JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.239.40.130

104.239.40.130 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 3%: ?

ISP	FASTPLANET LTD
Usage Type	Fixed Line ISP
ASN	AS202044
Domain Name	fastplanet.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.239.40.130

Whois 104.239.40.130

IP Abuse Reports for 104.239.40.130:

This IP address has been reported a total of 10 times from 6 distinct sources. 104.239.40.130 was first reported on October 30th 2023, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-05-28 09:20:03 (1 week ago)	\| A web attack returned code 200 (success).	Web App Attack Hacking SQL Injection
🇮🇹 madaello	2026-03-06 16:11:02 (2 months ago)	[Fri Mar 06 17:11:00.951829 2026] [ssl:error] [pid 2209396:tid 2209396] [client 104.239.40.130:38781 ... show more [Fri Mar 06 17:11:00.951829 2026] [ssl:error] [pid 2209396:tid 2209396] [client 104.239.40.130:38781] AH02032: Hostname www.imperatrice.to.it provided via SNI and hostname 93.55.83.202 provided via HTTP have no compatible SSL setup for policy 'secure' ... show less	Brute-Force
🇺🇸 TPI-Abuse	2026-02-01 11:19:59 (4 months ago)	(mod_security) mod_security (id:212750) triggered by 104.239.40.130 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:212750) triggered by 104.239.40.130 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 01 06:19:44.717262 2026] [security2:error] [pid 16722:tid 16862] [client 104.239.40.130:33065] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\bon(?:abort\|blur\|change\|click\|dblclick\|dragdrop\|error\|focus\|keydown\|keypress\|keyup\|load\|mouse(?:down\|move\|out\|over\|up)\|move\|readystatechange\|reset\|resize\|select\|submit\|unload)\\\\b[^a-zA-Z0-9_]{0,}?=" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "69"] [id "212750"] [rev "3"] [msg "COMODO WAF: XSS Attack Detected\|\|ftp.kettlehill.com\|F\|2"] [data "Matched Data: onerror= found within REQUEST_URI: /resumes/?s=\\x22><img src=x onerror=alert(document.domain)>"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "ftp.kettlehill.com"] [uri "/resumes/"] [unique_id "aX820MyMbG6v0xSDvGJPSwAAAsI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-12 17:04:28 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 104.239.40.130 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.239.40.130 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 12 12:04:23.829955 2025] [security2:error] [pid 10752:tid 10752] [client 104.239.40.130:59309] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ftp.nbcnewsradio.com"] [uri "/sample.htaccess"] [unique_id "aRS-FzADG3wLZP4Ly4wdIwAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-01 14:33:06 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 104.239.40.130 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 104.239.40.130 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 01 10:32:57.043340 2025] [security2:error] [pid 8590:tid 8629] [client 104.239.40.130:60321] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.kettlehill.net"] [uri "/.env.prod"] [unique_id "aQYaGXl6EaMmM6sQysSO6wAAANU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 SCHAPPY	2025-07-27 05:00:02 (10 months ago)	IP was involved in L7 DDoS attack.	DDoS Attack
Anonymous	2025-02-25 08:14:20 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 ChamberofCommerce.com	2023-11-06 02:25:00 (2 years ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226 show less	Bad Web Bot
🇺🇸 ChamberofCommerce.com	2023-11-02 05:58:40 (2 years ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226 show less	Bad Web Bot
🇺🇸 ChamberofCommerce.com	2023-10-30 23:38:19 (2 years ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226 show less	Bad Web Bot

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 117.34.66.245

🇬🇧 86.105.242.212

🇻🇳 14.231.216.159

🇰🇷 14.37.206.136

🇬🇧 198.178.235.38

🇺🇸 170.106.167.142

🇸🇬 143.198.221.127

🇺🇸 104.28.233.73

🇮🇩 103.155.221.91

🇷🇺 91.215.85.193

🇸🇳 41.208.147.131

🇺🇸 40.90.234.147

🇨🇳 220.180.185.18

🇳🇱 185.113.10.178

🇨🇿 185.91.116.105

🇺🇸 184.168.31.238

🇹🇼 180.176.180.160

🇸🇮 176.65.134.16

🇺🇸 173.255.223.115

🇨🇳 163.53.168.23