JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.239.22.235

104.239.22.235 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 0%: ?

ISP	FASTPLANET LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Domain Name	fastplanet.com
Country	🇮🇹 Italy
City	Figino, Lombardy

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.239.22.235

Whois 104.239.22.235

IP Abuse Reports for 104.239.22.235:

This IP address has been reported a total of 28 times from 4 distinct sources. 104.239.22.235 was first reported on August 26th 2024, and the most recent report was 6 months ago.

Old Reports: The most recent abuse report for this IP address is from 6 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2025-11-12 04:49:34 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 104.239.22.235 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 104.239.22.235 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 11 23:49:19.133436 2025] [security2:error] [pid 25364:tid 25364] [client 104.239.22.235:58405] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|mail.nbcnewsradio.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.nbcnewsradio.com"] [uri "/dump.sql"] [unique_id "aRQRz3XJtt9VD94hQ3qGFwAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-07-27 00:14:02 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 104.239.22.235 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.239.22.235 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 26 20:13:28.471076 2025] [security2:error] [pid 172229:tid 172466] [client 104.239.22.235:41149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whm.kettlehill.net"] [uri "/wp-content/plugins/jsmol2wp/php/jsmol.php"] [unique_id "aIVvKOZd-uShJ73phjvXUQAAAQE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-05-29 16:31:03 (1 year ago)	(mod_security) mod_security (id:212790) triggered by 104.239.22.235 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:212790) triggered by 104.239.22.235 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 29 12:30:58.515357 2025] [security2:error] [pid 2974842:tid 2974842] [client 104.239.22.235:47505] ModSecurity: Access denied with code 403 (phase 2). Pattern match "[\\\\s\\\\x22'](?:alert\|eval\|\\\\.fromcharcode)\\\\s?(?:\\\\(\|`)" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "72"] [id "212790"] [rev "5"] [msg "COMODO WAF: XSS Attack Detected\|\|www.farmers123.com\|F\|2"] [data "Matched Data: 'alert( found within REQUEST_URI: /dashboard/snapshot/{{constructor.constructor('alert(document.domain)')()}}?orgid=1"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "www.farmers123.com"] [uri "/dashboard/snapshot/{{constructor.constructor('alert(document.domain)')()}}"] [unique_id "aDiLwnPaqfyLRpKG-EO58AAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-03-10 11:46:11 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot
Anonymous	2025-03-02 23:52:00 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot
Anonymous	2025-02-20 09:22:46 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot
Anonymous	2025-02-12 22:06:01 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot
Anonymous	2025-02-06 22:05:19 (1 year ago)	Illegal actions on webapp	Hacking Web App Attack
Anonymous	2025-02-05 18:03:02 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot
Anonymous	2025-01-29 01:29:13 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot
Anonymous	2025-01-21 13:12:58 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot
Anonymous	2025-01-15 12:40:31 (1 year ago)	\| PHPMyAdmin scans (looking for setup.php).	Hacking SQL Injection Web App Attack
Anonymous	2025-01-14 11:07:48 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot
Anonymous	2024-12-22 14:16:43 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot
Anonymous	2024-12-14 17:39:57 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇭 41.155.88.184

🇨🇳 203.93.173.11

🇮🇳 128.185.231.6

🇺🇸 104.236.99.179

🇻🇳 103.200.25.79

🇧🇬 95.43.150.36

🇲🇾 47.254.244.233

🇭🇰 47.242.37.198

🇰🇷 36.38.56.82

🇺🇸 23.234.118.245

🇮🇪 18.202.236.24

🇷🇴 2.57.122.177

🇵🇪 161.132.38.88

🇻🇳 152.32.162.15

🇫🇯 103.52.89.114

🇫🇷 62.210.142.170

🇨🇴 38.225.40.59

🇺🇸 23.234.117.68

🇪🇹 196.189.237.172

🇳🇱 195.178.110.31