JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.233.20.246

104.233.20.246 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 0%: ?

ISP	FASTPLANET LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Domain Name	fastplanet.com
Country	🇨🇦 Canada
City	Montreal, Quebec

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.233.20.246

Whois 104.233.20.246

IP Abuse Reports for 104.233.20.246:

This IP address has been reported a total of 19 times from 5 distinct sources. 104.233.20.246 was first reported on January 20th 2024, and the most recent report was 4 months ago.

Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-01-27 02:52:54 (4 months ago)	(mod_security) mod_security (id:210580) triggered by 104.233.20.246 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210580) triggered by 104.233.20.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 26 21:52:46.931997 2026] [security2:error] [pid 1535:tid 1976] [client 104.233.20.246:54753] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "etc/passwd" at ARGS:field. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt\|\|ftp.kettlehill.com\|F\|2"] [data "Matched Data: etc/passwd found within ARGS:field: field:exec:head -1 /etc/passwd:null:null"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "ftp.kettlehill.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aXgofrZfoZ-BogEqpvEnnQAAAQI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-07-03 13:43:15 (11 months ago)	(mod_security) mod_security (id:217200) triggered by 104.233.20.246 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:217200) triggered by 104.233.20.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 03 09:42:50.763364 2025] [security2:error] [pid 15732:tid 15771] [client 104.233.20.246:53961] ModSecurity: Access denied with code 403 (phase 1). Match of "endsWith /wp-cron.php" against "REQUEST_FILENAME" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "103"] [id "217200"] [rev "2"] [msg "COMODO WAF: HTTP/1.1 POST request missing Content-Length Header\|\|webmail.kettlehill.net\|F\|2"] [data "/cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "webmail.kettlehill.net"] [uri "/cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh"] [unique_id "aGaI2j8Z8MlHat2OicgUzAAAANc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-05-29 20:14:36 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 104.233.20.246 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.233.20.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 29 16:14:32.406586 2025] [security2:error] [pid 3416375:tid 3416375] [client 104.233.20.246:41491] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.farmers123.com"] [uri "/.env.dev"] [unique_id "aDjAKK6PEHDl7z-9c-vMTAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-02-27 14:36:04 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 104.233.20.246 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.233.20.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 27 09:34:08.904719 2025] [security2:error] [pid 27062:tid 27186] [client 104.233.20.246:50591] [client 104.233.20.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.staging.kettlehill.com"] [uri "/.wp-config.php.swp"] [unique_id "Z8B34AgBT3qhfe6UoI0_8AAAAEo"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-01-15 06:10:57 (1 year ago)	\| Common web attack.	Hacking SQL Injection Web App Attack
Anonymous	2024-11-21 06:18:56 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot
Anonymous	2024-11-14 06:00:05 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot
Anonymous	2024-11-04 06:54:43 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot
Anonymous	2024-10-27 14:03:02 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot
Anonymous	2024-10-20 13:30:27 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot
Anonymous	2024-10-12 22:44:09 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot
Anonymous	2024-10-05 11:59:11 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot
Anonymous	2024-09-27 09:59:26 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot
Anonymous	2024-09-20 06:30:24 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot
Anonymous	2024-08-28 15:05:36 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 106.222.236.152

🇩🇪 84.32.10.175

🇬🇧 82.197.75.106

🇷🇺 87.250.224.7

🇳🇱 85.11.167.11

🇺🇸 64.62.156.112

🇪🇨 45.70.196.123

🇺🇸 20.124.84.235

🇲🇽 187.154.100.150

🇨🇳 139.224.136.217

🇺🇸 124.198.131.39

🇸🇬 118.26.110.171

🇱🇰 45.121.91.16

🇧🇩 27.131.12.139

🇺🇸 2a02:4780:b:846:0:3268:dd26:9

🇨🇳 110.249.201.242

🇨🇳 110.249.201.8

🇰🇭 103.6.11.206

🇳🇱 85.121.127.154

🇫🇮 77.221.159.63