JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.239.78.200

104.239.78.200 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 4%: ?

ISP	FASTPLANET LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS62874
Domain Name	fastplanet.com
Country	🇺🇸 United States of America
City	Grapevine, Texas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.239.78.200

Whois 104.239.78.200

IP Abuse Reports for 104.239.78.200:

This IP address has been reported a total of 20 times from 9 distinct sources. 104.239.78.200 was first reported on October 30th 2023, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 bigorre.org	2026-07-24 11:24:24 (2 days ago)	Excessive crawling : exceed crawl-delay defined in robots.txt	Bad Web Bot
🇨🇭 backslash	2025-08-06 04:45:06 (11 months ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
🇺🇸 TPI-Abuse	2024-09-03 19:35:57 (1 year ago)	(mod_security) mod_security (id:221260) triggered by 104.239.78.200 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:221260) triggered by 104.239.78.200 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 03 15:35:50.112947 2024] [security2:error] [pid 12697:tid 12697] [client 104.239.78.200:49411] [client 104.239.78.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^(?:\\\\'\\\\w+?=)?\\\\(\\\\)\\\\s{" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "80"] [id "221260"] [rev "3"] [msg "COMODO WAF: Shellshock Command Injection Vulnerabilities in GNU Bash through 4.3 bash43-026 (CVE-2014-7187, CVE-2014-7186, CVE-2014-7169, CVE-2014-6278, CVE-2014-6277, CVE-2014-6271)\|\|cpcalendars.stdavids-media.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.stdavids-media.com"] [uri "/cgi-bin/status"] [unique_id "ZtdlFo3kvA_GvP9LTLheXwAAABE"], referer: () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-08-22 10:21:51 (1 year ago)	104.239.78.200 - - [22/Aug/2024:12:21:51 +0200] "GET /spring-mvc-showcase/resources/%255c%255c..%255 ... show more 104.239.78.200 - - [22/Aug/2024:12:21:51 +0200] "GET /spring-mvc-showcase/resources/%255c%255c..%255c/..%255c/..%255c/..%255c/..%255c/..%255c/..%255c/..%255c/..%255c/windows/win.ini HTTP/1.1" 403 5370 "http://solgar.be/spring-mvc-showcase/resources/%255c%255c..%255c/..%255c/..%255c/..%255c/..%255c/..%255c/..%255c/..%255c/..%255c/windows/win.ini" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" 4678 ... show less	Hacking
🇺🇸 TPI-Abuse	2024-08-01 01:00:52 (1 year ago)	(mod_security) mod_security (id:226830) triggered by 104.239.78.200 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:226830) triggered by 104.239.78.200 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 31 21:00:44.066215 2024] [security2:error] [pid 27443:tid 27456] [client 104.239.78.200:45849] [client 104.239.78.200] ModSecurity: Access denied with code 403 (phase 1). Operator GE matched 1 at ARGS_GET. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/27_Apps_WPPlugin.conf"] [line "6392"] [id "226830"] [rev "2"] [msg "COMODO WAF: Open redirect vulnerability in the Redirect function in the StageShow plugin before 5.0.9 for WordPress (CVE-2015-5461)\|\|ftp.kettlehill.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "ftp.kettlehill.com"] [uri "/wp-content/plugins/stageshow/stageshow_redirect.php"] [unique_id "ZqrePHtRnOTCPKDh0US1pgAAAgo"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ps-center	2024-07-16 00:58:35 (2 years ago)	SS1: Web Attack GET /wp-admin/admin-ajax.php?action=likebtn_prx&likebtn_q=aHR0cDovL2xpa2VidG4uY29tLm ... show more SS1: Web Attack GET /wp-admin/admin-ajax.php?action=likebtn_prx&likebtn_q=aHR0cDovL2xpa2VidG4uY29tLm9hc3QubWU=\" show less	Web Spam Hacking Bad Web Bot Web App Attack
🇪🇸 10dencehispahard SL	2024-06-27 13:00:45 (2 years ago)	Unauthorized login attempts [ accesslogs]	Brute-Force
🇺🇸 TPI-Abuse	2024-05-21 23:18:02 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 104.239.78.200 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.239.78.200 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 21 19:17:25.703652 2024] [security2:error] [pid 5134:tid 47525660251904] [client 104.239.78.200:49515] [client 104.239.78.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.kettlehill.net"] [uri "/wp-admin/admin-ajax.php"] [unique_id "Zk0rhe5wABVJ2cMnYaTFtgAAAE0"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 10dencehispahard SL	2024-05-08 07:00:43 (2 years ago)	Unauthorized login attempts []	Brute-Force
🇪🇸 10dencehispahard SL	2024-05-08 06:17:30 (2 years ago)	Web Attack	DDoS Attack Brute-Force Web App Attack
🇪🇸 10dencehispahard SL	2024-03-27 07:00:25 (2 years ago)	Unauthorized login attempts [ BI-16635]	Brute-Force
🇪🇸 10dencehispahard SL	2024-03-27 06:53:56 (2 years ago)	WP scan	Web App Attack
Anonymous	2024-02-28 07:01:51 (2 years ago)	Common attack or app scan event detected and blocked	Port Scan Hacking Web App Attack
🇺🇸 TPI-Abuse	2024-02-27 23:19:22 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 104.239.78.200 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.239.78.200 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 27 18:16:23.719048 2024] [security2:error] [pid 5379:tid 47108597356288] [client 104.239.78.200:54245] [client 104.239.78.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/Web.config" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kettlehill.com"] [uri "/web.config.zip"] [unique_id "Zd5tR3peprykeOeYz0XahwAAAVI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-01-26 12:33:30 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 104.239.78.200 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 104.239.78.200 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 26 07:33:21.197086 2024] [security2:error] [pid 16241] [client 104.239.78.200:40259] [client 104.239.78.200] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|mail.stdavids-media.com\|F\|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.stdavids-media.com"] [uri "/ssl/localhost.key"] [unique_id "ZbOmkeS44MtujWEbzsXITgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇴 200.35.54.73

🇳🇱 176.65.149.236

🇨🇳 175.43.184.200

🇩🇪 69.5.169.98

🇳🇱 45.148.10.141

🇧🇷 205.210.31.252

🇧🇷 205.210.31.183

🇬🇧 194.50.235.131

🇨🇳 111.160.133.62

🇫🇷 82.66.74.72

🇫🇷 51.77.221.142

🇻🇳 27.79.47.131

🇨🇳 218.25.89.208

🇬🇧 217.146.80.105

🇧🇷 189.41.245.196

🇮🇳 182.75.215.245

🇦🇷 181.228.172.219

🇳🇱 176.65.149.67

🇵🇭 161.49.221.215

🇺🇸 100.59.196.196