JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 201.148.104.239

201.148.104.239 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 74%: ?

74%

ISP	HOSTING.CL
Usage Type	Data Center/Web Hosting/Transit
ASN	AS265839
Domain Name	hosting.cl
Country	🇨🇱 Chile
City	Santiago, Santiago Metropolitan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 201.148.104.239

Whois 201.148.104.239

IP Abuse Reports for 201.148.104.239:

This IP address has been reported a total of 14 times from 13 distinct sources. 201.148.104.239 was first reported on September 7th 2026, and the most recent report was 43 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xxkodedxx	2026-10-17 03:04:34 (43 minutes ago)	[Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost) Trigger: 4× edge-block in 10 ... show more [Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost) Trigger: 4× edge-block in 10m window. Origin: CL / AS265839 HOSTING.CL Active: 03:03:53→03:04:01 UTC Volume: 4 HTTP req Probed: /human.aspx, / Status mix: 444×4 Vhost fishing: 67.217.240.72 UA: "Mozilla/5.0 (X11; Linux i686; rv:1.9.6.20) Gecko/ Firefox/3.6.12" Auto-banned 30d. zorvexus-banner. show less	Bad Web Bot Web App Attack
🇺🇸 donarev419	2026-10-17 03:03:18 (44 minutes ago)	Connection to port 443 with data transfer. Data preview: �	Port Scan Hacking
🇺🇸 Starburst SysOp Team	2026-10-17 02:40:15 (1 hour ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-srv1)	Hacking Bad Web Bot
🇫🇮 payincog	2026-10-17 02:00:24 (1 hour ago)	Date: Oct 17 04:14:20 2026 EAT \| Reported IP: 201.148.104.239 mod_security \| id: 920350 \| CL/pay.zag ... show more Date: Oct 17 04:14:20 2026 EAT \| Reported IP: 201.148.104.239 mod_security \| id: 920350 \| CL/pay.zagaavipato.com/- \| Connections: 1 \| Blocked: Permanent Block: [LF_MODSEC] \| Logs: ; Host header is a numeric IP address; Host header is a numeric IP address show less	SQL Injection Brute-Force Bad Web Bot
Anonymous	2026-10-17 01:59:41 (1 hour ago)	tls scan	Port Scan
🇫🇷 Bensay	2026-10-16 22:34:04 (5 hours ago)	Repeated suspicious HTTP service scan against a blocked web sinkhole; threshold=3 events/10m; result ... show more Repeated suspicious HTTP service scan against a blocked web sinkhole; threshold=3 events/10m; result=blocked; user-agent=Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:84.0) Gecko/20100101 Firefox/84.0 \| Mozilla/5.0 (Windows NT 6.2; Win64; x64; rv:109.0) Gecko/20100101 Firefox/112.0 show less	Port Scan
🇫🇷 ak47suk1.my	2026-10-16 22:33:39 (5 hours ago)	2026-10-16T22:33:32.143288xvmon sshd[296088]: banner exchange: Connection from 201.148.104.239 port ... show more 2026-10-16T22:33:32.143288xvmon sshd[296088]: banner exchange: Connection from 201.148.104.239 port 55625: invalid format 2026-10-16T22:33:33.607941xvmon sshd[296089]: banner exchange: Connection from 201.148.104.239 port 55971: invalid format 2026-10-16T22:33:39.141190xvmon sshd[296090]: banner exchange: Connection from 201.148.104.239 port 56950: invalid format ... show less	Brute-Force SSH
Anonymous	2026-10-16 15:15:52 (12 hours ago)	PAD: ModSec_Scanner! detected	Bad Web Bot
🇺🇸 ne1for23	2026-10-16 13:23:25 (14 hours ago)	Attempt to access invalid virtual host name (###.###.###.###). Typically used to access "internal" ... show more Attempt to access invalid virtual host name (###.###.###.###). Typically used to access "internal" resources improperly exposed externally and "protected" only by a lack of external DNS resolution. 201.148.104.239 - - [16/Oct/2026:13:23:25 +0000] "GET / HTTP/1.1" 403 153 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/608.2.11 (KHTML, like Gecko) Version/13 Safari/608.2.11" "-" show less	Hacking
Anonymous	2026-10-16 12:35:58 (15 hours ago)	201.148.104.239 - visio.sliver85.eu - [16/Oct/2026:14:35:51 +0200] "GET / HTTP/1.1" 444 "Mozilla/5.0 ... show more 201.148.104.239 - visio.sliver85.eu - [16/Oct/2026:14:35:51 +0200] "GET / HTTP/1.1" 444 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.3 Safari/605.1.15" 201.148.104.239 - visio.sliver85.eu - [16/Oct/2026:14:35:52 +0200] "GET / HTTP/1.1" 444 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.3 Safari/605.1.15" 201.148.104.239 - visio.sliver85.eu - [16/Oct/2026:14:35:58 +0200] "GET /human.aspx HTTP/1.1" 444 "Mozilla/5.0 (Macintosh, Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.1 Safari/605.1.15" ... show less	Brute-Force Web App Attack
🇳🇱 knock	2026-10-16 12:34:57 (15 hours ago)	Knock-Knock honeypot brute-force: HTTP (2 total hits)	Web App Attack
🇳🇱 hxsain	2026-10-16 12:34:44 (15 hours ago)	Blocked by UFW [443/tcp] \| SPT: 49817 \| TTL: 108 \| LEN: 52 \| TOS: 0x0A • Reported by: github.com/sef ... show more Blocked by UFW [443/tcp] \| SPT: 49817 \| TTL: 108 \| LEN: 52 \| TOS: 0x0A • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 Kejult	2026-10-15 18:46:56 (1 day ago)	Honeypot Finding: active TCP application payload captured by Honeytrap; 9 payload-bearing connection ... show more Honeypot Finding: active TCP application payload captured by Honeytrap; 9 payload-bearing connection/event(s), 1961 payload byte(s) total, maximum payload 219 byte(s). Target port(s): 9401. show less	Port Scan Hacking
🇺🇸 donarev419	2026-09-07 01:05:26 (1 month ago)	Connection to port 9401 with data transfer. Data preview:	Port Scan Hacking

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 210.245.30.140

🇮🇩 182.253.221.210

🇿🇦 41.181.156.205

🇧🇪 207.175.236.246

🇷🇺 188.168.252.232

🇩🇪 167.94.145.31

🇺🇸 152.32.148.140

🇳🇱 109.160.32.36

🇳🇱 77.239.124.77

🇺🇸 66.132.172.180

🇫🇷 62.210.142.164

🇺🇸 45.41.144.26

🇺🇸 216.180.246.17

🇮🇳 157.20.215.123

🇨🇳 124.74.97.18

🇭🇰 118.193.36.63

🇫🇷 91.231.89.239

🇵🇸 82.102.235.216

🇺🇸 64.62.156.66

🇨🇦 35.203.22.103