JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.237.151.164

104.237.151.164 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 21%: ?

21%

ISP	Linode
Usage Type	Data Center/Web Hosting/Transit
ASN	AS63949
Hostname(s)	prod-meitnerium-us-us-east-35.li.binaryedge.ninja
Domain Name	linode.com
Country	🇺🇸 United States of America
City	Cedar Knolls, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.237.151.164

Whois 104.237.151.164

IP Abuse Reports for 104.237.151.164:

This IP address has been reported a total of 12 times from 9 distinct sources. 104.237.151.164 was first reported on March 31st 2023, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 Ivo Vynckier	2026-06-23 10:34:00 (4 days ago)	104.237.151.164 - - [22/Jun/2026:21:41:21 +0200] "POST /wsman HTTP/1.1" 301 295 "-" "Mozilla/5.0 (Ma ... show more 104.237.151.164 - - [22/Jun/2026:21:41:21 +0200] "POST /wsman HTTP/1.1" 301 295 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36" 104.237.151.164 - - [22/Jun/2026:21:41:21 +0200] "GET /wsman HTTP/2.0" 301 279 "http://www.how-ocr-works.com/wsman" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36" show less	Web App Attack
🇺🇸 TPI-Abuse	2026-06-22 14:55:32 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 104.237.151.164 (prod-meitnerium-us-us-east-35. ... show more (mod_security) mod_security (id:210492) triggered by 104.237.151.164 (prod-meitnerium-us-us-east-35.li.binaryedge.ninja): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 10:55:26.371855 2026] [security2:error] [pid 26559:tid 26584] [client 104.237.151.164:53298] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.frannykingsmith.com"] [uri "/.env"] [unique_id "ajlM3pA7zX2nh_a3Gitj1wAAARM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-06-08 08:26:45 (2 weeks ago)	Blocked by UFW (TCP on 10443) Source port: 56004 TTL: 49 Packet length: 52 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 10443) Source port: 56004 TTL: 49 Packet length: 52 TOS: 0x08 This report (for 104.237.151.164) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇸🇬 drewf.ink	2025-06-09 16:15:38 (1 year ago)	[16:15] Port scanning. Port(s) scanned: TCP/587	Port Scan
🇩🇪 mielkan.com	2025-06-04 20:14:19 (1 year ago)	\| blocked \| mielkan-fra [5060/tcp] \| source port: 61000 \| ttl: 240 \| packet length: 40 \| tos: 0x00 \|	Port Scan
🇺🇸 drewf.ink	2025-06-04 20:13:05 (1 year ago)	[20:13] Port scanning. Port(s) scanned: TCP/587	Port Scan
🇺🇸 drewf.ink	2025-05-24 15:46:08 (1 year ago)	[15:46] Port scanning. Port(s) scanned: TCP/636	Port Scan
🇺🇸 drewf.ink	2025-05-24 15:22:46 (1 year ago)	[15:22] Port scanning. Port(s) scanned: TCP/110	Port Scan
🇮🇳 trentwiles.com	2025-02-07 14:54:21 (1 year ago)	Unauthorized connection attempt detected from IP address 104.237.151.164 to port 143 [BLR]	Port Scan Hacking
Anonymous	2023-10-24 04:32:16 (2 years ago)	Common attack or app scan event detected and blocked	Port Scan Hacking Web App Attack
Anonymous	2023-06-09 18:24:26 (3 years ago)	Jun 9 15:24:24 mail.eduneu.ar KerioConnect Connection attempt to service POP3S from IP address 10 ... show more Jun 9 15:24:24 mail.eduneu.ar KerioConnect Connection attempt to service POP3S from IP address 104.237.151.164 rejected: access from this IP address is not allowed ... show less	Port Scan
🇳🇱 globcom	2023-03-31 20:48:34 (3 years ago)	Mail / BruteForce / Scan	Email Spam Port Scan

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 209.145.56.119

🇮🇳 202.134.158.211

🇸🇬 178.128.51.84

🇫🇮 147.185.133.192

🇺🇸 146.70.174.89

🇻🇳 116.110.209.148

🇳🇱 45.148.10.151

🇧🇷 189.84.37.191

🇩🇪 185.216.214.42

🇹🇿 154.74.157.2

🇫🇮 147.185.133.17

🇮🇳 103.103.53.44

🇰🇪 102.0.11.254

🇺🇸 64.62.156.78

🇳🇱 45.148.10.152

🇨🇳 14.103.115.115

🇪🇸 172.110.219.251

🇨🇮 160.154.84.189

🇨🇳 122.115.224.56

🇬🇪 31.146.76.4