JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.239.13.231

104.239.13.231 was found in our database!

This IP was reported 8 times. Confidence of Abuse is 0%: ?

ISP	FASTPLANET LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Domain Name	fastplanet.com
Country	🇨🇦 Canada
City	Montreal, Quebec

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.239.13.231

Whois 104.239.13.231

IP Abuse Reports for 104.239.13.231:

This IP address has been reported a total of 8 times from 4 distinct sources. 104.239.13.231 was first reported on October 31st 2023, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-05-02 21:34:24 (1 month ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 104.239.13.231 (CA/C ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 104.239.13.231 (CA/Canada/-) show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-01-27 03:00:57 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 104.239.13.231 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.239.13.231 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 26 22:00:49.161110 2026] [security2:error] [pid 16656:tid 16660] [client 104.239.13.231:33351] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.kettlehill.com"] [uri "/wp-content/plugins/simple-file-list/includes/ee-downloader.php"] [unique_id "aXgqYT4D1upuVdMC6K4OHgAAAEE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-12 04:40:15 (6 months ago)	(mod_security) mod_security (id:212620) triggered by 104.239.13.231 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:212620) triggered by 104.239.13.231 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 11 23:39:20.243417 2025] [security2:error] [pid 3969:tid 3969] [client 104.239.13.231:50887] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<script\\\\b" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "65"] [id "212620"] [rev "4"] [msg "COMODO WAF: Cross-site Scripting (XSS) Attack\|\|mail.nbcnewsradio.com\|F\|2"] [data "Matched Data: <script found within REQUEST_URI: /wp-content/plugins/pdf-generator-for-wp/package/lib/dompdf/vendor/dompdf/dompdf/i18n/arabic/examples/query.php?keyword=\\x22><script>alert(document.domain)</script>"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "mail.nbcnewsradio.com"] [uri "/wp-content/plugins/pdf-generator-for-wp/package/lib/dompdf/vendor/dompdf/dompdf/I18N/Arabic/Examples/Query.php"] [unique_id "aRQPeANlHGJdbPIN3T6zGgAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-07-26 23:13:37 (10 months ago)	(mod_security) mod_security (id:221260) triggered by 104.239.13.231 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:221260) triggered by 104.239.13.231 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 26 19:08:25.669384 2025] [security2:error] [pid 28940:tid 28966] [client 104.239.13.231:51167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^(?:\\\\'\\\\w+?=)?\\\\(\\\\)\\\\s{" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "77"] [id "221260"] [rev "3"] [msg "COMODO WAF: Shellshock Command Injection Vulnerabilities in GNU Bash through 4.3 bash43-026 (CVE-2014-7187, CVE-2014-7186, CVE-2014-7169, CVE-2014-6278, CVE-2014-6277, CVE-2014-6271)\|\|whm.kettlehill.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whm.kettlehill.com"] [uri "/debug.cgi"] [unique_id "aIVf6RkWs7qQTYmgnsCgfQAAAA8"], referer: () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-07-01 12:30:04 (11 months ago)	\| Shellshock attack detected	Hacking SQL Injection Web App Attack
🇺🇸 ChamberofCommerce.com	2023-11-06 03:56:16 (2 years ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226 show less	Bad Web Bot
🇺🇸 ChamberofCommerce.com	2023-11-02 01:45:21 (2 years ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226 show less	Bad Web Bot
🇺🇸 ChamberofCommerce.com	2023-10-31 01:33:52 (2 years ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226 show less	Bad Web Bot

Showing 1 to 8 of 8 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 187.140.79.156

🇳🇱 185.223.235.7

🇨🇳 183.36.243.67

🇺🇸 172.203.242.24

🇨🇳 58.50.206.158

🇺🇸 13.222.73.81

🇺🇸 205.210.31.65

🇪🇹 196.189.236.216

🇳🇱 193.176.31.243

🇮🇩 180.243.148.189

🇦🇷 152.169.154.26

🇺🇸 147.185.132.219

🇺🇸 135.237.125.135

🇨🇳 119.255.245.44

🇨🇳 111.10.244.187

🇵🇱 95.214.54.27

🇬🇧 91.108.97.247

🇳🇱 86.54.31.38

🇧🇬 79.124.62.230

🇷🇺 45.80.129.150