JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.233.12.249

104.233.12.249 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 4%: ?

ISP	FASTPLANET LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS62874
Domain Name	fastplanet.com
Country	🇺🇸 United States of America
City	Dallas, Texas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.233.12.249

Whois 104.233.12.249

IP Abuse Reports for 104.233.12.249:

This IP address has been reported a total of 10 times from 6 distinct sources. 104.233.12.249 was first reported on August 31st 2023, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-07-25 13:28:50 (2 days ago)	Blocked by UFW (TCP on 82) Source port: 59081 TTL: 53 Packet length: 60 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 82) Source port: 59081 TTL: 53 Packet length: 60 TOS: 0x08 This report (for 104.233.12.249) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2025-11-12 14:43:12 (8 months ago)	(mod_security) mod_security (id:210730) triggered by 104.233.12.249 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 104.233.12.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 12 09:43:06.921236 2025] [security2:error] [pid 24817:tid 24817] [client 104.233.12.249:55027] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|mail.nbcnewsradio.com\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.nbcnewsradio.com"] [uri "/logs/errors.log"] [unique_id "aRSc-mB5Dpe7AYfJVh20DwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-22 21:56:20 (10 months ago)	(mod_security) mod_security (id:210730) triggered by 104.233.12.249 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 104.233.12.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 22 17:56:11.487344 2025] [security2:error] [pid 14197:tid 14197] [client 104.233.12.249:55341] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|deandobkin.com\|F\|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "deandobkin.com"] [uri "/settings.php.bak"] [unique_id "aNHF-040vAX5FMw3Nm4pbgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 ChamberofCommerce.com	2023-11-05 23:49:20 (2 years ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226 show less	Bad Web Bot
🇺🇸 ChamberofCommerce.com	2023-11-04 02:27:28 (2 years ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226 show less	Bad Web Bot
🇺🇸 ChamberofCommerce.com	2023-11-02 05:08:57 (2 years ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226 show less	Bad Web Bot
🇺🇸 ChamberofCommerce.com	2023-10-30 21:37:24 (2 years ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226 show less	Bad Web Bot
🇬🇧 oncord	2023-09-01 05:39:35 (2 years ago)	Form spam	Web Spam
Anonymous	2023-08-31 15:12:10 (2 years ago)	Malicious activity detected	Hacking Web App Attack
🇺🇸 nowyouknow	2023-08-31 02:11:22 (2 years ago)	(From [email protected]) JP Corsi with Exit Node Corp. I hope that you are having a good day. ... show more (From [email protected]) JP Corsi with Exit Node Corp. I hope that you are having a good day. I am doing a bit of outreach to owner of companies similar to yours as we are seeing increased sales with a number of our clients in the past few months. We have a core focus in helping companies increase online inbound and outreach sales and sell out capacity with incredibly effective and economical strategies. Let me know if increasing online sales is a priority right now and if I can get on your calendar for a short introduction in the next week or two? --- JP Corsi +1 954-833-5563 https://exitnode.co 2339 Glades Pkwy, Weston FL show less	Phishing Web Spam

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.212

🇺🇸 172.237.156.206

🇺🇸 162.216.149.66

🇺🇸 34.94.4.247

🇳🇱 5.187.35.26

🇺🇸 216.25.89.80

🇺🇿 213.230.127.104

🇬🇧 195.140.214.20

🇳🇱 176.65.148.2

🇺🇸 162.216.149.110

🇺🇸 162.216.149.29

🇬🇧 154.16.44.72

🇺🇸 147.185.132.212

🇮🇳 27.59.127.41

🇦🇺 3.27.164.80

🇨🇳 221.11.60.156

🇩🇪 193.124.20.233

🇧🇷 186.215.181.61

🇺🇸 172.233.221.115

🇺🇸 147.185.132.140