AbuseIPDB » 104.239.6.193
104.239.6.193
This IP was reported 7 times. Confidence of
Abuse
is 0% : ?
ISP
FASTPLANET LTD
Usage Type
Fixed Line ISP
ASN
AS205964
Domain Name
fastplanet.com
Country
🇷🇸
Serbia
City
Belgrade, Central Serbia
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 104.239.6.193 :
This IP address has been reported a total of
7
times from
4 distinct
sources.
104.239.6.193 was first reported on
March 4th 2024 , and the most recent report was
1 year ago
Old Reports:
The most recent abuse report for this IP address is from
1 year ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
2025-03-31 16:57:54
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
2024-03-24 10:46:14
(2 years ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇺🇸
TPI-Abuse
2024-03-23 13:08:43
(2 years ago)
(mod_security) mod_security (id:217280) triggered by 104.239.6.193 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:217280) triggered by 104.239.6.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 23 09:08:39.494170 2024] [security2:error] [pid 4659] [client 104.239.6.193:55463] [client 104.239.6.193] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\n|\\\\r)+(?:get|post|head|options|connect|put|delete|trace|propfind|propatch|mkcol|copy|move|lock|unlock)\\\\s+" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "137"] [id "217280"] [rev "6"] [msg "COMODO WAF: HTTP Request Smuggling Attack||moonlightmotel.com|F|2"] [data "Matched Data: get found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "moonlightmotel.com"] [uri "/"] [unique_id "Zf7UVxDypcPud-8Dpqxc4wAAAAk"], referer: http://moonlightmotel.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-03-11 07:18:49
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 104.239.6.193 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 104.239.6.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 11 03:18:42.396286 2024] [security2:error] [pid 20603] [client 104.239.6.193:36419] [client 104.239.6.193] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||puduspoems.com|F|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "puduspoems.com"] [uri "/web/20140107222105/http:/wwp.icq.com/scripts/WWPMsg.dll"] [unique_id "Ze6wUnGclVBT3uQt-uRZEAAAAAI"], referer: http://puduspoems.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2024-03-09 03:36:40
(2 years ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇦🇺
oncord
2024-03-05 07:57:51
(2 years ago)
Form spam
Web Spam
🇺🇸
nowyouknow
2024-03-04 10:46:09
(2 years ago)
(From [email protected] ) Hey there, my name is Jessica! I help small businesses like yo ...
show more
(From [email protected] ) Hey there, my name is Jessica! I help small businesses like yours scale. I had a look at your social media accounts and I noticed you don't have many followers or engagement.
We sell organic social media growth packages for our clients and would like to give you the opportunity to test it out.
If you are interested in elevating your brands presence you can click the link below!
https://www.getafollower.com/#Jessica
Thank you for your time, we hope to help you with you social media pages!
Best regards,
Jessica from GetAFollower
show less
Phishing
Web Spam
Showing 1 to
7
of 7 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: