AbuseIPDB » 104.237.245.241
104.237.245.241
This IP was reported 9 times. Confidence of
Abuse
is 4% : ?
ISP
DedFiberCo
Usage Type
Fixed Line ISP
ASN
AS16628
Hostname(s)
104-237-245-241-host.colocrossing.com
Domain Name
dedfiber.com
Country
🇺🇸
United States of America
City
Buffalo, New York
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 104.237.245.241 :
This IP address has been reported a total of
9
times from
9 distinct
sources.
104.237.245.241 was first reported on
March 28th 2023 , and the most recent report was
2 days ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇮🇩
hermawan
2026-10-24 07:45:00
(2 days ago)
[Sat Oct 24 14:45:00.453818 2026] [security2:error] [pid 1065752:tid 140102661015232] [client 104.23 ...
show more
[Sat Oct 24 14:45:00.453818 2026] [security2:error] [pid 1065752:tid 140102661015232] [client 104.237.245.241:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yahoo.go.id" at REQUEST_HEADERS:referer. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "618"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.yahoo.go.id found within REQUEST_HEADERS:referer: https://www.yahoo.go.id/ request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561326-infografis-himbauan-waspada-suhu-udara-panas HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561326-infografis-himbauan-waspada-suhu-udara-panas"] [unique_id "atxh_Pe7q_ZIJ76MT2aaRgAAAEA"], referer https://www.yahoo.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1065779] [rlEmRlG3yVg] [atxh_Pe7q_ZIJ76MT2aaRgAAAEA] keep_ali
...
show less
Email Spam
Hacking
🇸🇬
mypatricks
2026-06-01 12:28:39
(4 months ago)
104.237.245.241 | Port: 13708 | DNS: 104-237-245-241-host.colocrossing.com 2026-06-01T20:28:37+08:00 ...
show more
104.237.245.241 | Port: 13708 | DNS: 104-237-245-241-host.colocrossing.com 2026-06-01T20:28:37+08:00 America/New_York | Host Data Center/Web Hosting/Transit Spam list | UA: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36 HTTP/1.1 443 GET | URL: / | Ref: https://xxxxxx/ | Country: US/United States/-08:00 IP City: Buffalo Android Mobile a04e381bff7aaad4-YYZ/Toronto, ON, Canada 1 hits/0 secs Robots 0
show less
Brute-Force
Web App Attack
Blog Spam
Web Spam
Exploited Host
🇨🇳
ThreatBook.io
2025-06-02 01:14:05
(1 year ago)
ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/104.237.245.241
...
show more
ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/104.237.245.241
2025-06-01 07:25:31 /
2025-06-01 07:25:32 /robots.txt
2025-06-01 07:25:33 /
show less
Web App Attack
🇦🇺
MAGIC
2024-05-27 08:09:58
(2 years ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
2024-04-12 11:42:39
(2 years ago)
Ports: *; Direction: 0; Trigger: CT_LIMIT
Brute-Force
SSH
🇨🇭
backslash
2024-04-12 09:35:17
(2 years ago)
Bad Web Bot
🇷🇸
Smel
2023-08-04 02:08:47
(3 years ago)
Unauthorized Probe/Connection, Hack -
Port Scan
Hacking
2023-05-10 21:41:04
(3 years ago)
Malicious activity detected
Hacking
Brute-Force
2023-03-28 03:36:05
(3 years ago)
port scan and connect, tcp 80 (http)
Port Scan
Showing 1 to
9
of 9 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: