [unique_id "aZJyG7BdM2kiknGFiu8wBAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇲🇾 Rizzy	2026-02-15 21:13:17 (8 months ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 19:58:16 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 104.219.235.108 (a08.educationonlinelife.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 14:58:13.799754 2026] [security2:error] [pid 592:tid 592] [clien ... show more (mod_security) mod_security (id:210492) triggered by 104.219.235.108 (a08.educationonlinelife.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 14:58:13.799754 2026] [security2:error] [pid 592:tid 592] [client 104.219.235.108:58345] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "2ezgroup.com"] [uri "/2ezgroup.com/.env"] [unique_id "aZIlVQaohbUt-hUAtmuRnAAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇿 Antinson	2026-01-31 01:52:16 (8 months ago)	High error rate and elevated request volume targeting cPanel servers	Bad Web Bot
Anonymous	2026-01-30 17:10:04 (8 months ago)	IM360 WAF: Laravel .env file access	Web App Attack
🇳🇿 Antinson	2026-01-29 06:52:21 (8 months ago)	High error rate and elevated request volume targeting cPanel servers	Bad Web Bot
🇺🇸 TPI-Abuse	2026-01-29 04:43:39 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 104.219.235.108 (a08.educationonlinelife.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 28 23:43:31.752390 2026] [security2:error] [pid 3419733:tid 3419742 ... show more (mod_security) mod_security (id:210492) triggered by 104.219.235.108 (a08.educationonlinelife.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 28 23:43:31.752390 2026] [security2:error] [pid 3419733:tid 3419742] [client 104.219.235.108:62566] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.123"] [uri "/.env"] [unique_id "aXrlcxDxkNK1qVC1H1gTNQAAAEQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇹🇷 Threat.live	2026-01-26 10:30:26 (9 months ago)	Port Scan, tcp/80	Port Scan

Showing 1 to 15 of 66 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇪🇨 200.24.136.53

🇺🇸 192.241.162.146

🇦🇷 187.62.95.131

🇺🇸 185.61.217.99

🇺🇸 184.105.247.195

🇯🇵 139.162.113.212

🇭🇰 123.58.219.41

🇺🇸 107.170.39.236

🇬🇧 87.236.176.46

🇬🇧 84.64.219.84

🇺🇸 50.6.205.73

🇭🇰 42.2.27.151

🇺🇸 40.119.25.44

🇺🇸 24.106.43.27

🇺🇸 207.46.13.151

🇺🇸 192.241.245.169

🇧🇷 191.242.37.10

🇳🇱 185.242.226.61

🇸🇪 185.209.198.196

🇮🇩 180.253.185.59