JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.239.40.159

104.239.40.159 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 0%: ?

ISP	FASTPLANET LTD
Usage Type	Fixed Line ISP
ASN	AS202044
Domain Name	fastplanet.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.239.40.159

Whois 104.239.40.159

IP Abuse Reports for 104.239.40.159:

This IP address has been reported a total of 14 times from 5 distinct sources. 104.239.40.159 was first reported on July 13th 2024, and the most recent report was 4 months ago.

Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-01-17 03:18:02 (4 months ago)	Malicious activity detected	Hacking Web App Attack
Anonymous	2025-02-13 15:33:01 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 oncord	2024-08-07 22:14:44 (1 year ago)	Form spam	Web Spam
Anonymous	2024-08-07 04:56:02 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-08-03 12:46:57 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 TPI-Abuse	2024-07-25 03:13:22 (1 year ago)	(mod_security) mod_security (id:217280) triggered by 104.239.40.159 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:217280) triggered by 104.239.40.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 24 23:13:15.500879 2024] [security2:error] [pid 3576336:tid 3576336] [client 104.239.40.159:38089] [client 104.239.40.159] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\n\|\\\\r)+(?:get\|post\|head\|options\|connect\|put\|delete\|trace\|propfind\|propatch\|mkcol\|copy\|move\|lock\|unlock)\\\\s+" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "137"] [id "217280"] [rev "6"] [msg "COMODO WAF: HTTP Request Smuggling Attack\|\|jsvnetwork.com\|F\|2"] [data "Matched Data: post found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "jsvnetwork.com"] [uri "/contact.php"] [unique_id "ZqHCy9WqMvPe8xa05yoFSQAAAAc"], referer: http://jsvnetwork.com/contact.html show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nowyouknow	2024-07-21 03:53:39 (1 year ago)	(From [email protected]) We are excited to announce a special offer for our esteemed customers! F ... show more (From [email protected]) We are excited to announce a special offer for our esteemed customers! For one week only, buy a 30-day supply of Freedom, Cleanse, Restore (FCR), and enjoy a second kit for 50% off the regular price. Enter coupon code FCRBG50 at checkout at https://bit.ly/3W2Y1Np to benefit from this incredible deal. Don't wait, this offer expires on Saturday, July 20th! FCR is our leading gut health solution, created to cleanse and restore your digestive system effectively. With a unique blend of potent ingredients, FCR helps rid your body of harmful toxins and parasites, fostering a healthy gut environment. This leads to enhanced digestion, increased energy levels, and enhanced well-being. Don't miss out on this amazing opportunity to boost your gut health. Order now and experience the life-changing benefits of FCR! Best regards, PCI WELNESS Unsubscribe by filling this form: https://bit.ly/pciunsubscribe 65 Hampton Court Rd, Southwood, NA, USA, Ba6 8zp show less	Phishing Web Spam
Anonymous	2024-07-19 00:25:58 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 oncord	2024-07-18 08:28:24 (1 year ago)	Form spam	Web Spam
🇺🇸 nowyouknow	2024-07-18 03:15:30 (1 year ago)	(From [email protected]) Can't make it to the gym? We've got you covered! Developed by Neu ... show more (From [email protected]) Can't make it to the gym? We've got you covered! Developed by Neuro Force One, our 8-week program is crafted for your busy schedule, maximizing your workouts at home with minimal equipment. Boost your strength, power, mobility, endurance, and more, all from the comfort of your home. With a nutrition plan from professional nutritionists, this scientifically proven program helps you achieve the best version of yourself. Incorporate fitness into your routine, no gym required! My name is Tia S. Please visit: https://bit.ly/3xwHxFj Or reply back to [email protected] You can unsubscribe by filling the form: https://bit.ly/plsunsubscribeme 31 Golf Road, Swindon, NA, Great Britain, Dy3 6ub show less	Phishing Web Spam
🇺🇸 nowyouknow	2024-07-16 22:55:47 (1 year ago)	(From [email protected]) As you've received this message, we can send your message to millions ... show more (From [email protected]) As you've received this message, we can send your message to millions of email inboxes successfully. Unleash the power of bulk contact form submissions with our solutions. Reach millions of website owners daily and witness immediate results. We can submit up to 1 million messages per day, driving: + Targeted Visitors + Qualified Leads + New Clients + Increased Purchases Make use of our service now! Starting from $9. -- Check out: https://bit.ly/blastcforms If you want to remove yourself from newsletter list and all future mails, please submit your website address at https://bit.ly/listunsub Heiligengeistbrucke 11, Muhr, BY, Germany, 91735 show less	Phishing Web Spam
Anonymous	2024-07-16 02:00:29 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 TPI-Abuse	2024-07-14 18:59:55 (1 year ago)	(mod_security) mod_security (id:217280) triggered by 104.239.40.159 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:217280) triggered by 104.239.40.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 14 14:59:51.790401 2024] [security2:error] [pid 30621] [client 104.239.40.159:40275] [client 104.239.40.159] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\n\|\\\\r)+(?:get\|post\|head\|options\|connect\|put\|delete\|trace\|propfind\|propatch\|mkcol\|copy\|move\|lock\|unlock)\\\\s+" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "137"] [id "217280"] [rev "6"] [msg "COMODO WAF: HTTP Request Smuggling Attack\|\|jamesallenwalker.com\|F\|2"] [data "Matched Data: post found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "jamesallenwalker.com"] [uri "/contact.html"] [unique_id "ZpQgJyDQCawSpq2XZDFZzQAAAAw"], referer: http://jamesallenwalker.com/contact.html show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 oncord	2024-07-13 15:49:26 (1 year ago)	Form spam	Web Spam

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 207.175.15.50

🇧🇷 205.210.31.193

🇷🇺 185.117.153.20

🇩🇪 161.35.217.4

🇺🇸 146.19.49.151

🇲🇲 103.57.204.7

🇳🇱 81.19.216.124

🇳🇱 81.19.216.112

🇮🇪 20.105.65.67

🇰🇷 1.245.175.178

🇪🇹 196.189.236.216

🇺🇸 173.244.60.155

🇱🇹 158.173.79.190

🇮🇳 103.195.81.146

🇺🇸 69.164.217.74

🇺🇸 66.132.224.57

🇺🇸 162.216.149.116

🇨🇭 107.189.30.69

🇬🇧 45.137.126.3

🇺🇸 40.112.183.29