JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.239.22.144

104.239.22.144 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 0%: ?

ISP	FASTPLANET LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Domain Name	fastplanet.com
Country	🇮🇹 Italy
City	Figino, Lombardy

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.239.22.144

Whois 104.239.22.144

IP Abuse Reports for 104.239.22.144:

This IP address has been reported a total of 32 times from 8 distinct sources. 104.239.22.144 was first reported on August 25th 2024, and the most recent report was 10 months ago.

Old Reports: The most recent abuse report for this IP address is from 10 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2025-07-27 00:49:22 (10 months ago)	(mod_security) mod_security (id:212620) triggered by 104.239.22.144 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:212620) triggered by 104.239.22.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 26 20:49:14.549313 2025] [security2:error] [pid 404372:tid 404545] [client 104.239.22.144:35041] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<script\\\\b" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "65"] [id "212620"] [rev "4"] [msg "COMODO WAF: Cross-site Scripting (XSS) Attack\|\|ftp.kettlehill.net\|F\|2"] [data "Matched Data: <script found within REQUEST_URI: /ajax/apps/manifests?action=all&format=debug&xss=<script>alert(document.domain);</script>"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "ftp.kettlehill.net"] [uri "/ajax/apps/manifests"] [unique_id "aIV3ihTdKN3sxMPXSjT2dQAAARI"], referer: http://ftp.kettlehill.net/ajax/apps/manifests?action=all&format=debug&xss=<script>alert(document.domain);</script> show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-05-29 22:59:35 (1 year ago)	(mod_security) mod_security (id:221260) triggered by 104.239.22.144 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:221260) triggered by 104.239.22.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 29 18:59:29.060275 2025] [security2:error] [pid 3707561:tid 3707561] [client 104.239.22.144:44367] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^(?:\\\\'\\\\w+?=)?\\\\(\\\\)\\\\s{" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "77"] [id "221260"] [rev "3"] [msg "COMODO WAF: Shellshock Command Injection Vulnerabilities in GNU Bash through 4.3 bash43-026 (CVE-2014-7187, CVE-2014-7186, CVE-2014-7169, CVE-2014-6278, CVE-2014-6277, CVE-2014-6271)\|\|cpcontacts.farmers123.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.farmers123.com"] [uri "/cgi-bin/status"] [unique_id "aDjm0UDCnNSsSdW06orNMQAAAAE"], referer: () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 el-brujo	2025-03-26 17:21:39 (1 year ago)	Cloudflare WAF: Request Path: /registros-dns.html Request Query: Host: www.elhacker.net userAgent: ... show more Cloudflare WAF: Request Path: /registros-dns.html Request Query: Host: www.elhacker.net userAgent: Go-http-client/1.1 Action: log Source: firewallManaged ASN Description: M247 Country: GB Method: GET Timestamp: 2025-03-26T17:21:39Z ruleId: 2e06dfed713541e39b38f0aed5f20456. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
Anonymous	2025-03-10 00:22:43 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot
Anonymous	2025-02-26 16:27:17 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot
Anonymous	2025-02-21 03:01:05 (1 year ago)	ignores robots.txt	Bad Web Bot
Anonymous	2025-02-18 07:43:39 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot
Anonymous	2025-02-10 01:24:32 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot
Anonymous	2025-02-09 01:35:07 (1 year ago)	Illegal actions on webapp	Hacking Web App Attack
🇬🇧 Steve	2025-02-05 18:34:06 (1 year ago)	Excessive crawling - not obeying robots.txt	Bad Web Bot
Anonymous	2025-02-01 00:38:06 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot
Anonymous	2025-01-23 02:05:21 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot
Anonymous	2025-01-15 12:40:21 (1 year ago)	\| Common web attack.	Hacking SQL Injection Web App Attack
Anonymous	2025-01-14 18:58:07 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot
Anonymous	2025-01-05 10:05:04 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 2a05:d012:54b:1d00:643b:34a1:bbd5:993c

🇰🇷 125.143.224.252

🇮🇷 95.38.160.109

🇧🇾 88.218.64.178

🇫🇷 2a02:4780:27:1571:0:261d:be31:1

🇳🇱 216.163.184.191

🇺🇸 178.156.198.226

🇧🇩 103.158.62.21

🇺🇸 89.19.35.65

🇮🇹 82.49.67.176

🇸🇬 68.183.234.194

🇷🇺 217.149.191.246

🇮🇳 216.10.242.215

🇷🇺 178.205.199.34

🇮🇳 154.209.252.178

🇨🇳 125.40.237.193

🇺🇸 104.194.10.248

🇬🇧 89.37.172.132

🇨🇦 85.217.149.60

🇮🇪 80.93.31.10