JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.239.17.41

104.239.17.41 was found in our database!

This IP was reported 35 times. Confidence of Abuse is 0%: ?

ISP	FASTPLANET LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Domain Name	fastplanet.com
Country	🇮🇹 Italy
City	Figino, Lombardy

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.239.17.41

Whois 104.239.17.41

IP Abuse Reports for 104.239.17.41:

This IP address has been reported a total of 35 times from 7 distinct sources. 104.239.17.41 was first reported on October 30th 2023, and the most recent report was 6 months ago.

Old Reports: The most recent abuse report for this IP address is from 6 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2025-11-11 21:17:13 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.239.17.41 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.239.17.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 11 16:17:04.289210 2025] [security2:error] [pid 5787:tid 5787] [client 104.239.17.41:57165] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autoconfig.nbcnewsradio.com"] [uri "/wp-config.php.dist"] [unique_id "aROn0Cl_VilDpIMyt6jP3wAAACA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-07-26 23:24:22 (10 months ago)	(mod_security) mod_security (id:221260) triggered by 104.239.17.41 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:221260) triggered by 104.239.17.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 26 19:24:08.298006 2025] [security2:error] [pid 26228:tid 26534] [client 104.239.17.41:42041] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^(?:\\\\'\\\\w+?=)?\\\\(\\\\)\\\\s{" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "77"] [id "221260"] [rev "3"] [msg "COMODO WAF: Shellshock Command Injection Vulnerabilities in GNU Bash through 4.3 bash43-026 (CVE-2014-7187, CVE-2014-7186, CVE-2014-7169, CVE-2014-6278, CVE-2014-6277, CVE-2014-6271)\|\|whm.staging.kettlehill.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whm.staging.kettlehill.com"] [uri "/cgi-bin/status"] [unique_id "aIVjmFo7USZqEn78mkOvLgAAAQ8"], referer: () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-05-30 00:01:05 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 104.239.17.41 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.239.17.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 29 20:01:01.969340 2025] [security2:error] [pid 3803923:tid 3803923] [client 104.239.17.41:45999] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whm.farmers123.com"] [uri "/img../.git/config"] [unique_id "aDj1PbXc-tBk9XHcfFt4FgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-03-10 06:14:02 (1 year ago)	Illegal actions on webapp	Hacking Web App Attack
Anonymous	2025-03-06 23:01:48 (1 year ago)	Illegal actions on webapp	Hacking Web App Attack
Anonymous	2025-03-04 04:54:36 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot
Anonymous	2025-02-25 00:30:23 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot
Anonymous	2025-02-19 14:22:52 (1 year ago)	Illegal actions on webapp	Hacking Web App Attack
Anonymous	2025-02-17 05:01:02 (1 year ago)	ignores robots.txt	Bad Web Bot
Anonymous	2025-02-15 13:37:02 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot
Anonymous	2025-02-07 12:22:58 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot
Anonymous	2025-01-31 03:05:49 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot
Anonymous	2025-01-25 01:20:07 (1 year ago)	\| SQL injection attempt.	Hacking SQL Injection Web App Attack
Anonymous	2025-01-23 16:53:38 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot
Anonymous	2025-01-03 04:21:51 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.150.66

🇸🇬 136.110.13.135

🇺🇸 172.210.9.231

🇷🇴 80.94.92.184

🇧🇷 20.226.119.201

🇦🇪 20.203.59.187

🇸🇬 20.157.117.15

🇬🇧 217.154.42.110

🇰🇷 211.223.107.86

🇧🇷 179.255.44.41

🇷🇺 176.120.22.147

🇨🇳 113.27.59.41

🇷🇺 46.17.248.205

🇪🇪 45.12.28.218

🇲🇾 43.252.215.241

🇺🇸 35.243.146.58

🇩🇪 217.154.173.63

🇬🇧 217.154.45.93

🇧🇷 200.4.125.253

🇻🇳 165.154.105.128