JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.239.37.101

104.239.37.101 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 0%: ?

ISP	FASTPLANET LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Domain Name	fastplanet.com
Country	🇨🇦 Canada
City	Montreal, Quebec

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.239.37.101

Whois 104.239.37.101

IP Abuse Reports for 104.239.37.101:

This IP address has been reported a total of 15 times from 4 distinct sources. 104.239.37.101 was first reported on March 20th 2024, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2025-05-01 10:41:10 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 104.239.37.101 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 104.239.37.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 01 06:41:06.169363 2025] [security2:error] [pid 3962789:tid 3962891] [client 104.239.37.101:32999] [client 104.239.37.101] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.uoexpanse.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.uoexpanse.com"] [uri "/kaobeiking.com"] [unique_id "aBNPwvqi7si9ThxamORiagAAAE0"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-11-24 21:58:13 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot
Anonymous	2024-11-17 20:56:29 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot
Anonymous	2024-11-10 20:29:08 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot
Anonymous	2024-11-03 03:07:53 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot
Anonymous	2024-10-27 02:20:55 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot
Anonymous	2024-10-20 01:18:49 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot
Anonymous	2024-10-12 19:37:59 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot
Anonymous	2024-10-05 09:22:33 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot
Anonymous	2024-09-26 05:23:03 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot
Anonymous	2024-09-19 04:06:06 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot
Anonymous	2024-09-05 04:34:40 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot
🇻🇳 Xuan Can	2024-03-20 19:00:35 (2 years ago)	(mod_security) mod_security (id:6) triggered by 104.239.37.101 (CA/Canada/-): 1 in the last 3600 sec ... show more (mod_security) mod_security (id:6) triggered by 104.239.37.101 (CA/Canada/-): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 21 02:00:25.140404 2024] [security2:error] [pid 35409:tid 47787136657152] [client 104.239.37.101:53441] [client 104.239.37.101] ModSecurity: Access denied with connection close (phase 2). Pattern match "wp-login.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "63"] [id "6"] [severity "CRITICAL"] [hostname "kb.pavietnam.vn"] [uri "/wp-login.php"] [unique_id "ZfsySRnwfrX2xayPjhCGwwAAAVM"], referer: https://kb.pavietnam.vn/wp-login.php?action=register show less	Brute-Force SSH
🇻🇳 Xuan Can	2024-03-20 18:13:08 (2 years ago)	(mod_security) mod_security (id:6) triggered by 104.239.37.101 (CA/Canada/-): 1 in the last 3600 sec ... show more (mod_security) mod_security (id:6) triggered by 104.239.37.101 (CA/Canada/-): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 21 01:12:55.972605 2024] [security2:error] [pid 35409:tid 47787132454656] [client 104.239.37.101:46973] [client 104.239.37.101] ModSecurity: Access denied with connection close (phase 2). Pattern match "wp-login.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "63"] [id "6"] [severity "CRITICAL"] [hostname "kb.pavietnam.vn"] [uri "/wp-login.php"] [unique_id "ZfsnJxnwfrX2xayPjhB8mQAAAVE"], referer: https://kb.pavietnam.vn/wp-login.php?action=register show less	Brute-Force SSH
🇬🇧 Steve	2024-03-20 17:18:13 (2 years ago)	Excessive crawling - not obeying robots.txt	Bad Web Bot

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.64

🇹🇷 212.57.19.138

🇬🇧 188.240.59.54

🇹🇭 171.103.160.14

🇺🇸 104.248.56.87

🇺🇸 103.124.105.46

🇯🇵 52.197.237.229

🇺🇸 205.210.31.80

🇵🇫 202.90.77.96

🇧🇷 189.15.224.109

🇨🇳 183.251.121.170

🇨🇳 120.225.42.25

🇻🇳 103.179.172.14

🇫🇷 85.217.140.47

🇺🇸 64.62.156.62

🇳🇱 45.148.10.244

🇩🇪 206.81.24.227

🇲🇦 196.120.22.181

🇲🇽 189.250.23.143

🇱🇧 185.97.92.122