AbuseIPDB » 104.247.184.175

104.247.184.175 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 44%: ?

44%

ISP	NG Bilgi Teknoloji Sanayi ve Ticaret Anonim Sirketi
Usage Type	Data Center/Web Hosting/Transit
Hostname(s)	104.247.184.175.marsdatacenter.net
Domain Name	ngtek.net
Country	Turkiye
City	Istanbul, Istanbul

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 104.247.184.175

Whois 104.247.184.175

IP Abuse Reports for 104.247.184.175:

This IP address has been reported a total of 22 times from 20 distinct sources. 104.247.184.175 was first reported on July 16th 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
hermawan	2024-09-23 23:17:25 (3 weeks ago)	[Mon Sep 23 09:42:05.109929 2024] [security2:error] [pid 674631:tid 126221404866240] [client 104.247 ... show more[Mon Sep 23 09:42:05.109929 2024] [security2:error] [pid 674631:tid 126221404866240] [client 104.247.184.175:51932] ModSecurity: Access denied with code 403 (phase 1). Match of "pm AppleWebKit Android" against "REQUEST_HEADERS:User-Agent" required. [file "/etc/modsecurity/coreruleset-4.5.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "2466"] [id "920300"] [msg "Request Missing an Accept Header"] [data "Matched Data: connection found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:81.0) Gecko/20100101 Firefox/81.0 request_line = GET /CMSModules/MediaLibrary/CMSPages/MultiFileUploader.ashx HTTP/1.1"] [severity "NOTICE"] [ver "OWASP_CRS/4.5.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/3"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "staklim-malang.info"] [uri "/CMSModules/MediaLibrary/CMSPages/MultiFileUploader.ashx"] [unique_id "ZvDVfZgxa1z8MFnj ... show less	Hacking Web App Attack
charmicat	2024-09-23 01:11:23 (3 weeks ago)	AUTOMATED REPORT - suspicious request from 104.247.184.175: [Mon, 23 Sep 2024 01:11:23 +0000] GET /C ... show moreAUTOMATED REPORT - suspicious request from 104.247.184.175: [Mon, 23 Sep 2024 01:11:23 +0000] GET /CMSModules/MediaLibrary/CMSPages/MultiFileUploader.ashx HTTP/1.1 Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:81.0) Gecko/20100101 Firefox/81.0 show less	Web App Attack
Anonymous	2024-09-22 23:06:37 (3 weeks ago)	104.247.184.175 - - [23/Sep/2024:01:06:36 +0200] "GET /CMSModules/MediaLibrary/CMSPages/MultiFileUpl ... show more104.247.184.175 - - [23/Sep/2024:01:06:36 +0200] "GET /CMSModules/MediaLibrary/CMSPages/MultiFileUploader.ashx HTTP/1.1" 403 4980 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:81.0) Gecko/20100101 Firefox/81.0" ... show less	Web App Attack
Anonymous	2024-09-22 15:52:30 (3 weeks ago)	Action: Block, Reason: DDOS attack detected	DDoS Attack
mnsf	2024-09-17 01:01:04 (3 weeks ago)	Too many Status 40X (11)	Brute-Force Web App Attack
Anonymous	2024-09-17 00:55:12 (3 weeks ago)	SuspiciousC Activity detected by FMBAD System 2024-09-17 03:55:12	Hacking Bad Web Bot Web App Attack
Jim Keir	2024-09-16 14:57:52 (4 weeks ago)	2024-09-16 14:57:51 104.247.184.175 File scanning, blocking 104.247.184.175 for 5 minutes	Web App Attack
IRISIO	2024-09-16 08:16:25 (4 weeks ago)	scans/SQL injection/spam posts : 1 queries	SQL Injection Web App Attack
CrystalMaker	2024-09-15 13:43:36 (4 weeks ago)	Vulnerability scan - GET /xampp	Hacking
Carsten	2024-09-14 11:52:05 (1 month ago)	GET [xampp]	Port Scan
blizzard	2024-09-14 11:49:20 (1 month ago)	Unauthorized HTTP/1.1 request, ignoring robots.txt: (ASN: 57152) (Network: TEKNET TEKNET VERI MERKEZ ... show moreUnauthorized HTTP/1.1 request, ignoring robots.txt: (ASN: 57152) (Network: TEKNET TEKNET VERI MERKEZI HIZMETLERI A.S.) (Method: GET) (Path: /xampp) (Query: ) (User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:81.0) Gecko/20100101 Firefox/81.0) show less	Port Scan Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
mw	2024-09-13 04:59:27 (1 month ago)	104.247.184.175 - - [12/Sep/2024:23:59:24 -0500] "GET /wp-content/plugins/ultimate-member/readme.txt ... show more104.247.184.175 - - [12/Sep/2024:23:59:24 -0500] "GET /wp-content/plugins/ultimate-member/readme.txt HTTP/1.1" 404 36323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:81.0) Gecko/20100101 Firefox/81.0" 104.247.184.175 - - [12/Sep/2024:23:59:24 -0500] "GET /wp-content/plugins/ultimate-member/readme.txt HTTP/1.1" 404 36323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:81.0) Gecko/20100101 Firefox/81.0" 104.247.184.175 - - [12/Sep/2024:23:59:25 -0500] "GET /wp-content/plugins/ultimate-member/readme.txt HTTP/1.1" 404 36321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:81.0) Gecko/20100101 Firefox/81.0" 104.247.184.175 - - [12/Sep/2024:23:59:26 -0500] "GET /wp-content/plugins/ultimate-member/readme.txt HTTP/1.1" 404 36322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:81.0) Gecko/20100101 Firefox/81.0" 104.247.184.175 - - [12/Sep/2024:23:59:27 -0500] "GET /wp-content/plugins/ultimate-member/readme.txt HTTP/1.1" 404 36322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:81.0) ... show less	Bad Web Bot Web App Attack
Anonymous	2024-09-13 04:51:54 (1 month ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
silisoftware.com	2024-09-11 19:47:05 (1 month ago)	/CMSModules/MediaLibrary/CMSPages/MultiFileUploader.ashx	Web App Attack
theEngineer	2024-07-23 07:42:33 (2 months ago)	[08:42:31] 4: Exploit attempt against non-existent file - /admin/fckeditor/editor/filemanager/browse ... show more[08:42:31] 4: Exploit attempt against non-existent file - /admin/fckeditor/editor/filemanager/browser/default/browser.html show less	Hacking Web App Attack