JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.239.39.75

104.239.39.75 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 0%: ?

ISP	FASTPLANET LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Domain Name	fastplanet.com
Country	🇨🇦 Canada
City	Montreal, Quebec

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.239.39.75

Whois 104.239.39.75

IP Abuse Reports for 104.239.39.75:

This IP address has been reported a total of 21 times from 8 distinct sources. 104.239.39.75 was first reported on October 29th 2023, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Roderic	2026-05-20 17:56:05 (1 month ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted])	Bad Web Bot
🇺🇸 TPI-Abuse	2026-01-17 00:24:13 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 104.239.39.75 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.239.39.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 16 19:23:37.979868 2026] [security2:error] [pid 5944:tid 5944] [client 104.239.39.75:38207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ftp.nbcnewsradio.com"] [uri "/.env.backup"] [unique_id "aWrWiebIthP33TtAw_dFwAAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 17:57:35 (5 months ago)	(mod_security) mod_security (id:243930) triggered by 104.239.39.75 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:243930) triggered by 104.239.39.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 12:55:49.181079 2025] [security2:error] [pid 30284:tid 30618] [client 104.239.39.75:42233] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?:\\\\w+\\\\/[\\\\w\\\\-\\\\.]+)(?:;(?:charset=[\\\\w\\\\-]{1,18}\|boundary=[\\\\w\\\\-]+)?)?$" against "REQUEST_HEADERS:Content-Type" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6743"] [id "243930"] [rev "2"] [msg "COMODO WAF: Remote code execution in Apache Struts versions 2.3.31 - 2.3.5 and 2.5 - 2.5.10 (CVE-2017-5638)\|\|www.kettlehill.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.kettlehill.net"] [uri "/"] [unique_id "aVLApTko7uys3oTtjZtrRQAAAME"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-13 11:36:04 (7 months ago)	(mod_security) mod_security (id:211190) triggered by 104.239.39.75 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:211190) triggered by 104.239.39.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 13 06:35:57.435948 2025] [security2:error] [pid 24739:tid 24739] [client 104.239.39.75:34235] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt\|\|ftp.nbcnewsradio.com\|F\|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /pages/systemcall.php?command=cat%20/etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ftp.nbcnewsradio.com"] [uri "/pages/systemcall.php"] [unique_id "aRXCnRF2uWaSGwb1G1sQigAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-07-27 01:47:32 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 104.239.39.75 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.239.39.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 26 21:47:30.260575 2025] [security2:error] [pid 729657:tid 729713] [client 104.239.39.75:36789] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ftp.kettlehill.net"] [uri "/media../.git/config"] [unique_id "aIWFMhUVDjlJfvQpjEJYvAAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2025-06-03 18:10:07 (1 year ago)	Detected attack by Imunify360	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-05-30 03:04:41 (1 year ago)	(mod_security) mod_security (id:221260) triggered by 104.239.39.75 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:221260) triggered by 104.239.39.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 29 23:04:37.717827 2025] [security2:error] [pid 4005229:tid 4005229] [client 104.239.39.75:37945] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^(?:\\\\'\\\\w+?=)?\\\$\\\$\\\\s{" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "77"] [id "221260"] [rev "3"] [msg "COMODO WAF: Shellshock Command Injection Vulnerabilities in GNU Bash through 4.3 bash43-026 (CVE-2014-7187, CVE-2014-7186, CVE-2014-7169, CVE-2014-6278, CVE-2014-6277, CVE-2014-6271)\|\|whm.farmers123.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whm.farmers123.com"] [uri "/cgi-bin/status"] [unique_id "aDkgRUGim4htJYzTeg40IgAAAAU"], referer: () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-05-04 09:16:39 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 104.239.39.75 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 104.239.39.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 04 05:16:34.808580 2025] [security2:error] [pid 3801274:tid 3801274] [client 104.239.39.75:47229] [client 104.239.39.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.nbcnewsradio.com"] [uri "/.env"] [unique_id "aBcwch5_FIQgTMxnaIqiTAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-01-15 08:30:22 (1 year ago)	\| Common web attack.	Hacking SQL Injection Web App Attack
Anonymous	2025-01-03 08:49:47 (1 year ago)	Malicious activity detected	Hacking Web App Attack
🇺🇸 nowyouknow	2024-10-02 20:46:18 (1 year ago)	Malicious Traffic/Form Submission	Phishing Web Spam
🇺🇸 nowyouknow	2024-09-28 17:23:23 (1 year ago)	(From [email protected]) Hello there, My name is Shahar from Rotev Marketing. I'm contacting y ... show more (From [email protected]) Hello there, My name is Shahar from Rotev Marketing. I'm contacting you today about Webflow and its potential to help your business thrive online. Webflow lets you create high-quality sites without coding through drag and drop functionality. Yet it still offers the power and customization that pros demand. Our team has extensive experience optimising Webflow sites to increase conversions. I'd like to share examples and discuss strategies for your specific goals. If you'd find value in a 15 minute consultation, reply "Yes" and we'll set it up. I'm confident Webflow can take your online presence to new heights. Best regards, Shahar Zohar [email protected] Whatsapp: https://wa.me/17722103292 show less	Phishing Web Spam
🇺🇸 nowyouknow	2024-09-28 14:25:23 (1 year ago)	(From [email protected]) Hi, Is it difficult for you to make time to write ar ... show more (From [email protected]) Hi, Is it difficult for you to make time to write articles? Get help from a skilled SEO writer! I handle the research and deliver professionally written SEO content to help boost your rankings and enhance your visitor interaction. Looking for fresh content for your website or to enhance your content marketing, take a look at our latest content offers here: https://bit.ly/writingbyben Ben Contact me directly at [email protected] or on Skype: behinger19 with any questions. If you don't want to get an email from me on this matter again, please reply back with the text: "No, thank you" show less	Phishing Web Spam
🇺🇸 nowyouknow	2024-09-27 10:02:54 (1 year ago)	(From [email protected]) Hey there, My name is Jonathan, and I couldn’t help but admire your ... show more (From [email protected]) Hey there, My name is Jonathan, and I couldn’t help but admire your business and the amazing work you’re doing. I wanted to contact you with an exciting opportunity: a complimentary article on Benzinga! With over 14M+ monthly users, it’s an excellent opportunity to increase your brand’s reputation. And for a small fee of $79, we will be publishing affiliates of FOX, CBS, and ABC along with 300 more outlets. We could also get your article featured on sites like Business Insider, Yahoo Finance, and Market Watch—imagine the exposure! If you’re looking in getting your complimentary Benzinga article, just respond by typing "YES, I would like to get published in Benzinga"! I’d be excited to support you get the recognition you should have. {{Best\|Regards\|Best regards\|Kind regards\|Warm regards\|Cheers\|Thanks}, Jonathan PR Boost If you don't want to get an email from me on this matter again, please reply back with the text: "No, thank you" show less	Phishing Web Spam
🇺🇸 nowyouknow	2024-09-27 06:31:05 (1 year ago)	(From [email protected]) Hi there, My name is Shahar and I am the co-founder of Rotev Marketin ... show more (From [email protected]) Hi there, My name is Shahar and I am the co-founder of Rotev Marketing. I'm reaching out because I think Webflow could help take your website to the next level. Webflow allows you to create professional, high-converting websites without any coding knowledge. Many leading brands such as Dropbox, Jasper AI, and Michael Kors have upgraded to Webflow. I’d like to show you examples of websites we’ve built and give you a 15 minute consultation for free on how you can improve your site. Reply "Yes" if you’re interested in learning more. Best regards, Shahar Zohar [email protected] Whatsapp: https://wa.me/17722103292 show less	Phishing Web Spam

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 201.103.159.231

🇲🇾 195.86.192.59

🇸🇬 188.166.246.68

🇯🇵 152.32.201.80

🇰🇷 125.137.115.145

🇰🇷 123.58.200.21

🇨🇳 106.63.26.28

🇺🇸 65.110.40.194

🇳🇱 45.128.199.84

🇳🇱 45.8.17.148

🇺🇸 38.148.249.2

🇰🇷 211.228.218.47

🇬🇧 194.50.235.144

🇧🇷 179.184.241.69

🇩🇪 165.245.211.172

🇸🇬 152.42.252.134

🇺🇸 107.150.102.89

🇨🇳 106.63.26.157

🇳🇱 45.128.199.235

🇳🇱 45.128.199.98